pypi / brotli
brotli
What changed in brotli 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-20.
1 breaking3 security4 new APIs and options2 performance1 behavior and defaults2 tooling1 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initbrotli 114 changes
Breaking changes 1
Java drops finalize() for native entities.
Security 3
Python adds a method for determining whether a decompressor can accept more data, helping mitigate unexpectedly large output.
Python adds an optional output buffer limit to process, allowing mitigation of unexpectedly large output.
Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation
New APIs and options 4
The CLI adds brcat as an alias.
The Python extension allows multi-phase module initialization.
A pure Kotlin decoder is added.
cgo adds support for raw dictionaries.
Performance 2
Encoding is faster.
Static initialization is added to reduce binary size.
Behavior and default changes 1
The CLI can decode concatenated brotli streams.
Tooling 2
Bazel modules are added to the build.
cgo links via pkg-config.
Fixes and other changes 1
Java compress now passes the correct length to the native encoder.