chore(deps): bump cbor2 from 5.7.0 to 5.7.1

[dependabot]

Bumps cbor2 from 5.7.0 to 5.7.1.

Release notes

Sourced from cbor2's releases.

5.7.1

• Improved performance on decoding large definite bytestrings (#240 <agronholm/cbor2#240>_; PR by @​dwpaley)
• Fixed a read(-1) vulnerability caused by boundary handling error (#264 <agronholm/cbor2#264>_; PR by @​tylzh97)

Changelog

Sourced from cbor2's changelog.

Version history

.. currentmodule:: cbor2

This library adheres to Semantic Versioning <https://semver.org/>_.

5.7.1 (2025-10-24)

• Improved performance on decoding large definite bytestrings (#240 agronholm/cbor2#240_; PR by @​dwpaley)
• Fixed a read(-1) vulnerability caused by boundary handling error (#264 agronholm/cbor2#264_; PR by @​tylzh97)

5.7.0 (2025-08-14)

• Added support for Python 3.14 (no free-threading support yet, sorry)
• Dropped support for Python 3.8 (#247 agronholm/cbor2#247_; PR by @​hugovk)
• Added support for encoding indefinite containers (#256 agronholm/cbor2#256_; PR by @​CZDanol)
• Added complex number support (tag 43000) (#249 agronholm/cbor2#249_; PR by @​chillenb)

5.6.5 (2024-10-09)

• Published binary wheels for Python 3.13

5.6.4 (2024-06-06)

• Fixed compilation of C extension failing on GCC 14
• Fixed compiler warnings when building C extension

5.6.3 (2024-04-11)

• Fixed decoding of epoch-based dates being affected by the local time zone in the C extension

5.6.2 (2024-02-19)

• Fixed __hash__() of the C version of the CBORTag type crashing when there's a recursive reference cycle
• Fixed type annotation for the file object in cbor2.dump(), cbor2.load(), CBOREncoder and CBORDecoder to be IO[bytes] instead of BytesIO
• Worked around a CPython bug <https://github.com/python/cpython/issues/99612>_ that caused a SystemError to be raised, or even a buffer overflow to occur when decoding a long text string that contained only ASCII characters
• Changed the return type annotations of cbor2.load() and cbor2.load() to return Any instead of object so as not to force users to make type casts

5.6.1 (2024-02-01)

... (truncated)

Commits

• 502bc79 Bumped up the version
• 2349197 Fix: bug in decode_definite_long_string() that causes incorrect chunk lengt...
• e97d1af Updated the PR template
• a123501 Deleted the cifuzz workflow
• ce2b3a5 Added missing import in example snippet
• d529a68 Don't make a new copy with every chunk (fixes #240) (#262)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.