diff --git a/plexus-archiver.changes b/plexus-archiver.changes index 8b2d283..355ab42 100644 --- a/plexus-archiver.changes +++ b/plexus-archiver.changes @@ -1,3 +1,113 @@ +------------------------------------------------------------------- +Wed Sep 6 07:09:33 UTC 2023 - Fridrich Strba + +- Update to upstream version 4.8.0 +- Changes of 4.8.0 + * New features and improvements + + Add tzst alias for tar.zst archiver/unarchived (#274) + * Bug Fixes + + detect permissions for addFile (#293) + * Maintenance + + Remove public modifier from JUnit 5 tests (#294) + + Use https in scm/url (#291) + + Remove junit-jupiter-engine from project dependencies (#292) + + Remove parent and reports menu from site (#282) + + Cleanup after "veryLargeJar" test (#281) + + Override project.url (#279) +- Changes of 4.7.1 + * Bug Fixes + + don't apply umask on unknown perms (Win) (#273) +- Changes of 4.7.0 + * New features and improvements + + add umask support and use 022 in RB mode (#271) + + Use NIO Files for creating temporary files (#270) + + Deprecate the JAR Index feature (JDK-8302819) (#268) + + Add Archiver aliases for tar.* (#266) + * Maintenance + + Use JUnit TempDir to manage temporary files in tests (#269) + + Override uId and gId for Tar in test (#264) + + Bump maven-resources-plugin from 2.7 to 3.3.1 (#223) +- Changes of 4.6.3 + * New features and improvements + + Fix path traversal vulnerability (#261) + The vulnerability affects only directories whose name begins + with the same prefix as the destination directory. For example + malicious archive may extract file in /opt/directory instead + of /opt/dir. +- Changes of 4.6.2 + * Bug Fixes + + Fix regression in handling symbolic links. See + codehaus-plexus/plexus-io#89 +- Changes of 4.6.1 + * Bug Fixes + + Normalize file separators before warning about equal archive + entries (#249) +- Changes of 4.6.0 + * New features and improvements + + keep file/directory permissions in Reproducible Builds + mode (#241) +- Changes of 4.5.0 + * New features and improvements + + Add zstd (un)archiver support (#226) + * Bug Fixes + + Fix UnArchiver#isOverwrite not working as expected (#229) + Existing files were overridden only if UnArchiver#isOverwrite + was set and the existing files were older than the archive + entry. + Now it works as documented: older files are always overridden; + when UnArchiver#isOverwrite is true, existing files are always + overridden regardless if they are older or not. +- Changes of 4.4.0 + * New features and improvements + + Drop legacy plexus API and use only JSR330 components (#220) +- Changes of 4.3.0 + * New features and improvements + + Require Java 8 (#206) + + Refactor to use FileTime API (#199) + + Rename setTime method to setZipEntryTime (#209) + + Convert InputStreamSupplier to lambdas (#212) + * Bug Fix + + Reproducible Builds not working when using modular jar (#205) +- Changes of 4.2.7 + * New features and improvements + + Respect order of META-INF/ and META-INF/MANIFEST.MF entries in + a JAR file (#189) +- Changes of 4.2.6 + * New features and improvements + + FileInputStream, FileOutputStream, FileReader and FileWriter + are no longer used (#183) + + Code cleanup (#172) +- Changes of 4.2.5 + * New features and improvements + + Speed improvements (#157) + * Bug Fixes + + Fix use of a mismatching Unicode path extra field in zip + unarchiving (#167) + In some cases zip archiver may update the file path but not + the Unicode path extra field. This would result in Plexus + Archiver extracting the file using wrong (obsolete) path. + Now Plexus Archiver follows the specification and in this + case will ignore the extra filed and extract the file in the + correct location. +- Changes of 4.2.4 + * Bug Fixes + + Fix unjustified warning about casing for directory entries + (#155) +- Changes of 4.2.2 + * Bug Fixes + + DirectoryArchiver fails for symlinks if a parent directory + doesn't exist (#131) +- Modified patch: + * 0001-Remove-support-for-snappy.patch + + rediff to changed context +- Removed patch: + * logger-level.patch + + not needed any more with this version +- Added patch: + * plexus-archiver-4.8.0-no_zstd.patch + + Remove support for ZStd compression to reduce the dependency + graph + ------------------------------------------------------------------- Tue May 11 14:50:27 UTC 2021 - Fridrich Strba