Bump the nuget group with 8 updates

[dependabot]

Updated jQuery from 1.11.1 to 3.5.0.

Updated jQuery.Validation from 1.12.0 to 1.19.3.

Updated Microsoft.AspNet.Identity.Owin from 2.2.0 to 2.2.4.

Release notes

Sourced from Microsoft.AspNet.Identity.Owin's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.OData from 5.6.0 to 5.8.4.

Updated Microsoft.Owin from 3.0.1 to 4.1.1.

Release notes

Sourced from Microsoft.Owin's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Owin.Security.Cookies from 3.0.1 to 4.2.2.

Release notes

Sourced from Microsoft.Owin.Security.Cookies's releases.

4.2.2

This release includes a few bugfixes, including one with possible security implications. The packages are available on nuget.org.

• CVE 2022-29117 also applies to Microsoft.Owin.

See here for the complete list of changes.

4.2.1

This release concludes significant build infrastructure changes and also includes a few product bug fixes. The packages are available on nuget.org.

See here for the complete list of changes.

The language specific satellite packages such as Microsoft.Owin.zh-Hans have been discontinued.

4.2.0

This release includes a security feature and some minor improvements. The packages are available on nuget.org.

See here for the complete list of changes. These improvements have been completely community driven, thanks everybody for helping out!

aspnet/AspNetKatana#389 adds PKCE support for OpenIdConnect authentication when using the code flow:

app.UseOpenIdConnectAuthentication(
    new OpenIdConnectAuthenticationOptions
    {
        ClientId = clientId,
        ClientSecret = clientSecret,
        Authority = authority,
        PostLogoutRedirectUri = postLogoutRedirectUri,
        ResponseType = OpenIdConnectResponseType.Code,
        RedeemCode = true,
        RedirectUri = redirectUri,
        UsePkce = true,
    });

4.1.1

This release includes a security fix and some minor improvements. The packages are available on nuget.org.

• CVE-2020-1045 also applies to Microsoft.Owin.
• See here for the complete list of changes.

Commits viewable in compare view.

Updated Newtonsoft.Json from 6.0.8 to 13.0.1.

Release notes

Sourced from Newtonsoft.Json's releases.

13.0.1

• New feature - Add JsonSelectSettings with configuration for a regex timeout
• Change - Remove portable assemblies from NuGet package
• Change - JsonReader and JsonSerializer MaxDepth defaults to 64
• Change - Change InvalidCastException to JsonSerializationException on mismatched JToken
• Fix - Fixed throwing missing member error on ignored fields
• Fix - Fixed various nullable annotations
• Fix - Fixed annotations not being copied when tokens are cloned
• Fix - Fixed naming strategy not being used when deserializing dictionary enum keys
• Fix - Fixed serializing nullable struct dictionaries
• Fix - Fixed JsonWriter.WriteToken to allow null with string token
• Fix - Fixed missing error when deserializing JToken with a contract type mismatch
• Fix - Fixed JTokenWriter when writing comment to an object

12.0.3

• New feature - Added support for nullable reference types
• New feature - Added KebabCaseNamingStrategy
• Change - Package now uses embedded package icon
• Fix - Fixed bug when merging JToken with itself
• Fix - Fixed performance of calling ICustomTypeDescriptor.GetProperties
• Fix - Fixed serializing Enumerable.Empty and empty arrays on .NET Core 3.0
• Fix - Fixed deserializing some collection types with constructor
• Fix - Fixed deserializing IImmutableSet to ImmutableHashSet instead of ImmutableSortedSet
• Fix - Fixed deserializing IImmutableDictionary to ImmutableDictionary instead of ImmutableSortedDictionary
• Fix - Fixed deserializing into constructors with more than 256 parameters
• Fix - Fixed hang when deserializing JTokenReader with preceding comment
• Fix - Fixed JSONPath scanning with nested indexer
• Fix - Fixed deserializing incomplete JSON object to JObject
• Fix - Fixed using StringEnumConverter with naming strategy and specified values

