Update dependency MessagePack to 3.1.7

[radical-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
MessagePack	3.1.6 → 3.1.7

---

Release Notes

MessagePack-CSharp/MessagePack-CSharp (MessagePack)

v3.1.7

What's Changed

• Add scoped to MessagePackWriter.Write(ReadOnlySpan<T>) methods by @​AArnott in #​2271
• Fix security issues in master by @​AArnott in #​2274

Security release details

This release fixes 3 high severity and 9 moderate severity security vulnerabilities.

High severity advisory fixes

• 26d4e74 GHSA-382j-8mxh-c7x2 Reject invalid DateTime ext lengths for CWE-789
• b9cb605 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
• 719e690 GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

Moderage severity advisory fixes

• 2b5a500 GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
• f093bdc GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
• f077798 GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
• 25a3493 GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
• b414e6d GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
• 0555f07 GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
• 9b5783a GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
• f96fcf0 GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
• b3af7cf GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
• 66ad089 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
• 082ba7d GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

Fixes with no security advisory

• fb0fe9f Honor TypeFormatter options hooks for CWE-470
• c1c06a6 Fix WriteRawX methods to advance by written length
• 46c6a0f Fix CWE-190 map header length overflow

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.6...v3.1.7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.