tar

This project publishes no release notes. Between v7.5.18 and v7.5.19 there were 2 commits, 1 of them substantive:

• add maxDecompressionRatio guard against explosive decompression

This project publishes no release notes. Between v7.5.17 and v7.5.18 there were 3 commits, 2 of them substantive:

• pax: parse values according to known types
• refuse to let header size be less than 0

This project publishes no release notes. Between v7.5.16 and v7.5.17 there were 2 commits, 1 of them substantive:

• terminate pax strings on nul bytes

This project publishes no release notes. Between v7.5.15 and v7.5.16 there were 5 commits, 4 of them substantive:

• remove some uses of mutate-fs
• fix inconsequential typo in PENDINGLINKS symbol name
• update project deps
• do not apply PAX header fields to meta entries

This project publishes no release notes. Between v7.5.14 and v7.5.15 there were 2 commits, 1 of them substantive:

• fix: regression in pending links detection

This project publishes no release notes. Between v7.5.13 and v7.5.14 there were 3 commits, 2 of them substantive:

• update workflows and deps
• stricter protection against hardlinks preempting their targets

• Added zstd compression support.
• Consistent TOCTOU behavior in sync t.list
• Only read from ustar block if not specified in Pax
• Fix sync tar.list when file size reduces while reading
• Sanitize absolute linkpaths properly
• Prevent writing hardlink entries to the archive ahead of their file target

• Deprecate onentry in favor of onReadEntry for clarity.

• Add onWriteEntry option

• DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

• Update minipass to v7.1.0
• Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

• Drop support for node <18
• Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
• Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
• Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
• Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

• Add support for brotli compression
• Add maxDepth option to prevent extraction into excessively deep folders.

6.1.13 (2022-12-07)

Dependencies

• cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

6.1.12 (2022-10-31)

Bug Fixes

• 57493ee #332 ensuring close event is emited after stream has ended (@webark)
• b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

• f129929 #313 remove dead link to benchmarks (#313) (@yetzt)
• c1faa9f add examples/explanation of using tar.t (@isaacs)

• remove dead link to benchmarks (#313) (@yetzt)
• add examples/explanation of using tar.t (@isaacs)
• ensure close event is emitted after stream has ended (@webark)
• replace deprecated String.prototype.substr() (@CommanderRoot, @lukekarrys)

• Drop support for node 6 and 8
• fix symlinks and hardlinks on windows being packed with \-style path targets