Bump MessagePack from 2.0.335 to 2.1.80 in /KKManager.Updater #11

Merged

dependabot[bot] merged 1 commit from dependabot/nuget/KKManager.Updater/MessagePack-2.1.80 into master

2020-01-31 21:05:06 +00:00

dependabot[bot] commented

2020-01-31 18:00:35 +00:00

(Migrated from github.com)

Bumps MessagePack from 2.0.335 to 2.1.80.

Release notes

Sourced from MessagePack's releases.

v2.1.80

Changes:

🔒 Security fixes are included in this release. Read more in our security advisory.

Fixes:

#782: Strings with UTF8 multi-byte characters are corrupted in writing on mono

#774: Apply LZ4BlockArray to ConvertToJson

#651: Typeless decimal serialized as string

#425: TypelessContractlessStandardResolver should preserve various integer types

Enhancements:

#790: Add the leaveOpen flag to MessagePackStreamReader

#788: Respect EnumMemberAttribute when serializing enum values as strings

#253: Default resolver deserializes ICollection as T[]

#771: Add WriteBinHeader and WriteStringHeader methods to MessagePackWriter

See More

#767: Add MessagePackReader.TryRead*Header methods

#726: Add MessagePackStreamReader.ReadArrayAsync

#757: Wrap all exceptions thrown from ConvertToJson in MessagePackSerializationException

#735: Make MessagePackReader.ReadDateTime(ExtensionHeader) public

Others:

#795: avoid ReadUnaligned on long, ulong, double in Android device

#789: Respect EnumMemberAttribute when serializing enum values as strings

#787: Fix mpc formatter name for Queue

#786: Fix WriteString issue on mono

#784: improve BigInteger serialize in .NET Core

#781: Fix enum serialization in unity

#779: mpc, does not load does't exists metadata

#768: Bring back serialization of members with explicit attributes

#775: Fix leaked use fullnamespace in mpc

#777: Improve performance of standard decimal serialization by using Utf8Formatter

#778: Deserialize mutable collection interfaces with mutable concrete types

#769: Add analyzers to call out use of static options

#279: Add MessagePackBinary.WriteBinHeader

#763: mpc, replace MicroBatchFramework to ConsoleAppFramework

#770: Package and toolset updates

#766: Readonly attributes and getters with Key() annotation are ignored by SerializeObject()

#762: Update Generated.cs

#759: Document subtle changes in serialization from v1.x to v2.x

... (truncated)

