[dependabot]

Bumps @upstash/redis from 1.38.0 to 1.40.0.

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.40.0

Minor Changes

• 2254796: Default responseEncoding to false. The server now returns string values as plain JSON instead of base64, which cuts response sizes by up to 25%. Set responseEncoding: "base64" to keep the previous behavior.

  Behavior changes with the new default:

  • String values that start with a UTF-8 BOM keep it. Automatic deserialization still ignores the BOM, so a BOM-prefixed JSON value is parsed as before; other BOM-prefixed strings, and all strings with automaticDeserialization: false, are returned exactly, BOM included.
  • Invalid UTF-8 (binary data) is still replaced with U+FFFD, but the server now replaces each invalid byte, so the number of replacement characters can differ. Binary values were not preserved before either.
  • A nested OK status reply (e.g. a Lua script returning {redis.call("SET", ...)}) no longer sometimes decodes to 8.
  • Error replies nested in arrays (e.g. Lua pcall results) are no longer garbled.

  Static aborted signal (all encodings):

  • abort() with no reason or with an Error returns null. With responseEncoding: false it used to return a serialized error object.
  • abort(null) returns null instead of "Aborted".
  • With the new default, other reasons are returned as is: strings that look like base64 (e.g. "abcd") are no longer garbled, and booleans and objects are no longer dropped.
  • Non-Latin-1 string reasons no longer throw a TypeError on Node.

@​upstash/redis@​1.39.0

Minor Changes

• 6801501: Add array commands: arset, armset, arget, armget, argetrange, arscan, argrep, ardel, ardelrange, arcount, arlen, arinsert, arring, arlastitems, arnext, arseek, arop and arinfo, available on the client, in pipelines and in transactions.
• 3f6e286: Support search indexes over Redis streams: redis.search.createIndex({ dataType: "stream", stream: "events", schema }) indexes every entry of the stream as a document keyed by its entry ID. describe() reports dataType: "stream" with the stream key in prefixes.
• 33658bc: Add vector index support: redis.vector.createIndex() / redis.vector.index() return a VectorIndex with add, get, query, delete, count, info and drop, backed by the new VECTOR.CREATE, VECTOR.ADD, VECTOR.GET, VECTOR.QUERY, VECTOR.DEL, VECTOR.COUNT, VECTOR.INFO and VECTOR.DROP commands.

@​upstash/redis@​1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.3...@​upstash/redis@1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

@​upstash/redis@​1.38.4

Patch Changes

• 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

  A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

  HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

  This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

@​upstash/redis@​1.38.3

Patch Changes

• f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry

... (truncated)

Commits

• f2f9bc8 chore: version packages (#1460)
• b2a1126 DX-3137: deserialize values with a leading UTF-8 BOM (#1461)
• 2254796 DX-3137: default responseEncoding to plain JSON (#1458)
• e9a21c5 Fix the document set order in search tests (#1459)
• 6b27727 chore: version packages (#1456)
• 33658bc DX-2963: add vector index commands and redis.vector namespace (#1446)
• 6801501 DX-3009: add array commands (#1451)
• 3f6e286 DX-3010: support search indexes over redis streams (#1452)
• 73fbe1a chore: version packages (#1448)
• 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
autopilot	Ready	Preview	Nov 2, 2026 5:45am UTC