chore(deps-dev): update predis/predis requirement from ^2.2 to ^2.2 || ^3.0

[dependabot]

Updates the requirements on predis/predis to permit the latest version.

Release notes

Sourced from predis/predis's releases.

v3.6.1

Fixed

• Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
• Fixed client_info connection parameter being ignored (#1722)
• Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

• Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
• Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)

Changelog

Sourced from predis/predis's changelog.

v3.6.1 (2026-09-17)

Fixed

• Fixed RESP3 double parsing returning positive INF for -inf payloads (#1716)
• Fixed client_info connection parameter being ignored (#1722)
• Fixed Stream::write() and read() leaving a dead connection when a host error handler throws exception (#1725)

Security

• Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)
• Fixed CRLF command smuggling and node misrouting in AbstractAggregateConnection::write() and CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786)

v3.6.0 (2026-08-14)

Added

• Added support for new TS commands + Indonesian language support integration test (#1695)
• Added support for new COLLECT reducer for FT.AGGREGATE (#1699)
• Added support for SDIFFCARD and SUNIONCARD command
• Added support for MAXCOUNT and MAXSIZE arguments for XREAD and XREADGROUP
• Added support for TS.READ command
• Added support for EXCLUDEEMPTY argument for TS.MRANGE and TS.MREVRANGE commands
• Added explicit testing for FT.SEARCH timeout policies
• Added support for TS.QUERYLABELS command
• Added support for LMOVEM and BLMOVEM commands
• Added support for FT.ALIASLIST command
• Added stream commands to ClusterStrategy
• Added vector sets commands to ClusterStrategy
• Added experimental support for HIMPORT bulk hash import feature (API may change in a future release)

Changed

• Added OBJECT and hash field expiration commands to ClusterStrategy
• Make ZMSCORE command prefixable and add to ClusterStrategy (#1692)

Fixed

• Fixed Sentinel does not wipe servers on exception caused (#1694)
• Fixed @method cmsincrby() annotation

v3.5.1 (2026-06-11)

Added

• Expose pipeline() API via ClientInterface (#1686)

Fixed

• Allow UNLINK to accept an array of keys (#1687)
• Fixed Client::(un)pack() return types

v3.5.0 (2026-06-02)

Added

• Added support for XNACK command (#1666)
• Added support for INCREX command (#1674)
• Added support for UNLINK command (#1680)
• Added support for AR* array commands (#1672)
• Handle Redis Cluster -READONLY responses failover events (#1656)
• Added FPHA argument for JSON.SET command (#1661)

... (truncated)

Commits

• e2db963 tag v3.6.1
• 3edc442 Fixed CRLF command smuggling and node misrouting in `AbstractAggregateConnect...
• 3749086 Fixed Stream::write()/read() leaving a dead connection when a host error hand...
• 3a5b55e Deprecated CommandInterface::deserializeCommand() (CVE GHSA-w6f5-v2h6-g786) (...
• 401abc4 fix changelog typo
• e7b89c1 Fixed client_info connection parameter being ignored (#1722)
• 3a8c350 Bump the github-actions group with 2 updates (#1720)
• 6759513 Fix RESP3 double parsing returning positive INF for -inf (#1716)
• 0795d69 bump dev version
• 2ff20c0 tag v3.6.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)