chore(deps): bump msgpack from 1.2.1 to 1.2.2 by dependabot[bot] · Pull Request #43867 · apache/superset

dependabot · 2026-09-04T13:55:58Z

Bumps msgpack from 1.2.1 to 1.2.2.

Release notes

v1.2.2

What's Changed

fix docstring for read_size by @methane in msgpack/msgpack-python#700

unpacker: fix silent datetime truncation with datetime=3 by @methane in msgpack/msgpack-python#701

run test with debug build by @methane in msgpack/msgpack-python#702

fix: add reentrant guard to Unpacker.feed() by @methane in msgpack/msgpack-python#704

Bump actions/checkout from 6.0.3 to 7.0.0 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#705

Improve error handling and reporting in unpacking functions by @methane in msgpack/msgpack-python#707

test_unpack.py: add tests for ExtraData by @methane in msgpack/msgpack-python#708

Bump the all-dependencies group with 2 updates by @dependabot[bot] in msgpack/msgpack-python#709

Fix Timestamp.from_datetime() precision for far-future datetimes by @gaoflow in msgpack/msgpack-python#710

Fix typos in test and docs by @maxtaran2010 in msgpack/msgpack-python#712

Bump the all-dependencies group across 1 directory with 5 updates by @dependabot[bot] in msgpack/msgpack-python#719

fix: use-after-free in unpackb() ExtraData path for non-contiguous input by @ThomasWaldmann in msgpack/msgpack-python#722

Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#721

Bump pypa/cibuildwheel from 4.1.1 to 4.2.0 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#724

Convert Packer's buf_size once by @hdimer in msgpack/msgpack-python#726

fix: translate RecursionError to StackError in fallback Unpacker.skip() by @hdimer in msgpack/msgpack-python#727

Validate nanoseconds range when unpacking timestamps in the C extension by @chuenchen309 in msgpack/msgpack-python#716

Avoid parallel execution of the recursion-limit nesting test on free-threaded builds by @methane with @Copilot in msgpack/msgpack-python#729

Raise OverflowError when use_single_float cannot represent a value by @dylanpulver in msgpack/msgpack-python#728

release v1.2.2 by @methane in msgpack/msgpack-python#730

New Contributors

@gaoflow made their first contribution in msgpack/msgpack-python#710

@maxtaran2010 made their first contribution in msgpack/msgpack-python#712

@hdimer made their first contribution in msgpack/msgpack-python#726

@chuenchen309 made their first contribution in msgpack/msgpack-python#716

@dylanpulver made their first contribution in msgpack/msgpack-python#728

Full Changelog: msgpack/msgpack-python@v1.2.1...v1.2.2

Changelog

Sourced from msgpack's changelog.

1.2.2

Release Date: 2026-08-27

Fix the read_size documentation. #700

Fix silent truncation when unpacking an out-of-range timestamp with timestamp=3. #701

Prevent reentrant calls to Unpacker.feed() while unpacking. #704

Improve error handling and reporting in unpacking functions. #707

Fix Timestamp.from_datetime() precision for far-future datetimes. #710

Fix typos in the documentation. #712

Validate the nanoseconds range when unpacking timestamps in the C extension. #716

Fix a use-after-free in the unpackb() ExtraData path for non-contiguous input. #722

Prevent a buffer overflow when converting Packer's buf_size. #726

Translate RecursionError to StackError in the fallback Unpacker.skip(). #727

Raise OverflowError when use_single_float=True cannot represent a value. #728

Commits

7381b31 release
ee1bd3c release v1.2.2 (#730)
57d28a2 Raise OverflowError when use_single_float cannot represent a value (#728)
d374a17 Avoid parallel execution of the recursion-limit nesting test on free-threaded...
e94e1dc Validate nanoseconds range when unpacking timestamps in the C extension (#716)
2e4be09 fix: translate RecursionError to StackError in fallback Unpacker.skip() (#727)
9f9bdae Convert Packer's buf_size once (#726)
809bfcd remove unused variable
186d4db Bump pypa/cibuildwheel from 4.1.1 to 4.2.0(#724)
ea6b84f Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencie...
Additional commits viewable in compare view

bito-code-review · 2026-09-04T13:56:08Z

Code Review Agent Run #3daad3

Actionable Suggestions - 0

Additional Suggestions - 1

pyproject.toml - 1
- Lock files out of sync · Line 85-85
  
  The floor bump to `msgpack>=1.2.2` isn't reflected in the committed lock files: `requirements/base.txt` (line 239) and `requirements/development.txt` (line 562) still pin `msgpack==1.2.1`. Since the `Dockerfile` installs from `requirements/base.txt`, installs would still get 1.2.1, and `check-python-deps.yml` will fail until the lock files are regenerated via `./scripts/uv-pip-compile.sh`.

Review Details

Files reviewed - 1 · Commit Range: 96fe599..96fe599
- pyproject.toml
Files skipped - 0
Tools
- Whispers (Secret Scanner) - ✔︎ Successful
- Detect-secrets (Secret Scanner) - ✔︎ Successful

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

/review - Manually triggers an incremental AI Review.
/review full - Manually triggers a full AI Review.
/pause - Pauses automatic reviews on this pull request.
/resume - Resumes automatic reviews.
/resolve - Marks all Bito-posted review comments as resolved.
/abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

AI Code Review powered by

github-actions

Auto-approved: patch-level bump only (msgpack).

github-actions

Auto-approved: patch-level bump only (msgpack).

codecov · 2026-09-04T16:28:15Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.46%. Comparing base (635de27) to head (c7b3dce).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #43867   +/-   ##
=======================================
  Coverage   79.46%   79.46%           
=======================================
  Files        2895     2895           
  Lines      168167   168171    +4     
  Branches    38993    38993           
=======================================
+ Hits       133626   133630    +4     
  Misses      32042    32042           
  Partials     2499     2499

Flag	Coverage Δ
hive	`37.77% <ø> (-0.01%)`	⬇️
mysql	`57.48% <ø> (+<0.01%)`	⬆️
postgres	`57.52% <ø> (-0.01%)`	⬇️
presto	`39.66% <ø> (+<0.01%)`	⬆️
python	`83.87% <ø> (+<0.01%)`	⬆️
sqlite	`57.21% <ø> (+<0.01%)`	⬆️
unit	`74.39% <ø> (-0.01%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

bito-code-review · 2026-09-04T17:00:27Z

Code Review Agent Run #08e0d8

Actionable Suggestions - 0

Review Details

Files reviewed - 2 · Commit Range: 96fe599..aa88b08
- requirements/base.txt
- requirements/development.txt
Files skipped - 0
Tools
- Whispers (Secret Scanner) - ✔︎ Successful
- Detect-secrets (Secret Scanner) - ✔︎ Successful

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

/review - Manually triggers an incremental AI Review.
/review full - Manually triggers a full AI Review.
/pause - Pauses automatic reviews on this pull request.
/resume - Resumes automatic reviews.
/resolve - Marks all Bito-posted review comments as resolved.
/abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

AI Code Review powered by

rusackas · 2026-09-04T17:18:12Z

@dependabot rebase

dependabot · 2026-09-04T17:18:16Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

rusackas · 2026-09-04T17:19:29Z

@dependabot recreate

Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](msgpack/msgpack-python@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: msgpack dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions

Auto-approved: patch-level bump only (msgpack).

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions

Auto-approved: patch-level bump only (msgpack).

bito-code-review · 2026-09-04T20:48:12Z

Code Review Agent Run #7be39f

Actionable Suggestions - 0

Review Details

Files reviewed - 3 · Commit Range: d0f6e64..c7b3dce
- pyproject.toml
- requirements/base.txt
- requirements/development.txt
Files skipped - 0
Tools
- Whispers (Secret Scanner) - ✔︎ Successful
- Detect-secrets (Secret Scanner) - ✔︎ Successful

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

/review - Manually triggers an incremental AI Review.
/review full - Manually triggers a full AI Review.
/pause - Pauses automatic reviews on this pull request.
/resume - Resumes automatic reviews.
/resolve - Marks all Bito-posted review comments as resolved.
/abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

AI Code Review powered by

dependabot Bot added dependabot patch Dependabot PRs that bump patch version for dependencies pip Dependabot - pip related PRs labels Sep 4, 2026

pull-request-size Bot added the size/XS label Sep 4, 2026

github-actions Bot approved these changes Sep 4, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/pip/msgpack-1.2.2 branch from aa88b08 to d0f6e64 Compare September 4, 2026 17:44

github-actions Bot approved these changes Sep 4, 2026

View reviewed changes

build(deps): sync pinned requirements for Dependabot pip PRs

c7b3dce

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions Bot approved these changes Sep 4, 2026

View reviewed changes

Navigation Menu

Uh oh!

chore(deps): bump msgpack from 1.2.1 to 1.2.2 - #43867

chore(deps): bump msgpack from 1.2.1 to 1.2.2#43867
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/pip/msgpack-1.2.2

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

Uh oh!

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading

Code Review Agent Run #3daad3

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

codecov Bot commented Sep 4, 2026 •

edited

Loading

Uh oh!

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading

Code Review Agent Run #08e0d8

Uh oh!

rusackas commented Sep 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

rusackas commented Sep 4, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading

Code Review Agent Run #7be39f

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.2

What's Changed

New Contributors

1.2.2

Uh oh!

bito-code-review Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run #3daad3

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

codecov Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

bito-code-review Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run #08e0d8

Uh oh!

rusackas commented Sep 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

rusackas commented Sep 4, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

bito-code-review Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run #7be39f

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading

codecov Bot commented Sep 4, 2026 •

edited

Loading

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading

bito-code-review Bot commented Sep 4, 2026 •

edited

Loading