chore(deps): bump the upstash group across 1 directory with 2 updates

[dependabot]

Bumps the upstash group with 2 updates in the / directory: @upstash/ratelimit and @upstash/redis.

Updates @upstash/ratelimit from 2.0.8 to 2.2.0

Release notes

Sourced from @​upstash/ratelimit's releases.

v2.2.0

What's Changed

• fix: use last token successfully on cachedFixedWindow cache hits by @​Tyagiquamar in upstash/ratelimit-js#157
• fix: avoid negative setTimeout delay in blockUntilReady by @​MisterJimson in upstash/ratelimit-js#159
• Reject token-bucket requests that exceed the remaining tokens by @​eeshsaxena in upstash/ratelimit-js#156
• feat: support decimal values and week unit in duration parser by @​Tyagiquamar in upstash/ratelimit-js#158

New Contributors

• @​Tyagiquamar made their first contribution in upstash/ratelimit-js#157
• @​MisterJimson made their first contribution in upstash/ratelimit-js#159
• @​eeshsaxena made their first contribution in upstash/ratelimit-js#156

Full Changelog: upstash/ratelimit-js@v2.1.0...v2.2.0

v2.1.0

What's Changed

• DX-2363: add skill files by @​CahidArda in upstash/ratelimit-js#148
• DX-2278: update release to use npm OIDC by @​CahidArda in upstash/ratelimit-js#149
• DX-2861: add sdk telemetry by @​ytkimirti in upstash/ratelimit-js#153
• chore: add npm bugs and homepage metadata, fix repository URL by @​XananasX7 in upstash/ratelimit-js#152
• DX-2954: poll npm for the ci version instead of a fixed sleep by @​CahidArda in upstash/ratelimit-js#155
• feat: run lua scripts with allow-key-locking flag by @​CahidArda in upstash/ratelimit-js#154

New Contributors

• @​XananasX7 made their first contribution in upstash/ratelimit-js#152

Full Changelog: upstash/ratelimit-js@v2.0.8...v2.1.0

v2.1.0-rc

What's Changed

• DX-2363: add skill files by @​CahidArda in upstash/ratelimit-js#148
• DX-2278: update release to use npm OIDC by @​CahidArda in upstash/ratelimit-js#149
• DX-2861: add sdk telemetry by @​ytkimirti in upstash/ratelimit-js#153

Full Changelog: upstash/ratelimit-js@v2.0.8...v2.1.0-rc

Commits

• fccd840 feat: support decimal values and week unit in duration parser (#158)
• a955a3c Reject token-bucket requests that exceed the remaining tokens (#156)
• 8f641c6 fix: avoid negative setTimeout delay in blockUntilReady (#159)
• 75a956e fix: use last token successfully on cachedFixedWindow cache hits (#157)
• 7e071b9 feat: run lua scripts with allow-key-locking flag (#154)
• 89c481b DX-2954: poll npm for the ci version instead of a fixed sleep (#155)
• 91c0bad chore: add npm bugs and homepage metadata, fix repository URL (#152)
• f2fc2c7 DX-2861: add sdk telemetry (#153)
• 5b5448a DX-2479: fix package.version
• 589cc3e Rename skill from 'ratelimit-ts' to 'upstash-ratelimit-ts'
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​upstash/ratelimit since your current version.

Updates @upstash/redis from 1.38.0 to 1.39.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.39.0

Minor Changes

• 6801501: Add array commands: arset, armset, arget, armget, argetrange, arscan, argrep, ardel, ardelrange, arcount, arlen, arinsert, arring, arlastitems, arnext, arseek, arop and arinfo, available on the client, in pipelines and in transactions.
• 3f6e286: Support search indexes over Redis streams: redis.search.createIndex({ dataType: "stream", stream: "events", schema }) indexes every entry of the stream as a document keyed by its entry ID. describe() reports dataType: "stream" with the stream key in prefixes.
• 33658bc: Add vector index support: redis.vector.createIndex() / redis.vector.index() return a VectorIndex with add, get, query, delete, count, info and drop, backed by the new VECTOR.CREATE, VECTOR.ADD, VECTOR.GET, VECTOR.QUERY, VECTOR.DEL, VECTOR.COUNT, VECTOR.INFO and VECTOR.DROP commands.

@​upstash/redis@​1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.3...@​upstash/redis@1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

@​upstash/redis@​1.38.4

Patch Changes

• 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

  A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

  HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

  This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

@​upstash/redis@​1.38.3

Patch Changes

• f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
• 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

• DX-2861: trim telemetry dedup values by @​ytkimirti in upstash/redis-js#1442

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

• c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

... (truncated)

Commits

• 6b27727 chore: version packages (#1456)
• 33658bc DX-2963: add vector index commands and redis.vector namespace (#1446)
• 6801501 DX-3009: add array commands (#1451)
• 3f6e286 DX-3010: support search indexes over redis streams (#1452)
• 73fbe1a chore: version packages (#1448)
• 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
• 1bec566 ci: poll npm for the ci version instead of a fixed sleep (#1444)
• 74da1df chore: version packages (#1443)
• f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
• 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
unicon	Ignored	Preview	Oct 3, 2026 6:48pm UTC