[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cborg	6.1.5 → 6.2.1

---

Release Notes

rvagg/cborg (cborg)

v6.2.1

Compare Source

Trivial Changes

• ci: upgrade waxseal to v0.1.1 (#​226) (1293bf7)
• ci: upgrade waxseal to v0.2.0 (#​228) (6c906d8)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#​225) (211541a)

v6.2.0

Compare Source

Features

• decode: add strictUtf8 option to reject invalid UTF-8 in text strings (#​223) (8af2c22)

Bug Fixes

• cli: bound diagnostic indentation and always advance string snippets (#​217) (d942fc8)
• cli: escape control characters in diagnostic text and reject odd-length hex (#​218) (2263bfa)
• decode: keep leading U+FEFF in decoded text strings (#​222) (e1607cc)
• decode: reject break as map value and truncated tag entries (#​221) (c7a4b0a)
• encode: detect Uint8Array from other realms (#​216) (1c03371)
• encode: keep outer output intact when encode() is re-entered (#​219) (0271a56)
• extended: accept foreign-realm bytes and round-trip Invalid Dates (#​224) (a225bfd)
• extended: ignore inherited names in tag 27 error decoding (#​212) (acc00a1)
• extended: validate tag content shape in taglib decoders (#​214) (13f9139)
• json: reject non-finite numbers on encode (#​215) (d4a6a81)
• json: reject number literals over 1000 characters (#​210) (6eca4e5)
• json: reject overflowing number literals when allowInfinity is false (#​220) (1b0f77c)

Performance Improvements

• extended: convert large bignums in linear time (#​209) (db5f2e8)
• extended: skip second copy when decoding typed arrays (#​208) (b4a33ea)

v6.1.6

Compare Source

Trivial Changes

• replace shared workflows and harden release automation (#​206) (d311602)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cborg@​6.1.5 ⏵ 6.2.1	+1		+1	+2

View full report

[github-actions]

Remote cache staging

Commit: 4d9537884747b784d147e6bf9f440f3fbe56b6b9

The source checks did not pass. No verified Cloudflare staging deployment is ready. See the workflow run.

Manual checks and complete e2e plan.