From 7d0c9dc476185f66b79fde533911c1a6f1dbc8e3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 15 Apr 2026 10:09:38 +0000
Subject: [PATCH] Update dependency redis to v4.4.4 [SECURITY]

---
 docs/requirements.txt |  2 +-
 poetry.lock           | 37 +++++++++++++++++++++++++++++--------
 pyproject.toml        |  2 +-
 3 files changed, 31 insertions(+), 10 deletions(-)

diff --git a/docs/requirements.txt b/docs/requirements.txt
index 39fb15a..fab7051 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -36,7 +36,7 @@ pydantic==1.6.2
 pyparsing==2.4.6
 pytest==5.3.5
 pyyaml==5.4
-redis==4.3.6
+redis==4.4.4
 regex==2020.2.20
 requests==2.23.0
 six==1.14.0
diff --git a/poetry.lock b/poetry.lock
index 1634969..b0d219f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -22,6 +22,21 @@ doc = ["packaging", "sphinx-autodoc-typehints (>=1.2.0)", "sphinx-rtd-theme"]
 test = ["contextlib2", "coverage[toml] (>=4.5)", "hypothesis (>=4.0)", "mock (>=4)", "pytest (>=7.0)", "pytest-mock (>=3.6.1)", "trustme", "uvloop (<0.15)", "uvloop (>=0.15)"]
 trio = ["trio (>=0.16,<0.22)"]
 
+[[package]]
+name = "async-timeout"
+version = "4.0.3"
+description = "Timeout context manager for asyncio programs"
+category = "main"
+optional = true
+python-versions = ">=3.7"
+files = [
+    {file = "async-timeout-4.0.3.tar.gz", hash = "sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f"},
+    {file = "async_timeout-4.0.3-py3-none-any.whl", hash = "sha256:7405140ff1230c310e51dc27b3145b9092d659ce68ff733fb0cefe3ee42be028"},
+]
+
+[package.dependencies]
+typing-extensions = {version = ">=3.6.5", markers = "python_version < \"3.8\""}
+
 [[package]]
 name = "atomicwrites"
 version = "1.4.1"
@@ -459,7 +474,7 @@ files = [
 name = "importlib-metadata"
 version = "4.2.0"
 description = "Read metadata from Python packages"
-category = "dev"
+category = "main"
 optional = false
 python-versions = ">=3.6"
 files = [
@@ -1136,18 +1151,24 @@ pyyaml = "*"
 
 [[package]]
 name = "redis"
-version = "3.5.3"
-description = "Python client for Redis key-value store"
+version = "4.6.0"
+description = "Python client for Redis database and key-value store"
 category = "main"
 optional = true
-python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
+python-versions = ">=3.7"
 files = [
-    {file = "redis-3.5.3-py2.py3-none-any.whl", hash = "sha256:432b788c4530cfe16d8d943a09d40ca6c16149727e4afe8c2c9d5580c59d9f24"},
-    {file = "redis-3.5.3.tar.gz", hash = "sha256:0e7e0cfca8660dea8b7d5cd8c4f6c5e29e11f31158c0b0ae91a397f00e5a05a2"},
+    {file = "redis-4.6.0-py3-none-any.whl", hash = "sha256:e2b03db868160ee4591de3cb90d40ebb50a90dd302138775937f6a42b7ed183c"},
+    {file = "redis-4.6.0.tar.gz", hash = "sha256:585dc516b9eb042a619ef0a39c3d7d55fe81bdb4df09a52c9cdde0d07bf1aa7d"},
 ]
 
+[package.dependencies]
+async-timeout = {version = ">=4.0.2", markers = "python_full_version <= \"3.11.2\""}
+importlib-metadata = {version = ">=1.0", markers = "python_version < \"3.8\""}
+typing-extensions = {version = "*", markers = "python_version < \"3.8\""}
+
 [package.extras]
-hiredis = ["hiredis (>=0.1.3)"]
+hiredis = ["hiredis (>=1.0.0)"]
+ocsp = ["cryptography (>=36.0.1)", "pyopenssl (==20.0.1)", "requests (>=2.26.0)"]
 
 [[package]]
 name = "requests"
@@ -1501,4 +1522,4 @@ redis = ["redis"]
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.7,<4.0"
-content-hash = "b0fbb75051b47ba71537e15c61e7bbbccd8edf91d806dc2ce83be350ed711297"
+content-hash = "fcd85a9fd1d8d7f05604101094891570d7fe435593d143682d2ccdc9fc399cd4"
diff --git a/pyproject.toml b/pyproject.toml
index c242b7d..b76b9b7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -16,7 +16,7 @@ include = ["slowapi/py.typed"]
 [tool.poetry.dependencies]
 python = ">=3.7,<4.0"
 limits = ">=2.3"
-redis = {version = "^3.4.1", optional = true}
+redis = {version = "^4.0.0", optional = true}
 
 [tool.poetry.dev-dependencies]
 isort = "^4.3.21"