Merge branch '3.0' into 3.x

Author: cowtowncoder

release-notes/CREDITS-2.x

@@ -386,6 +386,9 @@ Manuel Sugawara (@sugmanue)
   (2.19.0)
  * Contributed fix for #616: CBOR text gets truncated on decoding
   (2.19.3)
+ * Conribued fix for #640: (cbor) CBOR throws ArrayIndexOutOfBoundsException
+   with long ASCII text
+  (2.20.2)
 
 Josh Curry (@seadbrane)
  * Reported, contributed fix for #571: Unable to deserialize a pojo with IonStruct

release-notes/VERSION

@@ -29,6 +29,11 @@ implementations)
 #629: (ion) Unnecessary `IOException` in `IonObjectMapper` method signatures
  (fix contributed by Michael L)
 
+3.0.4 (not yet released)
+
+#640: (cbor) CBOR throws ArrayIndexOutOfBoundsException with long ASCII text
+ (reported, fix contributed by Manuel S)
+
 3.0.3 (28-Nov-2025)
 
 - (avro) Upgrade `avro` lib dep to 1.11.5 (from 1.11.4)

release-notes/VERSION-2.x

@@ -24,6 +24,11 @@ Active maintainers:
  (reported by Josh C)
 - (avro) Upgrade `avro` lib dep to 1.11.5 (from 1.11.4)
 
+2.20.2 (not yet released)
+
+#640: (cbor) CBOR throws ArrayIndexOutOfBoundsException with long ASCII text
+ (reported, fix contributed by Manuel S)
+
 2.20.1 (30-Oct-2025)
 
 #599: (cbor) Unable to deserialize stringref-enabled CBOR with ignored properties