Skip to content

Bump msgpack from 1.8.3 to 1.8.4 - #4717

Merged
CloCkWeRX merged 1 commit into
devfrom
dependabot/bundler/msgpack-1.8.4
Jul 30, 2026
Merged

Bump msgpack from 1.8.3 to 1.8.4#4717
CloCkWeRX merged 1 commit into
devfrom
dependabot/bundler/msgpack-1.8.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps msgpack from 1.8.3 to 1.8.4.

Changelog

Sourced from msgpack's changelog.

2026-07-28 1.8.4

  • Fix MessagePack::Buffer to stop using already released memory page. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly.
Commits
  • 42378b0 Release 1.8.4
  • 7cb88d4 Merge pull request #399 from Watson1978/fix-rmem-page-ownership
  • ce44d0e Fix rmem page released while a later chunk still points into it
  • 8ab8a5a Merge pull request #398 from hsbt/claude/vigilant-chebyshev-63ce11
  • b136b7f Merge pull request #397 from Watson1978/fix-recursive-ext-stack-overflow
  • cf586e9 Build deep recursive-extension spec payload without deep recursion
  • 752ad7f Skip recursive-extension StackError spec on JRuby
  • 1b0cdf7 Raise StackError instead of crashing on deeply nested recursive extensions
  • d2e1c88 Fix build failure on mswin due to empty UNREACHABLE_RETURN()
  • 3efa8bd Move dev dependencies in the Gemfile
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies ruby Pull requests that update Ruby code labels Jul 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/msgpack-1.8.4 branch 2 times, most recently from 236fd4a to 4e90aae Compare July 30, 2026 08:27
Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.3 to 1.8.4.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](msgpack/msgpack-ruby@v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/msgpack-1.8.4 branch from 4e90aae to f2ccf9e Compare July 30, 2026 11:42
@CloCkWeRX
CloCkWeRX merged commit ff2e917 into dev Jul 30, 2026
16 checks passed
@CloCkWeRX
CloCkWeRX deleted the dependabot/bundler/msgpack-1.8.4 branch July 30, 2026 13:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant