Skip to content

chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2#1108

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x
Open

chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2#1108
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux Bot commented May 4, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/fxamacker/cbor/v2 v2.9.1v2.9.2 age confidence

Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed May 7, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 7, 2026
@red-hat-konflux red-hat-konflux Bot deleted the konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x branch May 7, 2026 00:26
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 May 7, 2026
@red-hat-konflux red-hat-konflux Bot reopened this May 7, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x branch 2 times, most recently from 6b61553 to 2573670 Compare May 7, 2026 06:58
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 Update module github.com/fxamacker/cbor/v2 to v2.9.2 May 13, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update module github.com/fxamacker/cbor/v2 to v2.9.2 chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 May 14, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed May 15, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 15, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 May 15, 2026
@red-hat-konflux red-hat-konflux Bot reopened this May 15, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x branch 2 times, most recently from 2573670 to 34f0b66 Compare May 15, 2026 21:48
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed May 16, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 16, 2026
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 - autoclosed chore(deps): update module github.com/fxamacker/cbor/v2 to v2.9.2 May 16, 2026
@red-hat-konflux red-hat-konflux Bot reopened this May 16, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/github.com-fxamacker-cbor-v2-2.x branch 2 times, most recently from 34f0b66 to 6f9eb5f Compare May 16, 2026 18:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant