Skip to content

build(deps): bump the vivisect group with 3 updates #2836

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump the vivisect group with 3 updates #2836

dependabot wants to merge 1 commit into from
+3 −3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026 •
edited
Loading

Bumps the vivisect group with 3 updates: msgpack, pyasn1 and pyasn1-modules.

Updates msgpack from 1.0.8 to 1.1.2

Release notes

Sourced from msgpack's releases.

v1.1.2

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.1.1...v1.1.2

v1.1.1

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.1.0...v1.1.1

v1.1.1rc1

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.1.0...v1.1.1rc1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from msgpack's changelog.

1.1.2

Release Date: 2025-10-08

This release does not change source code. It updates only building wheels:

  • Update Cython to v3.1.4
  • Update cibuildwheel to v3.2.0
  • Drop Python 3.8
  • Add Python 3.14
  • Add windows-arm

1.1.1

Release Date: 2025-06-13

  • No change from 1.1.1rc1.

1.1.1rc1

Release Date: 2025-06-06

  • Update Cython to 3.1.1 and cibuildwheel to 2.23.3.

1.1.0

Release Date: 2024-09-10

  • use PyLong_* instead of PyInt_* for compatibility with future Cython. (#620)

1.1.0rc2

Release Date: 2024-08-19

  • Update Cython to 3.0.11 for better Python 3.13 support.
  • Update cibuildwheel to 2.20.0 to build Python 3.13 wheels.

1.1.0rc1

Release Date: 2024-05-07

  • Update Cython to 3.0.10 to reduce C warnings and future support for Python 3.13.
  • Stop using C++ mode in Cython to reduce compile error on some compilers.

... (truncated)

Commits

Updates pyasn1 from 0.5.1 to 0.6.2

Release notes

Sourced from pyasn1's releases.

Release 0.6.2

It's a minor release.

  • Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).
  • Added support for Python 3.14.
  • Added SECURITY.md policy.
  • Migrated to pyproject.toml packaging.

All changes are noted in the CHANGELOG.

Release 0.6.1

It's a minor release.

  • Added support for Python 3.13.
  • Cleaned Python 2-related code.
  • Removed bdist_wheel universal flag from setup.cfg.

All changes are noted in the CHANGELOG.

Release 0.6.0

It's a major release where we drop Python 2 support entirely. The most significant changes are:

  • Removed support for EOL Python 2.7, 3.6, 3.7
  • Added support for previously missing RELATIVE-OID construct
  • Updated link to Layman's Guide

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.2, released 16-01-2026

Revision 0.6.1, released 10-09-2024

Revision 0.6.0, released 26-03-2024

  • Added support for previously missing RELATIVE-OID construct [pr #48](pyasn1/pyasn1#48)
  • Updated link to Layman's Guide Now it provides a link to links to a formatted PDF version of the paper, at a stable domain (researchgate), using https [pr #50](pyasn1/pyasn1#50)
  • Removed support for EOL Python 2.7, 3.6, 3.7 [pr #56](pyasn1/pyasn1#56)
Commits

Updates pyasn1-modules from 0.3.0 to 0.4.2

Release notes

Sourced from pyasn1-modules's releases.

Release 0.4.2

It's a minor release.

  • Updated dependency constraint to be compatible with pyasn1 0.6.1

All changes are noted in the CHANGELOG.

Release 0.4.1

It's a minor release.

  • Added support for Python 3.13.

All changes are noted in the CHANGELOG.

Release 0.4.0

It's a major release where we drop Python 2 support entirely. The most significant changes are:

  • Added support for Python 3.11, 3.12
  • Removed support for EOL Pythons 2.7, 3.6, 3.7

A full list of changes can be seen in the CHANGELOG.

Changelog

Sourced from pyasn1-modules's changelog.

Revision 0.4.2, released 27-03-2025

  • Updated dependency constraint to be compatible with pyasn1 0.6.1, which removed the pyasn1.compat.octets module

Revision 0.4.1, released 10-09-2024

  • Added support for Python 3.13

Revision 0.4.0, released 26-03-2024

  • Added support for Python 3.11, 3.12
  • Removed support for EOL Pythons 2.7, 3.6, 3.7
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 23, 2026
@dependabot dependabot bot mentioned this pull request Jan 23, 2026
Closed
@dependabot dependabot bot force-pushed the dependabot/pip/vivisect-3c724898a6 branch from 5c52d4b to 69762b9 Compare January 23, 2026 19:39
@dependabot
build(deps): bump the vivisect group with 3 updates
712c85d 
Bumps the vivisect group with 3 updates: [msgpack](https://github.com/msgpack/msgpack-python), [pyasn1](https://github.com/pyasn1/pyasn1) and [pyasn1-modules](https://github.com/pyasn1/pyasn1-modules).


Updates `msgpack` from 1.0.8 to 1.1.2
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst)
- [Commits](msgpack/msgpack-python@v1.0.8...v1.1.2)

Updates `pyasn1` from 0.5.1 to 0.6.2
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.2)

Updates `pyasn1-modules` from 0.3.0 to 0.4.2
- [Release notes](https://github.com/pyasn1/pyasn1-modules/releases)
- [Changelog](https://github.com/pyasn1/pyasn1-modules/blob/main/CHANGES.txt)
- [Commits](pyasn1/pyasn1-modules@v0.3.0...v0.4.2)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vivisect
- dependency-name: pyasn1
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vivisect
- dependency-name: pyasn1-modules
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vivisect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/vivisect-3c724898a6 branch from 69762b9 to 712c85d Compare January 26, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants