Plexus Archiver 4.2.6

This release updates commons-compress to 1.21 which contains security fixed for CVE-2021-35517 CVE-2021-35516 CVE-2021-35515 CVE-2021-36090

This version requires Java 8 as minimum (commons-compress 1.21 requires Java 8).

🚀 New features and improvements

• FileInputStream, FileOutputStream, FileReader and FileWriter are no longer used (#183) @jorsol
• Code cleanup (#172) @olamy

📦 Dependency updates

• Bump plexus from 7 to 8 (#179) @dependabot
• Bump plexus-utils from 3.3.0 to 3.4.1 (#181) @dependabot
• Bump commons-compress from 1.20 to 1.21 (#177) @dependabot

Plexus Archiver 4.2.5

🚀 New features and improvements

• Speed improvements (#157) @gnodet

🐛 Bug Fixes

• Fix use of a mismatching Unicode path extra field in zip unarchiving (#167) @cwalther
  In some cases zip archiver may update the file path but not the Unicode path extra field. This would result in Plexus Archiver extracting the file using wrong (obsolete) path. Now Plexus Archiver follows the specification and in this case will ignore the extra filed and extract the file in the correct location.

📦 Dependency updates

• Bump plexus from 6.5 to 7 (#158) @dependabot
• Bump xz from 1.8 to 1.9 (#165) @dependabot

Plexus Archiver 4.2.4

🐛 Bug Fixes

• Fix unjustified warning about casing for directory entries (#155) @mthmulders

Plexus Archiver 4.2.2

In this version the reproducible build is enabled (thanks to @hboutemy) so the resulting jar should be reproducible.
For more info check the wiki page.

🐛 Bug Fixes

• DirectoryArchiver fails for symlinks if a parent directory doesn't exist (#131) @jameshans

📦 Dependency updates

• Bump commons-compress from 1.19 to 1.20 (#133) @plamentotev

Plexus Archiver 4.2.1

🐛 Bug Fixes

• #126 - Fixed broken javadoc for Archiver#configureReproducible.
• #127 - Fixed reproducible zip entry time depends on local daylight saving time.

Plexus Archiver 4.2.0

🚀 New features and improvements

• #121 - Add API to configure reproducible archives - Archiver#configureReproducible.
• Add option to force the user and group for all archive entries.
• Add option to force the last modified date for all archive entries.
• #114 - Add option to provide Comparator for Archiver. The archive entries will be added in the order specified by the provided comparator.
• #117 - Add option to limit the output size for AbstractZipUnArchiver as a way of protection against ZIP bombs. Thanks to Sergey Patrikeev and Semyon Atamas.
• Various code improvements. Thanks to Semyon Atamas and Sergey Patrikeev.

🐛 Bug Fixes

• #94 - Fixed setting archiver destination to the working directory causes NullPointerException.

📦 Dependency updates

• #119 - Updated dependencies: commons-compress to 1.18, plexus-io to 3.2.0 and plexus-utils to 3.3.0.

Plexus Archiver 4.1.0

🚀 New features and improvements

• #110 - Add option to omit "Created-By" manifest entry.

Plexus Archiver 4.0.0

NOTE: Because 3.7.0 introduced backward incompatible changes in the API (new methods in interfaces) we bumped the Plexus Archiver version to 4.0.0.

Plexus Archiver 4.0.0 requires Java 7.

🚀 New features and improvements

• #105 - Fixed performance regression introduced in Plexus Archiver 3.0.2. Affected are systems where the retrieval of a file's user and group attributes is costly operation.
• #106 - PlexusIoZipFileResourceCollection performance is improved when working with signed Jar files.

📦 Dependency updates

• #108, #109 - Updated dependencies: plexus-io to 3.1.1 and plexus-utils to 3.1.1.

Plexus Archiver 3.7.0

Plexus Archiver 3.7.0 requires Java 7.

🚀 New features and improvements

• #92 - BaseFileSet now accepts an array of FileMapper instances, allowing the name and/or the path of entries in the archive to be modified. Thanks to Thomas Collignon.
• #100 - UnArchiver now accepts an array of FileMapper instances, allowing the name and/or the path of the extracted entries to be modified. Thanks to Markus Karg.
• #98 - Now JarToolModularJarArchiver does not copy the module descriptors (module-info.class) to temporary location. It adds them directly to the JAR archive.
• #101, #102 - Now ModularJarArchiver implementations will use the JAR file manifest Main-Class attribute as module main class if one is not excellently set.

🐛 Bug Fixes

• #95 - Fixed ZIP entries last modification time rounded down on Java 8 or later
• #97 - Fixed module-info.class not being added to the modular JAR index file.

📦 Dependency updates

• #103, #104 - Updated dependencies: commons-compress to 1.18 and plexus-io to 3.1.0.

Plexus Archiver 3.4.1

🚀 New features and improvements

• #87 - of Levan Giguashvili (@odinn1984) Snyk eng team to fix a possible security issue. (See https://gist.github.com/grnd/eafd7dab7c4cc6197d817a07fa46b2df)