Skip to content

build(deps): bump msgpack from 1.8.3 to 1.8.4 - #5315

Merged
johha merged 1 commit into
mainfrom
dependabot/bundler/msgpack-1.8.4
Jul 30, 2026
Merged

build(deps): bump msgpack from 1.8.3 to 1.8.4#5315
johha merged 1 commit into
mainfrom
dependabot/bundler/msgpack-1.8.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps msgpack from 1.8.3 to 1.8.4.

Changelog

Sourced from msgpack's changelog.

2026-07-28 1.8.4

  • Fix MessagePack::Buffer to stop using already released memory page. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly.
Commits
  • 42378b0 Release 1.8.4
  • 7cb88d4 Merge pull request #399 from Watson1978/fix-rmem-page-ownership
  • ce44d0e Fix rmem page released while a later chunk still points into it
  • 8ab8a5a Merge pull request #398 from hsbt/claude/vigilant-chebyshev-63ce11
  • b136b7f Merge pull request #397 from Watson1978/fix-recursive-ext-stack-overflow
  • cf586e9 Build deep recursive-extension spec payload without deep recursion
  • 752ad7f Skip recursive-extension StackError spec on JRuby
  • 1b0cdf7 Raise StackError instead of crashing on deeply nested recursive extensions
  • d2e1c88 Fix build failure on mswin due to empty UNREACHABLE_RETURN()
  • 3efa8bd Move dev dependencies in the Gemfile
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/msgpack-1.8.4 branch from 112f281 to b60d0ce Compare July 28, 2026 14:42
Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.3 to 1.8.4.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](msgpack/msgpack-ruby@v1.8.3...v1.8.4)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/msgpack-1.8.4 branch from b60d0ce to 337c0db Compare July 30, 2026 10:21
@johha
johha merged commit 17c0760 into main Jul 30, 2026
11 checks passed
@johha
johha deleted the dependabot/bundler/msgpack-1.8.4 branch July 30, 2026 11:41
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Jul 30, 2026
Changes in cloud_controller_ng:

- Automated Update of BBS Protobuf Resources
    PR: cloudfoundry/cloud_controller_ng#5182
    Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
    Author: ari-wg-gitbot <app-runtime-interfaces@cloudfoundry.org>

Dependency updates in cloud_controller_ng:

- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /.devcontainer/images/loggregator-metron
    PR: cloudfoundry/cloud_controller_ng#5310
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump msgpack from 1.8.3 to 1.8.4
    PR: cloudfoundry/cloud_controller_ng#5315
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps-dev): bump sorbet-runtime from 0.6.13359 to 0.6.13373
    PR: cloudfoundry/cloud_controller_ng#5321
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump actionview from 8.1.3 to 8.1.3.1
    PR: cloudfoundry/cloud_controller_ng#5324
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant