Skip to content

v1.18.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jul 06:05
v1.18.0
50abbc4

What's Changed

  • Configurable compressionLevel in packEntries(), and correct a compressionMethod naming error by @cordje in #82
  • Update Commons IO from 1.4 to 2.2 by @cordje in #83
  • Adding charset support by @toomasr in #85
  • Fixed same-zip bug by @Vaults in #90
  • Remove code duplication in malicious directory traversal check by @nemecec in #104
  • #109 Add removeEntries variant that copies to an OutputStream by @cilki in #110
  • Added createEmpty(File) method in ZipUtil by @domisum in #112
  • Fix TravisCI build by @nemecec in #133
  • Update README.md to resolve issue #91 by @penn5 in #97
  • Unit test for issue #135 by @nemecec in #137
  • Fix typos in ZipsTest by @nemecec in #136
  • Improve Travis CI build Performance by @chenzhang22 in #143
  • Bump junit from 4.12 to 4.13.1 by @dependabot[bot] in #139
  • [SECURITY] Fix Zip Slip Vulnerability by @JLLeitschuh in #149
  • Add proguard rules for downstream consumption by @madisp in #152
  • Updated dependencies to latest versions by @stasha in #156
  • Convert build from Maven to Gradle by @nemecec in #161
  • Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #162
  • Bump actions/checkout from 6 to 7 by @dependabot[bot] in #163
  • Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #164
  • Bump gradle/actions from 4 to 6 by @dependabot[bot] in #165
  • Bump the minor-and-patch group with 4 updates by @dependabot[bot] in #166
  • Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 1.0.0 by @dependabot[bot] in #167
  • Add regression test for sibling-prefix directory traversal by @nemecec in #169
  • Add public pack overloads for an existing ZipOutputStream by @nemecec in #170
  • Create temp directories with Files.createTempDirectory by @nemecec in #171
  • Add security policy by @nemecec in #172
  • Fix Stream closed error when adding a directory FileSource by @nemecec in #173
  • Skip broken symbolic links when packing a directory by @nemecec in #174
  • Improve wording of test assertion messages by @nemecec in #175
  • Convert changelog to Keep a Changelog format and rename to CHANGELOG.md by @nemecec in #176
  • Populate the Unreleased changelog section with changes since 1.17 by @nemecec in #177
  • Adopt vMAJOR.MINOR.PATCH release tags and automate the release process by @nemecec in #178
  • Add comment regarding ".." check optimization by @Marcono1234 in #179
  • Apply directory-traversal guard in Zips fluent API unpack by @nemecec in #180
  • Bound the ASI extra field symbolic-link length before allocating by @nemecec in #181
  • Document that unpacking does not limit decompression size by @nemecec in #183
  • Run the traversal guard before mkdir and create temp files atomically by @nemecec in #182
  • Throw ZipException for an unwrap entry name with an out-of-range prefix by @nemecec in #185
  • Reject a truncated ASI extra field before reading fixed offsets by @nemecec in #184
  • Close the transformer output stream and propagate its failure on unpack by @nemecec in #186
  • Accept null bytes as a directory entry in ByteSource by @nemecec in #187
  • Write a valid STORED entry for a null-bytes ByteSource by @nemecec in #188
  • Skip null-mapped entries in packEntries by @nemecec in #189
  • Reject a destination equal to the source in the destructive ZipUtil methods by @nemecec in #190

New Contributors

Full Changelog: https://github.com/zeroturnaround/zt-zip/commits/v1.18.0

Contributors

toomasr, madisp, and 11 other contributors
Assets 5
Loading