python3-cbor2: Upgrade 6.1.5 -> 6.2.0.post1

Upgrade to release 6.2.0.post1:

- Build Pyodide (pyemscripten) wheels for Python 3.14

From 6.2.0:

- Added the strict_hashable_types parameter to CBORDecoder, load()
  and loads() which, when enabled, restricts map keys and set
  elements to text strings and byte strings in order to prevent
  denial-of-service attacks via hash collisions
  (GHSA-p6xp-9h6j-r278)
- Documented decoding concatenated CBOR objects with EOF checks
  between objects
- Fixed CBOREncoder.encode_to_bytes() sharing the string reference
  namespace of the enclosing encode operation when called from a
  default hook
- Fixed the encoder writing the repr() of a bytes regular
  expression pattern (tag 35) instead of the pattern itself, so the
  regular expression decoded back as the text pattern b'...' and no
  longer matched the same input
- Fixed shared references (tag 29) allowing the decoder to
  construct object graphs nested deeper than max_depth, which could
  crash the interpreter with a segmentation fault when such an
  object was hashed (as a map key or set member)
  (GHSA-55vx-2phh-7grr)
- Fixed mission conversion of date values (tags 100 and 1004) to
  JSON as ISO formatted strings
- Fixed a PanicException on Python 3.10 when decoding a string-form
  datetime (tag 0) whose fractional seconds part contains a
  multi-byte Unicode numeric character, as the microsecond padding
  treated those as digits and then truncated the part on a byte
  index inside one of them
- Fixed the decoder accepting a set (tag 258) whose payload is not
  an array, folding a text string, byte string or map into a set of
  its characters, bytes or keys instead of rejecting it
- Fixed the decoder accepting a non-integer exponent or mantissa in
  a decimal fraction (tag 4) or a bigfloat (tag 5)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Leon Anavi authored and Khem Raj committed 2026-11-03 07:10:31 -08:00
1 parent 5426691227
commit ff180c6359
1 file changed
+1 -1
@@ -3,7 +3,7 @@ LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
DEPENDS += "python3-setuptools-scm-native"
SRC_URI[sha256sum] = "6eb06160c42315ac0c4ded461c7d84d92fa18c69d13d17fc1dfc1fae96580c95"
SRC_URI[sha256sum] = "2465ecef686b61e9feee840f506ef1cc15fa568825344c7b0af504b8230b698c"
inherit pypi python_setuptools3_rust cargo-update-recipe-crates ptest-python-pytest