Add release notes

Author: cowtowncoder

cbor/src/main/java/com/fasterxml/jackson/dataformat/cbor/CBORParser.java

@@ -2620,7 +2620,8 @@ private final String _finishLongText(int len) throws IOException
     }
 
     /**
-     * Consumes as many ascii chars as possible in a tight loop. Returns the amount of bytes remaining.
+     * Consumes as many ascii chars as possible in a tight loop.
+     * Returns the amount of bytes remaining.
      */
     private final int _finishLongTextAscii(int len) throws IOException
     {
@@ -2647,8 +2648,8 @@ private final int _finishLongTextAscii(int len) throws IOException
                 _inputPtr = inPtr - 1;
                 _textBuffer.setCurrentLength(outPtr);
                 // `len` was already decremented for all previous iterations; subtract only
-                // the bytes consumed in THIS iteration (= _inputPtr, since _tryToLoadToHaveAtLeast
-                // always resets _inputPtr to 0 before the inner loop).
+                // the bytes consumed in THIS iteration (= _inputPtr), since
+                // _tryToLoadToHaveAtLeast always resets _inputPtr to 0 before the inner loop.
                 return len - _inputPtr;
             }
             _inputPtr = inPtr;

…arse/CBORFinishLongTextAsciiBugTest.java …cbor/parse/CBORLongAsciiRead686Test.javacbor/src/test/java/com/fasterxml/jackson/dataformat/cbor/parse/CBORFinishLongTextAsciiBugTest.java renamed to cbor/src/test/java/com/fasterxml/jackson/dataformat/cbor/parse/CBORLongAsciiRead686Test.java cbor/src/test/java/com/fasterxml/jackson/dataformat/cbor/parse/CBORFinishLongTextAsciiBugTest.java renamed to cbor/src/test/java/com/fasterxml/jackson/dataformat/cbor/parse/CBORLongAsciiRead686Test.java

@@ -13,7 +13,7 @@
 import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
 
 // For [dataformats-binary#686]
-public class CBORFinishLongTextAsciiBugTest
+public class CBORLongAsciiRead686Test
 {
     // TextBuffer segment sizes grow 1.5× per flip, starting at 200 chars (MIN=500):
     //     S0=200, S1=500, S2=750, S3=1125, S4=1687, S5=2530, S6=3795, S7=5692, S8=8538

release-notes/CREDITS-2.x

@@ -429,5 +429,10 @@ Vincent Eigenberger (@beseder1)
   (2.20.1)
 
 Yohei Kishimoto (@morokosi)
- * Reported #599: (cbor) Unable to deserialize stringref-enabled CBOR with ignored properties
+ * Reported #599: (cbor) Unable to deserialize stringref-enabled CBOR with ignored propertie
   (2.21.0)
+
+Halil İbrahim Şener (@hisener)
+ * Fixed #686: `CBORParser._finishLongTextAscii` returns negative length when `TextBuffer`
+  segment > I/O buffer, leaving non-ASCII byte unconsumed
+  (2.21.3)

release-notes/VERSION-2.x

@@ -14,6 +14,12 @@ Active maintainers:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.21.3 (not yet released)
+
+#686: `CBORParser._finishLongTextAscii` returns negative length when `TextBuffer`
+  segment > I/O buffer, leaving non-ASCII byte unconsumed
+ (fixed by Halil İbrahim Ş)
+
 2.21.2 (20-Mar-2026)
 
 No changes since 2.21.1.