[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/library/redis (source)	patch	8.10.2 → 8.10.3

---

Release Notes

redis/docker-library-redis (docker.io/library/redis)

v8.10.3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

• Risk: LOW — patch bump 8.10.2 → 8.10.3 of a single-purpose Redis cache sidecar in the honcho HelmRelease (cluster/apps/honcho/honcho/app/helm-release.yaml). Blast radius is limited to honcho.
• Breaking changes: none. The upstream release notes (redis/redis 8.10.3, released 26 Oct) list one security fix: a heap buffer overflow when a PUBLISH/SPUBLISH message over 4 GB is propagated on the cluster bus in cluster mode. It's marked SECURITY urgency. This repo runs a standalone cache (--save "" --appendonly no, no cluster), so it's not exposed, but the update is still worth taking. The notes list no bug fixes or behavior changes. The Renovate-linked compare page has no changelog of its own, so I used the redis/redis release page. The args and securityContext in the HelmRelease are unaffected.
• Action needed: none, safe to merge on green. The image digest is pinned and updated in the same diff.

[claude]

• Risk: LOW — patch bump (redis 8.10.2 → 8.10.3), single cache-only sidecar/container in cluster/apps/honcho/honcho/app/helm-release.yaml (image tag + digest only).
• Breaking changes: none. Upstream 8.10.3 release notes (github.com/redis/redis/releases/tag/8.10.3) list no breaking or behavior changes. Only item is a security fix: heap overflow on >4GB PUBLISH/SPUBLISH over the cluster bus. This repo runs standalone with --save "" --appendonly no, so it isn't affected, and those args are unchanged.
• Action needed: none, safe to merge on green. No values renames, CRDs, or migrations. Data is cache-only, so a restart on rollout loses nothing.

[claude]

• Risk: LOW — patch bump (redis 8.10.2 → 8.10.3), single cache-only Redis container in the honcho HelmRelease (cluster/apps/honcho/honcho/app/helm-release.yaml); nothing needs to persist across restarts.
• Breaking changes: none. Upstream 8.10.3 release notes (github.com/redis/redis/releases/tag/8.10.3) list no breaking or behavior changes. The only fix is a heap buffer overflow for PUBLISH/SPUBLISH messages over 4 GB on the cluster bus. This repo runs a standalone instance with --save "" --appendonly no, so it isn't affected, and the args are unchanged. The Renovate PR body only links a compare view, so I relied on the upstream release page.
• Action needed: none, safe to merge on green. The tag and digest are updated together.

[claude]

• Risk: LOW — patch bump (redis 8.10.2 → 8.10.3), single non-persistent cache pod in honcho.
• Breaking changes: none. Upstream notes (GitHub releases, 8.10.3 of 26 Oct) list only a security fix: heap buffer overflow when propagating PUBLISH/SPUBLISH over 4 GB on the cluster bus. This repo runs standalone Redis (no cluster mode), so it isn't affected. Args --save "" --appendonly no are unaffected. The PR's own body only links a compare view, so I used the upstream release page.
• Action needed: none, safe to merge on green. The tag is digest-pinned, and the pod restarting only drops cache contents, which is intended.