Skip to content

chore(deps): Bump msgpack from 1.2.2 to 1.2.3 - #927

Merged
jetuk merged 1 commit into
mainfrom
dependabot/uv/msgpack-1.2.3
Nov 2, 2026
Merged

jetuk merged 1 commit into
mainfrom
dependabot/uv/msgpack-1.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps msgpack from 1.2.2 to 1.2.3.

Release notes

Sourced from msgpack's releases.

v1.2.3

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.2.2...v1.2.3

Changelog

Sourced from msgpack's changelog.

1.2.3

Release Date: 2026-09-29

  • Fix memory leaks in the C extension when map key validation or container hooks fail. See GHSA-j586-36cw-2gc2.
  • Fix use-after-free errors when cleaning up an incomplete or failed Unpacker.skip() after previously unpacking a nested object in the C extension.
  • Raise ValueError in the C extension when switching between unpacking, skipping, header readers, or read_bytes() while an object is incomplete. Resume with the same method after feeding more data; unpack() and iteration remain interchangeable.
  • Prevent reentrant unpacking, header reads, read_bytes(), and reinitialization of the same C Unpacker while unpacking is in progress.
  • Reject negative sizes in Packer.pack_array_header() and Packer.pack_map_header(). #742
  • Support packing Python 3.15 frozendict objects. #738
  • Update Cython from 3.2.5 to 3.3.0. #738
  • Build wheels for Pyodide using Emscripten. #732
  • Update cibuildwheel to 4.2.1 and the QEMU setup action to 4.4.0. #741
Commits
  • 742cb6d release v1.2.3
  • 620b0eb Merge commit from fork
  • 475c1b7 Bump the all-dependencies group across 1 directory with 2 updates (#741)
  • 0014ca9 Reject negative array and map header sizes (#742)
  • 7a63920 Support packing Python 3.15 frozentdict (PEP 814) (#738)
  • 9f4909c wheels: also build for pyodide using emscripten. (#732)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 2, 2026
@jetuk

jetuk commented Nov 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.2.2...v1.2.3)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.2.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/msgpack-1.2.3 branch from 269572d to 33453c4 Compare November 2, 2026 14:03
@jetuk
jetuk merged commit 2a65e18 into main Nov 2, 2026
44 of 45 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/msgpack-1.2.3 branch November 2, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant