fix(deps): update module github.com/fxamacker/cbor/v2 to v2.9.0 #213
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
v2.2.0
->v2.9.0
Release Notes
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.0
Compare Source
v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.
v2.9.0 passed fuzz tests and is production quality. However, the new
TextUnmarshaler
feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.What's Changed
Docs
CI
🔎 Details
Special Thanks
Many thanks to @benluddy for adding these new features! 🎉
New Contributors
Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0
v2.8.0
Compare Source
v2.8.0 adds
omitzero
struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.Many thanks to @liggitt for contributing the
omitzero
support!This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as
cbor.Unmarshal()
:RawTag.UnmarshalCBOR()
(thanks @thomas-fossati for reporting this!)ByteString.UnmarshalCBOR()
SimpleValue.UnmarshalCBOR()
This release also deprecates those 3 functions because they were initially created for internal use. Please use
Unmarshal()
orUnmarshalFirst()
instead.To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.
What's Changed
interface{}
withany
by @fxamacker in #627reflect.Ptr
withreflect.Pointer
by @fxamacker in #628reflect.PtrTo
withreflect.PointerTo
by @fxamacker in #629RawTag.UnmarshalCBOR()
, etc. to matchcbor.Unmarshal()
by @fxamacker in #645UnmarshalCBOR()
forByteString
,RawTag
,SimpleValue
by @fxamacker in #647Other Changes
🔍 Details
New Contributors
Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0
v2.7.1
Compare Source
v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as
cbor.Unmarshal()
:ByteString.UnmarshalCBOR()
RawTag.UnmarshalCBOR()
SimpleValue.UnmarshalCBOR()
The above 3 fixed functions are deprecated because they were initially created for internal use. Please use
Unmarshal()
orUnmarshalFirst()
instead.To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.
Before Upgrading to v2.7.1
v2.8.0 is being fuzz tested and will be released later today. It adds support for
omitzero
struct tag option.v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.
What's Changed
Special Thanks
Thanks @thomas-fossati for reporting the bug in
RawTag.UnmarshalCBOR()
when it is called directly by user apps providing bad input data!Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1
v2.7.0
Compare Source
v2.7.0 (June 23, 2024)
v2.7.0 adds features and improvements that help large projects (e.g. Kubernetes) use CBOR as an alternative to JSON and Protocol Buffers. Other improvements include speedups, improved memory use, bug fixes, decoding/encoding options, etc. Passed 5+ billion execs fuzzing.
Special thanks to @benluddy for contributing features, optimizations, improvements, bug fixes, and discussions! 👍
⭐ Features and Optimizations
cbor.MarshalToBuffer()
,UserBufferEncMode
interface, etc. by @fxamacker in #553🛠 Improvements
Most improvements focused on fixing or updating new features. See 🐞 Bug Fixes section for fixes to features already released.
*errors.errorString
withInadmissibleTagContentTypeError
by @fxamacker in #552🐞 Bug Fixes
Other changes
Details
Full Changelog
Full Changelog: fxamacker/cbor@v2.6.0...v2.7.0
v2.6.0
Compare Source
This release adds important new features, optimizations, bug fixes, and 3 new contributors. Fuzz tests passed 5+ billion execs for CBOR encoding and decoding functions. Minimum officially supported Go is bumped to Go 1.17.
⭐ Features and Optimizations
interface{}
as*big.Int
by @fxamacker in #456interface{}
by @fxamacker in #457any
by @ssuriyan7 in #475🚀 Notable Optimizations
Improve memory allocs 🗜️ and speed 🚀 of encoding maps by using Go 1.18-1.20 features by @dinhxuanvu in #468
📊 Benchmarks
benchstat
results provided by @dinhxuanvuNOTE: Go 1.17 is the minimum version supported by v2.6.0. Go 1.20+ will use optimizations introduced by PR 468.
🛠 Improvements
UnrecognizedTagToAny
option toTestDecOptions
by @fxamacker in #484🐞 Bug Fixes
*cbor.SimpleValue
by @fxamacker in #461📖 Docs and CI
New Contributors
Full Changelog: fxamacker/cbor@v2.5.0...v2.6.0
v2.5.0
Compare Source
This release adds important new features, optimizations, bug fixes, and 8 new contributors. Fuzz tests passed 5+ billion execs for CBOR encoding and decoding functions.
Notable changes are split into 3 categories.
⭐ Notable Changes to Review Before Upgrading
These new features and bug fixes were cherry-picked to highlight for review (for projects using older version).
SimpleValue
type to more fully support CBOR Simple Values, including values not assigned by IANA and...ByteString
type to support CBOR maps with byte string keys because Go doesn't allow []byte as map keys and...Decoder.Decode()
returnio.ErrUnexpectedEOF
instead ofio.EOF
on EOF if current CBOR data item is incomplete.Unmarshal()
andValid()
returncbor.ExtraneousDataError
(instead of ignoring extraneous data if any remain).⭐ More Notable Changes
DecOptions.UTF8
to decode invalid UTF-8. Default is unchanged (reject invalid UTF-8 and return error).MaxNestedLevels
setting to be configured up to 65535.EncOptions.NilContainersMode
to encode nil Go maps and slices as either CBOR nil (default) or empty container.Decoder.Skip()
to skip CBOR data item in CBOR Sequences (RFC 8742).UnmarshalFirst()
to decode CBOR data item and also return remaining bytes.Valid
and addWellformed
to replace it.UnmarshalFirst()
toDecMode
interface.Decoder.Buffered
to return remaining data in buffer.🚀 Notable Changes Affecting Speed or Memory Use
RawMessage
has sufficient capacity.Encode()
. It adds a bit of overhead toEncode()
butNewEncoder().Encode()
is faster and uses less memory.Benchmark comparison for PR 382 shows significant improvement in speed and memory use.
🚀 (click to expand) 🚀
Benchmarks provided by @x448 for
NewEncoder().Encode()
optimized in PR 382.What's Changed
All merged pull requests are listed here (including the already highlighted ones).
(click to expand)
Changes to Code
Most coding changes here were already mentioned.
Decoder.Buffered
to return buffered data by @fxamacker in #412Diagnose()
to returnio.EOF
error on empty data by @fxamacker in #410Changes to CI, Comments, and Docs
New Contributors (alphabetically)
Non-coding contibutions were made by opening notable issues that directly or indirectly improved this release.
Encode()
returning buffer to pool as default behavior.Full Changelog: fxamacker/cbor@v2.4.0...v2.5.0
v2.4.0
: (January 3, 2022)Compare Source
This release adds two user-requested features to the decoder. It passed 3+ billion execs fuzzing before being tagged.
What's Changed
Special Thanks
Configuration
📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.