Bump MessagePack from 2.3.112 to 2.5.301 by dependabot[bot] · Pull Request #936 · nanoframework/nf-Visual-Studio-extension

dependabot · 2026-06-26T08:05:09Z

Updated MessagePack from 2.3.112 to 2.5.301.

Release notes

2.5.301 Security release

This release fixes 2 high severity and 9 moderate severity security vulnerabilities as listed below.

This release is missing #2269 from the v2.5.205 release. We recommend folks adopt the v2.5.302 release which has all the security fixes combined.

High severity advisory fixes

696b4a76 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
3538bc11 GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

Moderage severity advisory fixes

853429a0 GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
826f17c7 GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
c98d31f2 GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
ae90f2b1 GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
940b8508 GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
e01f07cf GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
dc6f6324 GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
e97f71e7 GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
7b12e5b5 GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
a3c8a183 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
96743523 GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

Fixes with no security advisory

814bc4c1 Honor TypeFormatter options hooks for CWE-470
b0f8c5e2 Fix WriteRawX methods to advance by written length
0124048c Fix CWE-190 map header length overflow

2.5.205 What's Changed

Fix repo url by @tomap in Fix repo url MessagePack-CSharp/MessagePack-CSharp#2065
Update DynamicAssembly usage to honor different AssemblyLoadContext's by @BertanAygun in Update DynamicAssembly usage to honor different AssemblyLoadContext's MessagePack-CSharp/MessagePack-CSharp#2183
Add more types to the default disallow list of named types to be deserialized by @AArnott in Add more types to the default disallow list of named types to be deserialized MessagePack-CSharp/MessagePack-CSharp#2263
Add several known unsafe 'gadgets' to the disallow list by @AArnott in Add several known unsafe 'gadgets' to the disallow list MessagePack-CSharp/MessagePack-CSharp#2269

New Contributors

@tomap made their first contribution in Fix repo url MessagePack-CSharp/MessagePack-CSharp#2065

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.192...v2.5.205

2.5.198 What's Changed

Fix repo url by @tomap in Fix repo url MessagePack-CSharp/MessagePack-CSharp#2065
Update DynamicAssembly usage to honor different AssemblyLoadContext's by @BertanAygun in Update DynamicAssembly usage to honor different AssemblyLoadContext's MessagePack-CSharp/MessagePack-CSharp#2183

New Contributors

@tomap made their first contribution in Fix repo url MessagePack-CSharp/MessagePack-CSharp#2065

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.192...v2.5.198

2.5.192 What's Changed

Fix bugs in serializing long numbers by @AArnott in Fix bugs in serializing long numbers MessagePack-CSharp/MessagePack-CSharp#2055

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.187...v2.5.192

2.5.187 Changes:

#2014: Use a collision-resistant hash algorithm for untrusted data to address GHSA-4qm4-8hg2-g2xm
#2010: Update published security policy

This list of changes was auto generated.

2.5.172 What's Changed

Allow applying [MessagePackFormatter] on parameters and return values by @AArnott in Allow applying [MessagePackFormatter] on parameters and return values MessagePack-CSharp/MessagePack-CSharp#1901

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.171...v2.5.172

2.5.171 What's Changed

Add .NET 8 target to mpc by @AArnott in Add .NET 8 target to mpc MessagePack-CSharp/MessagePack-CSharp#1832
Allow writing to init property setters of generic classes on .NET 6+ by @AArnott in Allow writing to init property setters of generic classes on .NET 6+ MessagePack-CSharp/MessagePack-CSharp#1879

