Adds a builder to ZstdCompressorOutputStream by garydgregory · Pull Request #666 · apache/commons-compress

garydgregory · 2025-04-20T14:09:02Z

Adds a builder to ZstdCompressorOutputStream to configure almost all zstd options

Avoid JVM segmentation fault in zstd-jni 1.5.7-2 See also Fix segmentation fault when calling ZstdOutputStream#setDict(ZstdDictCompress) with null luben/zstd-jni#356
Deprecate constructors except the classic one-argument constructor
Add tests
Better Javadocs

  Licensed to the Apache Software Foundation (ASF) under one
  or more contributor license agreements.  See the NOTICE file
  distributed with this work for additional information
  regarding copyright ownership.  The ASF licenses this file
  to you under the Apache License, Version 2.0 (the
  "License"); you may not use this file except in compliance
  with the License.  You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing,
  software distributed under the License is distributed on an
  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  KIND, either express or implied.  See the License for the
  specific language governing permissions and limitations
  under the License.

Read the contribution guidelines for this project.
Run a successful build using the default Maven goal with mvn; that's mvn on the command line by itself.
Write unit tests that match behavioral changes, where the tests fail if the changes to the runtime are not applied. This may not always be possible but is a best-practice.
Write a pull request description that is detailed enough to understand what the pull request does, how, and why.
Each commit in the pull request should have a meaningful subject line and body. Note that commits might be squashed by a maintainer on merge.

dwalluck · 2025-04-21T16:17:07Z

@garydgregory Looks good. Couldn't the hard-coded constants be replaced by methods from Zstd, e.g.,

public static final int ZSTD_CLEVEL_DEFAULT = 3;

becomes

public static final int ZSTD_CLEVEL_DEFAULT = Zstd.defaultCompressionLevel();

dwalluck · 2025-04-21T16:19:54Z

I realize that this creates an issue if Zstd is not on the classpath, which is why there is ZstdUtils.isZstdCompressionAvailable(), but I guess the issue is that if they are hard-coded, then they can change, but the methods in Zstd should pull the current values.

Whatever way is chosen, could you please add support for minCompressionLevel and maxCompressionLevel? These and other constants from Zstd appear to be missing.

https://github.com/luben/zstd-jni/blob/master/src/main/java/com/github/luben/zstd/Zstd.java#L1001-L1017

garydgregory · 2025-04-22T13:34:25Z

I realize that this creates an issue if Zstd is not on the classpath, which is why there is ZstdUtils.isZstdCompressionAvailable(), but I guess the issue is that if they are hard-coded, then they can change, but the methods in Zstd should pull the current values.

Whatever way is chosen, could you please add support for minCompressionLevel and maxCompressionLevel? These and other constants from Zstd appear to be missing.

https://github.com/luben/zstd-jni/blob/master/src/main/java/com/github/luben/zstd/Zstd.java#L1001-L1017

Hello @dwalluck

I'm semi-doubtful as to the usefulness of the exceptions thrown by our high-level code that use ZstdUtils.isZstdCompressionAvailable(). The exception messages don't tell you how to fix the issue so a user is still left with poking around the web.

In any case, I'm OK with the lower-level class not trying to be clever using ZstdUtils.isZstdCompressionAvailable().

My initial goal with the constants was just to reflect the C-header ... but yeah, using the APIs instead of redefining values make the code better without call sites having to using what I consider internal APIs from Commons Compress' POV.

Please see the latest code in this PR where I've split out the constants into a new class which will likely be used by call sites (and docs) with a future builder for the zstd input stream side of things.

dwalluck · 2025-04-22T14:00:09Z

In any case, I'm OK with the lower-level class not trying to be clever using ZstdUtils.isZstdCompressionAvailable().

Yes, this seems fine. I guess my point was that at the point where you call it, it's obviously available and the zstd classes is loaded.

But without this change, in my code, since I don't have a reference to the class yet, I think I would have to use reflection do something like:

if (ZstdUtils.isZstdCompressionAvailable()) {
    try {
        Integer minCompressionLevel = (Integer) Class.forName("com.github.luben.zstd.Zstd")
                                                     .getMethod("minCompressionLevel").invoke(null);
    } catch (Exception e) {

    }
}

Anyway, this is good and removes the need for any of that. Thanks!

ppkarwasz

LGTM, especially since the Builder class does not expose the optional xz dependency in its public API.

ppkarwasz · 2025-04-23T07:53:23Z

src/main/java/org/apache/commons/compress/compressors/zstandard/ZstdCompressorOutputStream.java

+     * @since 1.28.0
     */
+    // @formatter:on
+    public static class Builder extends AbstractStreamBuilder<ZstdCompressorOutputStream, Builder> {


Should this class be final?

@ppkarwasz,

Yes, makes sense.

zstd options - Avoid JVM segmentation fault in zstd-jni 1.5.7-2 See also luben/zstd-jni#356 - Deprecate constructors except the classic one-argument constructor - Add tests - Better Javadocs

…ream.builder/Builder() #666 Add org.apache.commons.compress.compressors.xz.ZstdConstants #666

… to 1.28.0 (#1470) Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.archivers.ArchiveException.requireNonNull(T, Supplier<String>). Thanks to Gary Gregory, Zaki. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.CompressorException as the root for all custom exceptions ArchiveException and CompressorException. Thanks to Gary Gregory. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=maven&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

…1.28.0 in /backend in the minor group (#4787) Bumps the minor group in /backend with 1 update: [org.apache.commons:commons-compress](https://github.com/apache/commons-compress). Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.archivers.ArchiveException.requireNonNull(T, Supplier<String>). Thanks to Gary Gregory, Zaki. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.CompressorException as the root for all custom exceptions ArchiveException and CompressorException. Thanks to Gary Gregory. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=gradle&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> 🚀 Preview: Add `preview` label to enable Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <p>This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (<a href="https://nvd.nist.gov/vuln/detail/CVE-2025-48924">https://nvd.nist.gov/vuln/detail/CVE-2025-48924</a>), but is not affected by it.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=maven&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.27.1 to 1.28.0 (#97) Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <p>This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (<a href="https://nvd.nist.gov/vuln/detail/CVE-2025-48924">https://nvd.nist.gov/vuln/detail/CVE-2025-48924</a>), but is not affected by it.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=maven&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <p>This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (<a href="https://nvd.nist.gov/vuln/detail/CVE-2025-48924">https://nvd.nist.gov/vuln/detail/CVE-2025-48924</a>), but is not affected by it.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=gradle&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.28.0 (#476) Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <p>This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (<a href="https://nvd.nist.gov/vuln/detail/CVE-2025-48924">https://nvd.nist.gov/vuln/detail/CVE-2025-48924</a>), but is not affected by it.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=gradle&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Bjørn Faaberg <[email protected]>

…#985) Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt">org.apache.commons:commons-compress's changelog</a>.</em></p> <blockquote> <h2>Apache Commons Compress 1.28.0 Release Notes</h2> <p>The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.</p> <p>Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</p> <p>This is a feature and maintenance release. Java 8 or later is required.</p> <p>This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (<a href="https://nvd.nist.gov/vuln/detail/CVE-2025-48924">https://nvd.nist.gov/vuln/detail/CVE-2025-48924</a>), but is not affected by it.</p> <h2>Changes in this version</h2> <p>Changes in this version include the following.</p> <h2>New Features</h2> <ul> <li> <pre><code> Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipParameters.toString(). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset <a href="https://redirect.github.com/apache/commons-compress/issues/602">#602</a>. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.</li> <li> <pre><code> Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](apache/commons-compress#604). Thanks to ddeschenes-1, Gary Gregory. </code></pre> </li> <li> <pre><code> Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add ZipFile.stream(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add optional FHCRC to GZIP header [#627](apache/commons-compress#627). Thanks to Danny Deschenes, Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add PMD check to default Maven goal. Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.</li> <li> <pre><code> Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) <a href="https://redirect.github.com/apache/commons-compress/issues/649">#649</a>. Thanks to Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. </code></pre> </li> <li>COMPRESS-697: Move BitStream.nextBit() method to BitInputStream <a href="https://redirect.github.com/apache/commons-compress/issues/663">#663</a>. Thanks to Fredrik Kjellberg, Gary Gregory.</li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> <li> <pre><code> Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](apache/commons-compress#666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-compress/commit/852d9c23b94127feafc1649d9c7f13d4df338845"><code>852d9c2</code></a> Prepare for the release candidate 1.28.0 RC1</li> <li><a href="https://github.com/apache/commons-compress/commit/f5eb9e28edf8a661ac5efc43b7853ee49bb73b3a"><code>f5eb9e2</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-compress/commit/36f204caa6f7bb2c92a9ad04ba246ad47a2465d2"><code>36f204c</code></a> Camel case parameter name</li> <li><a href="https://github.com/apache/commons-compress/commit/4c04e4a803831c00663a6dafd0f0837fba60633b"><code>4c04e4a</code></a> Use final</li> <li><a href="https://github.com/apache/commons-compress/commit/6cb7da194a9369edfbd65629576203b8af61ba44"><code>6cb7da1</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/563c9d2fa4d2340902284fc044a7398fc15da5fb"><code>563c9d2</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/ce73bd890e50fcb88d362fc8298f31fa90d802aa"><code>ce73bd8</code></a> Javadoc</li> <li><a href="https://github.com/apache/commons-compress/commit/a464ae94e0f9c59e9bc30be6086d876f9907d0a4"><code>a464ae9</code></a> Better parameter names</li> <li><a href="https://github.com/apache/commons-compress/commit/c0b2b84144d923a2bf7caada35e1d9bb5d562e78"><code>c0b2b84</code></a> Add TODO for next major version</li> <li><a href="https://github.com/apache/commons-compress/commit/c76bc976703dc0cebfb6d4653061b8ac3524421d"><code>c76bc97</code></a> Use OpenVEX to document that we are not affected by CVE-2025-48924 in</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-compress&package-manager=maven&previous-version=1.27.1&new-version=1.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

garydgregory mentioned this pull request Apr 20, 2025

Allow setting preset for LZMACompressorOutputStream #664

Closed

garydgregory force-pushed the feature/zstd_output_stream_builder branch from fcd7356 to f125c6c Compare April 22, 2025 13:23

ppkarwasz approved these changes Apr 23, 2025

View reviewed changes

Adds a builder to ZstdCompressorOutputStream to configure almost all

be80725

zstd options - Avoid JVM segmentation fault in zstd-jni 1.5.7-2 See also luben/zstd-jni#356 - Deprecate constructors except the classic one-argument constructor - Add tests - Better Javadocs

garydgregory force-pushed the feature/zstd_output_stream_builder branch from f125c6c to be80725 Compare April 23, 2025 11:41

garydgregory merged commit fc9bb92 into apache:master Apr 23, 2025
18 of 19 checks passed

garydgregory deleted the feature/zstd_output_stream_builder branch April 23, 2025 11:46

garydgregory added a commit that referenced this pull request Apr 23, 2025

Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputSt…

3807332

…ream.builder/Builder() #666 Add org.apache.commons.compress.compressors.xz.ZstdConstants #666

dwalluck mentioned this pull request Apr 28, 2025

Add full support for payload flags eclipse-packager/packager#74

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Adds a builder to ZstdCompressorOutputStream#666

Adds a builder to ZstdCompressorOutputStream#666
garydgregory merged 1 commit intoapache:masterfrom
garydgregory:feature/zstd_output_stream_builder

garydgregory commented Apr 20, 2025

Uh oh!

dwalluck commented Apr 21, 2025

Uh oh!

dwalluck commented Apr 21, 2025 •

edited

Loading

Uh oh!

garydgregory commented Apr 22, 2025

Uh oh!

dwalluck commented Apr 22, 2025

Uh oh!

ppkarwasz left a comment

Uh oh!

ppkarwasz Apr 23, 2025

Uh oh!

garydgregory Apr 23, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

garydgregory commented Apr 20, 2025

Uh oh!

dwalluck commented Apr 21, 2025

Uh oh!

dwalluck commented Apr 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

garydgregory commented Apr 22, 2025

Uh oh!

dwalluck commented Apr 22, 2025

Uh oh!

ppkarwasz left a comment

Choose a reason for hiding this comment

Uh oh!

ppkarwasz Apr 23, 2025

Choose a reason for hiding this comment

Uh oh!

garydgregory Apr 23, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dwalluck commented Apr 21, 2025 •

edited

Loading