omu / xokul

The Xokul Project
https://xokul.omu.sh
GNU General Public License v3.0
6 stars 0 forks source link

chore(deps): bump msgpack from 1.3.3 to 1.6.0 #606

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 2 years ago

Bumps msgpack from 1.3.3 to 1.6.0.

Changelog

Sourced from msgpack's changelog.

2022-09-30 1.6.0:

  • Fix a potential use-after-free bug in Buffer_free when accessing a packer or unpacker buffer.
  • old-style-definition compilation warnings.
  • Restore zero-copy buffer feed when provided a Ruby string. This was accidentally broken in 1.5.4.
  • Provide implementations for ObjectSpace.memsize. Message pack objects now properly report their size to Ruby.
  • Fix an endianess bug on Windows platform.

2022-08-23 1.5.6:

  • No actual code change, just re-release the java version properly.

2022-08-22 1.5.5:

  • Fix a segfault when GC triggers inside a recursive extension.

2022-07-25 1.5.4:

  • Fix a segfault when deserializing empty symbol (:"").
  • Improve compilation flags to not strip debug symbols.

2022-05-30 version 1.5.3:

  • Fix deduplication of empty strings when using the freeze: true option.
  • Use rb_hash_new_capa when available (Ruby 3.2) for improved performance when parsing large hashes.

2022-05-27 version 1.5.2:

  • Fix bug about unpacking ext type objects with the recursive option

2022-04-07 version 1.5.1:

  • Fix bug about packing/unpacking ext type objects with the recursive option

2022-04-06 version 1.5.0:

  • Add recursive option on Factory#register_type to operate Packer/Unpacker manually
  • Add oversized_integer_extension option on Factory#register_type to pack/unpack bigint using ext types
  • Add Factory#pool method and Factory::Pool class to provide pooled Packer and Unpacker instances

2022-02-15 version 1.4.5:

  • Fix to create UTF-8 Symbol keys when symbolize_keys: true
  • Fix to assume Symbols as US-ASCII or UTF-8
  • Optimize Packer/Unpacker initialization
  • Optimize extension class lookup
  • Rename Packer#clear as Packer#reset (#clear is still available as an alias)

2022-01-22 version 1.4.4:

... (truncated)

Commits
  • 8e8b353 Release 1.6.0
  • 1eaa2d4 Update changelog
  • eae0b08 Merge pull request #307 from Shopify/use-after-free-buffer
  • d0e888d Fix potential use-after-free in Buffer_free
  • 71e2851 Merge pull request #304 from Shopify/string-buffer
  • 80c99bf Restore referenced buffers feature
  • 32ef590 Revert "Remove some more dead code"
  • 62f2a87 Merge pull request #306 from peterzhu2118/old-style-defs
  • a64eb4b Fix all old-style function definitions
  • 0775a9a Merge pull request #303 from Shopify/memsize-functions
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #633.