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.168...v2.5.171

2.5.168 What's Changed

fixing issue with backing field naming and serialization failing by @epitka in fixing issue with backing field naming and serialization failing MessagePack-CSharp/MessagePack-CSharp#1785
Feature/1804 locate formatters only if has elements inside by @nmi-relewise in Feature/1804 locate formatters only if has elements inside MessagePack-CSharp/MessagePack-CSharp#1805
Enable ignoring fields by using [NonSerialized] by @mookid8000 in Enable ignoring fields by using [NonSerialized] MessagePack-CSharp/MessagePack-CSharp#1808
Reduce nuget dependencies by @thompson-tomo in Reduce nuget dependencies MessagePack-CSharp/MessagePack-CSharp#1812
Raise perf tracking events when formatters are dynamically generated by @AArnott in Raise perf tracking events when formatters are dynamically generated MessagePack-CSharp/MessagePack-CSharp#1829

New Contributors

@epitka made their first contribution in fixing issue with backing field naming and serialization failing MessagePack-CSharp/MessagePack-CSharp#1785
@nmi-relewise made their first contribution in Feature/1804 locate formatters only if has elements inside MessagePack-CSharp/MessagePack-CSharp#1805
@mookid8000 made their first contribution in Enable ignoring fields by using [NonSerialized] MessagePack-CSharp/MessagePack-CSharp#1808
@thompson-tomo made their first contribution in Reduce nuget dependencies MessagePack-CSharp/MessagePack-CSharp#1812

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.140...v2.5.168

2.5.140 What's Changed

Fix releases links in README text by @KonH in Fix releases links in README text MessagePack-CSharp/MessagePack-CSharp#1688
Better constrain dictionary detection by @AArnott in Better constrain dictionary detection MessagePack-CSharp/MessagePack-CSharp#1687
Create FUNDING.yml by @AArnott in Create FUNDING.yml MessagePack-CSharp/MessagePack-CSharp#1693
Workaround mono runtime bug by @AArnott in Workaround mono runtime bug MessagePack-CSharp/MessagePack-CSharp#1696
Add MESSAGEPACK_FORCE_AOT preprocessor directive by @brwhelan-msft in Add MESSAGEPACK_FORCE_AOT preprocessor directive MessagePack-CSharp/MessagePack-CSharp#1701

New Contributors

@brwhelan-msft made their first contribution in Add MESSAGEPACK_FORCE_AOT preprocessor directive MessagePack-CSharp/MessagePack-CSharp#1701

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.129...v2.5.140

2.5.129 What's Changed

Remove long to int truncation of stream position by @AArnott in Remove long to int truncation of stream position MessagePack-CSharp/MessagePack-CSharp#1685

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.124...v2.5.129

2.5.124 What's Changed

Fix bug unsafe formatter by @pCYSl5EDgo in Fix bug unsafe formatter MessagePack-CSharp/MessagePack-CSharp#1584
Bump Microsoft.NET.StringTools from 17.4.0 to 17.5.0 by @dependabot in Bump Microsoft.NET.StringTools from 17.4.0 to 17.5.0 MessagePack-CSharp/MessagePack-CSharp#1588
Bump ReactiveProperty from 8.2.0 to 9.1.2 by @dependabot in Bump ReactiveProperty from 8.2.0 to 9.1.2 MessagePack-CSharp/MessagePack-CSharp#1592
Avoid copying data twice in MessagePackWriter.MemoryCopy when running… by @AlanLiu90 in Avoid copying data twice in MessagePackWriter.MemoryCopy when running… MessagePack-CSharp/MessagePack-CSharp#1607
Fix ILookup<TKey, TElement> deserialized behavior by @AArnott in Fix ILookup<TKey, TElement> deserialized behavior MessagePack-CSharp/MessagePack-CSharp#1623
Bump Microsoft.NET.StringTools from 17.5.0 to 17.6.3 by @dependabot in Bump Microsoft.NET.StringTools from 17.5.0 to 17.6.3 MessagePack-CSharp/MessagePack-CSharp#1629
move code depending on UnityEditor into separate assembly by @NorbertNemec in move code depending on UnityEditor into separate assembly MessagePack-CSharp/MessagePack-CSharp#1649

