Skip to content

Update module github.com/fxamacker/cbor/v2 to v2.7.1#64

Merged
descope[bot] merged 1 commit intomainfrom
renovate/github.com-fxamacker-cbor-v2-2.x
Apr 20, 2025
Merged

Update module github.com/fxamacker/cbor/v2 to v2.7.1#64
descope[bot] merged 1 commit intomainfrom
renovate/github.com-fxamacker-cbor-v2-2.x

Conversation

@descope
Copy link
Contributor

@descope descope bot commented Apr 20, 2025

This PR contains the following updates:

Package Type Update Change Pending OpenSSF
github.com/fxamacker/cbor/v2 require patch v2.7.0 -> v2.7.1 v2.8.0 OpenSSF Scorecard

Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope bot added the renovate label Apr 20, 2025
@descope descope bot enabled auto-merge (squash) April 20, 2025 03:32
@descope descope bot merged commit 020fc59 into main Apr 20, 2025
2 checks passed
@descope descope bot deleted the renovate/github.com-fxamacker-cbor-v2-2.x branch April 20, 2025 03:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants