Update dependency stephenberry/glaze to v7.8.4 #101

Merged

Bluemedia merged 1 commit from renovate/stephenberry-glaze-7.x into main 2026-07-02 20:37:56 +00:00

Conversation 0 Commits 1 Files changed 1 +1 -1

Renovate commented 2026-06-17 23:25:11 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
stephenberry/glaze	patch	7.8.1 → 7.8.4

---

Release Notes

stephenberry/glaze (stephenberry/glaze)

v7.8.4

Compare Source

Fixes

• fix out-of-bounds read in jmespath negative-step slice by @​uwezkhan in #​2670
• Fix jmespath negative single index and negative-step slice bounds by @​stephenberry in #​2673
• reject conflicting content-length headers in try_parse_request by @​uwezkhan in #​2667
• bound get_view_json seek separator check against end of input by @​uwezkhan in #​2679
• drop header fields with CR or LF when serializing http messages by @​uwezkhan in #​2677
• bound cbor eigen matrix read to the matrix's storage by @​uwezkhan in #​2680
• guard char escape read against end of non-null-terminated input by @​uwezkhan in #​2681
• enforce rfc 6455 frame masking in process_frames by @​uwezkhan in #​2674
• bound async response body to content-length in http_client by @​uwezkhan in #​2684

Full Changelog: https://github.com/stephenberry/glaze/compare/v7.8.3...v7.8.4

v7.8.3

Compare Source

Improvements

• Add build-wide default optimization level (size) option by @​stephenberry in #​2633
• Replace std::bind with lambdas in eetf/ei.hpp by @​stephenberry in #​2646
• Provide diagnostics for asio winsock.h include issue on Windows by @​annihilatorq in #​2635
• CI: Add WinAPI header compatibility workflow by @​annihilatorq in #​2630
• ci(winhdr): classify Winsock2/asio headers by dependency, not directory by @​stephenberry in #​2651
• Unify CBOR std::byte and uint8_t byte-string handling by @​stephenberry in #​2652
• Per-field chrono format wrappers: glz::date_format and glz::epoch_count by @​stephenberry in #​2658

Fixes and Safety

• guard minified skip_ws against end of non-null-terminated input by @​uwezkhan in #​2634
• Bound non-null-terminated value scanners against end of input by @​stephenberry in #​2636
• Fix integer overflow in REPE length validation (out-of-bounds read) by @​arshsmith in #​2638
• Pre-screen key length in the shared hash dispatch by @​stephenberry in #​2643
• Fix off-by-one heap overflow when decoding EETF atoms and strings by @​arshsmith in #​2642
• reject wildcard origin with credentials in is_origin_allowed by @​uwezkhan in #​2644
• Reject non-representable floats when reading a JSONB float into an integer by @​stephenberry in #​2645
• Fix std::byte and fixed std::array<char,N> handling in CBOR/MsgPack/BSON by @​stephenberry in #​2650
• Encode std::byte ranges compactly and read fixed char arrays in BEVE by @​stephenberry in #​2649
• use end - it for length bounds checks in binary readers by @​uwezkhan in #​2653
• Bound MessagePack array/map reserve against remaining input by @​arshsmith in #​2648
• reject transfer-encoding requests in finish_request by @​uwezkhan in #​2654
• Reject obs-fold and whitespace-before-colon in request headers (RFC 7230 3.2.4) by @​stephenberry in #​2661
• Cap recursion depth in text-format readers and unify depth_guard by @​stephenberry in #​2662
• guard eetf_to_json reads against end of input by @​uwezkhan in #​2659
• Bound eetf number and container-header reads against end of input by @​stephenberry in #​2663
• Fix compile error in tests, fix UBSan errors in BEVE read path by @​nextsilicon-itay-bookstein in #​2668

New Contributors

• @​arshsmith made their first contribution in #​2638
• @​nextsilicon-itay-bookstein made their first contribution in #​2668

Full Changelog: https://github.com/stephenberry/glaze/compare/v7.8.2...v7.8.3

v7.8.2

Compare Source

Improvements

• Add WebSocket autobahn client testsuite by @​annihilatorq in #​2615
• Fail fast after receiving invalid UTF-8 payload in WebSocket connection by @​annihilatorq in #​2625

Fixes

• Fix HTTP date formatting data race by @​stephenberry in #​2619
• Fix exception reads from generic JSON by @​stephenberry in #​2622
• guard iterator against end in stencilcount by @​uwezkhan in #​2623
• guard fixed-size arrays in beve bool and complex readers by @​uwezkhan in #​2624
• guard eetf_to_json length readers against char sign extension by @​uwezkhan in #​2628
• guard eetf big integer sign byte read against end by @​uwezkhan in #​2631
• guard http_client chunked readers against chunk size overflow by @​uwezkhan in #​2632

