GitLab's fork of the cbor gem. Decoding no longer reconstructs object-constructing tags (Regexp, URI) unless the caller opts in via reconstruct_from_tags:, so an untrusted CBOR.decode cannot reach Regexp.new. Based on Carsten Bormann's cbor, itself based on Sadayuki Furuhashi's MessagePack library.