https://github.com/google/brotli/blob/v1.2.0/CHANGELOG.md Adds the following security hardening: python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output Which is needed to complete the security fixes in python-urllib3 2.6.0. Added dependency to host-python-pkgconfig to fix build error which would be introduced by this bump. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Peter: mark as security bump, describe the relation with urllib3] Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit fe5dcf402c0075b6ab86a92733ec75135f9dd760) Signed-off-by: Thomas Perale <thomas.perale@mind.be>