New Contributors

@AlanLiu90 made their first contribution in Avoid copying data twice in MessagePackWriter.MemoryCopy when running… MessagePack-CSharp/MessagePack-CSharp#1607
@NorbertNemec made their first contribution in move code depending on UnityEditor into separate assembly MessagePack-CSharp/MessagePack-CSharp#1649

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.108...v2.5.124

2.5.108 What's Changed

fix ThreadsafeTypeKeyHashTable.GetOrAdd stampede issue by @gepa21 in fix ThreadsafeTypeKeyHashTable.GetOrAdd stampede issue MessagePack-CSharp/MessagePack-CSharp#1577
Revert change that introduced thread-safety bug by @AArnott in Revert change that introduced thread-safety bug MessagePack-CSharp/MessagePack-CSharp#1579

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.103...v2.5.108

2.5.103 What's Changed

Use Mono.RuntimeStructs rather than Mono.Runtime to test if app is running on Mono runtime by @takeshik in Use Mono.RuntimeStructs rather than Mono.Runtime to test if app is running on Mono runtime MessagePack-CSharp/MessagePack-CSharp#1573
Fix PrimitiveObjectResolver's ability to read strings by @AArnott in Fix PrimitiveObjectResolver's ability to read strings MessagePack-CSharp/MessagePack-CSharp#1575

New Contributors

@takeshik made their first contribution in Use Mono.RuntimeStructs rather than Mono.Runtime to test if app is running on Mono runtime MessagePack-CSharp/MessagePack-CSharp#1573

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.5.94...v2.5.103

2.5.94 What's Changed

MessagePack.Generator RollForward to Major by @neuecc in MessagePack.Generator RollForward to Major MessagePack-CSharp/MessagePack-CSharp#1445
Drop net5.0 runtime targets by @AArnott in Drop net5.0 runtime targets MessagePack-CSharp/MessagePack-CSharp#1448
Bump Newtonsoft.Json from 12.0.3 to 13.0.1 in /benchmark/SerializerBenchmark by @dependabot in Bump Newtonsoft.Json from 12.0.3 to 13.0.1 in /benchmark/SerializerBenchmark MessagePack-CSharp/MessagePack-CSharp#1453
Bump Newtonsoft.Json from 10.0.3 to 13.0.1 in /sandbox/Sandbox by @dependabot in Bump Newtonsoft.Json from 10.0.3 to 13.0.1 in /sandbox/Sandbox MessagePack-CSharp/MessagePack-CSharp#1452
Add StringInterningFormatter.cs.meta for Unity by @neuecc in Add StringInterningFormatter.cs.meta for Unity MessagePack-CSharp/MessagePack-CSharp#1455
Add option to avoid large buffer allocations by @AArnott in Add option to avoid large buffer allocations MessagePack-CSharp/MessagePack-CSharp#1457
Skip type collection if property has MessagePackFormatterAttribute by @gllebede in Skip type collection if property has MessagePackFormatterAttribute MessagePack-CSharp/MessagePack-CSharp#1462
Fix for "System.NotImplementedException: byref delegate" by @MaximMikhisor in Fix for "System.NotImplementedException: byref delegate" MessagePack-CSharp/MessagePack-CSharp#1461
Add non-generic serialize/deserialize perf tests by @AArnott in Add non-generic serialize/deserialize perf tests MessagePack-CSharp/MessagePack-CSharp#1478
Fix OverflowException in SafeBitConverter.ToInt64 by @ValkaVales in Fix OverflowException in SafeBitConverter.ToInt64 MessagePack-CSharp/MessagePack-CSharp#1481
removing extra double quotation mark by @ImanNavidi in removing extra double quotation mark MessagePack-CSharp/MessagePack-CSharp#1490
Enable SPAN_BUILTIN code for Unity 2021.2+ by @MichalPetryka in Enable SPAN_BUILTIN code for Unity 2021.2+ MessagePack-CSharp/MessagePack-CSharp#1486
ASP.NET Core improvements by @vzabrodin in ASP.NET Core improvements MessagePack-CSharp/MessagePack-CSharp#1512
fix duplicate registration of named tuples by @honda-tatsuya in fix duplicate registration of named tuples MessagePack-CSharp/MessagePack-CSharp#1464
Fix null param check in StaticCompositeResolver by @AArnott in Fix null param check in StaticCompositeResolver MessagePack-CSharp/MessagePack-CSharp#1527
Update Microsoft.NET.StringTools dependency to 17.4.0 by @AArnott in Update Microsoft.NET.StringTools dependency to 17.4.0 MessagePack-CSharp/MessagePack-CSharp#1515
Improve error messages in exceptions thrown from PrimitiveObjectFormatter by @AArnott in Improve error messages in exceptions thrown from PrimitiveObjectFormatter MessagePack-CSharp/MessagePack-CSharp#1499
Add incremental build support to MessagePack.MSBuild.Tasks by @AArnott in Add incremental build support to MessagePack.MSBuild.Tasks MessagePack-CSharp/MessagePack-CSharp#1528
Remove dead constant by @AArnott in Remove dead constant MessagePack-CSharp/MessagePack-CSharp#1529
Switch from Azure Pipelines to GitHub Actions for unity build by @AArnott in Switch from Azure Pipelines to GitHub Actions for unity build MessagePack-CSharp/MessagePack-CSharp#1543
Merge master to develop by @AArnott in Merge master to develop MessagePack-CSharp/MessagePack-CSharp#1544
Fixed issue with generics formatters generation in Fixed issue with generics formatters generation MessagePack-CSharp/MessagePack-CSharp#1534
Fixes Typo "paramterType" -> "parameterType" by @gfs in Fixes Typo "paramterType" -> "parameterType" MessagePack-CSharp/MessagePack-CSharp#1547
Fix unity+android code for reading an Int64 from memory by @AArnott in Fix unity+android code for reading an Int64 from memory MessagePack-CSharp/MessagePack-CSharp#1548
Hide Microsoft.NET.StringTools from compilation of downstream projects by @AArnott in Hide Microsoft.NET.StringTools from compilation of downstream projects MessagePack-CSharp/MessagePack-CSharp#1549
Add CustomFormatter instanciator for StringKeyFormatterTemplate by @gepa21 in Add __CustomFormatter__ instanciator for StringKeyFormatterTemplate MessagePack-CSharp/MessagePack-CSharp#1557
Remove author info by @AArnott in Remove author info MessagePack-CSharp/MessagePack-CSharp#1564
Show details of errors occurred when the generator opens a project by @mayuki in Show details of errors occurred when the generator opens a project MessagePack-CSharp/MessagePack-CSharp#1558
Fix MessagePack CodeGen Unity spelling/grammar by @Valerionn in Fix MessagePack CodeGen Unity spelling/grammar MessagePack-CSharp/MessagePack-CSharp#1561
Fixed issue with Union formatter generator by @Scormave in Fixed issue with Union formatter generator MessagePack-CSharp/MessagePack-CSharp#1553
Fixed nullable embedded types are being added to generated resolver by @Scormave in Fixed nullable embedded types are being added to generated resolver MessagePack-CSharp/MessagePack-CSharp#1556
Added sandbox tests for nested generic types by @Scormave in Added sandbox tests for nested generic types MessagePack-CSharp/MessagePack-CSharp#1555
Merge latest Library.Template by @AArnott in Merge latest Library.Template MessagePack-CSharp/MessagePack-CSharp#1566
Merge master to develop by @AArnott in Merge master to develop MessagePack-CSharp/MessagePack-CSharp#1567
Fix wrong data length written in UnsafeBlitFormatter by @lynzrand in Fix wrong data length written in UnsafeBlitFormatter MessagePack-CSharp/MessagePack-CSharp#1551

