[dependabot]

Bumps the version-updates group with 1 update in the /backend directory: msgpack.

Updates msgpack from 1.2.2 to 1.2.3

Release notes

Sourced from msgpack's releases.

v1.2.3

What's Changed

• Fix memory leaks in the C extension when map key validation or container hooks fail. See GHSA-j586-36cw-2gc2.
• wheels: also build for pyodide using emscripten. by @​mr-c in msgpack/msgpack-python#732
• Support packing Python 3.15 frozentdict (PEP 814) by @​edgarrmondragon in msgpack/msgpack-python#738
• Reject negative array and map header sizes by @​jakezwang in msgpack/msgpack-python#742
• Bump the all-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in msgpack/msgpack-python#741

New Contributors

• @​mr-c made their first contribution in msgpack/msgpack-python#732
• @​jakezwang made their first contribution in msgpack/msgpack-python#742

Full Changelog: msgpack/msgpack-python@v1.2.2...v1.2.3

Changelog

Sourced from msgpack's changelog.

1.2.3

Release Date: 2026-09-29

• Fix memory leaks in the C extension when map key validation or container hooks fail. See GHSA-j586-36cw-2gc2.
• Fix use-after-free errors when cleaning up an incomplete or failed Unpacker.skip() after previously unpacking a nested object in the C extension.
• Raise ValueError in the C extension when switching between unpacking, skipping, header readers, or read_bytes() while an object is incomplete. Resume with the same method after feeding more data; unpack() and iteration remain interchangeable.
• Prevent reentrant unpacking, header reads, read_bytes(), and reinitialization of the same C Unpacker while unpacking is in progress.
• Reject negative sizes in Packer.pack_array_header() and Packer.pack_map_header(). #742
• Support packing Python 3.15 frozendict objects. #738
• Update Cython from 3.2.5 to 3.3.0. #738
• Build wheels for Pyodide using Emscripten. #732
• Update cibuildwheel to 4.2.1 and the QEMU setup action to 4.4.0. #741

Commits

• 742cb6d release v1.2.3
• 620b0eb Merge commit from fork
• 475c1b7 Bump the all-dependencies group across 1 directory with 2 updates (#741)
• 0014ca9 Reject negative array and map header sizes (#742)
• 7a63920 Support packing Python 3.15 frozentdict (PEP 814) (#738)
• 9f4909c wheels: also build for pyodide using emscripten. (#732)
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: OWASP/Nest
• Branch: main
• File: .coderabbit.yaml
• Commit: 393d57d
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 6550a7ff-1eba-437c-a94c-01a137622fa1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.60%. Comparing base (393d57d) to head (f79d6f7).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5735   +/-   ##
=======================================
  Coverage   98.60%   98.60%           
=======================================
  Files         551      551           
  Lines       18430    18430           
  Branches     2685     2685           
=======================================
  Hits        18172    18172           
  Misses        126      126           
  Partials      132      132           

Flag	Coverage Δ
backend	98.99% <ø> (ø)
frontend	97.36% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 393d57d...f79d6f7. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.