search

guerro323 / GameHost

MIT License
0 stars 0 forks source link

Bump SharpZipLib from 1.2.0 to 1.3.1 #58

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 3 years ago

Bumps SharpZipLib from 1.2.0 to 1.3.1.

Release notes

Sourced from SharpZipLib's releases.

v1.3.1

Minor release, mainly to address the incorrect file version of v1.3.0, but also contains some security fixes and performance improvements.

Highlights

  • Correct FileVersion and AssemblyVersion
  • Security fixes for ZipFile and Zip*Streams
  • Improved CRC32 performance
  • BZip2 compression support for Zip files

Features

Fixes

Other changes (not related to library code)

v1.3.0

Highlights

  • AES encryption fixes and support in FastZip
  • File name encoding support for Tar
  • Improved Unix timestamp support
  • Better handling of entry file names
  • Fix errors with entries using Stored compression method

Changes

  • TarArchive.ExtractContents() now needs another parameter set to true to allow the extraction to traverse outside of the target directory.
  • TarArchive constructors now includes an Encoding parameter. Omitting it will discard any non-ASCII bytes in file names.

Fixes

  • [#503] Consider AES overhead when testing encrypted folder entries by Richard Webb
  • [#452] Ensure crypto streams are disposed in ZipFile.GetOutputStream by Richard Webb

... (truncated)

Commits
  • 6170ef4 CI: run master build on release
  • ea941dd PR #541: Update csproj for new release
  • c5c187d PR #475: Fix updating zips with descriptor entries
  • 933c41c PR #475: Fix updating zips with descriptor entries
  • ddc545b PR #516: Improve CRC32 performance
  • 7520a3f PR #538: Use RNGCryptoServiceProvider for crypto headers
  • 134b8f4 PR #539: Use securely generated random temporary file names
  • d0efee0 PR #530: Fix Codacy Workflows
  • ad02688 #PR 529: Add release workflow
  • 9e02750 PR #509: Make PutNextEntry throw if the entry is AES and no password has been...
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 3 years ago

Superseded by #90.