chore(deps): update dependency hiredis to v3.4.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
hiredis (changelog)	==3.4.1 → ==3.4.2

---

Release Notes

redis/hiredis-py (hiredis)

v3.4.2: 3.4.2

Compare Source

This is a bugfix release. Users of hiredis-py 3.4.x that receive RESP3 push notifications — pub/sub deliveries or client-side cache invalidations — are encouraged to upgrade.

🐛 Bug Fixes

• Release the list each push notification is sized from (#​239)

PushNotificationType_New pre-sized every PushNotification with a list that PyList_SetSlice only borrows, and the reference was never dropped. Each RESP3 push notification therefore stranded one list object for the lifetime of the process. Because push notifications carry pub/sub deliveries and client-side caching invalidations, the leak grew with message volume rather than with the number of connections, making it unbounded for a long-lived subscriber — roughly 20 MB per 200,000 four-element notifications, and more for larger ones. Dropping the reference also removes an allocation from the parse path, which makes parsing a small notification about 10% faster.

The same change checks PyList_New for failure and guards tryParentize against a NULL reply, so an allocation failure is now reported as an error instead of writing elements past the end of a zero-length notification.

RESP2 array replies were never affected.

Contributors

Thanks to @​mmick78 for finding and fixing this.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.