Commits

6b89b9a Merge branch 'v1.9'
a1026d8 Move all Unshipped APIs to Shipped
56fa862 Merge security fixes in for v2.1
7e5558f Build 2.1 as a stable package
86837cf Build all v?.* branches in CI
ff8ae64 Merge pull request #795 from neuecc/android-armv7-32bit
a9b4127 fix typo and comment.
c37aa26 avoid ReadUnaligned on long, ulong, double in Android device
49f4f13 Document security measures in README
c1e3f8b Document security measures in README
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [MessagePack](https://github.com/neuecc/MessagePack-CSharp) from 2.0.335 to 2.1.80. <details> <summary>Release notes</summary> *Sourced from [MessagePack's releases](https://github.com/neuecc/MessagePack-CSharp/releases).* > ## v2.1.80 > > > ## Changes: > > 🔒 **Security fixes are included in this release**. Read more in our [security advisory](https://github.com/neuecc/MessagePack-CSharp/security/advisories/GHSA-7q36-4xx7-xcxf). > > ### Fixes: > > > * [#782](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/782): Strings with UTF8 multi-byte characters are corrupted in writing on mono > * [#774](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/774): Apply LZ4BlockArray to `ConvertToJson` > * [#651](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/651): Typeless decimal serialized as string > * [#425](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/425): TypelessContractlessStandardResolver should preserve various integer types > > ### Enhancements: > > > * [#790](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/790): Add the leaveOpen flag to MessagePackStreamReader > * [#788](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/788): Respect EnumMemberAttribute when serializing enum values as strings > * [#253](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/253): Default resolver deserializes ICollection<T> as T[] > * [#771](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/771): Add WriteBinHeader and WriteStringHeader methods to MessagePackWriter > <details><summary><b>See More</b></summary> > > * [#767](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/767): Add `MessagePackReader.TryRead*Header` methods > * [#726](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/726): Add MessagePackStreamReader.ReadArrayAsync > * [#757](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/757): Wrap all exceptions thrown from ConvertToJson in MessagePackSerializationException > * [#735](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/735): Make MessagePackReader.ReadDateTime(ExtensionHeader) public > > ### Others: > > > * [#795](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/795): avoid ReadUnaligned on long, ulong, double in Android device > * [#789](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/789): Respect EnumMemberAttribute when serializing enum values as strings > * [#787](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/787): Fix mpc formatter name for Queue > * [#786](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/786): Fix WriteString issue on mono > * [#784](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/784): improve BigInteger serialize in .NET Core > * [#781](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/781): Fix enum serialization in unity > * [#779](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/779): mpc, does not load does't exists metadata > * [#768](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/768): Bring back serialization of members with explicit attributes > * [#775](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/775): Fix leaked use fullnamespace in mpc > * [#777](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/777): Improve performance of standard decimal serialization by using Utf8Formatter > * [#778](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/778): Deserialize mutable collection interfaces with mutable concrete types > * [#769](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/769): Add analyzers to call out use of static options > * [#279](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/279): Add MessagePackBinary.WriteBinHeader > * [#763](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/763): mpc, replace MicroBatchFramework to ConsoleAppFramework > * [#770](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/770): Package and toolset updates > * [#766](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/766): Readonly attributes and getters with Key() annotation are ignored by SerializeObject() > * [#762](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/762): Update Generated.cs > * [#759](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/759): Document subtle changes in serialization from v1.x to v2.x ></tr></table> ... (truncated) </details> <details> <summary>Commits</summary> - [`6b89b9a`](https://github.com/neuecc/MessagePack-CSharp/commit/6b89b9ad778e6c09f335d5807db6776f7105a046) Merge branch 'v1.9' - [`a1026d8`](https://github.com/neuecc/MessagePack-CSharp/commit/a1026d83a7862b46cd82fdb0166f51b77dec2a7b) Move all Unshipped APIs to Shipped - [`56fa862`](https://github.com/neuecc/MessagePack-CSharp/commit/56fa86219d01d0a183babbbbcb34abbdea588a02) Merge security fixes in for v2.1 - [`7e5558f`](https://github.com/neuecc/MessagePack-CSharp/commit/7e5558fddb9b44e9889e224549d3b85df412dfe1) Build 2.1 as a stable package - [`86837cf`](https://github.com/neuecc/MessagePack-CSharp/commit/86837cf73677d134de4b849ad37eae7f8ccfb892) Build all v?.* branches in CI - [`ff8ae64`](https://github.com/neuecc/MessagePack-CSharp/commit/ff8ae645dcc1e33f160828951a6877c3ea22bc4c) Merge pull request [#795](https://github-redirect.dependabot.com/neuecc/MessagePack-CSharp/issues/795) from neuecc/android-armv7-32bit - [`a9b4127`](https://github.com/neuecc/MessagePack-CSharp/commit/a9b412751b8839d95d06a6eb6d13ac1c8dae1191) fix typo and comment. - [`c37aa26`](https://github.com/neuecc/MessagePack-CSharp/commit/c37aa26bbe1f6ae7e0abe57adeb1bde7eae5f62d) avoid ReadUnaligned on long, ulong, double in Android device - [`49f4f13`](https://github.com/neuecc/MessagePack-CSharp/commit/49f4f1323f28adeed81c00bfeccb4c6cc06da2ec) Document security measures in README - [`c1e3f8b`](https://github.com/neuecc/MessagePack-CSharp/commit/c1e3f8bdcbfb2b73e7a787ce61fd3b25359b0993) Document security measures in README - Additional commits viewable in [compare view](https://github.com/neuecc/MessagePack-CSharp/compare/v2.0.335...v2.1.80) </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=MessagePack&package-manager=nuget&previous-version=2.0.335&new-version=2.1.80)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/IllusionMods/KKManager/network/alerts). </details>