Full Changelog: https://github.com/stephenberry/glaze/compare/v7.8.1...v7.8.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [stephenberry/glaze](https://github.com/stephenberry/glaze) | patch | `7.8.1` → `7.8.4` | --- ### Release Notes <details> <summary>stephenberry/glaze (stephenberry/glaze)</summary> ### [`v7.8.4`](https://github.com/stephenberry/glaze/releases/tag/v7.8.4) [Compare Source](https://github.com/stephenberry/glaze/compare/v7.8.3...v7.8.4) #### Fixes - fix out-of-bounds read in jmespath negative-step slice by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2670](https://github.com/stephenberry/glaze/pull/2670) - Fix jmespath negative single index and negative-step slice bounds by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2673](https://github.com/stephenberry/glaze/pull/2673) - reject conflicting content-length headers in try\_parse\_request by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2667](https://github.com/stephenberry/glaze/pull/2667) - bound get\_view\_json seek separator check against end of input by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2679](https://github.com/stephenberry/glaze/pull/2679) - drop header fields with CR or LF when serializing http messages by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2677](https://github.com/stephenberry/glaze/pull/2677) - bound cbor eigen matrix read to the matrix's storage by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2680](https://github.com/stephenberry/glaze/pull/2680) - guard char escape read against end of non-null-terminated input by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2681](https://github.com/stephenberry/glaze/pull/2681) - enforce rfc 6455 frame masking in process\_frames by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2674](https://github.com/stephenberry/glaze/pull/2674) - bound async response body to content-length in http\_client by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2684](https://github.com/stephenberry/glaze/pull/2684) **Full Changelog**: <https://github.com/stephenberry/glaze/compare/v7.8.3...v7.8.4> ### [`v7.8.3`](https://github.com/stephenberry/glaze/releases/tag/v7.8.3) [Compare Source](https://github.com/stephenberry/glaze/compare/v7.8.2...v7.8.3) #### Improvements - Add build-wide default optimization level (size) option by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2633](https://github.com/stephenberry/glaze/pull/2633) - Replace std::bind with lambdas in eetf/ei.hpp by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2646](https://github.com/stephenberry/glaze/pull/2646) - Provide diagnostics for asio winsock.h include issue on Windows by [@&#8203;annihilatorq](https://github.com/annihilatorq) in [#&#8203;2635](https://github.com/stephenberry/glaze/pull/2635) - CI: Add WinAPI header compatibility workflow by [@&#8203;annihilatorq](https://github.com/annihilatorq) in [#&#8203;2630](https://github.com/stephenberry/glaze/pull/2630) - ci(winhdr): classify Winsock2/asio headers by dependency, not directory by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2651](https://github.com/stephenberry/glaze/pull/2651) - Unify CBOR std::byte and uint8\_t byte-string handling by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2652](https://github.com/stephenberry/glaze/pull/2652) - Per-field chrono format wrappers: glz::date\_format and glz::epoch\_count by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2658](https://github.com/stephenberry/glaze/pull/2658) #### Fixes and Safety - guard minified skip\_ws against end of non-null-terminated input by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2634](https://github.com/stephenberry/glaze/pull/2634) - Bound non-null-terminated value scanners against end of input by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2636](https://github.com/stephenberry/glaze/pull/2636) - Fix integer overflow in REPE length validation (out-of-bounds read) by [@&#8203;arshsmith](https://github.com/arshsmith) in [#&#8203;2638](https://github.com/stephenberry/glaze/pull/2638) - Pre-screen key length in the shared hash dispatch by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2643](https://github.com/stephenberry/glaze/pull/2643) - Fix off-by-one heap overflow when decoding EETF atoms and strings by [@&#8203;arshsmith](https://github.com/arshsmith) in [#&#8203;2642](https://github.com/stephenberry/glaze/pull/2642) - reject wildcard origin with credentials in is\_origin\_allowed by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2644](https://github.com/stephenberry/glaze/pull/2644) - Reject non-representable floats when reading a JSONB float into an integer by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2645](https://github.com/stephenberry/glaze/pull/2645) - Fix std::byte and fixed std::array\<char,N> handling in CBOR/MsgPack/BSON