Skip to content

build(deps): bump cbor2 from 6.2.0.post2 to 6.2.1 - #721

Merged
dajiaji merged 1 commit into
mainfrom
dependabot/pip/cbor2-6.2.1
Nov 10, 2026
Merged

dajiaji merged 1 commit into
mainfrom
dependabot/pip/cbor2-6.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps cbor2 from 6.2.0.post2 to 6.2.1.

Release notes

Sourced from cbor2's releases.

6.2.1

  • Fixed a segmentation fault on Python 3.12-3.13 when hashing, comparing or printing a self-referential CBORTag decoded from untrusted CBOR data, such as when used as a map key or set element; a catchable RuntimeError (wrapped in a CBORDecodeError during decoding) is now raised instead (GHSA-6rgc-8hxm-rj7p)
  • Corrected the semantic-decoder example for immutable sets (#360)
Commits
  • 5fa0492 Bumped up the version
  • ffdd512 Correct the immutable-set decoder example (#362)
  • 0e27ea2 Fixed segfault in hash/repr/compare of self-referential tags
  • 3f3dd32 Make the assertions inside pytest.raises blocks actually run (#363)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cbor2](https://github.com/agronholm/cbor2) from 6.2.0.post2 to 6.2.1.
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Commits](agronholm/cbor2@6.2.0.post2...6.2.1)

---
updated-dependencies:
- dependency-name: cbor2
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 10, 2026
@codecov

codecov Bot commented Nov 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.07%. Comparing base (1b0fd26) to head (9941eff).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #721   +/-   ##
=======================================
  Coverage   97.07%   97.07%           
=======================================
  Files          32       32           
  Lines        3490     3490           
=======================================
  Hits         3388     3388           
  Misses        102      102           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dajiaji
dajiaji merged commit 6d73f58 into main Nov 10, 2026
17 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/cbor2-6.2.1 branch November 10, 2026 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant