build(deps): bump cbor2 from 5.6.2 to 5.6.3

[dependabot]

Bumps cbor2 from 5.6.2 to 5.6.3.

Release notes

Sourced from cbor2's releases.

5.6.3

• Fixed decoding of epoch-based dates being affected by the local time zone in the C extension

Changelog

Sourced from cbor2's changelog.

Version history

.. currentmodule:: cbor2

This library adheres to Semantic Versioning <http://semver.org/>_.

5.6.3 (2024-04-11)

• Fixed decoding of epoch-based dates being affected by the local time zone in the C extension

5.6.2 (2024-02-19)

• Fixed __hash__() of the C version of the CBORTag type crashing when there's a recursive reference cycle
• Fixed type annotation for the file object in cbor2.dump(), cbor2.load(), CBOREncoder and CBORDecoder to be IO[bytes] instead of BytesIO
• Worked around a CPython bug <https://github.com/python/cpython/issues/99612>_ that caused a SystemError to be raised, or even a buffer overflow to occur when decoding a long text string that contained only ASCII characters
• Changed the return type annotations of cbor2.load() and cbor2.load() to return Any instead of object so as not to force users to make type casts

5.6.1 (2024-02-01)

• Fixed use-after-free in the decoder's C version when prematurely encountering the end of stream
• Fixed the C version of the decoder improperly raising CBORDecodeEOF when decoding a text string longer than 65536 bytes

5.6.0 (2024-01-17)

• Added the cbor2 command line tool (for pipx run cbor2)
• Added support for native date encoding (bschoenmaeckers)
• Made the C extension mandatory when the environment variable CBOR2_BUILD_C_EXTENSION is set to 1.
• Fixed SystemError in the C extension when decoding a Fractional with a bad number of arguments or a non-tuple value
• Fixed SystemError in the C extension when the decoder object hook raises an exception
• Fixed a segmentation fault when decoding invalid unicode data
• Fixed infinite recursion when trying to hash a CBOR tag whose value points to the tag itself
• Fixed MemoryError when maliciously constructed bytestrings or string (declared to be absurdly large) are being decoded
• Fixed UnicodeDecodeError from failed parsing of a UTF-8 text string not being wrapped as CBORDecodeValueError
• Fixed TypeError or ZeroDivisionError from a failed decoding of Fraction not being wrapped as CBORDecodeValueError
• Fixed TypeError or ValueError from a failed decoding of UUID not being wrapped as CBORDecodeValueError

... (truncated)

Commits

• ed73868 Fixed conflict when uploading binary wheel artifacts
• 34d39ef Updated the release date of v5.6.3
• c440117 Fixed compiler error in CBORDecoder_decode_epoch_date()
• 8a21ab0 Force the C extension to be built unless on pypy
• 7666c46 Committed missing _CBOR2_date_ordinal_offset symbol
• b95e395 [pre-commit.ci] pre-commit autoupdate (#229)
• 00898eb [pre-commit.ci] pre-commit autoupdate (#223)
• 9d96226 Bumped up the version
• 6fb8469 Fixed epoch date decoding being affected by the local time zone (#218)
• 33f732c Updated the upload/download artifact actions
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)