build(deps): bump msgpack from 1.0.8 to 1.1.2

Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.0.8 to 1.1.2. - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst) - [Commits](https://github.com/msgpack/msgpack-python/compare/v1.0.8...v1.1.2) --- updated-dependencies: - dependency-name: msgpack dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #2821 from mandiant/dependabot/pip/mypy-protobuf-5.0.0
2026-01-21 00:43:20 -08:00 · 2026-01-20 09:53:42 +00:00 · 2026-01-20 10:31:57 +01:00 · 2026-01-20 10:31:35 +01:00 · 2026-01-20 10:18:35 +01:00 · 2026-01-19 20:57:00 +01:00
5 changed files with 12 additions and 5 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,12 @@ updates:
    directory: "/"
    schedule:
      interval: "weekly"
+    groups:
+      pyasn1-updates:
+        patterns:
+          - "pyasn1"
+          - "pyasn1-modules"
+          - "vivisect"
    ignore:
      - dependency-name: "*"
        update-types: ["version-update:semver-patch"]
--- a/capa/features/extractors/cape/extractor.py
+++ b/capa/features/extractors/cape/extractor.py
@@ -35,7 +35,7 @@ from capa.features.extractors.base_extractor import (

 logger = logging.getLogger(__name__)

-TESTED_VERSIONS = {"2.2-CAPE", "2.4-CAPE"}
+TESTED_VERSIONS = {"2.2-CAPE", "2.4-CAPE", "2.5-CAPE"}


 class CapeExtractor(DynamicFeatureExtractor):
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -148,7 +148,7 @@ dev = [
    "black==25.12.0",
    "isort==7.0.0",
    "mypy==1.19.1",
-    "mypy-protobuf==4.0.0",
+    "mypy-protobuf==5.0.0",
    "PyGithub==2.8.1",
    "bump-my-version==1.2.4",
    # type stubs for mypy
@@ -165,7 +165,7 @@ build = [
    # we want all developer environments to be consistent.
    # These dependencies are not used in production environments
    # and should not conflict with other libraries/tooling.
-    "pyinstaller==6.17.0",
+    "pyinstaller==6.18.0",
    "setuptools==80.9.0",
    "build==1.4.0"
 ]
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,7 +18,7 @@ ida-settings==3.2.2
 intervaltree==3.2.1
 markdown-it-py==4.0.0
 mdurl==0.1.2
-msgpack==1.0.8
+msgpack==1.1.2
 networkx==3.4.2
 pefile==2024.8.26
 pip==25.3
@@ -44,6 +44,6 @@ setuptools==80.9.0
 six==1.17.0
 sortedcontainers==2.4.0
 viv-utils==0.8.0
-vivisect==1.2.1
+vivisect==1.3.0
 msgspec==0.20.0
 bump-my-version==1.2.4
--- a/tests/fixtures.py
+++ b/tests/fixtures.py
@@ -20,6 +20,7 @@ from functools import lru_cache

 import pytest

+import capa.loader
 import capa.features.file
 import capa.features.insn
 import capa.features.common
Author	SHA1	Message	Date
dependabot[bot]	90423e27a8	build(deps): bump msgpack from 1.0.8 to 1.1.2 Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.0.8 to 1.1.2. - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst) - [Commits](https://github.com/msgpack/msgpack-python/compare/v1.0.8...v1.1.2) --- updated-dependencies: - dependency-name: msgpack dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-20 09:53:42 +00:00
Moritz	2a44482076	Merge pull request #2821 from mandiant/dependabot/pip/mypy-protobuf-5.0.0 build(deps-dev): bump mypy-protobuf from 4.0.0 to 5.0.0	2026-01-20 10:31:57 +01:00
Moritz	a359745765	build(deps-dev): bump pyinstaller from 6.17.0 to 6.18.0 (#2822 ) Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller) from 6.17.0 to 6.18.0. - [Release notes](https://github.com/pyinstaller/pyinstaller/releases) - [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst) - [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.17.0...v6.18.0) --- updated-dependencies: - dependency-name: pyinstaller dependency-version: 6.18.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-01-20 10:31:35 +01:00
Maijin	203cc0aa0c	Merge pull request #2824 from Maijin/patch-1 Group pyasn modules and vivisect in dependabot.yml	2026-01-20 10:18:35 +01:00
Moritz	3642ca94a6	Merge pull request #2820 from mandiant/dependabot/pip/vivisect-1.3.0 build(deps): bump vivisect from 1.2.1 to 1.3.0	2026-01-19 20:57:00 +01:00
dependabot[bot]	8e233ca69d	build(deps-dev): bump pyinstaller from 6.17.0 to 6.18.0 Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller) from 6.17.0 to 6.18.0. - [Release notes](https://github.com/pyinstaller/pyinstaller/releases) - [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst) - [Commits](https://github.com/pyinstaller/pyinstaller/compare/v6.17.0...v6.18.0) --- updated-dependencies: - dependency-name: pyinstaller dependency-version: 6.18.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-19 16:45:40 +00:00
dependabot[bot]	d5c23486e3	build(deps-dev): bump mypy-protobuf from 4.0.0 to 5.0.0 Bumps [mypy-protobuf](https://github.com/nipunn1313/mypy-protobuf) from 4.0.0 to 5.0.0. - [Changelog](https://github.com/nipunn1313/mypy-protobuf/blob/main/CHANGELOG.md) - [Commits](https://github.com/nipunn1313/mypy-protobuf/commits) --- updated-dependencies: - dependency-name: mypy-protobuf dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-19 16:45:32 +00:00
dependabot[bot]	7600dd077b	build(deps): bump vivisect from 1.2.1 to 1.3.0 Bumps [vivisect](https://github.com/vivisect/vivisect) from 1.2.1 to 1.3.0. - [Changelog](https://github.com/vivisect/vivisect/blob/master/CHANGELOG.rst) - [Commits](https://github.com/vivisect/vivisect/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: vivisect dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-19 16:45:26 +00:00
Moritz	3de84eff1b	Merge pull request #2813 from doomedraven/patch-1 Add '2.5-CAPE' to tested versions	2026-01-16 20:28:39 +01:00
doomedraven	7e16ed741c	Add '2.5-CAPE' to tested versions hello, we just released CAPE v2.5, there are no behavior/structural changes. Is focused on webgui improvements, and some other improvements that doesnt impact CAPA.	2026-01-16 14:58:48 +00:00
Mike Hunhoff	5a5545aa14	ghidra: fix unit tests (#2812 ) * ghidra: fix unit tests * fix formatting	2026-01-15 12:34:43 -07:00