deps: bump @vercel/kv from 1.0.1 to 3.0.0

[dependabot]

Bumps @vercel/kv from 1.0.1 to 3.0.0.

Release notes

Sourced from @​vercel/kv's releases.

@​vercel/kv@​3.0.0

Major Changes

• 14bc82e: BREAKING: Updates @​upstash/redis to v1.34.0 which contains a small breaking change in the public API. The cursor field in scan commands is now returned as string instead of number.

@​vercel/kv@​2.0.0

Major Changes

• d02e08a: Enable auto pipelining by default. We're making this a major release for safety, but we believe most applications can upgrade from 1.x to 2.x without any changes. Auto pipelining should work by default and improve performance.

  BREAKING CHANGE: Auto pipelining is on by default now. See https://upstash.com/docs/oss/sdks/ts/redis/pipelining/auto-pipeline. This brings performance benefits to any code making multiple redis commands simultaneously.

  If you detect bugs because of this, please open them at https://github.com/vercel/storage/issues.

  You can disable this new behavior with:

  import { createClient } from '@vercel/kv';
  const kv = createClient({
  url: ..,
  token: ..,
  enableAutoPipelining: false
  });

Changelog

Sourced from @​vercel/kv's changelog.

3.0.0

Major Changes

• 14bc82e: BREAKING: Updates @​upstash/redis to v1.34.0 which contains a small breaking change in the public API. The cursor field in scan commands is now returned as string instead of number.

2.0.0

Major Changes

• d02e08a: Enable auto pipelining by default. We're making this a major release for safety, but we believe most applications can upgrade from 1.x to 2.x without any changes. Auto pipelining should work by default and improve performance.

  BREAKING CHANGE: Auto pipelining is on by default now. See https://upstash.com/docs/oss/sdks/ts/redis/pipelining/auto-pipeline. This brings performance benefits to any code making multiple redis commands simultaneously.

  If you detect bugs because of this, please open them at https://github.com/vercel/storage/issues.

  You can disable this new behavior with:

  import { createClient } from '@vercel/kv';
  const kv = createClient({
  url: ..,
  token: ..,
  enableAutoPipelining: false
  });

Commits

• 9171dd0 Version Packages (#761)
• 860bc49 chore(kv): update kv package json with new upstash version (#763)
• 14bc82e fix(deps): update dependency @​upstash/redis to v1.34.0 (#713)
• 8c8e6a7 chore(deps): update dependency tsup to v8.3.0 (#756)
• 8f16696 chore(deps): update dependency @​types/node to v22.6.1 (#754)
• d40077b chore(deps): Upgrade safe dev deps and TS version (#752)
• dca9772 chore(deps): update dependency lint-staged to v15.2.9 (#739)
• 31c2b68 chore(deps): update dependency @​types/node to v20.14.15 (#736)
• 0e8ede4 chore(deps): update dependency tsup to v8.1.0 (#716)
• 7405fff chore(deps): update dependency prettier to v3.3.2 (#715)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
protected-text	Error		Dec 28, 2025 9:50am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​vercel/​kv@​1.0.1 ⏵ 3.0.0	+1

View full report