New Contributors

@gllebede made their first contribution in Skip type collection if property has MessagePackFormatterAttribute MessagePack-CSharp/MessagePack-CSharp#1462
@MaximMikhisor made their first contribution in Fix for "System.NotImplementedException: byref delegate" MessagePack-CSharp/MessagePack-CSharp#1461
@ValkaVales made their first contribution in Fix OverflowException in SafeBitConverter.ToInt64 MessagePack-CSharp/MessagePack-CSharp#1481
@ImanNavidi made their first contribution in removing extra double quotation mark MessagePack-CSharp/MessagePack-CSharp#1490
@MichalPetryka made their first contribution in Enable SPAN_BUILTIN code for Unity 2021.2+ MessagePack-CSharp/MessagePack-CSharp#1486
@vzabrodin made their first contribution in ASP.NET Core improvements MessagePack-CSharp/MessagePack-CSharp#1512
@gfs made their first contribution in Fixes Typo "paramterType" -> "parameterType" MessagePack-CSharp/MessagePack-CSharp#1547
@gepa21 made their first contribution in Add __CustomFormatter__ instanciator for StringKeyFormatterTemplate MessagePack-CSharp/MessagePack-CSharp#1557
@Valerionn made their first contribution in Fix MessagePack CodeGen Unity spelling/grammar MessagePack-CSharp/MessagePack-CSharp#1561
@Scormave made their first contribution in Fixed issue with Union formatter generator MessagePack-CSharp/MessagePack-CSharp#1553
@lynzrand made their first contribution in Fix wrong data length written in UnsafeBlitFormatter MessagePack-CSharp/MessagePack-CSharp#1551

... (truncated)

2.5.64-alpha

What's Changed

Support string interning when deserializing string as object. by @sa-vg in Support string interning when deserializing string as object. MessagePack-CSharp/MessagePack-CSharp#1487
Add disabled test for supporting Union on concrete classes by @AArnott in Add disabled test for supporting Union on concrete classes MessagePack-CSharp/MessagePack-CSharp#1466
Remove a few dependencies from unity package by @AArnott in Remove a few dependencies from unity package MessagePack-CSharp/MessagePack-CSharp#1497
Build on Unity 2021.3 agent by @AArnott in Build on Unity 2021.3 agent MessagePack-CSharp/MessagePack-CSharp#1537
Refreshing updates by @AArnott in Refreshing updates MessagePack-CSharp/MessagePack-CSharp#1538
Add nullable ref annotations by @AArnott in Add nullable ref annotations MessagePack-CSharp/MessagePack-CSharp#1539
Add more nullable ref annotations by @AArnott in Add more nullable ref annotations MessagePack-CSharp/MessagePack-CSharp#1540
Last of the nullable ref annotations by @AArnott in Last of the nullable ref annotations MessagePack-CSharp/MessagePack-CSharp#1541

New Contributors

@sa-vg made their first contribution in Support string interning when deserializing string as object. MessagePack-CSharp/MessagePack-CSharp#1487

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.4.23-alpha...v2.5.64-alpha

2.4.59 What's Changed

Skip type collection if property has MessagePackFormatterAttribute by @gllebede in Skip type collection if property has MessagePackFormatterAttribute MessagePack-CSharp/MessagePack-CSharp#1462
Fix for "System.NotImplementedException: byref delegate" by @MaximMikhisor in Fix for "System.NotImplementedException: byref delegate" MessagePack-CSharp/MessagePack-CSharp#1461
Add non-generic serialize/deserialize perf tests by @AArnott in Add non-generic serialize/deserialize perf tests MessagePack-CSharp/MessagePack-CSharp#1478
Fix OverflowException in SafeBitConverter.ToInt64 by @ValkaVales in Fix OverflowException in SafeBitConverter.ToInt64 MessagePack-CSharp/MessagePack-CSharp#1481
removing extra double quotation mark by @ImanNavidi in removing extra double quotation mark MessagePack-CSharp/MessagePack-CSharp#1490
Enable SPAN_BUILTIN code for Unity 2021.2+ by @MichalPetryka in Enable SPAN_BUILTIN code for Unity 2021.2+ MessagePack-CSharp/MessagePack-CSharp#1486
ASP.NET Core improvements by @vzabrodin in ASP.NET Core improvements MessagePack-CSharp/MessagePack-CSharp#1512
fix duplicate registration of named tuples by @honda-tatsuya in fix duplicate registration of named tuples MessagePack-CSharp/MessagePack-CSharp#1464
Fix null param check in StaticCompositeResolver by @AArnott in Fix null param check in StaticCompositeResolver MessagePack-CSharp/MessagePack-CSharp#1527
Update Microsoft.NET.StringTools dependency to 17.4.0 by @AArnott in Update Microsoft.NET.StringTools dependency to 17.4.0 MessagePack-CSharp/MessagePack-CSharp#1515
Improve error messages in exceptions thrown from PrimitiveObjectFormatter by @AArnott in Improve error messages in exceptions thrown from PrimitiveObjectFormatter MessagePack-CSharp/MessagePack-CSharp#1499
Add incremental build support to MessagePack.MSBuild.Tasks by @AArnott in Add incremental build support to MessagePack.MSBuild.Tasks MessagePack-CSharp/MessagePack-CSharp#1528
Remove dead constant by @AArnott in Remove dead constant MessagePack-CSharp/MessagePack-CSharp#1529

New Contributors

@gllebede made their first contribution in Skip type collection if property has MessagePackFormatterAttribute MessagePack-CSharp/MessagePack-CSharp#1462
@MaximMikhisor made their first contribution in Fix for "System.NotImplementedException: byref delegate" MessagePack-CSharp/MessagePack-CSharp#1461
@ValkaVales made their first contribution in Fix OverflowException in SafeBitConverter.ToInt64 MessagePack-CSharp/MessagePack-CSharp#1481
@ImanNavidi made their first contribution in removing extra double quotation mark MessagePack-CSharp/MessagePack-CSharp#1490
@MichalPetryka made their first contribution in Enable SPAN_BUILTIN code for Unity 2021.2+ MessagePack-CSharp/MessagePack-CSharp#1486
@vzabrodin made their first contribution in ASP.NET Core improvements MessagePack-CSharp/MessagePack-CSharp#1512

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.4.35...v2.4.59

2.4.35 Changes:

Enhancements:

#1457: Add option to avoid large buffer allocations
#1445: MessagePack.Generator RollForward to Major

Others:

#1455: Add StringInterningFormatter.cs.meta for Unity
#1448: Drop net5.0 runtime targets

This list of changes was auto generated.

2.4.23-alpha

What's Changed

Fix missing switch statement by @steelywing in Fix missing switch statement MessagePack-CSharp/MessagePack-CSharp#1383
Added ResolverUtilitis.cs.meta, fix #1388 by @neuecc in Added ResolverUtilitis.cs.meta, fix #1388 MessagePack-CSharp/MessagePack-CSharp#1389
Add CompressionMinLength parameter to MessagePackSerializerOptions by @israellot in Add CompressionMinLength parameter to MessagePackSerializerOptions MessagePack-CSharp/MessagePack-CSharp#1359
Add built-in support for .NET 6 DateOnly and TimeOnly types by @AArnott in Add built-in support for .NET 6 DateOnly and TimeOnly types MessagePack-CSharp/MessagePack-CSharp#1427
Suppress CS1591 warnings in generated code by @AArnott in Suppress CS1591 warnings in generated code MessagePack-CSharp/MessagePack-CSharp#1440

New Contributors

@steelywing made their first contribution in Fix missing switch statement MessagePack-CSharp/MessagePack-CSharp#1383
@israellot made their first contribution in Add CompressionMinLength parameter to MessagePackSerializerOptions MessagePack-CSharp/MessagePack-CSharp#1359

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.4.14-alpha...v2.4.23-alpha

2.4.14-alpha

What's Changed

Fixed typo in README.MD by @marekott in Fixed typo in README.MD MessagePack-CSharp/MessagePack-CSharp#1317
Allows client code to avoid tripping over StandardResolver by @AArnott in Allows client code to avoid tripping over StandardResolver MessagePack-CSharp/MessagePack-CSharp#1315
Add string interning option by @AArnott in Add string interning option MessagePack-CSharp/MessagePack-CSharp#1285
Drop unsupported platforms by @AArnott in Drop unsupported platforms MessagePack-CSharp/MessagePack-CSharp#1345
Fix MessagePackFormatterAttribute for many built-in formatter types by @AArnott in Fix MessagePackFormatterAttribute for many built-in formatter types MessagePack-CSharp/MessagePack-CSharp#1330
Support Unity netstandard21 by @neuecc in Support Unity netstandard21 MessagePack-CSharp/MessagePack-CSharp#1346
disable HashCode.cs if UNITY_2021_2_OR_NEWER by @neuecc in disable HashCode.cs if UNITY_2021_2_OR_NEWER MessagePack-CSharp/MessagePack-CSharp#1357
Fix secure hash for float by @pCYSl5EDgo in Fix secure hash for float MessagePack-CSharp/MessagePack-CSharp#1364
Added DevelopmentDependency to MessagePackAnalyzer by @HavenDV in feat: Added DevelopmentDependency to MessagePackAnalyzer MessagePack-CSharp/MessagePack-CSharp#1361
.NET 6 Update by @pCYSl5EDgo in .NET 6 Update MessagePack-CSharp/MessagePack-CSharp#1355
Avoid C#10 global using name collisions by @pCYSl5EDgo in Avoid C#10 global using name collisions MessagePack-CSharp/MessagePack-CSharp#1368
Global Using and File Scoped Namespace Test by @pCYSl5EDgo in Global Using and File Scoped Namespace Test MessagePack-CSharp/MessagePack-CSharp#1371
Fix nullable annotation errorneous handling by @pCYSl5EDgo in Fix nullable annotation errorneous handling MessagePack-CSharp/MessagePack-CSharp#1395

New Contributors

@marekott made their first contribution in Fixed typo in README.MD MessagePack-CSharp/MessagePack-CSharp#1317
@HavenDV made their first contribution in feat: Added DevelopmentDependency to MessagePackAnalyzer MessagePack-CSharp/MessagePack-CSharp#1361

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v2.3.85...v2.4.14-alpha

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

--- updated-dependencies: - dependency-name: MessagePack dependency-version: 2.5.301 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-26T08:06:56Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Bump MessagePack from 2.3.112 to 2.5.301

6979eab

--- updated-dependencies: - dependency-name: MessagePack dependency-version: 2.5.301 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 26, 2026

josesimoes closed this Jun 26, 2026

nfbot added invalid and removed dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 26, 2026

dependabot Bot deleted the dependabot/nuget/VisualStudio.Extension-2019/MessagePack-2.5.301 branch June 26, 2026 08:07

Navigation Menu

Uh oh!

Bump MessagePack from 2.3.112 to 2.5.301 - #936

Bump MessagePack from 2.3.112 to 2.5.301#936
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/VisualStudio.Extension-2019/MessagePack-2.5.301

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 26, 2026

2.5.301

Security release

High severity advisory fixes

Moderage severity advisory fixes

Fixes with no security advisory

2.5.205

What's Changed

New Contributors

2.5.198

What's Changed

New Contributors

2.5.192

What's Changed

2.5.187

Changes:

2.5.172

What's Changed

2.5.171

What's Changed

2.5.168

What's Changed

New Contributors

2.5.140

What's Changed

New Contributors

2.5.129

What's Changed

2.5.124

What's Changed

New Contributors

2.5.108

What's Changed

2.5.103

What's Changed

New Contributors

2.5.94

What's Changed

New Contributors

2.5.64-alpha

What's Changed

New Contributors

2.4.59

What's Changed

New Contributors

2.4.35

Changes:

Enhancements:

Others:

2.4.23-alpha

What's Changed

New Contributors

2.4.14-alpha

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants