Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 4, 2026

Bumps dalli from 3.2.8 to 4.3.0.

Changelog

Sourced from dalli's changelog.

4.3.0

New Features:

  • Add namespace_separator option to customize the separator between namespace and key (#1019)
    • Default is : for backward compatibility
    • Must be a single non-alphanumeric character (e.g., :, /, |, .)
    • Example: Dalli::Client.new(servers, namespace: 'myapp', namespace_separator: '/')

Bug Fixes:

  • Fix architecture-dependent struct timeval packing for socket timeouts (#1034)

    • Detects correct pack format for time_t and suseconds_t on each platform
    • Fixes timeout issues on architectures with 64-bit time_t
  • Fix get_multi hanging with large key counts (#776, #941)

    • Add interleaved read/write for pipelined gets to prevent socket buffer deadlock
    • For batches over 10,000 keys per server, requests are now sent in chunks
  • Breaking: Enforce string-only values in raw mode (#1022)

    • set(key, nil, raw: true) now raises MarshalError instead of storing ""
    • set(key, 123, raw: true) now raises MarshalError instead of storing "123"
    • This matches the behavior of client-level raw: true mode
    • To store counters, use string values: set('counter', '0', raw: true)

CI:

  • Add TruffleRuby to CI test matrix (#988)

4.2.0

Performance:

  • Buffered I/O: Use socket.sync = false with explicit flush to reduce syscalls for pipelined operations
  • get_multi optimizations: Use Set for O(1) server tracking lookups
  • Raw mode optimization: Skip bitflags request in meta protocol when in raw mode (saves 2 bytes per request)

New Features:

  • OpenTelemetry tracing support: Automatically instruments operations when OpenTelemetry SDK is present
    • Zero overhead when OpenTelemetry is not loaded
    • Traces get, set, delete, get_multi, set_multi, delete_multi, get_with_metadata, and fetch_with_lock
    • Spans include db.system: memcached and db.operation attributes
    • Single-key operations include server.address attribute
    • Multi-key operations include db.memcached.key_count attribute
    • get_multi spans include db.memcached.hit_count and db.memcached.miss_count for cache efficiency metrics
    • Exceptions are automatically recorded on spans with error status

... (truncated)

Commits
  • c5d0dd4 Merge pull request #1063 from petergoldstein/feature/v4.3.0-bugfixes
  • 91bee8c Bump version to 4.3.0
  • dfcb8ec Run benchmarks only on main branch merges
  • 0f55391 Add concurrency settings to all GitHub Actions workflows
  • 9f4cb5f Add TruffleRuby CI to changelog
  • 494cabc Add TruffleRuby in CI
  • 2234c2f Exclude timeout test as it fails transiently on non-CRuby
  • 42c8f1a Fix JRuby thread interrupt handling in pipelined get
  • 3ef4394 Enforce string-only values in raw mode (#1022)
  • bf2fbb3 Fix get_multi hanging with large key counts (#776, #941)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dalli](https://github.com/petergoldstein/dalli) from 3.2.8 to 4.3.0.
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v3.2.8...v4.3.0)

---
updated-dependencies:
- dependency-name: dalli
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants