From f2c773c12e0e15962aa2818934a4198d910774b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Wirtel?= <stephane@wirtel.be>
Date: Thu, 24 Sep 2026 07:51:45 +0200
Subject: [PATCH] fix(deps): upgrade msgpack to 1.2.2 for security fix (dev
 only)

Resolves a high severity Dependabot alert: out-of-bounds read/crash on
Unpacker reuse after a caught error. Transitive dev dependency via
cachecontrol (pip-audit).

GHSA-6v7p-g79w-8964

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 requirements/dev.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements/dev.txt b/requirements/dev.txt
index a12b7c7..2bc96ea 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -126,7 +126,7 @@ modelsearch==1.1.1
     # via
     #   -c requirements/main.txt
     #   wagtail
-msgpack==1.1.2
+msgpack==1.2.2
     # via cachecontrol
 openpyxl==3.1.5
     # via