-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Apache Commons Team is pleased to announce the release of Apache Commons Compress 1.17.
Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. As usual this release is a mix of bug fixes and new features. It introduces a new interface InputStreamStatistics that can be used to monitor decompression progress which is implemented by most of the compressor and some of the archiving input streams. Source and binary distributions are available for download from the Apache Commons download site: http://commons.apache.org/proper/commons-compress/download_compress.cgi When downloading, please verify signatures using the KEYS file available at the above location when downloading the release. Changes in this version include: New features: o Added a unit test that is supposed to fail if we break the OSGi manifest entries again. Issue: COMPRESS-443. o Add a new SkipShieldingInputStream class that can be used with streams that throw an IOException when skip is invoked. Issue: COMPRESS-449. o New constructors have been added to SevenZFile that accept chars rather than bytes in order to avoid a common error of using the wrong encoding when creating the byte. This change may break source compatibility for client code that uses one of the constructors expecting a password and passes in null as password. We recommend to change the code to use a constructor without password argument. Issue: COMPRESS-452. Fixed Bugs: o Removed the objenesis dependency from the pom as it is not needed at all. o Fixed resource leak in ParallelScatterZipCreator#writeTo. Issue: COMPRESS-446. o Certain errors when parsing ZIP extra fields in corrupt archives are now turned into ZipException, they used to manifest as ArrayIndexOutOfBoundsException before. Issue: COMPRESS-447. o IOUtils.copy now verifies the buffer size is bigger than 0. Issue: COMPRESS-451. o ZipArchiveInputStream failed to read some files with stored entries using a data descriptor. Issue: COMPRESS-454. Changes: o Fixed some code examples. Github Pull Request #63. Thanks to Marchenko Sergey. o The streams returned by ZipFile and most other decompressing streams now provide information about the number of compressed and uncompressed bytes read so far. This may be used to detect a ZipBomb if the compression ratio exceeds a certain threshold, for example. For SevenZFile a new method returns the statistics for the current entry. Issue: COMPRESS-445. Thanks to Andreas Beeker. o Added a workaround for a bug in AdoptOpenJDK for S/390 to BZip2CompressorInputStream. Issue: COMPRESS-453. For complete information on Commons Compress, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Compress website: http://commons.apache.org/compress/ Stefan Bodewig, on behalf of the Apache Commons community -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlsUJ8cACgkQohFa4V9ri3Jt0ACgxxCmC8KTY+GAK3FWGtwga/bZ fCwAnjLoKDxZ4NorksolZcGSWyu8ny0k =Rqmr -----END PGP SIGNATURE-----