fix(deps): update module github.com/redis/go-redis/v9 to v9.7.3 [security] (release-0.33)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/redis/go-redis/v9	require	patch	v9.7.0 -> v9.7.3

---

Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis

CVE-2025-29923 / GHSA-92cp-5422-2mw7 / GO-2025-3540

More information

Details

Potential out of order responses when CLIENT SETINFO times out during connection establishment in github.com/redis/go-redis

Severity

Unknown

References

• https://github.com/redis/go-redis/security/advisories/GHSA-92cp-5422-2mw7
• https://github.com/redis/go-redis/commit/d236865b0cfa1b752ea4b7da666b1fdcd0acebb6
• https://github.com/redis/go-redis/pull/3295

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Release Notes

redis/go-redis (github.com/redis/go-redis/v9)

v9.7.3

Compare Source

What's Changed

• fix: handle network error on SETINFO (#​3295) (CVE-2025-29923)
• Deprecating misspelled DisableIndentity flag in the client options.
• Introducing DisableIdentity flag in the client options.
• Updating the documentation related to the new flag and the one that was deprecated.

Full Changelog: redis/go-redis@v9.7.1...v9.7.3

v9.7.2

Compare Source

v9.7.1

Compare Source

Changes

• Recognize byte slice for key argument in cluster client hash slot computation (#​3049)
• fix(search&aggregate):fix error overwrite and typo #​3220 (#​3224)
• fix: linter configuration (#​3279)
• fix(search): if ft.aggregate use limit when limitoffset is zero (#​3275)
• Reinstate read-only lock on hooks access in dialHook to fix data race (#​3225)
• fix: flaky ClientKillByFilter test (#​3268)
• chore: fix some comments (#​3226)
• fix(aggregate, search): ft.aggregate bugfixes (#​3263)
• fix: add unstableresp3 to cluster client (#​3266)
• Fix race condition in clusterNodes.Addrs() (#​3219)
• SortByWithCount FTSearchOptions fix (#​3201)
• Eliminate redundant dial mutex causing unbounded connection queue contention (#​3088)
• Add guidance on unstable RESP3 support for RediSearch commands to README (#​3177)

🚀 New Features

• Add guidance on unstable RESP3 support for RediSearch commands to README (#​3177)

🐛 Bug Fixes

• fix(search): if ft.aggregate use limit when limitoffset is zero (#​3275)
• fix: add unstableresp3 to cluster client (#​3266)
• fix(aggregate, search): ft.aggregate bugfixes (#​3263)
• SortByWithCount FTSearchOptions fix (#​3201)
• Recognize byte slice for key argument in cluster client hash slot computation (#​3049)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ofekshenawa, @​Cgol9, @​LINKIWI, @​shawnwgit, @​zhuhaicity, @​bitsark, @​vladvildanov, @​ndyakov

Full Changelog: redis/go-redis@v9.7.0...v9.7.1

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.