Skip to content

Update dependency MessagePack to 2.5.307 - #1712

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/messagepack-csharp
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/messagepack-csharp

Conversation

@renovate

@renovate renovate Bot commented Oct 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
MessagePack 2.5.305 → 2.5.307 age confidence

Release Notes

MessagePack-CSharp/MessagePack-CSharp (MessagePack)

v2.5.307

Security fix

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.305...v2.5.307


Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copilot AI balanced review requested due to automatic review settings October 15, 2026 12:20
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The isolated patch update matches the documented security release, with no identified issues; builds and tests were not run.

0 open findings

What changed in this PR

Updates the centrally managed MessagePack dependency to include the LZ4 decompression integer overflow security fix.

Changes:

  • Upgrades MessagePack from 2.5.305 to 2.5.307.
File Description
Directory.Packages.props Updates the central MessagePack package version.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant