Skip to content

Bump msgpack from 1.8.0 to 1.8.5 in /ruby in the patch-gem-update group across 1 directory - #433

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby/patch-gem-update-0c05f7e69d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby/patch-gem-update-0c05f7e69d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown

Bumps the patch-gem-update group with 1 update in the /ruby directory: msgpack.

Updates msgpack from 1.8.0 to 1.8.5

Changelog

Sourced from msgpack's changelog.

2026-09-11 1.8.5

  • Prevent stack depth underflow when skipping from recursive unpacker.
  • Fix Unpacker#skip_nil to properly consume the buffer.
  • Fix some small difference in Factory registration of the Java implementation.
  • Fix some Factory/ext_type optimization edge cases.

2026-07-28 1.8.4

  • Fix MessagePack::Buffer to stop using already released memory page. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly.

2026-06-10 1.8.3

  • Fix an integer overflow when parsing maps.

2026-06-09 1.8.2

  • Fix Buffer#clear to properly reset memory chunks before adding them back to the pool. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly. [CVE-2026-54522].

2026-05-28 1.8.1

  • Workaround rare compilation issue when rb_hash_new_capa isn't properly detected.
  • Never pre-allocate strings larger than the buffered size.
Commits
  • 972321a Release 1.8.5
  • db16d5d Merge pull request #406 from youdie006/symbol-unpacker-only-npe
  • 72cda9b Guard packerProc against a missing :packer key on JRuby
  • 4e2a755 Merge pull request #405 from Watson1978/fix/recursive-ext-stack-underflow
  • 7ff80ad Fix SEGV on stack depth underflow in recursive extension unpacking
  • 29d98d3 Merge pull request #403 from OskarEichler/audit/factory-registration-edge-cases
  • 663c3a3 Merge pull request #404 from OskarEichler/audit/consume-skip-nil
  • 512b587 Consume nil in Unpacker#skip_nil
  • c3d1c61 Fix Factory registration edge cases
  • 8c429cd Merge pull request #402 from msgpack/gc-guard
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 21, 2026
Bumps the patch-gem-update group with 1 update in the /ruby directory: [msgpack](https://github.com/msgpack/msgpack-ruby).


Updates `msgpack` from 1.8.0 to 1.8.5
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](msgpack/msgpack-ruby@v1.8.0...v1.8.5)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.8.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-gem-update
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump msgpack from 1.8.0 to 1.8.5 in /ruby in the patch-gem-update group Bump msgpack from 1.8.0 to 1.8.5 in /ruby in the patch-gem-update group across 1 directory Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/ruby/patch-gem-update-0c05f7e69d branch from 20a7e6d to 24acba9 Compare October 5, 2026 14:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants