[Snyk] Upgrade ioredis from 4.16.1 to 4.27.6

[snyk-bot]

Snyk has created this PR to upgrade ioredis from 4.16.1 to 4.27.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 33 versions ahead of your current version.
• The recommended version was released a month ago, on 2021-06-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
	Command Injection SNYK-JS-NODENOTIFIER-1035794	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	479/1000 Why? Has a fix available, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	479/1000 Why? Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ioredis

• 4.27.6 - 2021-06-13
  

  4.27.6 (2021-06-13)

  Bug Fixes

  • fixed autopipeline performances. (#1226) (42f1ee1)
• 4.27.5 - 2021-06-05
  

  4.27.5 (2021-06-05)

  Bug Fixes

  • SENTINEL: actively failover detection under an option (#1363) (f02e383)
• 4.27.4 - 2021-06-04
  

  4.27.4 (2021-06-04)

  Performance Improvements

  • Serialize error stack only when needed (#1359) (62b6a64)
• 4.27.3 - 2021-05-22
  

  4.27.3 (2021-05-22)

  Bug Fixes

  • autopipeling for buffer function (#1231) (abd9a82)
• 4.27.2 - 2021-05-04
  

  4.27.2 (2021-05-04)

  Bug Fixes

  • cluster: avoid ClusterAllFailedError in certain cases (aa9c5b1), closes #1330
• 4.27.1 - 2021-04-24
  

  4.27.1 (2021-04-24)

  Bug Fixes

  • clears commandTimeout timer as each respective command gets fulfilled (#1336) (d65f8b2)
• 4.27.0 - 2021-04-24
  

  4.27.0 (2021-04-24)

  Features

  • sentinel: detect failover from +switch-master messages (#1328) (a464151)
• 4.26.0 - 2021-04-08
  

  4.26.0 (2021-04-08)

  Bug Fixes

  • cluster: subscriber connection leaks (81b9be0), closes #1325

  Features

  • cluster: apply provided connection name to internal connections (2e388db)
• 4.25.0 - 2021-04-02
  

  4.25.0 (2021-04-02)

  Features

  • added commandTimeout option (#1320) (56f0272)
• 4.24.6 - 2021-03-31
  

  4.24.6 (2021-03-31)

  Bug Fixes

  • force disconnect after a timeout if socket is still half-open (#1318) (6cacd17)
• 4.24.5 - 2021-03-27
• 4.24.4 - 2021-03-24
• 4.24.3 - 2021-03-21
• 4.24.2 - 2021-03-14
• 4.24.1 - 2021-03-14
• 4.24.0 - 2021-03-14
• 4.23.1 - 2021-03-14
• 4.23.0 - 2021-02-25
• 4.22.0 - 2021-02-06
• 4.21.0 - 2021-02-06
• 4.20.0 - 2021-02-05
• 4.19.4 - 2020-12-13
• 4.19.3 - 2020-12-13
• 4.19.2 - 2020-10-31
• 4.19.1 - 2020-10-28
• 4.19.0 - 2020-10-23
• 4.18.0 - 2020-07-25
• 4.17.3 - 2020-05-30
• 4.17.2 - 2020-05-30
• 4.17.1 - 2020-05-16
• 4.17.0 - 2020-05-16
• 4.16.3 - 2020-04-21
• 4.16.2 - 2020-04-11
• 4.16.1 - 2020-03-28

from ioredis GitHub release notes

Commit messages

Package name: ioredis

• cae7fc5 chore(release): 4.27.6 [skip ci]
• 42f1ee1 fix: fixed autopipeline performances. (Time filter needed apache/superset#1226)
• 71f2994 chore(release): 4.27.5 [skip ci]
• f02e383 fix(SENTINEL): actively failover detection under an option (VizType filter_box does not show the "verbose name" of a column but rather the column name. apache/superset#1363)
• c87ea2a chore(release): 4.27.4 [skip ci]
• 62b6a64 perf: Serialize error stack only when needed (Fixed css class not being used by slice container apache/superset#1359)
• d4a55b5 chore(release): 4.27.3 [skip ci]
• abd9a82 fix: autopipeling for buffer function (Support for emailing reports at regular intervals? apache/superset#1231)
• e0cfea1 chore(release): 4.27.2 [skip ci]
• aa9c5b1 fix(cluster): avoid ClusterAllFailedError in certain cases
• aafc349 chore(release): 4.27.1 [skip ci]
• d65f8b2 fix: clears commandTimeout timer as each respective command gets fulfilled (Moving 'CSS Templates' to the 'Manage' menu group apache/superset#1336)
• 9e140f0 chore(release): 4.27.0 [skip ci]
• a464151 feat(sentinel): detect failover from +switch-master messages (Use database_name in share query link apache/superset#1328)
• 6b821af docs: add CONTRIBUTING note
• dac428d chore(release): 4.26.0 [skip ci]
• 2e388db feat(cluster): apply provided connection name to internal connections
• 81b9be0 fix(cluster): subscriber connection leaks
• 8f9a72e docs(README): add documentation for Streams (polyfill es2015 in older browsers and for phantomjs apache/superset#1323)
• 88b8a31 chore(release): 4.25.0 [skip ci]
• 56f0272 feat: added commandTimeout option (Fixed viewing dashboards as anonymous apache/superset#1320)
• 0c129c8 chore(release): 4.24.6 [skip ci]
• 6cacd17 fix: force disconnect after a timeout if socket is still half-open (Date picker for time filter apache/superset#1318)
• caa12f8 refactor: use async/await in SentinelConnector (1 apache/superset#1315)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. For admin, please label this issue .pinned to prevent stale bot from closing the issue.