12.0.2

• New feature - Added MissingMemberHandling to JsonObjectAttribute and JsonObjectContract
• New feature - Added constructor to JTokenReader to specify initial path
• New feature - Added JsonProperty.IsRequiredSpecified
• New feature - Added JsonContract.InternalConverter
• Change - Moved embedded debug symbols in NuGet package to a symbol package on NuGet.org
• Fix - Fixed deserializing nullable struct collections
• Fix - Fixed memory link when serializing enums to named values
• Fix - Fixed error when setting JsonLoadSettings.DuplicatePropertyNameHandling to Replace

12.0.1

• New feature - Added NuGet package signing
• New feature - Added Authenticode assembly signing
• New feature - Added SourceLink support
• New feature - Added constructors to StringEnumConverter for setting AllowIntegerValue
• New feature - Added JsonNameTable and JsonTextReader.PropertyNameTable
• New feature - Added line information to JsonSerializationException
• New feature - Added JObject.Property overload with a StringComparison
• New feature - Added JsonMergeSettings.PropertyNameComparison
• New feature - Added support for multiple Date constructors with JavaScriptDateTimeConverter
• New feature - Added support for strict equals and strict not equals in JSON Path queries
• New feature - Added EncodeSpecialCharacters setting to XmlNodeConverter
• New feature - Added trace message for serializing to non-writable properties
• New feature - Added support for NamingStrategy to StringEnumConverter
• New feature - Added JsonLoadSettings.DuplicatePropertyNameHandling setting
• Change - JTokenReader now uses JsonReader.DateTimeZoneHandling setting for date values
• Change - Excluded TargetSite when serializing Exceptions without SerializableAttribute
• Change - Changed StringEnumConverter.ctor(bool camelCaseText) to obsolete
• Change - Changed StringEnumConverter.CamelCaseText to obsolete
• Fix - Fixed incorrect overflow when reading decimal values from JSON
• Fix - Fixed error message when trying to deserialize an abstract serializable type
• Fix - Fixed parsing decimals from a string with an exponent
• Fix - Fixed losing DateTime.Kind when deserializing ISO date strings
• Fix - Fixed calling constructors with ref and in parameters
• Fix - Fixed rare race condition in name table when serializing
• Fix - Fixed unhelpful exception message when unable to convert JSON value to DateTime
• Fix - Fixed error when deserializing empty array in DataTable
• Fix - Fixed deserializing empty string to empty byte array
• Fix - Fixed blank extension data values with required properties and deserializing with constructor
• Fix - Fixed ignored values being set in extension data when deserializing
• Fix - Fixed comparing equal integer and floating point values in JSON Path
• Fix - Fixed BsonReader when reading multiple content
• Fix - Fixed setting extension data with existing key
• Fix - Fixed including array attribute in XML with namespaces when converting JSON to XML
• Fix - Fixed error when serializing ref struct properties by excluding them from serialization

11.0.2

• Change - Revert DataContractAttribute to not force JSON object serialization (use JsonObjectAttribute instead)
• Fix - Fixed JPropertyDesciptor.GetValue and SetValue to not throw for non-JObject argument
• Fix - Fixed JObject ICustomTypeDescriptor.GetProperty to return the current instance
• Fix - Fixed serializing FileInfo/DirectoryInfo with a JsonConverter in .NET Standard
• Fix - Fixed serializing F# enums
• Fix - Fixed serializing types with multiple members of the same name

