dependabot[bot] opened a new pull request, #39038: URL: https://github.com/apache/beam/pull/39038
Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.1.2 to 1.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases";>msgpack's releases</a>.</em></p> <blockquote> <h2>v1.2.1</h2> <h2>What's Changed</h2> <ul> <li>Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/694";>msgpack/msgpack-python#694</a></li> <li>release v1.2.1 by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/698";>msgpack/msgpack-python#698</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1";>https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1</a></p> <h2>v1.2.0</h2> <h2>What's Changed</h2> <ul> <li>relax setuptools version by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/652";>msgpack/msgpack-python#652</a></li> <li>update setuptools requirements to >=78.1.1 by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/653";>msgpack/msgpack-python#653</a></li> <li>cython: freethreading_compatible by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/654";>msgpack/msgpack-python#654</a></li> <li>drop Python 3.9 by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/656";>msgpack/msgpack-python#656</a></li> <li>update cython and cibuildwheel by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/658";>msgpack/msgpack-python#658</a></li> <li>ci: add riscv64 manylinux/musllinux wheels by <a href="https://github.com/justeph";><code>@justeph</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/664";>msgpack/msgpack-python#664</a></li> <li>fix: check <code>unpack_callback_uint32</code> result by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/666";>msgpack/msgpack-python#666</a></li> <li>fix: re-raise existing exception when available by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/667";>msgpack/msgpack-python#667</a></li> <li>fix: check return code in <code>unpack_callback_int64</code> by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/665";>msgpack/msgpack-python#665</a></li> <li>Fixed README example by <a href="https://github.com/vallsv";><code>@vallsv</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/668";>msgpack/msgpack-python#668</a></li> <li>Bump the all-dependencies group with 6 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/669";>msgpack/msgpack-python#669</a></li> <li>ci: use ubuntu-slim for lint by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/670";>msgpack/msgpack-python#670</a></li> <li>fix: enforce <code>strict_map_key</code> with <code>object_pairs_hook</code> by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/673";>msgpack/msgpack-python#673</a></li> <li>Raise DEFAULT_RECURSE_LIMIT from 511 to 1024 by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/676";>msgpack/msgpack-python#676</a></li> <li>fix: properly handle return codes in <code>pack_timestamp</code> by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/672";>msgpack/msgpack-python#672</a></li> <li>fix: avoid memory leak when decoding invalid nested arrays by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/671";>msgpack/msgpack-python#671</a></li> <li>Add missing autoreset in Packer.pack_ext_type by <a href="https://github.com/bysiber";><code>@bysiber</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/663";>msgpack/msgpack-python#663</a></li> <li>Add no-GIL interpreter support by <a href="https://github.com/clin1234";><code>@clin1234</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/641";>msgpack/msgpack-python#641</a></li> <li>skip recursion limit test on free-threaded CPython builds by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/679";>msgpack/msgpack-python#679</a></li> <li>Fix Timestamp.from_datetime returning wrong value for pre-epoch datetimes by <a href="https://github.com/bysiber";><code>@bysiber</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/662";>msgpack/msgpack-python#662</a></li> <li>Add 3.15 to CI by <a href="https://github.com/clin1234";><code>@clin1234</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/678";>msgpack/msgpack-python#678</a></li> <li>fix: use-after-free in <code>get_data_from_buffer</code> by <a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/677";>msgpack/msgpack-python#677</a></li> <li>change changelog format to markdown by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/680";>msgpack/msgpack-python#680</a></li> <li>Bump the all-dependencies group with 2 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/684";>msgpack/msgpack-python#684</a></li> <li>Bump sys.setrecursionlimit within test_nest_limit_1024 by <a href="https://github.com/clin1234";><code>@clin1234</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/682";>msgpack/msgpack-python#682</a></li> <li>Guard <code>Packer</code> buffer protocol hooks with Cython critical sections by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/686";>msgpack/msgpack-python#686</a></li> <li>Harden <code>Unpacker.__init__</code> re-entry cleanup to prevent buffer/context leaks by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/687";>msgpack/msgpack-python#687</a></li> <li>release v1.2.0rc1 by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/681";>msgpack/msgpack-python#681</a></li> <li>Wheels CI hangs for MacOS Intel by <a href="https://github.com/crusaderky";><code>@crusaderky</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/689";>msgpack/msgpack-python#689</a></li> <li>Bump pypa/cibuildwheel from 3.4.1 to 4.0.0 in the all-dependencies group by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/691";>msgpack/msgpack-python#691</a></li> <li>release v1.2.0 by <a href="https://github.com/methane";><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/692";>msgpack/msgpack-python#692</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/justeph";><code>@justeph</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/664";>msgpack/msgpack-python#664</a></li> <li><a href="https://github.com/KowalskiThomas";><code>@KowalskiThomas</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/666";>msgpack/msgpack-python#666</a></li> <li><a href="https://github.com/vallsv";><code>@vallsv</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/668";>msgpack/msgpack-python#668</a></li> <li><a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/669";>msgpack/msgpack-python#669</a></li> <li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/676";>msgpack/msgpack-python#676</a></li> <li><a href="https://github.com/bysiber";><code>@bysiber</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/663";>msgpack/msgpack-python#663</a></li> <li><a href="https://github.com/clin1234";><code>@clin1234</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/641";>msgpack/msgpack-python#641</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md";>msgpack's changelog</a>.</em></p> <blockquote> <h1>1.2.1</h1> <p>Release Date: 2026-06-19</p> <p>Fix a segfault when calling <code>Unpacker.unpack()</code> or <code>Unpacker.skip()</code> after an unpacking failure. But note that reusing the same <code>Unpacker</code> instance after an unpacking failure is not supported. Please create a new <code>Unpacker</code> instance instead. GHSA-6v7p-g79w-8964</p> <h1>1.2.0</h1> <p>Release Date: 2026-06-11</p> <ul> <li>Support free threaded Python. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/654";>#654</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/686";>#686</a></li> <li>Dropped support for Python 3.9. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/656";>#656</a></li> <li>Fix missing error checks in C code. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/665";>#665</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/666";>#666</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/667";>#667</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/672";>#672</a></li> <li>Fix <code>strict_map_key</code> option didn't work for <code>object_pairs_hook</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/673";>#673</a></li> <li>Increase DEFAULT_RECURSE_LIMIT of Unpacker to 1024. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/676";>#676</a></li> <li>Fix memory leak when Unpacker returns error for invalid input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/671";>#671</a></li> <li>Fix <code>Packer.pack_ext_type()</code> ignored <code>autoreset</code> option. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/663";>#663</a></li> <li>Fix <code>Timestamp.from_datetime()</code> returning wrong value for pre-epoch datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/662";>#662</a></li> <li>Fix use-after-free in <code>unpackb()</code> and <code>Unpacker.unpack()</code> for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/677";>#677</a></li> <li>Fix possible memory leak when calling <code>Unpacker.__init__()</code> several times. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/687";>#687</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/msgpack/msgpack-python/commit/448d43f5dcca7b3a2b0810e161af0a6431d90071";><code>448d43f</code></a> release v1.2.1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/698";>#698</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d";><code>2c56ddb</code></a> Merge commit from fork</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/0f4f350b6f3e80f24750422673424cce5d96e15d";><code>0f4f350</code></a> Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/694";>#694</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/11ed0a5110c1920b85b7d24d9414f480983e0f16";><code>11ed0a5</code></a> release v1.2.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/692";>#692</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/c410a388c58d55091736e510cad064977a12cb8b";><code>c410a38</code></a> Bump pypa/cibuildwheel from 3.4.1 to 4.0.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/691";>#691</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/97ba6ca0d29c1e8a5b30112f13f37a4d6b3c4492";><code>97ba6ca</code></a> skip ci: remove unneeded CIBW_SKIP option</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/cdde1b0d6336caff4e82310c3c7d2b4c73f22d59";><code>cdde1b0</code></a> Wheels CI hangs for MacOS Intel (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/689";>#689</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/5eb57e15455f5dd25001e97a7ef1170911dee104";><code>5eb57e1</code></a> release v1.2.0rc1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/681";>#681</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/77395c19a50061238306df5ea10e67c5312ceff0";><code>77395c1</code></a> Harden <code>Unpacker.__init__</code> re-entry cleanup to prevent buffer/context leaks (...</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/7df7136e20933fd3a498bd58bff7975a24790516";><code>7df7136</code></a> Guard <code>Packer</code> buffer protocol hooks with Cython critical sections (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/686";>#686</a>)</li> <li>Additional commits viewable in <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.2...v1.2.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/beam/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
