feat: 2.0.0 security modernization - #25687

Merged

godsflaw merged 16 commits into

msgpack:masterfrom

enochgroot:security/modernize-2.0.0

Sep 18, 2026

Commits on Sep 10, 2026

feat: 2.0.0 security modernization
enochgroot
committed
ee5e5be
fix: address review round 2 on pack/unpack and CLI
enochgroot
committed
1b9feae
fix: unpack __proto__, pack TryCatch, Stream emit order
enochgroot
committed
f39adc3
fix: pack top-level Buffer as bin, not toJSON map

enochgroot
and
claude
committed
2909772
fix: load native addon in worker_threads
enochgroot
committed
3cf5226
test: lock Stream 0 and Python bin-map unpack
enochgroot
committed
c4c27d4
feat: ship TypeScript types for pack, unpack, and Stream
enochgroot
committed
844192d
fix: thread_local sbuf pool and NAN_MODULE_WORKER_ENABLED
enochgroot
committed
f2236a0
Merge remote-tracking branch 'origin/test/issue-regressions' into security/modernize-2.0.0
enochgroot
committed
5578c8a
Merge remote-tracking branch 'origin/feat/types' into security/modernize-2.0.0
enochgroot
committed
037e636
test: raise JS and native coverage to 95%
enochgroot
committed
1b5946f
ci: fail coverage job under 95%
enochgroot
committed
b04e746
docs: document npm run coverage in README
enochgroot
committed
5d766ca
docs: address review — license history, CLI, current benchmarks
enochgroot
committed
3c7f039

Commits on Sep 12, 2026

fix: restore contributors and cite msgpack-node#25686
enochgroot
committed
6892b13
fix: Windows CI native rebuild and Stream test comment
enochgroot
committed
5adeb32