Merge PR "[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade valkey to 8.0.7 for CVE-2026-21863, CVE-2025-67733 [HIGH] - branch 3.0-dev" #15996

Author: CBL-Mariner-Bot

SPECS/valkey/valkey.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "valkey-8.0.6.tar.gz": "f8d15c257a3619e0e42e68998e9dc16536009d257662efa4c62ef7d08a71b0dd"
- }
-}
+  "Signatures": {
+    "valkey-8.0.7.tar.gz": "6f8ec2c906c72f1d6fad41611396fc077c41931cdb865920c8a6c7bdf58aad5c"
+  }
+}

SPECS/valkey/valkey.spec

@@ -1,6 +1,6 @@
 Summary:        advanced key-value store
 Name:           valkey
-Version:        8.0.6
+Version:        8.0.7
 Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
@@ -84,6 +84,9 @@ exit 0
 %config(noreplace) %attr(0640, %{name}, %{name}) %{_sysconfdir}/valkey.conf
 
 %changelog
+* Wed Feb 25 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 8.0.7-1
+- Auto-upgrade to 8.0.7 - for CVE-2026-21863, CVE-2025-67733
+
 * Wed Oct 08 2025 Kanishk Bansal <kanbansal@microsoft.com> - 8.0.6-1
 - Upgrade to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
 - Remove older patches of CVE-2025-27151  CVE-2025-49112

cgmanifest.json

@@ -29856,8 +29856,8 @@
         "type": "other",
         "other": {
           "name": "valkey",
-          "version": "8.0.6",
-          "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.6.tar.gz"
+          "version": "8.0.7",
+          "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.7.tar.gz"
         }
       }
     },