PyPI · #298 most downloaded on PyPI

brotli

1.2.085M downloads/mogoogle/brotli ↗New releases in your daily digest, changelog included.

Python bindings for the Brotli compression library

Last release 11 months ago
05 Nov 2025
Release timing varies
gaps range from 4 weeks to 3.0 years
Nearly every release is documented
notes for 10 of 10 stable releases
Nothing withdrawn
no release was ever pulled
10 years old
10 releases · first in 2016

Release timeline

10 releases since 2016

20162018202020222024

Releases

1.2.05 Nov 20252 sources agree
python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process ; that allows mitigation of un
SECURITY

python: added Decompressor::can_accept_more_data method and optional
output_buffer_limit argument Decompressor::process;
that allows mitigation of unexpectedly large output;
reported by Charles Chan (https://github.com/charleswhchan)

Added

decoder / encoder: added static initialization to reduce binary size

python: allow limiting decoder output (see SECURITY section)

CLI: brcat alias; allow decoding concatenated brotli streams

kt: pure Kotlin decoder

cgo: support "raw" dictionaries

build: Bazel modules

Removed

java: dropped finalize() for native entities

Fixed

java: in compress pass correct length to native encoder

Improved

build: install man pages

build: updated / fixed / refined Bazel buildfiles

encoder: faster encoding

cgo: link via pkg-config

python: modernize extension / allow multi-phase module initialization

Changed

decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)
Open source →
Additional notes
What's Changed (compared to RC1)

pick changes from Debian patch by @copybara-service[bot] in #1349

pick changes from Alpine patch by @copybara-service[bot] in #1348

pick VCPKG patches by @copybara-service[bot] in #1350

fix copy-paste in Java decoder by @copybara-service[bot] in #1357

Additional notes

IMPORTANT: though this is a pre-release for v1.2.0, it is expected that some changes will be added before release; most notably concerning build files: patches applied by Alpine, Debian, Conan, VCPKG will be partially/fully integrated.

SECURITY

python: added Decompressor::can_accept_more_data method and optional
output_buffer_limit argument Decompressor::process;
that allows mitigation of unexpectedly large output;
reported by Charles Chan (https://github.com/charleswhchan)

Added

decoder / encoder: added static initialization to reduce binary size
python: allow limiting decoder output (see SECURITY section)
CLI: brcat alias; allow decoding concatenated brotli streams
kt: pure Kotlin decoder
cgo: support "raw" dictionaries
build: Bazel modules

Removed

java: dropped finalize() for native entities

Fixed

java: in compress pass correct length to native encoder

Improved

build: install man pages
build: updated / fixed / refined Bazel buildfiles
encoder: faster encoding
cgo: link via pkg-config
python: modernize extension / allow multi-phase module initialization

Changed

decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

Open source →

1.1.07 Sept 2023

Go module v1.1.0 release

Open source →

Additional notes2 sources agree

Added

decoder: BrotliDecoderAttachDictionary
decoder: BrotliDecoderOnFinish callback behind BROTLI_REPORTING
decoder: BrotliDecoderSetMetadataCallbacks
encoder: BrotliEncoderPrepareDictionary,
BrotliEncoderDestroyPreparedDictionary,
BrotliEncoderAttachPreparedDictionary
decoder: BrotliEncoderOnFinish callback behind BROTLI_REPORTING
common: BrotliSharedDictionaryCreateInstance,
BrotliSharedDictionaryDestroyInstance,
BrotliSharedDictionaryAttach
CLI: --dictionary option
java: encoder wrapper: Parameters.mode
java: Brotli{Input|Output}Stream.attachDictionary
java: wrapper: partial byte array input
typescript: decoder (transpiled from Java)

Removed

build: BROTLI_BUILD_PORTABLE option

Fixed

java: JNI decoder failed sometimes on power of 2 payloads

Improved

java / js: smaller decoder footprint
decoder: faster decoding
encoder: faster encoding
encoder: smaller stack frames

Open source →

1.0.927 Aug 2020Security

SECURITY: decoder: fix integer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

Other changes:

add support WASM (emscripten) build
brotli -v now reports raw / compressed size
build files / docs maintenance
reduce sources tarball size
decoder: minor speed / memory usage improvements
encoder: fix rare access to uninitialized data in ring-buffer
encoder: improve support for platforms that does not have log2
encoder: better support for MSVC (replacement for __builtin_clz and __builtin_ctzll
python: decompress now reports error if there is unused after the end of compressed input

Open source →

Additional notes

Re-release of 1.0.8.

Open source →

1.0.827 Aug 2020Security

SECURITY: decoder: fix integer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

Other changes:

add support WASM (emscripten) build
brotli -v now reports raw / compressed size
build files / docs maintenance
reduce sources tarball size
decoder: minor speed / memory usage improvements
encoder: fix rare access to uninitialized data in ring-buffer
encoder: improve support for platforms that does not have log2
encoder: better support for MSVC (replacement for __builtin_clz and __builtin_ctzll
python: decompress now reports error if there is unused after the end of compressed input

Open source →

Additional notes

SECURITY

CVE-2020-8927: potential overflow when input chunk is >2GiB

Added

encoder: BROTLI_PARAM_STREAM_OFFSET

Improved

CLI: better reporting
CLI: workaround for "lying feof"
java: faster decoding
java: support "large window"
encoder: use less memory
release: filter sources for the tarball

Open source →

1.0.723 Oct 2018

added ability to run cross-compiled ARM tests in qemu

cross compilation support:
- added ability to run cross-compiled ARM tests in qemu
- added arm-linux-gnueabihf-gcc entry to Travis build matrix
faster decoding on ARM:
- implemented prefetching HuffmanCode entry as uint32_t if target platform is ARM
- fixed NEON extension detection
- combed Huffman table building code for better readability
improved precision of window size calculation in CLI
minor fixes:
- fixed typos
- improved internal comments / parameter names
- fixed BROTLI_PREDICT_TRUE/_FALSE detection for SunPro compiler
- unburdened JNI (Bazel) builds from fetching the full JDK

Open source →

Additional notes

Improved

decoder: faster decoding on ARM CPU

Open source →

1.0.420 Apr 2018

fix unaligned access for aarch64-cross-armhf build

fix unaligned access for aarch64-cross-armhf build
fix aarch64 target detection
allow CLI to compress with enabled "large window" feature
add NPOSTFIX / NDIRECT encoder parameters
automatic NDIRECT/NPOSTFIX tuning (better compression)
fix "memory leak" in python tests
fix bug in durchschlag
fix source file lists (add params.h)
fix Bazel/MSVC compilator options
fix "fall though" warnings

Open source →

Additional notes

Added

encoder: BROTLI_PARAM_NPOSTFIX, BROTLI_PARAM_NDIRECT
CLI: --large_window option

Improved

encoder: better compression

Open source →

0.6.021 Apr 2017Deprecated

C API is expected to be final. The only difference in v1.0.0 will be the removal of methods (and constants) marked as deprecated.

better compression on 1MiB+ files
update "common" API to make dictionary fetching more flexible
fix decoder bug #502
faster compression on mid-low quality levels
update Python wrapper #479, etc.
fix encoder q10-11 slowdown after long copy #468
introduce Brotli*TakeOutput API

C API is expected to be final. The only difference in v1.0.0 will be the removal of methods (and constants) marked as deprecated.

Open source →

Additional notes

Added

CLI: `--no-copy-stat option
java: pure java decoder
build: fuzzers
research: brotlidump tool to explore brotli streams
go: wrapper

Removed

decoder: API with plain Brotli prefix

Deprecated

encoder: BrotliEncoderInputBlockSize, BrotliEncoderCopyInputToRingBuffer, BrotliEncoderWriteData

Improved

encoder: faster compression
encoder: denser compression
decoder: faster decompression
python: release GIL
python: use zero-copy API

Open source →

0.5.212 Oct 2016

Extracted common parts: constants, dictionary, etc.

Extracted common parts: constants, dictionary, etc.
Converted encoder to plain C
Supported build systems: Bazel, CMake, Premake

Open source →

Additional notes

Added

common: BROTLI_BOOL, BROTLI_TRUE, BROTLI_FALSE
decoder: API with BrotliDecoder prefix instead of plain Brotli
build: Bazel, CMake

Deprecated

decoder: API with plain Brotli prefix

Changed

boolean argument / result types are re-branded as BROTLI_BOOL

Improved

build: reduced amount of warnings in various build environments
encoder: faster compression
encoder: lower memory usage

Open source →

brotli

Release timeline

Releases

SECURITY

Added

Removed

Fixed

Improved

Changed

What's Changed (compared to RC1)

SECURITY

Added

Removed

Fixed

Improved

Changed

Added

Removed

Fixed

Improved

SECURITY

Added

Improved

Improved

Fixes

Fixed

Added

Improved

Changed

Added

Removed

Deprecated

Improved

Added

Deprecated

Changed

Improved