build(deps): bump msgpack from 1.7.1 to 1.8.2

[dependabot]

Bumps msgpack from 1.7.1 to 1.8.2.

Changelog

Sourced from msgpack's changelog.

2026-06-09 1.8.2

• Fix Buffer#clear to properly reset memory chunks before adding them back to the pool. This could have caused data to leak across buffers when using the MessagePack::Buffer API directly. [CVE-2026-54522].

2026-05-28 1.8.1

• Workaround rare compilation issue when rb_hash_new_capa isn't properly detected.
• Never pre-allocate strings larger than the buffered size.

2025-02-06 1.8.0

• Numerous small optimizations.
• Added key_cache option to Unpacker.

2024-11-11 1.7.5

• Rerelease 1.7.4 with fixed java package.

2024-11-11 1.7.4

• Fixed a potental memory leak when recursive unpacker raise.

2024-10-03 1.7.3

• Limit initial containers pre-allocation to SHRT_MAX (32k) entries.

2023-07-18 1.7.2:

• Fix a potential GC bug when packing data using recursive extensions and buffers containing over 512KkiB of data (See #341).
• Fix a regression where feeding an empty string to an Unpacker would be considered like the end of the buffer.

Commits

• 09c914d Release 1.8.2
• 9cfd2ab Stop testing ruby 2.5 on macOS
• 50245ac Merge commit from fork
• 5627d71 _msgpack_buffer_shift_chunk: reset rmem pointers when fully empty
• cce2485 Release 1.8.1
• 677e6b8 Merge pull request #389 from msgpack/str-limit
• f0b6281 Update CI matrix
• abe9066 Update CI matrix
• 8ba8702 Don't pre-allocate strings larger than the buffered size
• 199e88f Merge pull request #386 from msgpack/fix-valgrind-ci
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[ccs-snyk]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.