Skip to content

chore(python-deps): update dependency msgpack to v1.2.3 in all dependant actions - #1244

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/automerge/msgpack-1.2.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/automerge/msgpack-1.2.x

Conversation

@renovate

@renovate renovate Bot commented Oct 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
msgpack (changelog) ==1.2.2 → ==1.2.3 age confidence

Release Notes

msgpack/msgpack-python (msgpack)

v1.2.3

Compare Source

Release Date: 2026-09-29

  • Fix memory leaks in the C extension when map key validation or container hooks fail.
    See GHSA-j586-36cw-2gc2.
  • Fix use-after-free errors when cleaning up an incomplete or failed Unpacker.skip()
    after previously unpacking a nested object in the C extension.
  • Raise ValueError in the C extension when switching between unpacking, skipping,
    header readers, or read_bytes() while an object is incomplete. Resume with the
    same method after feeding more data; unpack() and iteration remain interchangeable.
  • Prevent reentrant unpacking, header reads, read_bytes(), and reinitialization
    of the same C Unpacker while unpacking is in progress.
  • Reject negative sizes in Packer.pack_array_header() and Packer.pack_map_header(). #​742
  • Support packing Python 3.15 frozendict objects. #​738
  • Update Cython from 3.2.5 to 3.3.0. #​738
  • Build wheels for Pyodide using Emscripten. #​732
  • Update cibuildwheel to 4.2.1 and the QEMU setup action to 4.4.0. #​741

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 4, 2026 04:26
@renovate
renovate Bot enabled auto-merge (squash) October 4, 2026 04:26
@codecov

codecov Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (06d18d7) to head (35bd2bd).

Additional details and impacted files
@@            Coverage Diff            @@
##              main     #1244   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines          233       233           
  Branches        32        32           
=========================================
  Hits           233       233           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/automerge/msgpack-1.2.x branch from cd1d550 to 35bd2bd Compare October 5, 2026 15:03
@github-actions

github-actions Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Test Results (ubuntu)

path passed subtotal
tests/test_bump_version_in_files.py 5 5
tests/test_create_unique_testpypi_version.py 7 7
tests/test_find_unreleased_changelog_items.py 6 6
tests/test_update_development_dependencies.py 13 13
TOTAL 31 31

Link to workflow run

@github-actions

github-actions Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Test Results (macos)

path passed subtotal
tests/test_bump_version_in_files.py 5 5
tests/test_create_unique_testpypi_version.py 7 7
tests/test_find_unreleased_changelog_items.py 6 6
tests/test_update_development_dependencies.py 13 13
TOTAL 31 31

Link to workflow run

@github-actions

github-actions Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Test Results (windows)

path passed subtotal
tests\test_bump_version_in_files.py 5 5
tests\test_create_unique_testpypi_version.py 7 7
tests\test_find_unreleased_changelog_items.py 6 6
tests\test_update_development_dependencies.py 13 13
TOTAL 31 31

Link to workflow run

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants