astral-codec v0.0.16

What's Changed

• Don't allow empty L/K members at the framing level by @woodruffw in #191
• Require hashes for build dependencies by @zanieb in #189
• SECURITY: add a note about panicking by @woodruffw in #249
• Report missing source basenames during recursive builds by @woodruffw in #250
• Clarify file creation permissions during extraction by @woodruffw in #251
• Handle trailing dots and separators on extraction roots by @woodruffw in #252
• Honor the requested payload chunk size after cancellation by @woodruffw in #253
• Preserve existing files when exclusive creation fails without a collision by @woodruffw in #254
• Treat symlink targets blocked by ambient files as dangling by @woodruffw in #255
• Require opt-in for pax hard-link payloads by @woodruffw in #256
• Reject pax sizes with leading zeros by @woodruffw in #257
• Reject headers with the xstar signature by @woodruffw in #258
• Reject link targets on non-link tar members by @woodruffw in #259
• Clarify the starting position of FilePayload::from_file by @woodruffw in #270
• Flush pending file writes before returning a payload error by @woodruffw in #271
• Honor smaller payload reads after cancellation by @woodruffw in #273
• Use the framing state to detect the end of a member payload by @woodruffw in #274
• Assemble extension data directly in pending member metadata by @woodruffw in #275
• Resolve builder poisoning from the write outcome by @woodruffw in #276
• Fuse archive iteration from the decoded member result by @woodruffw in #277
• Clarify extraction cancellation in the security model by @woodruffw in #279
• Replace empty directories without listing them by @woodruffw in #280
• Report errors opening newly created directories by @woodruffw in #281
• Remove the deep extraction fixture from the bottom up by @woodruffw in #283
• Keep extracted symbolic links within the extraction root by @woodruffw in #284
• Clarify the scope of resource amplification in the tar security model by @woodruffw in #293
• Run demudhra first on macOS by @woodruffw in #294
• Release 0.0.16 by @github-actions[bot] in #295

New Contributors

• @zanieb made their first contribution in #189

Full Changelog: v0.0.15...v0.0.16

astral-codec v0.0.15

What's Changed

• Rename publishing workflow by @woodruffw in #117
• Update astral-tokio-tar dependency to 0.7 by @musicinmybrain in #119
• Prepare to rename the repo by @woodruffw in #121
• Move benchmarking to CodSpeed by @woodruffw in #137
• Add allow_header_uname_and_gname_without_terminator by @woodruffw in #186
• Normalize release workflows by @woodruffw in #187
• Release 0.0.15 by @github-actions[bot] in #188

New Contributors

• @musicinmybrain made their first contribution in #119
• @github-actions[bot] made their first contribution in #188

Full Changelog: v0.0.14...v0.0.15