by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2650](https://github.com/stephenberry/glaze/pull/2650) - Encode std::byte ranges compactly and read fixed char arrays in BEVE by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2649](https://github.com/stephenberry/glaze/pull/2649) - use end - it for length bounds checks in binary readers by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2653](https://github.com/stephenberry/glaze/pull/2653) - Bound MessagePack array/map reserve against remaining input by [@&#8203;arshsmith](https://github.com/arshsmith) in [#&#8203;2648](https://github.com/stephenberry/glaze/pull/2648) - reject transfer-encoding requests in finish\_request by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2654](https://github.com/stephenberry/glaze/pull/2654) - Reject obs-fold and whitespace-before-colon in request headers (RFC 7230 3.2.4) by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2661](https://github.com/stephenberry/glaze/pull/2661) - Cap recursion depth in text-format readers and unify depth\_guard by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2662](https://github.com/stephenberry/glaze/pull/2662) - guard eetf\_to\_json reads against end of input by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2659](https://github.com/stephenberry/glaze/pull/2659) - Bound eetf number and container-header reads against end of input by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2663](https://github.com/stephenberry/glaze/pull/2663) - Fix compile error in tests, fix UBSan errors in BEVE read path by [@&#8203;nextsilicon-itay-bookstein](https://github.com/nextsilicon-itay-bookstein) in [#&#8203;2668](https://github.com/stephenberry/glaze/pull/2668) #### New Contributors - [@&#8203;arshsmith](https://github.com/arshsmith) made their first contribution in [#&#8203;2638](https://github.com/stephenberry/glaze/pull/2638) - [@&#8203;nextsilicon-itay-bookstein](https://github.com/nextsilicon-itay-bookstein) made their first contribution in [#&#8203;2668](https://github.com/stephenberry/glaze/pull/2668) **Full Changelog**: <https://github.com/stephenberry/glaze/compare/v7.8.2...v7.8.3> ### [`v7.8.2`](https://github.com/stephenberry/glaze/releases/tag/v7.8.2) [Compare Source](https://github.com/stephenberry/glaze/compare/v7.8.1...v7.8.2) #### Improvements - Add WebSocket autobahn client testsuite by [@&#8203;annihilatorq](https://github.com/annihilatorq) in [#&#8203;2615](https://github.com/stephenberry/glaze/pull/2615) - Fail fast after receiving invalid UTF-8 payload in WebSocket connection by [@&#8203;annihilatorq](https://github.com/annihilatorq) in [#&#8203;2625](https://github.com/stephenberry/glaze/pull/2625) #### Fixes - Fix HTTP date formatting data race by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2619](https://github.com/stephenberry/glaze/pull/2619) - Fix exception reads from generic JSON by [@&#8203;stephenberry](https://github.com/stephenberry) in [#&#8203;2622](https://github.com/stephenberry/glaze/pull/2622) - guard iterator against end in stencilcount by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2623](https://github.com/stephenberry/glaze/pull/2623) - guard fixed-size arrays in beve bool and complex readers by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2624](https://github.com/stephenberry/glaze/pull/2624) - guard eetf\_to\_json length readers against char sign extension by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2628](https://github.com/stephenberry/glaze/pull/2628) - guard eetf big integer sign byte read against end by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2631](https://github.com/stephenberry/glaze/pull/2631) - guard http\_client chunked readers against chunk size overflow by [@&#8203;uwezkhan](https://github.com/uwezkhan) in [#&#8203;2632](https://github.com/stephenberry/glaze/pull/2632) **Full Changelog**: <https://github.com/stephenberry/glaze/compare/v7.8.1...v7.8.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Renovate added 1 commit 2026-06-17 23:25:11 +00:00

Update dependency stephenberry/glaze to v7.8.2 ea5a28feae

Renovate force-pushed renovate/stephenberry-glaze-7.x from ea5a28feae to be80d401c4 2026-06-23 17:24:28 +00:00 Compare

Renovate changed title from Update dependency stephenberry/glaze to v7.8.2 to Update dependency stephenberry/glaze to v7.8.3 2026-06-23 17:24:30 +00:00

Renovate force-pushed renovate/stephenberry-glaze-7.x from be80d401c4 to 1f9750893b 2026-07-02 17:26:24 +00:00 Compare

Renovate changed title from Update dependency stephenberry/glaze to v7.8.3 to Update dependency stephenberry/glaze to v7.8.4 2026-07-02 17:26:24 +00:00

Bluemedia merged commit 1f9750893b into main 2026-07-02 20:37:56 +00:00

Bluemedia deleted branch renovate/stephenberry-glaze-7.x 2026-07-02 20:37:56 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Bluemedia/desktop-environment-rpms!101

No description provided.