Skip to content

Add file-based unpack and size validations for tarball files#166

Merged
ericmj merged 1 commit intomainfrom
ericmj/file-unpack-and-size-validations
Mar 8, 2026
Merged

Add file-based unpack and size validations for tarball files#166
ericmj merged 1 commit intomainfrom
ericmj/file-unpack-and-size-validations

Conversation

@ericmj
Copy link
Member

@ericmj ericmj commented Mar 8, 2026

Add support for unpacking tarballs from file paths via {file, Path} input to avoid loading the entire tarball into memory. When used with memory output, the inner tarball contents are not decompressed, reducing peak memory from ~160MB to <1MB per publish request.

Also add size validations for outer tarball entries (VERSION, CHECKSUM, metadata.config) during both creation and extraction to reject malformed tarballs early.

@ericmj ericmj force-pushed the ericmj/file-unpack-and-size-validations branch from a71111b to 058b5da Compare March 8, 2026 16:56
Add support for unpacking tarballs from file paths via {file, Path}
input to avoid loading the entire tarball into memory. When used with
memory output, the inner tarball contents are not decompressed,
reducing peak memory from ~160MB to <1MB per publish request.

Also add size validations for outer tarball entries (VERSION, CHECKSUM,
metadata.config) during both creation and extraction to reject
malformed tarballs early.
@ericmj ericmj force-pushed the ericmj/file-unpack-and-size-validations branch from 058b5da to 3c02752 Compare March 8, 2026 16:59
@ericmj ericmj merged commit 28cfc17 into main Mar 8, 2026
10 checks passed
@ericmj ericmj deleted the ericmj/file-unpack-and-size-validations branch March 8, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant