[dependabot]

Bumps cbor2 from 6.1.5 to 6.2.0.post2.

Release notes

Sourced from cbor2's releases.

6.2.0.post2

• Build Pyodide (pyemscripten) wheels for Python 3.14 (#351)

6.2.0

• Added the strict_hashable_types parameter to CBORDecoder, load and loads which, when enabled, restricts map keys and set elements to text strings and byte strings in order to prevent denial-of-service attacks via hash collisions (GHSA-p6xp-9h6j-r278)
• Documented decoding concatenated CBOR objects with EOF checks between objects (#30; PR by @​arindamsikder)
• Fixed CBOREncoder.encode_to_bytes() sharing the string reference namespace of the enclosing encode operation when called from a default hook (#356; PR by @​17krishna8)
• Fixed the encoder writing the repr() of a bytes regular expression pattern (tag 35) instead of the pattern itself, so the regular expression decoded back as the text pattern b'...' and no longer matched the same input (#355; PR by @​sahvx655-wq)
• Fixed shared references (tag 29) allowing the decoder to construct object graphs nested deeper than max_depth, which could crash the interpreter with a segmentation fault when such an object was hashed (as a map key or set member) (GHSA-55vx-2phh-7grr)
• Fixed mission conversion of date values (tags 100 and 1004) to JSON as ISO formatted strings (#358; PR by @​jadenfix)
• Fixed a PanicException on Python 3.10 when decoding a string-form datetime (tag 0) whose fractional seconds part contains a multi-byte Unicode numeric character, as the microsecond padding treated those as digits and then truncated the part on a byte index inside one of them (#354; PR by @​sahvx655-wq)
• Fixed the decoder accepting a set (tag 258) whose payload is not an array, folding a text string, byte string or map into a set of its characters, bytes or keys instead of rejecting it (#352; PR by @​sahvx655-wq)
• Fixed the decoder accepting a non-integer exponent or mantissa in a decimal fraction (tag 4) or a bigfloat (tag 5) (#350; PR by @​sahvx655-wq)

Commits

• 4ef9a50 Updated to the latest cibuildwheel action
• 5f63b56 Build pyemscripten wheels
• 2ad5850 Bumped up the version
• 1e709ca Require integer exponent and mantissa in tag 4 and tag 5 decoders (#350)
• da5033b Worked around Docker DNS lookup issue
• 2526221 Use host networking and fail on rustup errors
• 37ce899 reject non-array payloads in the set decoder (tag 258) (#352)
• a24e136 Isolate string references in encode_to_bytes from the outer namespace (#356)
• 2af101a Fixed PanicException on non-ASCII digits in a tag 0 datetime (#354)
• bcd032a Added missing diagnostic JSON conversion of date values (#358)
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.07%. Comparing base (623f320) to head (0d06390).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #712   +/-   ##
=======================================
  Coverage   97.07%   97.07%           
=======================================
  Files          32       32           
  Lines        3490     3490           
=======================================
  Hits         3388     3388           
  Misses        102      102           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.