{"id":22520,"name":"SharpZipLib","ecosystem":"nuget","repository_url":null,"issues_count":30,"created_at":"2025-06-07T02:55:21.313Z","updated_at":"2025-06-07T02:55:21.313Z","purl":"pkg:nuget/SharpZipLib","unique_repositories_count":29,"unique_repositories_count_past_30_days":0,"recent_issues":[{"uuid":"3656433914","node_id":"PR_kwDOQAW2P861EkxQ","number":5,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-24T04:52:28.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-23T20:36:59.000Z","updated_at":"2025-11-24T04:52:30.000Z","time_to_close":29729,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/dfsgotl-lenya/NetSdrClient/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfsgotl-lenya%2FNetSdrClient/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"3655027670","node_id":"PR_kwDOQButMc61AEfY","number":11,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2025-11-22T20:20:43.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-22T20:03:03.000Z","updated_at":"2025-11-22T20:23:21.000Z","time_to_close":1060,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/YuIiaa/NetSdrClient/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/YuIiaa%2FNetSdrClient/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"},{"uuid":"3651128301","node_id":"PR_kwDOP9Ar5860zBzq","number":21,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":8,"pull_request":true,"closed_at":"2025-11-21T10:48:23.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-21T10:36:26.000Z","updated_at":"2025-11-21T13:07:16.898Z","time_to_close":717,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/akulkaaaaaaaaaaaaa/NetSdrClient1/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/akulkaaaaaaaaaaaaa/NetSdrClient1/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akulkaaaaaaaaaaaaa%2FNetSdrClient1/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"},{"uuid":"3626017599","node_id":"PR_kwDOP5Mx_M6zelr-","number":8,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":"2025-11-14T15:27:18.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-14T15:09:36.000Z","updated_at":"2025-11-14T17:01:48.036Z","time_to_close":1062,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/896Dmytro/lab/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/896Dmytro/lab/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/896Dmytro%2Flab/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"3615917293","node_id":"PR_kwDOQUBiX86y8skB","number":5,"state":"closed","title":"Bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-12T10:31:35.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-12T10:23:37.000Z","updated_at":"2025-11-12T10:31:44.000Z","time_to_close":478,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jurijambros/dependabot-test/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jurijambros%2Fdependabot-test/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"3537827790","node_id":"PR_kwDOQAduZ86u6Uca","number":30,"state":"open","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2025-10-21T19:05:00.000Z","updated_at":"2025-10-21T19:46:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Sane4ka126/1NetSdrClient1/pull/30","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sane4ka126%2F1NetSdrClient1/issues/30","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/30/packages"},{"uuid":"2915604945","node_id":"PR_kwDOQCq-Xc6tyJnR","number":1,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /SharpFileSystem.Tests","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"OWNER","state_reason":null,"created_at":"2025-10-15T04:01:32.096Z","updated_at":"2025-10-17T16:21:19.166Z","time_to_close":null,"merged_at":"2025-10-15T02:34:27.000Z","merged_by":"Dev407101","closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/SharpFileSystem.Tests","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\r\n- [Release notes](https://github.com/icsharpcode/SharpZipLib/releases)\r\n- [Changelog](https://github.com/icsharpcode/SharpZipLib/blob/master/docs/Changes.txt)\r\n- [Commits](https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: SharpZipLib dependency-type: direct:production ...","html_url":"https://github.com/Dev407101/sharpfilesystem/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dev407101%2Fsharpfilesystem/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"2859395206","node_id":"PR_kwDOKqWSJM6qbuiG","number":190,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-25T09:13:56.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-25T06:56:21.000Z","updated_at":"2025-09-25T09:13:56.000Z","time_to_close":8255,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Pinned SharpZipLib at 1.3.3.\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SkylineCommunications/Skyline.DataMiner.CICD.Validators/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SkylineCommunications/Skyline.DataMiner.CICD.Validators/pull/190","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SkylineCommunications%2FSkyline.DataMiner.CICD.Validators/issues/190","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/190/packages"},{"uuid":"2777194746","node_id":"PR_kwDOPktHQM6liKD6","number":8,"state":"open","title":"Bump SharpZipLib from 1.3.1 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-08-27T05:28:07.000Z","updated_at":"2025-08-27T05:28:08.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.1","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.1 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\n## 1.3.2\n\nAnother minor release, containing security fixes and smaller bugfixes.  \nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\n\n## Features\n* __[[#​611](https://github.com/icsharpcode/SharpZipLib/pull/611)] Bzip input stream simple vectorization__ by [_Konrad Kruczyński_](https://github.com/konrad-kruczynski)\n* __[[#​351](https://github.com/icsharpcode/SharpZipLib/pull/351)] Add support for Filename field in GZip__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller fixes and optimizations\n* __[[#​579](https://github.com/icsharpcode/SharpZipLib/pull/579)] Implement very simple ReadAsync in ZipAESStream__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​587](https://github.com/icsharpcode/SharpZipLib/pull/587)] Remove supported method checks from ZipEntry.CompressionMethod setter__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​593](https://github.com/icsharpcode/SharpZipLib/pull/593)] Simplify DropPathRoot and fix out of bounds issue__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​575](https://github.com/icsharpcode/SharpZipLib/pull/575)] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​583](https://github.com/icsharpcode/SharpZipLib/pull/583)] Restore entry times on FastZip extract__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​517](https://github.com/icsharpcode/SharpZipLib/pull/517)] Throw exception on Store+Descriptor entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​578](https://github.com/icsharpcode/SharpZipLib/pull/578)] Fix typos in the StreamDecodingException doc comments__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​577](https://github.com/icsharpcode/SharpZipLib/pull/577)] Throw ZipException in ZipAESStream instead of generic Exception__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​510](https://github.com/icsharpcode/SharpZipLib/pull/510)] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​546](https://github.com/icsharpcode/SharpZipLib/pull/546)] Make pure private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​554](https://github.com/icsharpcode/SharpZipLib/pull/554)] Skip CRC calculation for AES zip entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​605](https://github.com/icsharpcode/SharpZipLib/pull/605)] Suppress CA1707 warnings in the Constants classes__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​549](https://github.com/icsharpcode/SharpZipLib/pull/549)] Add .NET Standard 2.1 target framework__ by [_Cédric Luthi_](https://github.com/0xced)\n\n## Other changes (not related to library code)\n* __[[#​586](https://github.com/icsharpcode/SharpZipLib/pull/586)] Convert VB sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​533](https://github.com/icsharpcode/SharpZipLib/pull/533)] Convert the C# sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​457](https://github.com/icsharpcode/SharpZipLib/pull/457)] add basic async unit tests for the inflator/deflator streams__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​588](https://github.com/icsharpcode/SharpZipLib/pull/588)] Add a simple async read test for ZipFile__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​621](https://github.com/icsharpcode/SharpZipLib/pull/621)] unify PR/push CI build actions__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​616](https://github.com/icsharpcode/SharpZipLib/pull/616)] Change the build status badge to reference github actions__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​603](https://github.com/icsharpcode/SharpZipLib/pull/603)] pass CreateZip tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​602](https://github.com/icsharpcode/SharpZipLib/pull/602)] Update test/coverage packages and push to codecov__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​601](https://github.com/icsharpcode/SharpZipLib/pull/601)] pass tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​599](https://github.com/icsharpcode/SharpZipLib/pull/599)] Use net46 as CI target framework for windows tests__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​594](https://github.com/icsharpcode/SharpZipLib/pull/594)] Remove the local nuget.config files from the test projects__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​553](https://github.com/icsharpcode/SharpZipLib/pull/553)] Remove broken codacy integration__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​542](https://github.com/icsharpcode/SharpZipLib/pull/542)] Build and publish documentation on release__ by [_nils måsén_](https://github.com/piksel)\n\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.1...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.1\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dotnet-felickz/vulnerable-dependencies/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dotnet-felickz/vulnerable-dependencies/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dotnet-felickz%2Fvulnerable-dependencies/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"2727848776","node_id":"PR_kwDOO7Mmh86il6tI","number":4,"state":"open","title":"Bump SharpZipLib from 1.2.0 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-08-07T13:40:15.000Z","updated_at":"2025-08-07T13:40:16.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\n## 1.3.2\n\nAnother minor release, containing security fixes and smaller bugfixes.  \nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\n\n## Features\n* __[[#​611](https://github.com/icsharpcode/SharpZipLib/pull/611)] Bzip input stream simple vectorization__ by [_Konrad Kruczyński_](https://github.com/konrad-kruczynski)\n* __[[#​351](https://github.com/icsharpcode/SharpZipLib/pull/351)] Add support for Filename field in GZip__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller fixes and optimizations\n* __[[#​579](https://github.com/icsharpcode/SharpZipLib/pull/579)] Implement very simple ReadAsync in ZipAESStream__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​587](https://github.com/icsharpcode/SharpZipLib/pull/587)] Remove supported method checks from ZipEntry.CompressionMethod setter__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​593](https://github.com/icsharpcode/SharpZipLib/pull/593)] Simplify DropPathRoot and fix out of bounds issue__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​575](https://github.com/icsharpcode/SharpZipLib/pull/575)] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​583](https://github.com/icsharpcode/SharpZipLib/pull/583)] Restore entry times on FastZip extract__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​517](https://github.com/icsharpcode/SharpZipLib/pull/517)] Throw exception on Store+Descriptor entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​578](https://github.com/icsharpcode/SharpZipLib/pull/578)] Fix typos in the StreamDecodingException doc comments__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​577](https://github.com/icsharpcode/SharpZipLib/pull/577)] Throw ZipException in ZipAESStream instead of generic Exception__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​510](https://github.com/icsharpcode/SharpZipLib/pull/510)] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​546](https://github.com/icsharpcode/SharpZipLib/pull/546)] Make pure private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​554](https://github.com/icsharpcode/SharpZipLib/pull/554)] Skip CRC calculation for AES zip entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​605](https://github.com/icsharpcode/SharpZipLib/pull/605)] Suppress CA1707 warnings in the Constants classes__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​549](https://github.com/icsharpcode/SharpZipLib/pull/549)] Add .NET Standard 2.1 target framework__ by [_Cédric Luthi_](https://github.com/0xced)\n\n## Other changes (not related to library code)\n* __[[#​586](https://github.com/icsharpcode/SharpZipLib/pull/586)] Convert VB sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​533](https://github.com/icsharpcode/SharpZipLib/pull/533)] Convert the C# sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​457](https://github.com/icsharpcode/SharpZipLib/pull/457)] add basic async unit tests for the inflator/deflator streams__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​588](https://github.com/icsharpcode/SharpZipLib/pull/588)] Add a simple async read test for ZipFile__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​621](https://github.com/icsharpcode/SharpZipLib/pull/621)] unify PR/push CI build actions__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​616](https://github.com/icsharpcode/SharpZipLib/pull/616)] Change the build status badge to reference github actions__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​603](https://github.com/icsharpcode/SharpZipLib/pull/603)] pass CreateZip tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​602](https://github.com/icsharpcode/SharpZipLib/pull/602)] Update test/coverage packages and push to codecov__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​601](https://github.com/icsharpcode/SharpZipLib/pull/601)] pass tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​599](https://github.com/icsharpcode/SharpZipLib/pull/599)] Use net46 as CI target framework for windows tests__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​594](https://github.com/icsharpcode/SharpZipLib/pull/594)] Remove the local nuget.config files from the test projects__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​553](https://github.com/icsharpcode/SharpZipLib/pull/553)] Remove broken codacy integration__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​542](https://github.com/icsharpcode/SharpZipLib/pull/542)] Build and publish documentation on release__ by [_nils måsén_](https://github.com/piksel)\n\n\n\n\n## 1.3.1\n\nMinor release, mainly to address the incorrect file version of v1.3.0, but also contains some security fixes and performance improvements.\n\n## Highlights\n\n- Correct `FileVersion` and `AssemblyVersion`  \n- Security fixes for `ZipFile` and `Zip*Stream`s  \n- Improved CRC32 performance\n- BZip2 compression support for Zip files\n\n## Features\n\n* __[[#​355](https://github.com/icsharpcode/SharpZipLib/pull/355)] Wire up BZip2 compression support for Zip files__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Fixes\n\n* __[[#​475](https://github.com/icsharpcode/SharpZipLib/pull/475)] Fix updating zips with descriptor entries__ by [_Richard Webb_](https://github.com/Numpsy) \u0026 [_nils måsén_](https://github.com/piksel)\n* __[[#​516](https://github.com/icsharpcode/SharpZipLib/pull/516)] Improve CRC32 performance__ by [_Nelson Gomez_](https://github.com/nsgomez)\n* __[[#​538](https://github.com/icsharpcode/SharpZipLib/pull/538)] Use RNGCryptoServiceProvider for crypto headers__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​539](https://github.com/icsharpcode/SharpZipLib/pull/539)] Use securely generated random temporary file names__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​509](https://github.com/icsharpcode/SharpZipLib/pull/509)] Make PutNextEntry throw if the entry is AES and no password has been set__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code)\n* __[[#​541](https://github.com/icsharpcode/SharpZipLib/pull/541)] Update csproj for new release__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​530](https://github.com/icsharpcode/SharpZipLib/pull/530)] Fix Codacy Workflows__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​529](https://github.com/icsharpcode/SharpZipLib/pull/529)] Add release workflow__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​511](https://github.com/icsharpcode/SharpZipLib/pull/511)] Move the 7zip helper functions into their own class for easier reuse__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​525](https://github.com/icsharpcode/SharpZipLib/pull/525)] Update the sample projects to use the v1.3 release__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​522](https://github.com/icsharpcode/SharpZipLib/pull/522)] Use PackageIcon instead of PackageIconUrl in csproj__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​523](https://github.com/icsharpcode/SharpZipLib/pull/523)] Fix Codacy workflows__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.3.0\n\n\n## Highlights\n\n- AES encryption fixes and support in FastZip\n- File name encoding support for Tar\n- Improved Unix timestamp support\n- Better handling of entry file names\n- Fix errors with entries using Stored compression method\n\n\n## Changes\n\n* `TarArchive.ExtractContents()` now needs another parameter set to `true` to allow the extraction to traverse outside of the target directory.\n* `TarArchive` constructors now includes an `Encoding` parameter. Omitting it will discard any non-ASCII bytes in file names.\n\n## Fixes\n* __[[#​503](https://github.com/icsharpcode/SharpZipLib/pull/503)] Consider AES overhead when testing encrypted folder entries__ by _Richard Webb_\n* __[[#​452](https://github.com/icsharpcode/SharpZipLib/pull/452)] Ensure crypto streams are disposed in ZipFile.GetOutputStream__ by _Richard Webb_\n* __[[#​333](https://github.com/icsharpcode/SharpZipLib/pull/333)] Handle unsupported compression methods in ZipInputStream better__ by _Richard Webb_\n* __[[#​402](https://github.com/icsharpcode/SharpZipLib/pull/402)] Only convert entry.Name once when accessing updateIndex__ by _Vladyslav Taranov_\n* __[[#​353](https://github.com/icsharpcode/SharpZipLib/pull/353)] Fix ZipFile.TestLocalHeader CompressionMethod resolving for AES entries__ by _Richard Webb_\n* __[[#​460](https://github.com/icsharpcode/SharpZipLib/pull/460)] Account for AES overhead in compressed entry size__ by _Richard Webb_\n* __[[#​422](https://github.com/icsharpcode/SharpZipLib/pull/422)] Change ZipOutputStream.PutNextEntry to explicity validate the requested compression method__ by _Richard Webb_\n* __[[#​467](https://github.com/icsharpcode/SharpZipLib/pull/467)] Allow seeking a PartialInputStream to the very end__ by _Víctor M. González_\n* __[[#​440](https://github.com/icsharpcode/SharpZipLib/pull/440)] Use CompressionMethodForHeader for header entries__ by _Richard Webb_\n* __[[#​420](https://github.com/icsharpcode/SharpZipLib/pull/420)] Throw NotSupportedException in ZipFile.Add when trying to add AES entry__ by _Richard Webb_\n* __[[#​421](https://github.com/icsharpcode/SharpZipLib/pull/421)] Have ZipFile.Add validate compression compability internally__ by _Richard Webb_\n* __[[#​387](https://github.com/icsharpcode/SharpZipLib/pull/387)] Better handle baseStreams closing themselves unexpectedly__ by _Richard Webb_\n* __[[#​408](https://github.com/icsharpcode/SharpZipLib/pull/408)] When searching for the Zip64 end of central directory locator, pay attention to its fixed size__ by _Richard Webb_\n* __[[#​406](https://github.com/icsharpcode/SharpZipLib/pull/406)] Skip forced Deflate flush when using Stored compression__ by _nils måsén_\n* __[[#​362](https://github.com/icsharpcode/SharpZipLib/pull/362)] Don\u0026#​39;t call CleanName from the ZipEntry constructor__ by _Richard Webb_\n* __[[#​465](https://github.com/icsharpcode/SharpZipLib/pull/465)] Use correct count in ZipAESStream.ReadBufferedData__ by _Víctor M. González_\n* __[[#​390](https://github.com/icsharpcode/SharpZipLib/pull/390)] Ensure GZipOutputStream headers are written before flush__ by _Richard Webb_\n* __[[#​498](https://github.com/icsharpcode/SharpZipLib/pull/498)] Use string.Trim to trim strings__ by _Richard Webb_\n* __[[#​432](https://github.com/icsharpcode/SharpZipLib/pull/432)] Throw ArgumentNullException in BZip2__ by _Richard Webb_\n* __[[#​519](https://github.com/icsharpcode/SharpZipLib/pull/519)] Restrict path traversal on TarArchive extraction__ by _nils måsén_\n\n## Features\n* __[[#​201](https://github.com/icsharpcode/SharpZipLib/pull/201)] Raise ProcessDirectory event for FastZip extract__ by _Stevie-O_\n* __[[#​380](https://github.com/icsharpcode/SharpZipLib/pull/380)] Add support for AES encryption in FastZip.CreateZip__ by _Richard Webb_\n* __[[#​497](https://github.com/icsharpcode/SharpZipLib/pull/497)] Transform new entry names using an INameTranform in ZipOutputStream__ by _Richard Webb_\n* __[[#​482](https://github.com/icsharpcode/SharpZipLib/pull/482)] Add variants of FastZip.CreateZip taking IScanFilter instead of strings__ by _Richard Webb_\n* __[[#​455](https://github.com/icsharpcode/SharpZipLib/pull/455)] Add FastZip.CreateZip with a leaveOpen parameter__ by _Richard Webb_\n* __[[#​433](https://github.com/icsharpcode/SharpZipLib/pull/433)] Restore directory timestamps when extracting with FastZip__ by _Richard Webb_\n* __[[#​472](https://github.com/icsharpcode/SharpZipLib/pull/472)] Allow ZipFile to accept empty strings as passwords when decrypting AES entries__ by _Richard Webb_\n* __[[#​364](https://github.com/icsharpcode/SharpZipLib/pull/364)] Add nameEncoding parameter to Tar entries__ by _Yusuke Ito_\n* __[[#​463](https://github.com/icsharpcode/SharpZipLib/pull/463)] Improve support for Unix timestamps in ZIP archives__ by _Bastian Eicher_\n\n## Other changes (not related to library code)\n* __[[#​346](https://github.com/icsharpcode/SharpZipLib/pull/346)] Add a Security Policy__ by _nils måsén_ \n ... (truncated)\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/TerminalProdigy/DMS.Demo.Dependency.Management.Dependabot/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TerminalProdigy%2FDMS.Demo.Dependency.Management.Dependabot/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"2609748894","node_id":"PR_kwDOAh-ybM6bjZue","number":3293,"state":"open","title":"Bump SharpZipLib from 0.86.0 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-22T14:01:27.000Z","updated_at":"2025-06-22T14:01:28.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated SharpZipLib from 0.86.0 to 1.3.3 in /VisualPlugins/InternalErrorReport/InternalErrorReport.csproj\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pascalabcnet/pascalabcnet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/pascalabcnet/pascalabcnet/pull/3293","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pascalabcnet%2Fpascalabcnet/issues/3293","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3293/packages"},{"uuid":"2602343647","node_id":"PR_kwDOO8ncSs6bHJzf","number":1,"state":"open","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-18T16:35:49.000Z","updated_at":"2025-06-18T16:35:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated SharpZipLib from 1.3.2 to 1.3.3 in /RT_DTV_Evertz_GeneralPlatform_1/RT_DTV_Evertz_GeneralPlatform_1.csproj, /RT_DTV_Evertz_GeneralPlatform_1/app.config, /RT_DTV_Evertz_GeneralPlatform_1/packages.config\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SkylineCommunications/DTV-AS-RegressionTests/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SkylineCommunications/DTV-AS-RegressionTests/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SkylineCommunications%2FDTV-AS-RegressionTests/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"2579104745","node_id":"PR_kwDODTv0cs6ZugPp","number":79,"state":"closed","title":"Bump MSTest.TestAdapter, MSTest.TestFramework and SharpZipLib","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-06-09T18:28:01.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-09T18:18:12.000Z","updated_at":"2025-06-09T18:28:01.000Z","time_to_close":589,"merged_at":"2025-06-09T18:28:01.000Z","merged_by":"nordseth","closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"MSTest.TestAdapter, MSTest.TestFramework"},{"name":"SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated MSTest.TestAdapter from 3.8.3 to 3.9.1 in /Nordseth.Git.Test/Nordseth.Git.Test.csproj\n- Updated MSTest.TestFramework from 3.8.3 to 3.9.1 in /Nordseth.Git.Test/Nordseth.Git.Test.csproj\n- Updated SharpZipLib from 1.3.3 to 1.4.2 in /Nordseth.Git/Nordseth.Git.csproj\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/nordseth/Nordseth-Git/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nordseth%2FNordseth-Git/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"},{"uuid":"2101658153","node_id":"PR_kwDODbGBms5lIUqK","number":108,"state":"open","title":"Bump SharpZipLib from 1.2.0 to 1.3.3 in /DebUOS/Packaging.Targets","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2024-01-26T06:21:56.000Z","updated_at":"2025-07-03T13:14:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/DebUOS/Packaging.Targets","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/1b1ab013ce1df02d8f27cf582197759c614d9126\"\u003e\u003ccode\u003e1b1ab01\u003c/code\u003e\u003c/a\u003e ci: include non-anno tags in version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/d21c998e8acef7e92fcc9862d668970239a8d2e4\"\u003e\u003ccode\u003ed21c998\u003c/code\u003e\u003c/a\u003e ci: fix yaml typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a1423c470236b69c5427ab80710a00133cc25588\"\u003e\u003ccode\u003ea1423c4\u003c/code\u003e\u003c/a\u003e ci: add manual dispatch and logging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/641f292ae8820b9eb56876f0eed5b4c05473f237\"\u003e\u003ccode\u003e641f292\u003c/code\u003e\u003c/a\u003e update csproj for v1.3.3 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/5c3b293de5d65b108e7f2cd0ea8f81c1b8273f78\"\u003e\u003ccode\u003e5c3b293\u003c/code\u003e\u003c/a\u003e fix: specialized tar extract traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a0e96de70b5264f4c919b09253b1522bc7a221cc\"\u003e\u003ccode\u003ea0e96de\u003c/code\u003e\u003c/a\u003e test: add tests for tar path traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/2b8ff8fae318834b0826e649311531c65c163509\"\u003e\u003ccode\u003e2b8ff8f\u003c/code\u003e\u003c/a\u003e update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cd5310f5b7eed595110b76a2f7ae5ee013cc50f1\"\u003e\u003ccode\u003ecd5310f\u003c/code\u003e\u003c/a\u003e fix(bzip2): use explicit feature defs for vectorized memory move (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/f04d973a065fe3057f319b39d8ad03f16b2981bb\"\u003e\u003ccode\u003ef04d973\u003c/code\u003e\u003c/a\u003e ci: add codeql analysis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/0cc20b430925102bb373a12f98a1c0f54ab4136a\"\u003e\u003ccode\u003e0cc20b4\u003c/code\u003e\u003c/a\u003e docs(zip): fix ZipStrings typo (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/648\"\u003e#648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dotnet-campus/dotnetcampus.DotNETBuildSDK/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dotnet-campus/dotnetcampus.DotNETBuildSDK/pull/108","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dotnet-campus%2Fdotnetcampus.DotNETBuildSDK/issues/108","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/108/packages"},{"uuid":"1664013492","node_id":"PR_kwDOHCq-Fc5jLtS0","number":1,"state":"closed","title":"Bump SharpZipLib from 1.2.0 to 1.3.3 in /src/extensions/Statiq.Xmp","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-08-15T01:57:03.000Z","author_association":"NONE","state_reason":null,"created_at":"2024-01-04T02:03:19.000Z","updated_at":"2025-08-15T01:57:03.000Z","time_to_close":50889224,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/src/extensions/Statiq.Xmp","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/1b1ab013ce1df02d8f27cf582197759c614d9126\"\u003e\u003ccode\u003e1b1ab01\u003c/code\u003e\u003c/a\u003e ci: include non-anno tags in version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/d21c998e8acef7e92fcc9862d668970239a8d2e4\"\u003e\u003ccode\u003ed21c998\u003c/code\u003e\u003c/a\u003e ci: fix yaml typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a1423c470236b69c5427ab80710a00133cc25588\"\u003e\u003ccode\u003ea1423c4\u003c/code\u003e\u003c/a\u003e ci: add manual dispatch and logging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/641f292ae8820b9eb56876f0eed5b4c05473f237\"\u003e\u003ccode\u003e641f292\u003c/code\u003e\u003c/a\u003e update csproj for v1.3.3 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/5c3b293de5d65b108e7f2cd0ea8f81c1b8273f78\"\u003e\u003ccode\u003e5c3b293\u003c/code\u003e\u003c/a\u003e fix: specialized tar extract traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a0e96de70b5264f4c919b09253b1522bc7a221cc\"\u003e\u003ccode\u003ea0e96de\u003c/code\u003e\u003c/a\u003e test: add tests for tar path traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/2b8ff8fae318834b0826e649311531c65c163509\"\u003e\u003ccode\u003e2b8ff8f\u003c/code\u003e\u003c/a\u003e update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cd5310f5b7eed595110b76a2f7ae5ee013cc50f1\"\u003e\u003ccode\u003ecd5310f\u003c/code\u003e\u003c/a\u003e fix(bzip2): use explicit feature defs for vectorized memory move (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/f04d973a065fe3057f319b39d8ad03f16b2981bb\"\u003e\u003ccode\u003ef04d973\u003c/code\u003e\u003c/a\u003e ci: add codeql analysis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/0cc20b430925102bb373a12f98a1c0f54ab4136a\"\u003e\u003ccode\u003e0cc20b4\u003c/code\u003e\u003c/a\u003e docs(zip): fix ZipStrings typo (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/648\"\u003e#648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/flcdrg/Statiq.Framework/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/flcdrg/Statiq.Framework/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/flcdrg%2FStatiq.Framework/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"},{"uuid":"1371775161","node_id":"PR_kwDOBZD0585Rw6C5","number":121,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /examples/Umbraco.SampleSite.Web.Legacy","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-20T13:25:05.000Z","author_association":"NONE","state_reason":null,"created_at":"2023-05-31T09:19:13.000Z","updated_at":"2025-05-20T13:25:05.000Z","time_to_close":62222752,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/examples/Umbraco.SampleSite.Web.Legacy","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/umbraco/The-Starter-Kit/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/umbraco/The-Starter-Kit/pull/121","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/umbraco%2FThe-Starter-Kit/issues/121","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/121/packages"},{"uuid":"1675632824","node_id":"PR_kwDODTv0cs5OtgbS","number":7,"state":"open","title":"Bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2023-04-19T21:04:34.000Z","updated_at":"2025-06-09T19:25:22.060Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003cp\u003eNew patch release that mainly fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eZIP String Encoding:\u003c/h2\u003e\n\u003cp\u003eFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/778\"\u003e#778\u003c/a\u003e \u003ccode\u003ezip\u003c/code\u003e \u003cstrong\u003ecleanup/fix of StringCodec\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTAR:\u003c/h2\u003e\n\u003cp\u003eTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/791\"\u003e#791\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003euse sync codepath on sync methods\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/789\"\u003e#789\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003eclear rest of buffer when eof is reached\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAsync:\u003c/h2\u003e\n\u003cp\u003eGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (\u003ccode\u003eConfigureAwait(false)\u003c/code\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/787\"\u003e#787\u003c/a\u003e \u003cstrong\u003euse ConfigureAwait(false) on every await\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e📚 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/775\"\u003e#775\u003c/a\u003e \u003cstrong\u003efix circular refs and target fw\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eNew minor release focusing on \u003ccode\u003easync\u003c/code\u003e and supporting newer frameworks.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cdd0931e3c476faaf829963b2567619431c871bb\"\u003e\u003ccode\u003ecdd0931\u003c/code\u003e\u003c/a\u003e bump version to v1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a389d9f521dc5ddeae575511dc918b22baab22a5\"\u003e\u003ccode\u003ea389d9f\u003c/code\u003e\u003c/a\u003e fix(zip): cleanup/fix of StringCodec (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/23becfdaf7477a37d7665ec4cc5eb5cf13ce2966\"\u003e\u003ccode\u003e23becfd\u003c/code\u003e\u003c/a\u003e fix(tar): use sync codepath on sync methods (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/791\"\u003e#791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/nordseth/Nordseth-Git/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nordseth%2FNordseth-Git/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"1563487252","node_id":"PR_kwDOECDtAs5I3uF4","number":85,"state":"closed","title":"Bump SharpZipLib from 1.4.1 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-15T03:50:11.000Z","author_association":null,"state_reason":null,"created_at":"2023-01-31T02:00:45.000Z","updated_at":"2025-11-15T03:50:19.000Z","time_to_close":88048166,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.4.1","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.4.1 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.4.1...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.4.1\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/NosCoreIO/NosCore.ParserInputGenerator/pull/85","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/NosCoreIO%2FNosCore.ParserInputGenerator/issues/85","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/85/packages"},{"uuid":"1562233800","node_id":"PR_kwDOGarles5IzdY5","number":37,"state":"open","title":"chore(deps): bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2023-01-30T11:13:29.000Z","updated_at":"2025-06-16T12:02:39.155Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003cp\u003eNew patch release that mainly fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eZIP String Encoding:\u003c/h2\u003e\n\u003cp\u003eFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/778\"\u003e#778\u003c/a\u003e \u003ccode\u003ezip\u003c/code\u003e \u003cstrong\u003ecleanup/fix of StringCodec\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTAR:\u003c/h2\u003e\n\u003cp\u003eTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/791\"\u003e#791\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003euse sync codepath on sync methods\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/789\"\u003e#789\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003eclear rest of buffer when eof is reached\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAsync:\u003c/h2\u003e\n\u003cp\u003eGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (\u003ccode\u003eConfigureAwait(false)\u003c/code\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/787\"\u003e#787\u003c/a\u003e \u003cstrong\u003euse ConfigureAwait(false) on every await\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e📚 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/775\"\u003e#775\u003c/a\u003e \u003cstrong\u003efix circular refs and target fw\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eNew minor release focusing on \u003ccode\u003easync\u003c/code\u003e and supporting newer frameworks.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cdd0931e3c476faaf829963b2567619431c871bb\"\u003e\u003ccode\u003ecdd0931\u003c/code\u003e\u003c/a\u003e bump version to v1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a389d9f521dc5ddeae575511dc918b22baab22a5\"\u003e\u003ccode\u003ea389d9f\u003c/code\u003e\u003c/a\u003e fix(zip): cleanup/fix of StringCodec (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/23becfdaf7477a37d7665ec4cc5eb5cf13ce2966\"\u003e\u003ccode\u003e23becfd\u003c/code\u003e\u003c/a\u003e fix(tar): use sync codepath on sync methods (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/791\"\u003e#791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/wforney/net-ipfs-engine/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/wforney%2Fnet-ipfs-engine/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"},{"uuid":"1237701177","node_id":"PR_kwDODp7a_s436HsO","number":13,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /src/KK_ModTextDump","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-02-14T17:31:17.000Z","author_association":null,"state_reason":null,"created_at":"2022-05-16T20:48:13.000Z","updated_at":"2026-02-14T17:31:44.000Z","time_to_close":118356184,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/src/KK_ModTextDump","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/IllusionMods/TranslationTools/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/IllusionMods/TranslationTools/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/IllusionMods%2FTranslationTools/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}],"issue_packages":[{"old_version":"1.3.2","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2025-11-23T20:36:59.000Z","version_change":"1.3.2 → 1.4.2","issue":{"uuid":"3656433914","node_id":"PR_kwDOQAW2P861EkxQ","number":5,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-24T04:52:28.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-23T20:36:59.000Z","updated_at":"2025-11-24T04:52:30.000Z","time_to_close":29729,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/dfsgotl-lenya/NetSdrClient/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfsgotl-lenya%2FNetSdrClient/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"1.3.2","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2025-11-22T20:03:03.000Z","version_change":"1.3.2 → 1.4.2","issue":{"uuid":"3655027670","node_id":"PR_kwDOQButMc61AEfY","number":11,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2025-11-22T20:20:43.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-22T20:03:03.000Z","updated_at":"2025-11-22T20:23:21.000Z","time_to_close":1060,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/YuIiaa/NetSdrClient/pull/11","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/YuIiaa%2FNetSdrClient/issues/11","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/11/packages"}},{"old_version":"1.3.2","new_version":"1.3.3","update_type":"patch","path":null,"pr_created_at":"2025-11-21T10:36:26.000Z","version_change":"1.3.2 → 1.3.3","issue":{"uuid":"3651128301","node_id":"PR_kwDOP9Ar5860zBzq","number":21,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":8,"pull_request":true,"closed_at":"2025-11-21T10:48:23.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-21T10:36:26.000Z","updated_at":"2025-11-21T13:07:16.898Z","time_to_close":717,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/akulkaaaaaaaaaaaaa/NetSdrClient1/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/akulkaaaaaaaaaaaaa/NetSdrClient1/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/akulkaaaaaaaaaaaaa%2FNetSdrClient1/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"}},{"old_version":"1.3.2","new_version":"1.3.3","update_type":"patch","path":null,"pr_created_at":"2025-11-14T15:09:36.000Z","version_change":"1.3.2 → 1.3.3","issue":{"uuid":"3626017599","node_id":"PR_kwDOP5Mx_M6zelr-","number":8,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":6,"pull_request":true,"closed_at":"2025-11-14T15:27:18.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-14T15:09:36.000Z","updated_at":"2025-11-14T17:01:48.036Z","time_to_close":1062,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/896Dmytro/lab/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/896Dmytro/lab/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/896Dmytro%2Flab/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"1.3.3","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2025-11-12T10:23:37.000Z","version_change":"1.3.3 → 1.4.2","issue":{"uuid":"3615917293","node_id":"PR_kwDOQUBiX86y8skB","number":5,"state":"closed","title":"Bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-12T10:31:35.000Z","author_association":null,"state_reason":null,"created_at":"2025-11-12T10:23:37.000Z","updated_at":"2025-11-12T10:31:44.000Z","time_to_close":478,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/jurijambros/dependabot-test/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jurijambros%2Fdependabot-test/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"1.3.2","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2025-10-21T19:05:00.000Z","version_change":"1.3.2 → 1.4.2","issue":{"uuid":"3537827790","node_id":"PR_kwDOQAduZ86u6Uca","number":30,"state":"open","title":"Bump SharpZipLib from 1.3.2 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2025-10-21T19:05:00.000Z","updated_at":"2025-10-21T19:46:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.2 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.2...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Sane4ka126/1NetSdrClient1/pull/30","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Sane4ka126%2F1NetSdrClient1/issues/30","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/30/packages"}},{"old_version":"0.86.0","new_version":"1.3.3","update_type":"major","path":"/SharpFileSystem.Tests","pr_created_at":"2025-10-15T04:01:32.096Z","version_change":"0.86.0 → 1.3.3","issue":{"uuid":"2915604945","node_id":"PR_kwDOQCq-Xc6tyJnR","number":1,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /SharpFileSystem.Tests","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"OWNER","state_reason":null,"created_at":"2025-10-15T04:01:32.096Z","updated_at":"2025-10-17T16:21:19.166Z","time_to_close":null,"merged_at":"2025-10-15T02:34:27.000Z","merged_by":"Dev407101","closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/SharpFileSystem.Tests","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\r\n- [Release notes](https://github.com/icsharpcode/SharpZipLib/releases)\r\n- [Changelog](https://github.com/icsharpcode/SharpZipLib/blob/master/docs/Changes.txt)\r\n- [Commits](https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: SharpZipLib dependency-type: direct:production ...","html_url":"https://github.com/Dev407101/sharpfilesystem/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Dev407101%2Fsharpfilesystem/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"1.3.2","new_version":"1.3.3","update_type":"patch","path":null,"pr_created_at":"2025-09-25T06:56:21.000Z","version_change":"1.3.2 → 1.3.3","issue":{"uuid":"2859395206","node_id":"PR_kwDOKqWSJM6qbuiG","number":190,"state":"closed","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-25T09:13:56.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-25T06:56:21.000Z","updated_at":"2025-09-25T09:13:56.000Z","time_to_close":8255,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Pinned SharpZipLib at 1.3.3.\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SkylineCommunications/Skyline.DataMiner.CICD.Validators/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SkylineCommunications/Skyline.DataMiner.CICD.Validators/pull/190","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SkylineCommunications%2FSkyline.DataMiner.CICD.Validators/issues/190","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/190/packages"}},{"old_version":"1.3.1","new_version":"1.3.3","update_type":"patch","path":null,"pr_created_at":"2025-08-27T05:28:07.000Z","version_change":"1.3.1 → 1.3.3","issue":{"uuid":"2777194746","node_id":"PR_kwDOPktHQM6liKD6","number":8,"state":"open","title":"Bump SharpZipLib from 1.3.1 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-08-27T05:28:07.000Z","updated_at":"2025-08-27T05:28:08.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.1","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.1 to 1.3.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\n## 1.3.2\n\nAnother minor release, containing security fixes and smaller bugfixes.  \nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\n\n## Features\n* __[[#​611](https://github.com/icsharpcode/SharpZipLib/pull/611)] Bzip input stream simple vectorization__ by [_Konrad Kruczyński_](https://github.com/konrad-kruczynski)\n* __[[#​351](https://github.com/icsharpcode/SharpZipLib/pull/351)] Add support for Filename field in GZip__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller fixes and optimizations\n* __[[#​579](https://github.com/icsharpcode/SharpZipLib/pull/579)] Implement very simple ReadAsync in ZipAESStream__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​587](https://github.com/icsharpcode/SharpZipLib/pull/587)] Remove supported method checks from ZipEntry.CompressionMethod setter__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​593](https://github.com/icsharpcode/SharpZipLib/pull/593)] Simplify DropPathRoot and fix out of bounds issue__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​575](https://github.com/icsharpcode/SharpZipLib/pull/575)] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​583](https://github.com/icsharpcode/SharpZipLib/pull/583)] Restore entry times on FastZip extract__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​517](https://github.com/icsharpcode/SharpZipLib/pull/517)] Throw exception on Store+Descriptor entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​578](https://github.com/icsharpcode/SharpZipLib/pull/578)] Fix typos in the StreamDecodingException doc comments__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​577](https://github.com/icsharpcode/SharpZipLib/pull/577)] Throw ZipException in ZipAESStream instead of generic Exception__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​510](https://github.com/icsharpcode/SharpZipLib/pull/510)] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​546](https://github.com/icsharpcode/SharpZipLib/pull/546)] Make pure private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​554](https://github.com/icsharpcode/SharpZipLib/pull/554)] Skip CRC calculation for AES zip entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​605](https://github.com/icsharpcode/SharpZipLib/pull/605)] Suppress CA1707 warnings in the Constants classes__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​549](https://github.com/icsharpcode/SharpZipLib/pull/549)] Add .NET Standard 2.1 target framework__ by [_Cédric Luthi_](https://github.com/0xced)\n\n## Other changes (not related to library code)\n* __[[#​586](https://github.com/icsharpcode/SharpZipLib/pull/586)] Convert VB sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​533](https://github.com/icsharpcode/SharpZipLib/pull/533)] Convert the C# sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​457](https://github.com/icsharpcode/SharpZipLib/pull/457)] add basic async unit tests for the inflator/deflator streams__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​588](https://github.com/icsharpcode/SharpZipLib/pull/588)] Add a simple async read test for ZipFile__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​621](https://github.com/icsharpcode/SharpZipLib/pull/621)] unify PR/push CI build actions__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​616](https://github.com/icsharpcode/SharpZipLib/pull/616)] Change the build status badge to reference github actions__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​603](https://github.com/icsharpcode/SharpZipLib/pull/603)] pass CreateZip tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​602](https://github.com/icsharpcode/SharpZipLib/pull/602)] Update test/coverage packages and push to codecov__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​601](https://github.com/icsharpcode/SharpZipLib/pull/601)] pass tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​599](https://github.com/icsharpcode/SharpZipLib/pull/599)] Use net46 as CI target framework for windows tests__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​594](https://github.com/icsharpcode/SharpZipLib/pull/594)] Remove the local nuget.config files from the test projects__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​553](https://github.com/icsharpcode/SharpZipLib/pull/553)] Remove broken codacy integration__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​542](https://github.com/icsharpcode/SharpZipLib/pull/542)] Build and publish documentation on release__ by [_nils måsén_](https://github.com/piksel)\n\n\n\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.3.1...v1.3.3).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.1\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dotnet-felickz/vulnerable-dependencies/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dotnet-felickz/vulnerable-dependencies/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dotnet-felickz%2Fvulnerable-dependencies/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"1.2.0","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2025-08-07T13:40:15.000Z","version_change":"1.2.0 → 1.4.2","issue":{"uuid":"2727848776","node_id":"PR_kwDOO7Mmh86il6tI","number":4,"state":"open","title":"Bump SharpZipLib from 1.2.0 to 1.4.2","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-08-07T13:40:15.000Z","updated_at":"2025-08-07T13:40:16.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Updated [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.4.2.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [SharpZipLib's releases](https://github.com/icsharpcode/SharpZipLib/releases)._\n\n## 1.4.2\n\nNew patch release that further fixes issues with the changes in v1.4.0.\n\n## Fixes:\n\n* 🐛 [[#​813](https://github.com/icsharpcode/SharpZipLib/pull/813)]  `zip`  __fully implement async deflate__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​811](https://github.com/icsharpcode/SharpZipLib/pull/811)]  `tar`  __enable async overrides on net6__  by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​809](https://github.com/icsharpcode/SharpZipLib/pull/809)]  `zip`  __remove leftover console logging__  by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* 🔧  [[#​817](https://github.com/icsharpcode/SharpZipLib/pull/817)]  __add issue form templates__  by [_nils måsén_](https://github.com/piksel)\n\n* 🔧  [[#​812](https://github.com/icsharpcode/SharpZipLib/pull/812)]  __update deps for net7 support__  by [_nils måsén_](https://github.com/piksel)\n\n\n## 1.4.1\n\nNew patch release that mainly fixes issues with the changes in v1.4.0.\n\n## ZIP String Encoding:\n\nFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\n\n* 🐛 [#​778](https://github.com/icsharpcode/SharpZipLib/pull/778) `zip` __cleanup/fix of StringCodec__ by [_nils måsén_](https://github.com/piksel)\n\n## TAR:\n\nTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\n\n* 🐛 [#​791](https://github.com/icsharpcode/SharpZipLib/pull/791) `tar` __use sync codepath on sync methods__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n* 🐛 [#​789](https://github.com/icsharpcode/SharpZipLib/pull/789) `tar` __clear rest of buffer when eof is reached__ by [_nils måsén_](https://github.com/piksel)\n\n## Async:\n\nGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (`ConfigureAwait(false)`). \n\n* 🐛 [#​787](https://github.com/icsharpcode/SharpZipLib/pull/787) __use ConfigureAwait(false) on every await__ by [_Lars Hanisch_](https://github.com/flensrocker)\n\n\n## Other changes (not related to library code):\n\n* 📚 [#​775](https://github.com/icsharpcode/SharpZipLib/pull/775) __fix circular refs and target fw__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.4.0\n\nNew minor release focusing on `async` and supporting newer frameworks.\n\nNote that this version drops support for the EOL .NET 4.5 Framework, but adding explicit support for .NET 6.\n\n## Features:\n\n* ✨  [[#​672](https://github.com/icsharpcode/SharpZipLib/pull/672)]  `gzip`  __add GzipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​746](https://github.com/icsharpcode/SharpZipLib/pull/746)]  `tar`  __support for async streams__   by [_Nathan_](https://github.com/nathan-c)\n\n* ✨  [[#​689](https://github.com/icsharpcode/SharpZipLib/pull/689)]  `zip`  __make it possible to skip header tests__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​683](https://github.com/icsharpcode/SharpZipLib/pull/683)]  `zip`  __enable ZipOuputStream to write precompressed files__   by [_Temtaime_](https://github.com/Temtaime)\n\n* ✨  [[#​592](https://github.com/icsharpcode/SharpZipLib/pull/592)]  `zip`  __better string encoding handling__   by [_nils måsén_](https://github.com/piksel)\n\n* ✨  [[#​574](https://github.com/icsharpcode/SharpZipLib/pull/574)]  `zip`  __ZipOutputStream async support__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Fixes:\n\n* 🐛  [[#​642](https://github.com/icsharpcode/SharpZipLib/pull/642)]  `zip`  __handle iterating updated entries in ZipInputStream__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​582](https://github.com/icsharpcode/SharpZipLib/pull/582)]  `tar`  __enable unix paths in tar RootPath__   by [_sensslen_](https://github.com/sensslen)\n\n* 🐛  [[#​766](https://github.com/icsharpcode/SharpZipLib/pull/766)]  __replace uses of obsolete method `RNGCryptoServiceProvider`__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n* 🐛  [[#​675](https://github.com/icsharpcode/SharpZipLib/pull/675)]  `tar`  __read full extended headers__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​765](https://github.com/icsharpcode/SharpZipLib/pull/765)]  `zip`  __explicitly specify hash method for Rfc2898DeriveBytes__   by [_Yihezkel Schoenbrun_](https://github.com/yihezkel)\n\n* 🐛  [[#​754](https://github.com/icsharpcode/SharpZipLib/pull/754)]  `zip`  __skip reading position for non-seekable async streams__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​750](https://github.com/icsharpcode/SharpZipLib/pull/750)]  `zip`  __0 in zip64 local sizes using descriptors__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​736](https://github.com/icsharpcode/SharpZipLib/pull/736)]  `zip`  __dont fail test on 0 sizes and descriptor__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​720](https://github.com/icsharpcode/SharpZipLib/pull/720)]  `samples`  __bump lib versions to v1.3.3__   by [_nils måsén_](https://github.com/piksel)\n\n* 🐛  [[#​669](https://github.com/icsharpcode/SharpZipLib/pull/669)]  `zip`  __use ushort for ITaggedData.TagID__   by [_Richard Webb_](https://github.com/Numpsy)\n\n* 🐛  [[#​666](https://github.com/icsharpcode/SharpZipLib/pull/666)]  `tar`  __permit slashed output dir__   by [_nils måsén_](https://github.com/piksel)\n\n\n\n## Other changes (not related to library code):\n\n* ⚙️  [[#​727](https://github.com/icsharpcode/SharpZipLib/pull/727)]  __use server 2019 for win builds__   by [_nils måsén_](https://github.com/piksel)\n* 🔧  [[#​670](https://github.com/icsharpcode/SharpZipLib/pull/670)]  __remove the test bootstrapper__   by [_Richard Webb_](https://github.com/Numpsy)\n* 🚨  [[#​671](https://github.com/icsharpcode/SharpZipLib/pull/671)]  __repeatability and refactoring__   by [_nils måsén_](https://github.com/piksel)\n ... (truncated)\n\n## 1.3.3\n\nAnother minor release, containing security fixes and smaller bugfixes. \n\n## Fixes:\n\n*  __🐛 specialized tar extract traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __🐛 [[#​635](https://github.com/icsharpcode/SharpZipLib/pull/635)]  `bzip2` use explicit feature defs for vectorized memory move__ by [_Jackson Wood_](https://github.com/modio-jackson)\n*  __🐛 [[#​645](https://github.com/icsharpcode/SharpZipLib/pull/645)]  `tar` create translated files in temp__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller changes:\n*  __🔨 [[#​604](https://github.com/icsharpcode/SharpZipLib/pull/604)] Move the Password property from DeflaterOutputStream into ZipOutputStream__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​625](https://github.com/icsharpcode/SharpZipLib/pull/625)] Make BZip2Constants static instead of sealed__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __🔨 [[#​626](https://github.com/icsharpcode/SharpZipLib/pull/626)] make a couple of private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code):\n\n*  __📚 [[#​648](https://github.com/icsharpcode/SharpZipLib/pull/648)]  `zip` fix ZipStrings typo__ by [_Friedrich von Never_](https://github.com/ForNeVeR)\n*  __🚨 add tests for tar path traversal__ by [_nils måsén_](https://github.com/piksel)\n*  __⚙️ add codeql analysis__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​636](https://github.com/icsharpcode/SharpZipLib/pull/636)] Fix unstable tests and switch to dotcover__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​634](https://github.com/icsharpcode/SharpZipLib/pull/634)] add an async version of the WriteZipOutputStream benchmark__ by [_Richard Webb_](https://github.com/Numpsy)\n*  __⚙️ [[#​628](https://github.com/icsharpcode/SharpZipLib/pull/628)] Limit code coverage to windows CI__ by [_nils måsén_](https://github.com/piksel)\n*  __🚨 [[#​627](https://github.com/icsharpcode/SharpZipLib/pull/627)] fix the expected/actual value ordering in unit tests__ by [_Richard Webb_](https://github.com/Numpsy)\n\n\n\n## 1.3.2\n\nAnother minor release, containing security fixes and smaller bugfixes.  \nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\n\n## Features\n* __[[#​611](https://github.com/icsharpcode/SharpZipLib/pull/611)] Bzip input stream simple vectorization__ by [_Konrad Kruczyński_](https://github.com/konrad-kruczynski)\n* __[[#​351](https://github.com/icsharpcode/SharpZipLib/pull/351)] Add support for Filename field in GZip__ by [_nils måsén_](https://github.com/piksel)\n\n## Smaller fixes and optimizations\n* __[[#​579](https://github.com/icsharpcode/SharpZipLib/pull/579)] Implement very simple ReadAsync in ZipAESStream__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​587](https://github.com/icsharpcode/SharpZipLib/pull/587)] Remove supported method checks from ZipEntry.CompressionMethod setter__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​593](https://github.com/icsharpcode/SharpZipLib/pull/593)] Simplify DropPathRoot and fix out of bounds issue__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​575](https://github.com/icsharpcode/SharpZipLib/pull/575)] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​583](https://github.com/icsharpcode/SharpZipLib/pull/583)] Restore entry times on FastZip extract__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​517](https://github.com/icsharpcode/SharpZipLib/pull/517)] Throw exception on Store+Descriptor entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​578](https://github.com/icsharpcode/SharpZipLib/pull/578)] Fix typos in the StreamDecodingException doc comments__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​577](https://github.com/icsharpcode/SharpZipLib/pull/577)] Throw ZipException in ZipAESStream instead of generic Exception__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​510](https://github.com/icsharpcode/SharpZipLib/pull/510)] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​546](https://github.com/icsharpcode/SharpZipLib/pull/546)] Make pure private functions static__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​554](https://github.com/icsharpcode/SharpZipLib/pull/554)] Skip CRC calculation for AES zip entries__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​605](https://github.com/icsharpcode/SharpZipLib/pull/605)] Suppress CA1707 warnings in the Constants classes__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​549](https://github.com/icsharpcode/SharpZipLib/pull/549)] Add .NET Standard 2.1 target framework__ by [_Cédric Luthi_](https://github.com/0xced)\n\n## Other changes (not related to library code)\n* __[[#​586](https://github.com/icsharpcode/SharpZipLib/pull/586)] Convert VB sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​533](https://github.com/icsharpcode/SharpZipLib/pull/533)] Convert the C# sample projects to PackageReference format__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​457](https://github.com/icsharpcode/SharpZipLib/pull/457)] add basic async unit tests for the inflator/deflator streams__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​588](https://github.com/icsharpcode/SharpZipLib/pull/588)] Add a simple async read test for ZipFile__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​621](https://github.com/icsharpcode/SharpZipLib/pull/621)] unify PR/push CI build actions__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​616](https://github.com/icsharpcode/SharpZipLib/pull/616)] Change the build status badge to reference github actions__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​603](https://github.com/icsharpcode/SharpZipLib/pull/603)] pass CreateZip tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​602](https://github.com/icsharpcode/SharpZipLib/pull/602)] Update test/coverage packages and push to codecov__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​601](https://github.com/icsharpcode/SharpZipLib/pull/601)] pass tests that are within time tolerance__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​599](https://github.com/icsharpcode/SharpZipLib/pull/599)] Use net46 as CI target framework for windows tests__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​594](https://github.com/icsharpcode/SharpZipLib/pull/594)] Remove the local nuget.config files from the test projects__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​553](https://github.com/icsharpcode/SharpZipLib/pull/553)] Remove broken codacy integration__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​542](https://github.com/icsharpcode/SharpZipLib/pull/542)] Build and publish documentation on release__ by [_nils måsén_](https://github.com/piksel)\n\n\n\n\n## 1.3.1\n\nMinor release, mainly to address the incorrect file version of v1.3.0, but also contains some security fixes and performance improvements.\n\n## Highlights\n\n- Correct `FileVersion` and `AssemblyVersion`  \n- Security fixes for `ZipFile` and `Zip*Stream`s  \n- Improved CRC32 performance\n- BZip2 compression support for Zip files\n\n## Features\n\n* __[[#​355](https://github.com/icsharpcode/SharpZipLib/pull/355)] Wire up BZip2 compression support for Zip files__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Fixes\n\n* __[[#​475](https://github.com/icsharpcode/SharpZipLib/pull/475)] Fix updating zips with descriptor entries__ by [_Richard Webb_](https://github.com/Numpsy) \u0026 [_nils måsén_](https://github.com/piksel)\n* __[[#​516](https://github.com/icsharpcode/SharpZipLib/pull/516)] Improve CRC32 performance__ by [_Nelson Gomez_](https://github.com/nsgomez)\n* __[[#​538](https://github.com/icsharpcode/SharpZipLib/pull/538)] Use RNGCryptoServiceProvider for crypto headers__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​539](https://github.com/icsharpcode/SharpZipLib/pull/539)] Use securely generated random temporary file names__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​509](https://github.com/icsharpcode/SharpZipLib/pull/509)] Make PutNextEntry throw if the entry is AES and no password has been set__ by [_Richard Webb_](https://github.com/Numpsy)\n\n## Other changes (not related to library code)\n* __[[#​541](https://github.com/icsharpcode/SharpZipLib/pull/541)] Update csproj for new release__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​530](https://github.com/icsharpcode/SharpZipLib/pull/530)] Fix Codacy Workflows__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​529](https://github.com/icsharpcode/SharpZipLib/pull/529)] Add release workflow__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​511](https://github.com/icsharpcode/SharpZipLib/pull/511)] Move the 7zip helper functions into their own class for easier reuse__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​525](https://github.com/icsharpcode/SharpZipLib/pull/525)] Update the sample projects to use the v1.3 release__ by [_Richard Webb_](https://github.com/Numpsy)\n* __[[#​522](https://github.com/icsharpcode/SharpZipLib/pull/522)] Use PackageIcon instead of PackageIconUrl in csproj__ by [_nils måsén_](https://github.com/piksel)\n* __[[#​523](https://github.com/icsharpcode/SharpZipLib/pull/523)] Fix Codacy workflows__ by [_nils måsén_](https://github.com/piksel)\n\n## 1.3.0\n\n\n## Highlights\n\n- AES encryption fixes and support in FastZip\n- File name encoding support for Tar\n- Improved Unix timestamp support\n- Better handling of entry file names\n- Fix errors with entries using Stored compression method\n\n\n## Changes\n\n* `TarArchive.ExtractContents()` now needs another parameter set to `true` to allow the extraction to traverse outside of the target directory.\n* `TarArchive` constructors now includes an `Encoding` parameter. Omitting it will discard any non-ASCII bytes in file names.\n\n## Fixes\n* __[[#​503](https://github.com/icsharpcode/SharpZipLib/pull/503)] Consider AES overhead when testing encrypted folder entries__ by _Richard Webb_\n* __[[#​452](https://github.com/icsharpcode/SharpZipLib/pull/452)] Ensure crypto streams are disposed in ZipFile.GetOutputStream__ by _Richard Webb_\n* __[[#​333](https://github.com/icsharpcode/SharpZipLib/pull/333)] Handle unsupported compression methods in ZipInputStream better__ by _Richard Webb_\n* __[[#​402](https://github.com/icsharpcode/SharpZipLib/pull/402)] Only convert entry.Name once when accessing updateIndex__ by _Vladyslav Taranov_\n* __[[#​353](https://github.com/icsharpcode/SharpZipLib/pull/353)] Fix ZipFile.TestLocalHeader CompressionMethod resolving for AES entries__ by _Richard Webb_\n* __[[#​460](https://github.com/icsharpcode/SharpZipLib/pull/460)] Account for AES overhead in compressed entry size__ by _Richard Webb_\n* __[[#​422](https://github.com/icsharpcode/SharpZipLib/pull/422)] Change ZipOutputStream.PutNextEntry to explicity validate the requested compression method__ by _Richard Webb_\n* __[[#​467](https://github.com/icsharpcode/SharpZipLib/pull/467)] Allow seeking a PartialInputStream to the very end__ by _Víctor M. González_\n* __[[#​440](https://github.com/icsharpcode/SharpZipLib/pull/440)] Use CompressionMethodForHeader for header entries__ by _Richard Webb_\n* __[[#​420](https://github.com/icsharpcode/SharpZipLib/pull/420)] Throw NotSupportedException in ZipFile.Add when trying to add AES entry__ by _Richard Webb_\n* __[[#​421](https://github.com/icsharpcode/SharpZipLib/pull/421)] Have ZipFile.Add validate compression compability internally__ by _Richard Webb_\n* __[[#​387](https://github.com/icsharpcode/SharpZipLib/pull/387)] Better handle baseStreams closing themselves unexpectedly__ by _Richard Webb_\n* __[[#​408](https://github.com/icsharpcode/SharpZipLib/pull/408)] When searching for the Zip64 end of central directory locator, pay attention to its fixed size__ by _Richard Webb_\n* __[[#​406](https://github.com/icsharpcode/SharpZipLib/pull/406)] Skip forced Deflate flush when using Stored compression__ by _nils måsén_\n* __[[#​362](https://github.com/icsharpcode/SharpZipLib/pull/362)] Don\u0026#​39;t call CleanName from the ZipEntry constructor__ by _Richard Webb_\n* __[[#​465](https://github.com/icsharpcode/SharpZipLib/pull/465)] Use correct count in ZipAESStream.ReadBufferedData__ by _Víctor M. González_\n* __[[#​390](https://github.com/icsharpcode/SharpZipLib/pull/390)] Ensure GZipOutputStream headers are written before flush__ by _Richard Webb_\n* __[[#​498](https://github.com/icsharpcode/SharpZipLib/pull/498)] Use string.Trim to trim strings__ by _Richard Webb_\n* __[[#​432](https://github.com/icsharpcode/SharpZipLib/pull/432)] Throw ArgumentNullException in BZip2__ by _Richard Webb_\n* __[[#​519](https://github.com/icsharpcode/SharpZipLib/pull/519)] Restrict path traversal on TarArchive extraction__ by _nils måsén_\n\n## Features\n* __[[#​201](https://github.com/icsharpcode/SharpZipLib/pull/201)] Raise ProcessDirectory event for FastZip extract__ by _Stevie-O_\n* __[[#​380](https://github.com/icsharpcode/SharpZipLib/pull/380)] Add support for AES encryption in FastZip.CreateZip__ by _Richard Webb_\n* __[[#​497](https://github.com/icsharpcode/SharpZipLib/pull/497)] Transform new entry names using an INameTranform in ZipOutputStream__ by _Richard Webb_\n* __[[#​482](https://github.com/icsharpcode/SharpZipLib/pull/482)] Add variants of FastZip.CreateZip taking IScanFilter instead of strings__ by _Richard Webb_\n* __[[#​455](https://github.com/icsharpcode/SharpZipLib/pull/455)] Add FastZip.CreateZip with a leaveOpen parameter__ by _Richard Webb_\n* __[[#​433](https://github.com/icsharpcode/SharpZipLib/pull/433)] Restore directory timestamps when extracting with FastZip__ by _Richard Webb_\n* __[[#​472](https://github.com/icsharpcode/SharpZipLib/pull/472)] Allow ZipFile to accept empty strings as passwords when decrypting AES entries__ by _Richard Webb_\n* __[[#​364](https://github.com/icsharpcode/SharpZipLib/pull/364)] Add nameEncoding parameter to Tar entries__ by _Yusuke Ito_\n* __[[#​463](https://github.com/icsharpcode/SharpZipLib/pull/463)] Improve support for Unix timestamps in ZIP archives__ by _Bastian Eicher_\n\n## Other changes (not related to library code)\n* __[[#​346](https://github.com/icsharpcode/SharpZipLib/pull/346)] Add a Security Policy__ by _nils måsén_ \n ... (truncated)\n\nCommits viewable in [compare view](https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.4.2).\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/TerminalProdigy/DMS.Demo.Dependency.Management.Dependabot/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/TerminalProdigy%2FDMS.Demo.Dependency.Management.Dependabot/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"0.86.0","new_version":"1.3.3","update_type":"major","path":null,"pr_created_at":"2025-06-22T14:01:27.000Z","version_change":"0.86.0 → 1.3.3","issue":{"uuid":"2609748894","node_id":"PR_kwDOAh-ybM6bjZue","number":3293,"state":"open","title":"Bump SharpZipLib from 0.86.0 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-22T14:01:27.000Z","updated_at":"2025-06-22T14:01:28.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated SharpZipLib from 0.86.0 to 1.3.3 in /VisualPlugins/InternalErrorReport/InternalErrorReport.csproj\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pascalabcnet/pascalabcnet/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/pascalabcnet/pascalabcnet/pull/3293","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/pascalabcnet%2Fpascalabcnet/issues/3293","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3293/packages"}},{"old_version":"1.3.2","new_version":"1.3.3","update_type":"patch","path":null,"pr_created_at":"2025-06-18T16:35:49.000Z","version_change":"1.3.2 → 1.3.3","issue":{"uuid":"2602343647","node_id":"PR_kwDOO8ncSs6bHJzf","number":1,"state":"open","title":"Bump SharpZipLib from 1.3.2 to 1.3.3","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-18T16:35:49.000Z","updated_at":"2025-06-18T16:35:49.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.2","new_version":"1.3.3","repository_url":null}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated SharpZipLib from 1.3.2 to 1.3.3 in /RT_DTV_Evertz_GeneralPlatform_1/RT_DTV_Evertz_GeneralPlatform_1.csproj, /RT_DTV_Evertz_GeneralPlatform_1/app.config, /RT_DTV_Evertz_GeneralPlatform_1/packages.config\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.2\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SkylineCommunications/DTV-AS-RegressionTests/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SkylineCommunications/DTV-AS-RegressionTests/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SkylineCommunications%2FDTV-AS-RegressionTests/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":null,"new_version":null,"update_type":null,"path":null,"pr_created_at":"2025-06-09T18:18:12.000Z","version_change":null,"issue":{"uuid":"2579104745","node_id":"PR_kwDODTv0cs6ZugPp","number":79,"state":"closed","title":"Bump MSTest.TestAdapter, MSTest.TestFramework and SharpZipLib","user":"dependabot[bot]","labels":["dependencies",".NET"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-06-09T18:28:01.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-09T18:18:12.000Z","updated_at":"2025-06-09T18:28:01.000Z","time_to_close":589,"merged_at":"2025-06-09T18:28:01.000Z","merged_by":"nordseth","closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"MSTest.TestAdapter, MSTest.TestFramework"},{"name":"SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Performed the following updates:\n- Updated MSTest.TestAdapter from 3.8.3 to 3.9.1 in /Nordseth.Git.Test/Nordseth.Git.Test.csproj\n- Updated MSTest.TestFramework from 3.8.3 to 3.9.1 in /Nordseth.Git.Test/Nordseth.Git.Test.csproj\n- Updated SharpZipLib from 1.3.3 to 1.4.2 in /Nordseth.Git/Nordseth.Git.csproj\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/nordseth/Nordseth-Git/pull/79","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nordseth%2FNordseth-Git/issues/79","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/79/packages"}},{"old_version":"1.2.0","new_version":"1.3.3","update_type":"minor","path":"/DebUOS/Packaging.Targets","pr_created_at":"2024-01-26T06:21:56.000Z","version_change":"1.2.0 → 1.3.3","issue":{"uuid":"2101658153","node_id":"PR_kwDODbGBms5lIUqK","number":108,"state":"open","title":"Bump SharpZipLib from 1.2.0 to 1.3.3 in /DebUOS/Packaging.Targets","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2024-01-26T06:21:56.000Z","updated_at":"2025-07-03T13:14:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/DebUOS/Packaging.Targets","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/1b1ab013ce1df02d8f27cf582197759c614d9126\"\u003e\u003ccode\u003e1b1ab01\u003c/code\u003e\u003c/a\u003e ci: include non-anno tags in version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/d21c998e8acef7e92fcc9862d668970239a8d2e4\"\u003e\u003ccode\u003ed21c998\u003c/code\u003e\u003c/a\u003e ci: fix yaml typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a1423c470236b69c5427ab80710a00133cc25588\"\u003e\u003ccode\u003ea1423c4\u003c/code\u003e\u003c/a\u003e ci: add manual dispatch and logging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/641f292ae8820b9eb56876f0eed5b4c05473f237\"\u003e\u003ccode\u003e641f292\u003c/code\u003e\u003c/a\u003e update csproj for v1.3.3 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/5c3b293de5d65b108e7f2cd0ea8f81c1b8273f78\"\u003e\u003ccode\u003e5c3b293\u003c/code\u003e\u003c/a\u003e fix: specialized tar extract traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a0e96de70b5264f4c919b09253b1522bc7a221cc\"\u003e\u003ccode\u003ea0e96de\u003c/code\u003e\u003c/a\u003e test: add tests for tar path traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/2b8ff8fae318834b0826e649311531c65c163509\"\u003e\u003ccode\u003e2b8ff8f\u003c/code\u003e\u003c/a\u003e update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cd5310f5b7eed595110b76a2f7ae5ee013cc50f1\"\u003e\u003ccode\u003ecd5310f\u003c/code\u003e\u003c/a\u003e fix(bzip2): use explicit feature defs for vectorized memory move (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/f04d973a065fe3057f319b39d8ad03f16b2981bb\"\u003e\u003ccode\u003ef04d973\u003c/code\u003e\u003c/a\u003e ci: add codeql analysis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/0cc20b430925102bb373a12f98a1c0f54ab4136a\"\u003e\u003ccode\u003e0cc20b4\u003c/code\u003e\u003c/a\u003e docs(zip): fix ZipStrings typo (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/648\"\u003e#648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dotnet-campus/dotnetcampus.DotNETBuildSDK/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dotnet-campus/dotnetcampus.DotNETBuildSDK/pull/108","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dotnet-campus%2Fdotnetcampus.DotNETBuildSDK/issues/108","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/108/packages"}},{"old_version":"1.2.0","new_version":"1.3.3","update_type":"minor","path":"/src/extensions/Statiq.Xmp","pr_created_at":"2024-01-04T02:03:19.000Z","version_change":"1.2.0 → 1.3.3","issue":{"uuid":"1664013492","node_id":"PR_kwDOHCq-Fc5jLtS0","number":1,"state":"closed","title":"Bump SharpZipLib from 1.2.0 to 1.3.3 in /src/extensions/Statiq.Xmp","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-08-15T01:57:03.000Z","author_association":"NONE","state_reason":null,"created_at":"2024-01-04T02:03:19.000Z","updated_at":"2025-08-15T01:57:03.000Z","time_to_close":50889224,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.2.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/src/extensions/Statiq.Xmp","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.2.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/1b1ab013ce1df02d8f27cf582197759c614d9126\"\u003e\u003ccode\u003e1b1ab01\u003c/code\u003e\u003c/a\u003e ci: include non-anno tags in version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/d21c998e8acef7e92fcc9862d668970239a8d2e4\"\u003e\u003ccode\u003ed21c998\u003c/code\u003e\u003c/a\u003e ci: fix yaml typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a1423c470236b69c5427ab80710a00133cc25588\"\u003e\u003ccode\u003ea1423c4\u003c/code\u003e\u003c/a\u003e ci: add manual dispatch and logging\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/641f292ae8820b9eb56876f0eed5b4c05473f237\"\u003e\u003ccode\u003e641f292\u003c/code\u003e\u003c/a\u003e update csproj for v1.3.3 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/5c3b293de5d65b108e7f2cd0ea8f81c1b8273f78\"\u003e\u003ccode\u003e5c3b293\u003c/code\u003e\u003c/a\u003e fix: specialized tar extract traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a0e96de70b5264f4c919b09253b1522bc7a221cc\"\u003e\u003ccode\u003ea0e96de\u003c/code\u003e\u003c/a\u003e test: add tests for tar path traversal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/2b8ff8fae318834b0826e649311531c65c163509\"\u003e\u003ccode\u003e2b8ff8f\u003c/code\u003e\u003c/a\u003e update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cd5310f5b7eed595110b76a2f7ae5ee013cc50f1\"\u003e\u003ccode\u003ecd5310f\u003c/code\u003e\u003c/a\u003e fix(bzip2): use explicit feature defs for vectorized memory move (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/f04d973a065fe3057f319b39d8ad03f16b2981bb\"\u003e\u003ccode\u003ef04d973\u003c/code\u003e\u003c/a\u003e ci: add codeql analysis\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/0cc20b430925102bb373a12f98a1c0f54ab4136a\"\u003e\u003ccode\u003e0cc20b4\u003c/code\u003e\u003c/a\u003e docs(zip): fix ZipStrings typo (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/648\"\u003e#648\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.2.0...v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.2.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/flcdrg/Statiq.Framework/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/flcdrg/Statiq.Framework/pull/1","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/flcdrg%2FStatiq.Framework/issues/1","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1/packages"}},{"old_version":"0.86.0","new_version":"1.3.3","update_type":"major","path":"/examples/Umbraco.SampleSite.Web.Legacy","pr_created_at":"2023-05-31T09:19:13.000Z","version_change":"0.86.0 → 1.3.3","issue":{"uuid":"1371775161","node_id":"PR_kwDOBZD0585Rw6C5","number":121,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /examples/Umbraco.SampleSite.Web.Legacy","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-20T13:25:05.000Z","author_association":"NONE","state_reason":null,"created_at":"2023-05-31T09:19:13.000Z","updated_at":"2025-05-20T13:25:05.000Z","time_to_close":62222752,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/examples/Umbraco.SampleSite.Web.Legacy","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/umbraco/The-Starter-Kit/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/umbraco/The-Starter-Kit/pull/121","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/umbraco%2FThe-Starter-Kit/issues/121","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/121/packages"}},{"old_version":"1.3.3","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2023-04-19T21:04:34.000Z","version_change":"1.3.3 → 1.4.2","issue":{"uuid":"1675632824","node_id":"PR_kwDODTv0cs5OtgbS","number":7,"state":"open","title":"Bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2023-04-19T21:04:34.000Z","updated_at":"2025-06-09T19:25:22.060Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003cp\u003eNew patch release that mainly fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eZIP String Encoding:\u003c/h2\u003e\n\u003cp\u003eFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/778\"\u003e#778\u003c/a\u003e \u003ccode\u003ezip\u003c/code\u003e \u003cstrong\u003ecleanup/fix of StringCodec\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTAR:\u003c/h2\u003e\n\u003cp\u003eTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/791\"\u003e#791\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003euse sync codepath on sync methods\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/789\"\u003e#789\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003eclear rest of buffer when eof is reached\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAsync:\u003c/h2\u003e\n\u003cp\u003eGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (\u003ccode\u003eConfigureAwait(false)\u003c/code\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/787\"\u003e#787\u003c/a\u003e \u003cstrong\u003euse ConfigureAwait(false) on every await\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e📚 \u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/pull/775\"\u003e#775\u003c/a\u003e \u003cstrong\u003efix circular refs and target fw\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eNew minor release focusing on \u003ccode\u003easync\u003c/code\u003e and supporting newer frameworks.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cdd0931e3c476faaf829963b2567619431c871bb\"\u003e\u003ccode\u003ecdd0931\u003c/code\u003e\u003c/a\u003e bump version to v1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a389d9f521dc5ddeae575511dc918b22baab22a5\"\u003e\u003ccode\u003ea389d9f\u003c/code\u003e\u003c/a\u003e fix(zip): cleanup/fix of StringCodec (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/23becfdaf7477a37d7665ec4cc5eb5cf13ce2966\"\u003e\u003ccode\u003e23becfd\u003c/code\u003e\u003c/a\u003e fix(tar): use sync codepath on sync methods (\u003ca href=\"https://redirect.github.com/icsharpcode/SharpZipLib/issues/791\"\u003e#791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/nordseth/Nordseth-Git/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/nordseth%2FNordseth-Git/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"1.4.1","new_version":"1.4.2","update_type":"patch","path":null,"pr_created_at":"2023-01-31T02:00:45.000Z","version_change":"1.4.1 → 1.4.2","issue":{"uuid":"1563487252","node_id":"PR_kwDOECDtAs5I3uF4","number":85,"state":"closed","title":"Bump SharpZipLib from 1.4.1 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-11-15T03:50:11.000Z","author_association":null,"state_reason":null,"created_at":"2023-01-31T02:00:45.000Z","updated_at":"2025-11-15T03:50:19.000Z","time_to_close":88048166,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"1.4.1","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.4.1 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.4.1...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.4.1\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/NosCoreIO/NosCore.ParserInputGenerator/pull/85","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/NosCoreIO%2FNosCore.ParserInputGenerator/issues/85","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/85/packages"}},{"old_version":"1.3.3","new_version":"1.4.2","update_type":"minor","path":null,"pr_created_at":"2023-01-30T11:13:29.000Z","version_change":"1.3.3 → 1.4.2","issue":{"uuid":"1562233800","node_id":"PR_kwDOGarles5IzdY5","number":37,"state":"open","title":"chore(deps): bump SharpZipLib from 1.3.3 to 1.4.2","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2023-01-30T11:13:29.000Z","updated_at":"2025-06-16T12:02:39.155Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"SharpZipLib","old_version":"1.3.3","new_version":"1.4.2","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":null,"ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 1.3.3 to 1.4.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.4.2\u003c/h2\u003e\n\u003cp\u003eNew patch release that further fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/813\"\u003e#813\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003efully implement async deflate\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/811\"\u003e#811\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e  \u003cstrong\u003eenable async overrides on net6\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/809\"\u003e#809\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e  \u003cstrong\u003eremove leftover console logging\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/817\"\u003e#817\u003c/a\u003e]  \u003cstrong\u003eadd issue form templates\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🔧  [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/812\"\u003e#812\u003c/a\u003e]  \u003cstrong\u003eupdate deps for net7 support\u003c/strong\u003e  by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.1\u003c/h2\u003e\n\u003cp\u003eNew patch release that mainly fixes issues with the changes in v1.4.0.\u003c/p\u003e\n\u003ch2\u003eZIP String Encoding:\u003c/h2\u003e\n\u003cp\u003eFurther iteration on the StringCodec API, since the released version was confusing to use and in some cases could not be used without causing deprecation warnings.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/778\"\u003e#778\u003c/a\u003e \u003ccode\u003ezip\u003c/code\u003e \u003cstrong\u003ecleanup/fix of StringCodec\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eTAR:\u003c/h2\u003e\n\u003cp\u003eTwo issues that could cause deadlocks was found in v1.4.0, one due to a typo in the async implementation and one due to a buffer not being cleared.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/791\"\u003e#791\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003euse sync codepath on sync methods\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/789\"\u003e#789\u003c/a\u003e \u003ccode\u003etar\u003c/code\u003e \u003cstrong\u003eclear rest of buffer when eof is reached\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAsync:\u003c/h2\u003e\n\u003cp\u003eGeneral async speed improvement, since we now correctly opt out of requiring to continue in the same context (\u003ccode\u003eConfigureAwait(false)\u003c/code\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e🐛 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/787\"\u003e#787\u003c/a\u003e \u003cstrong\u003euse ConfigureAwait(false) on every await\u003c/strong\u003e by \u003ca href=\"https://github.com/flensrocker\"\u003e\u003cem\u003eLars Hanisch\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e📚 \u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/775\"\u003e#775\u003c/a\u003e \u003cstrong\u003efix circular refs and target fw\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.4.0\u003c/h2\u003e\n\u003cp\u003eNew minor release focusing on \u003ccode\u003easync\u003c/code\u003e and supporting newer frameworks.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/33f64eb0f28cdd2b084cb822fcc224c7c5aba553\"\u003e\u003ccode\u003e33f64eb\u003c/code\u003e\u003c/a\u003e bump version to v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c51ef18c55988e3251b15f038ced1d9064b6da2f\"\u003e\u003ccode\u003ec51ef18\u003c/code\u003e\u003c/a\u003e chore: add issue form templates (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/817\"\u003e#817\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/68e2f928ea8d7663f9a41eefe71f3fe0fbe7912b\"\u003e\u003ccode\u003e68e2f92\u003c/code\u003e\u003c/a\u003e fix(zip): fully implement async deflate (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/813\"\u003e#813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/c4009fd4c752800b0c0150e674f45e53c4abd69f\"\u003e\u003ccode\u003ec4009fd\u003c/code\u003e\u003c/a\u003e fix(tar): enable async overrides on net6 (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/58b5c4e37e7332876cd950274d80259888eccd98\"\u003e\u003ccode\u003e58b5c4e\u003c/code\u003e\u003c/a\u003e test: update deps for net7 support (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/812\"\u003e#812\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cbb9e834d512025a67e93e21432b4dfbd59df3fd\"\u003e\u003ccode\u003ecbb9e83\u003c/code\u003e\u003c/a\u003e zip: finish stream async when async (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/808\"\u003e#808\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/77c5a9766439d70c48f505e7d09b34a701fdb94b\"\u003e\u003ccode\u003e77c5a97\u003c/code\u003e\u003c/a\u003e fix(zip): remove leftover console logging (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/809\"\u003e#809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/cdd0931e3c476faaf829963b2567619431c871bb\"\u003e\u003ccode\u003ecdd0931\u003c/code\u003e\u003c/a\u003e bump version to v1.4.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/a389d9f521dc5ddeae575511dc918b22baab22a5\"\u003e\u003ccode\u003ea389d9f\u003c/code\u003e\u003c/a\u003e fix(zip): cleanup/fix of StringCodec (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/778\"\u003e#778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commit/23becfdaf7477a37d7665ec4cc5eb5cf13ce2966\"\u003e\u003ccode\u003e23becfd\u003c/code\u003e\u003c/a\u003e fix(tar): use sync codepath on sync methods (\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/issues/791\"\u003e#791\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/compare/v1.3.3...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=1.3.3\u0026new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/wforney/net-ipfs-engine/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/wforney%2Fnet-ipfs-engine/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"}},{"old_version":"0.86.0","new_version":"1.3.3","update_type":"major","path":"/src/KK_ModTextDump","pr_created_at":"2022-05-16T20:48:13.000Z","version_change":"0.86.0 → 1.3.3","issue":{"uuid":"1237701177","node_id":"PR_kwDODp7a_s436HsO","number":13,"state":"closed","title":"Bump SharpZipLib from 0.86.0 to 1.3.3 in /src/KK_ModTextDump","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-02-14T17:31:17.000Z","author_association":null,"state_reason":null,"created_at":"2022-05-16T20:48:13.000Z","updated_at":"2026-02-14T17:31:44.000Z","time_to_close":118356184,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"SharpZipLib","old_version":"0.86.0","new_version":"1.3.3","repository_url":"https://github.com/icsharpcode/SharpZipLib"}],"path":"/src/KK_ModTextDump","ecosystem":"nuget"},"body":"Bumps [SharpZipLib](https://github.com/icsharpcode/SharpZipLib) from 0.86.0 to 1.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/releases\"\u003eSharpZipLib's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.3\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003c/p\u003e\n\u003ch2\u003eFixes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 specialized tar extract traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/635\"\u003e#635\u003c/a\u003e]  \u003ccode\u003ebzip2\u003c/code\u003e use explicit feature defs for vectorized memory move\u003c/strong\u003e by \u003ca href=\"https://github.com/modio-jackson\"\u003e\u003cem\u003eJackson Wood\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🐛 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/645\"\u003e#645\u003c/a\u003e]  \u003ccode\u003etar\u003c/code\u003e create translated files in temp\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller changes:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/604\"\u003e#604\u003c/a\u003e] Move the Password property from DeflaterOutputStream into ZipOutputStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/625\"\u003e#625\u003c/a\u003e] Make BZip2Constants static instead of sealed\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🔨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/626\"\u003e#626\u003c/a\u003e] make a couple of private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code):\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e📚 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/648\"\u003e#648\u003c/a\u003e]  \u003ccode\u003ezip\u003c/code\u003e fix ZipStrings typo\u003c/strong\u003e by \u003ca href=\"https://github.com/ForNeVeR\"\u003e\u003cem\u003eFriedrich von Never\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 add tests for tar path traversal\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ add codeql analysis\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/636\"\u003e#636\u003c/a\u003e] Fix unstable tests and switch to dotcover\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/634\"\u003e#634\u003c/a\u003e] add an async version of the WriteZipOutputStream benchmark\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e⚙️ [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/628\"\u003e#628\u003c/a\u003e] Limit code coverage to windows CI\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e🚨 [\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/627\"\u003e#627\u003c/a\u003e] fix the expected/actual value ordering in unit tests\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.3.2\u003c/h2\u003e\n\u003cp\u003eAnother minor release, containing security fixes and smaller bugfixes.\u003cbr /\u003e\nAdditionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when\nused in newer versions of .NET (Core), mainly in Bzip2.\u003c/p\u003e\n\u003ch2\u003eFeatures\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/611\"\u003e#611\u003c/a\u003e] Bzip input stream simple vectorization\u003c/strong\u003e by \u003ca href=\"https://github.com/konrad-kruczynski\"\u003e\u003cem\u003eKonrad Kruczyński\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/351\"\u003e#351\u003c/a\u003e] Add support for Filename field in GZip\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSmaller fixes and optimizations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/579\"\u003e#579\u003c/a\u003e] Implement very simple ReadAsync in ZipAESStream\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/587\"\u003e#587\u003c/a\u003e] Remove supported method checks from ZipEntry.CompressionMethod setter\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/593\"\u003e#593\u003c/a\u003e] Simplify DropPathRoot and fix out of bounds issue\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/575\"\u003e#575\u003c/a\u003e] Replace uses of new T[0] with Array.Empty\u0026lt;T\u0026gt;\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/583\"\u003e#583\u003c/a\u003e] Restore entry times on FastZip extract\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/517\"\u003e#517\u003c/a\u003e] Throw exception on Store+Descriptor entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/578\"\u003e#578\u003c/a\u003e] Fix typos in the StreamDecodingException doc comments\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/577\"\u003e#577\u003c/a\u003e] Throw ZipException in ZipAESStream instead of generic Exception\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/510\"\u003e#510\u003c/a\u003e] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/546\"\u003e#546\u003c/a\u003e] Make pure private functions static\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/554\"\u003e#554\u003c/a\u003e] Skip CRC calculation for AES zip entries\u003c/strong\u003e by \u003ca href=\"https://github.com/piksel\"\u003e\u003cem\u003enils måsén\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/605\"\u003e#605\u003c/a\u003e] Suppress CA1707 warnings in the Constants classes\u003c/strong\u003e by \u003ca href=\"https://github.com/Numpsy\"\u003e\u003cem\u003eRichard Webb\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003e[\u003ca href=\"https://github-redirect.dependabot.com/icsharpcode/SharpZipLib/pull/549\"\u003e#549\u003c/a\u003e] Add .NET Standard 2.1 target framework\u003c/strong\u003e by \u003ca href=\"https://github.com/0xced\"\u003e\u003cem\u003eCédric Luthi\u003c/em\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther changes (not related to library code)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/icsharpcode/SharpZipLib/commits/v1.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SharpZipLib\u0026package-manager=nuget\u0026previous-version=0.86.0\u0026new-version=1.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/IllusionMods/TranslationTools/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/IllusionMods/TranslationTools/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/IllusionMods%2FTranslationTools/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}}]}