Skip to content

build(deps): bump msgpack from 1.8.3 to 1.8.4 - #5315

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/msgpack-1.8.4
Open

build(deps): bump msgpack from 1.8.3 to 1.8.4#5315
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/msgpack-1.8.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps msgpack from 1.8.3 to 1.8.4.

Changelog

Sourced from msgpack's changelog.

2026-07-28 1.8.4

  • Fix MessagePack::Buffer to stop using already released memory page. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly.
Commits
  • 42378b0 Release 1.8.4
  • 7cb88d4 Merge pull request #399 from Watson1978/fix-rmem-page-ownership
  • ce44d0e Fix rmem page released while a later chunk still points into it
  • 8ab8a5a Merge pull request #398 from hsbt/claude/vigilant-chebyshev-63ce11
  • b136b7f Merge pull request #397 from Watson1978/fix-recursive-ext-stack-overflow
  • cf586e9 Build deep recursive-extension spec payload without deep recursion
  • 752ad7f Skip recursive-extension StackError spec on JRuby
  • 1b0cdf7 Raise StackError instead of crashing on deeply nested recursive extensions
  • d2e1c88 Fix build failure on mswin due to empty UNREACHABLE_RETURN()
  • 3efa8bd Move dev dependencies in the Gemfile
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 28, 2026
Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.3 to 1.8.4.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](msgpack/msgpack-ruby@v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/msgpack-1.8.4 branch from 112f281 to b60d0ce Compare July 28, 2026 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants