build(deps): Bump falkordb from 0.8.6 to 0.10.3

[dependabot]

Bumps falkordb from 0.8.6 to 0.10.3.

Release notes

Sourced from falkordb's releases.

v0.10.3

Added

• FalkorClientBuilder::with_response_timeout(Option<Duration>) to configure an optional client-side response timeout for async connections. It defaults to None (no client-side deadline) — matching falkordb-py's socket_timeout — so the server's TIMEOUT / TIMEOUT_DEFAULT configuration governs how long a query may run (#297)

Fixed

• Override the built-in 500ms default response timeout that redis-rs 1.x applies to every async connection path (multiplexed, sentinel, replica, and ConnectionManager). Queries that took longer than 500ms (for example LOAD CSV, deep traversals, or heavy aggregations) previously failed client-side with a spurious connection error while the server kept executing them, and the ensuing retries could duplicate writes. The response timeout is now unset by default (#297)

Other

• Bump the github/codeql-action (init and analyze, 4.36.2 → 4.36.3) and rojopolis/spellcheck-github-actions (0.62.0 → 0.63.0) GitHub Actions, combining the Dependabot updates from #289, #290 and #291 into one change so the init and analyze steps stay pinned to the same github/codeql-action version (#292)
• Bump the github/codeql-action (init and analyze, 4.36.3 → 4.37.0) GitHub Actions and the regex crate (1.12.4 → 1.13.0), combining the Dependabot updates from #293, #294 and #295 into one change so the init and analyze steps stay pinned to the same github/codeql-action version (#296)
• Add a PR title format CI gate (just check-pr-title, in spellcheck.yml) that rejects a pull-request title which isn't a Conventional Commit, so a fix / feat / docs change is titled to match release-plz's release_commits and actually cuts a release (PR #297's non-conventional title matched nothing and released nothing). Also sets a Conventional-Commit commit-message prefix for Dependabot and documents the rule in .github/copilot-instructions.md (#298)
• Bump the redis crate (1.3.0 → 1.4.0), the regex crate (1.13.0 → 1.13.1), the which crate (8.0.4 → 8.0.5) and the MarcoIeni/release-plz-action GitHub Action (0.5.130 → 0.5.131), combining the Dependabot updates from #301, #302, #303 and #304 into one change

v0.10.2

Fixed

... (truncated)

Changelog

Sourced from falkordb's changelog.

0.10.3 - 2026-07-16

Added

• FalkorClientBuilder::with_response_timeout(Option<Duration>) to configure an optional client-side response timeout for async connections. It defaults to None (no client-side deadline) — matching falkordb-py's socket_timeout — so the server's TIMEOUT / TIMEOUT_DEFAULT configuration governs how long a query may run (#297)

Fixed

• Override the built-in 500ms default response timeout that redis-rs 1.x applies to every async connection path (multiplexed, sentinel, replica, and ConnectionManager). Queries that took longer than 500ms (for example LOAD CSV, deep traversals, or heavy aggregations) previously failed client-side with a spurious connection error while the server kept executing them, and the ensuing retries could duplicate writes. The response timeout is now unset by default (#297)

Other

• Bump the github/codeql-action (init and analyze, 4.36.2 → 4.36.3) and rojopolis/spellcheck-github-actions (0.62.0 → 0.63.0) GitHub Actions, combining the Dependabot updates from #289, #290 and #291 into one change so the init and analyze steps stay pinned to the same github/codeql-action version (#292)
• Bump the github/codeql-action (init and analyze, 4.36.3 → 4.37.0) GitHub Actions and the regex crate (1.12.4 → 1.13.0), combining the Dependabot updates from #293, #294 and #295 into one change so the init and analyze steps stay pinned to the same github/codeql-action version (#296)
• Add a PR title format CI gate (just check-pr-title, in spellcheck.yml) that rejects a pull-request title which isn't a Conventional Commit, so a fix / feat / docs change is titled to match release-plz's release_commits and actually cuts a release (PR #297's non-conventional title matched nothing and released nothing). Also sets a Conventional-Commit commit-message prefix for Dependabot and documents the rule in .github/copilot-instructions.md (#298)
• Bump the redis crate (1.3.0 → 1.4.0), the regex crate (1.13.0 → 1.13.1), the which crate (8.0.4 → 8.0.5) and the MarcoIeni/release-plz-action GitHub Action (0.5.130 → 0.5.131), combining the Dependabot updates from #301, #302, #303 and #304 into one change

0.10.2 - 2026-07-05

... (truncated)

Commits

• d95ea83 chore: release v0.10.3 (#306)
• 67d3949 docs: document the redis-rs response timeout fix and new builder option (#299)
• 20987c0 build(deps): bump redis, regex, which and release-plz-action (#305)
• 1d99a15 test: cover the default response timeout and its public builder API (#300)
• ee73d47 ci: validate pull-request titles are Conventional Commits (#298)
• e52b819 Fix spurious connection errors: override redis-rs 1.x default 500ms response ...
• 8f49b35 build(deps): bump codeql-action to 4.37.0 and regex to 1.13.0 (#296)
• 41b89e4 build(deps): bump codeql-action and spellcheck-github-actions (#292)
• 3d1e6f1 chore: release v0.10.2 (#288)
• 44c3e4b fix: derive Clone for FalkorAsyncClient (#287)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)