Skip to content

Conversation

@pyup-bot
Copy link
Collaborator

This PR updates cbor2 from 5.6.5 to 5.8.0.

Changelog

5.8.0

- Added readahead buffering to C decoder for improved performance. The decoder now uses a 4 KB buffer by default to reduce the number of read calls. Benchmarks show 20-140% performance improvements for decoding operations. ([\268+](https://github.com/agronholm/cbor2/pull/268); PR by andreer)
- Fixed Python decoder not preserving share index when decoding array items containing nested shareable tags, causing shared references to resolve to wrong objects ([\267+](https://github.com/agronholm/cbor2/pull/267); PR by andreer)
- Reset shared reference state at the start of each top-level encode/decode operation ([\266+](https://github.com/agronholm/cbor2/pull/266); PR by andreer)

5.7.1

- Improved performance on decoding large definite bytestrings (240 \<<https://github.com/agronholm/cbor2/issues/240>\>\_; PR by dwpaley)
- Fixed a read(-1) vulnerability caused by boundary handling error (264 \<<https://github.com/agronholm/cbor2/issues/264>\>\_; PR by tylzh97)

5.7.0

- Added support for Python 3.14 (no free-threading support yet, sorry)
- Dropped support for Python 3.8 (247 \<<https://github.com/agronholm/cbor2/pull/247>\>\_; PR by hugovk)
- Added support for encoding indefinite containers (256 \<<https://github.com/agronholm/cbor2/pull/256>\>\_; PR by CZDanol)
- Added complex number support (tag 43000) (249 \<<https://github.com/agronholm/cbor2/pull/249>\>\_; PR by chillenb)
Links

@pyup-bot pyup-bot mentioned this pull request Dec 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants