File plexus-archiver.changes of Package plexus-archiver.31389

Overview Repositories Revisions Requests Users Attributes Meta

File plexus-archiver.changes of Package plexus-archiver.31389

-------------------------------------------------------------------
Wed Sep  6 07:09:33 UTC 2023 - Fridrich Strba <fstrba@suse.com>

- Update to upstream version 4.8.0
- Changes of 4.8.0
  * Security fix
    + Avoid override target symlink by standard file in
      AbstractUnArchiver (bsc#1215973, CVE-2023-37460)
  * New features and improvements
    + Add tzst alias for tar.zst archiver/unarchived (#274)
  * Bug Fixes
    + detect permissions for addFile (#293)
  * Maintenance
    + Remove public modifier from JUnit 5 tests (#294)
    + Use https in scm/url (#291)
    + Remove junit-jupiter-engine from project dependencies (#292)
    + Remove parent and reports menu from site (#282)
    + Cleanup after "veryLargeJar" test (#281)
    + Override project.url (#279)
- Changes of 4.7.1
  * Bug Fixes
    + don't apply umask on unknown perms (Win) (#273)
- Changes of 4.7.0
  * New features and improvements
    + add umask support and use 022 in RB mode (#271)
    + Use NIO Files for creating temporary files (#270)
    + Deprecate the JAR Index feature (JDK-8302819) (#268)
    + Add Archiver aliases for tar.* (#266)
  * Maintenance
    + Use JUnit TempDir to manage temporary files in tests (#269)
    + Override uId and gId for Tar in test (#264)
    + Bump maven-resources-plugin from 2.7 to 3.3.1 (#223)
- Changes of 4.6.3
  * New features and improvements
    + Fix path traversal vulnerability (#261)
      The vulnerability affects only directories whose name begins
      with the same prefix as the destination directory. For example
      malicious archive may extract file in /opt/directory instead
      of /opt/dir.
- Changes of 4.6.2
  * Bug Fixes
    + Fix regression in handling symbolic links. See
      codehaus-plexus/plexus-io#89
- Changes of 4.6.1
  * Bug Fixes
    + Normalize file separators before warning about equal archive
      entries (#249)
- Changes of 4.6.0
  * New features and improvements
    + keep file/directory permissions in Reproducible Builds
      mode (#241)
- Changes of 4.5.0
  * New features and improvements
    + Add zstd (un)archiver support (#226)
  * Bug Fixes
    + Fix UnArchiver#isOverwrite not working as expected (#229)
      Existing files were overridden only if UnArchiver#isOverwrite
      was set and the existing files were older than the archive
      entry.
      Now it works as documented: older files are always overridden;
      when UnArchiver#isOverwrite is true, existing files are always
      overridden regardless if they are older or not.
- Changes of 4.4.0
  * New features and improvements
    + Drop legacy plexus API and use only JSR330 components (#220)
- Changes of 4.3.0
  * New features and improvements
    + Require Java 8 (#206)
    + Refactor to use FileTime API (#199)
    + Rename setTime method to setZipEntryTime (#209)
    + Convert InputStreamSupplier to lambdas (#212)
  * Bug Fix
    + Reproducible Builds not working when using modular jar (#205)
- Changes of 4.2.7
  * New features and improvements
    + Respect order of META-INF/ and META-INF/MANIFEST.MF entries in
      a JAR file (#189)
- Changes of 4.2.6
  * New features and improvements
    + FileInputStream, FileOutputStream, FileReader and FileWriter
      are no longer used (#183)
    + Code cleanup (#172)
- Changes of 4.2.5
  * New features and improvements
    + Speed improvements (#157)
  * Bug Fixes
    + Fix use of a mismatching Unicode path extra field in zip
      unarchiving (#167)
      In some cases zip archiver may update the file path but not
      the Unicode path extra field. This would result in Plexus
      Archiver extracting the file using wrong (obsolete) path.
      Now Plexus Archiver follows the specification and in this
      case will ignore the extra filed and extract the file in the
      correct location.
- Changes of 4.2.4
  * Bug Fixes
    + Fix unjustified warning about casing for directory entries
      (#155)
- Changes of 4.2.2
  * Bug Fixes
    + DirectoryArchiver fails for symlinks if a parent directory
      doesn't exist (#131)
- Modified patch:
  * 0001-Remove-support-for-snappy.patch
    + rediff to changed context
- Removed patch:
  * logger-level.patch
    + not needed any more with this version
- Added patch:
  * plexus-archiver-4.8.0-no_zstd.patch
    + Remove support for ZStd compression to reduce the dependency
      graph

-------------------------------------------------------------------
Tue May 11 14:50:27 UTC 2021 - Fridrich Strba <fstrba@suse.com>

- Do not compile the test build against the legacy guava20 any more

-------------------------------------------------------------------
Sun Nov 24 14:42:08 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Upgrade to version 4.2.1
- Modified patch:
  * 0001-Remove-support-for-snappy.patch
    + rediff to changed context

-------------------------------------------------------------------
Mon Apr  1 23:12:20 UTC 2019 - Jan Engelhardt <jengelh@inai.de>

- Describe package, not the project vision.

-------------------------------------------------------------------
Fri Mar  8 07:53:43 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Initial packaging of plexus-archiver 3.6.0
- Generate and customize ant build file
- Make running of tests optional
- Added patches:
  * 0001-Remove-support-for-snappy.patch
    + When built without snappy support and trying to use Snappy,
      throw UnsupportedOperationException
  * logger-level.patch
    + Cast the result of getContainer() call, because the
      getLoggerManager() method is not a method of the
      PlexusContainer interface, but of the DefaultPlexusContainer
      implementation

Places

File plexus-archiver.changes of Package plexus-archiver.31389

Places