11.0.1

• New feature - Added netstandard2.0 build
• New feature - Added generic JsonConverter
• New feature - Added UnixDateConverter for converting Unix timestaps
• New feature - Added support for regex operator in JSON Paths
• New feature - Added JsonObjectAttribute.ItemNullValueHandling
• New feature - Added JsonObjectContract.ItemNullValueHandling
• New feature - Improved performance when resolving serialization contracts by using ConcurrentDictionary
• New feature - Improved performance of JToken.Path with a faster reverse
• New feature - Improved performance of parsing Int32 JSON integer values
• New feature - Improved performance of parsing and writing enum names
• New feature - Added IgnoreIsSpecifiedMembers to DefaultContractResolver
• New feature - Added IgnoreShouldSerializeMembers to DefaultContractResolver
• New feature - Added support for reading multiple comma delimited values with JsonReader.SupportMultipleContent
• New feature - Improved error message when an object is reused with PreserveReferencesHandling
• New feature - Added IConvertible support to netstandard1.3
• New feature - Added INotifyPropertyChanging support to netstandard1.3
• New feature - Optimized internal buffering when writing very large strings
• New feature - JObject.ContainsKey is now public
• New feature - Improved the error message when serialized ByRef properties
• New feature - Improved the error message when serializing FileInfo/DictionaryInfo without ISerializable
• New feature - Improved the error message when failing conversion in JsonReader.ReadAsInt32 and JsonReader.ReadAsDecimal
• New feature - Improved the error message when deserializing badly formatted regex strings
• Change - Types that implement ISerializable but don't have [SerializableAttribute] are not serialized using ISerializable
• Change - Changed JsonProperty.MemberConverter to obsolete
• Change - Changed camel casing logic for all caps words to not leave last character capitalized
• Change - Changed enum serialization in dictionary keys to use EnumMemberAttribute
• Fix - Fixed converting default datetime in JSON to XML on netstandard1.3
• Fix - Fixed deserializing ObservableCollection in .NET Core 2.0
• Fix - Fixed incorrectly allowing static IsSpecified properties
• Fix - Fixed not preserving trailing zeros when deserializing decimals
• Fix - Fixed JValue.CompareTo with number and string values
• Fix - Fixed not erroring when reading undefined for nullable long
• Fix - Fixed serializing immutable collections when .NET 4.0 or previous Newtonsoft.Json assembly is GACed
• Fix - Fixed writing null values by XmlNodeConverter and RegexConverter
• Fix - Fixed deserializing with a TraceWriter when the reader is not at the start
• Fix - Fixed TraceJsonWriter.WriteValue(object) writing value twice
• Fix - Fixed deserializing with constructor and readonly collection property
• Fix - Fixed error when writing unknown null value as JSON
• Fix - Fixed merging null string values
• Fix - Fixed missing CancellationToken usages in JsonTextWriter.WriteAsync
• Fix - Fixed error with JsonSerializer.Populate and comments in JSON array
• Fix - Fixed error handling when deserializing certain dictionary and lists
• Fix - Fixed serializing collection that is nullable
• Fix - Fixed JsonTextReader sync read in async method
• Fix - Fixed JsonConverter not called when target type is list and token is a string
• Fix - Fixed serializing a property that is defined in multiple interfaces
• Fix - Fixed error when deserializing null value into ConcurrentDictionary
• Fix - Fixed escaping special characters in generated JSON Paths
• Fix - Fixed reading escaped special characters in JSON Paths
• Fix - Fixed using extension data with dictionary that explicitly implements Add method
  ... (truncated)

10.0.3

• New feature - Added support for deserializing XmlElement, XmlNode, XObject, XNode and XContainer with XmlNodeConverter
• Change - MinClientVersion 2.12 added to NuGet package to restrict to compatible clients
• Fix - Fixed JsonSerializer.Binder to not throw an error when binder instance is compatible
• Fix - Fixed stack overflow when deserializing incomplete JSON to XML
• Fix - Fixed JSON Path recursive descent queries
• Fix - Fixed serializing ConcurrentDictionary in .NET Core 2.0
• Fix - Fixed serializing ConcurrentStack/Queue/Bag
• Fix - Fixed MemoryTraceWriter thread safety
• Fix - Fixed JSON Path root filter sometimes not correctly returning root token
• Fix - Fixed properties with JsonIgnore not being ignored with ItemRequired
• Fix - Fixed JToken.Load not reading past comment when CommentHandling is Ignore
• Fix - Fixed JsonReader.ReadAsDecimal with a JValue containing a BigInteger value
• Fix - Fixed converting JSON values to XML attributes to ignore current culture
• Fix - Fixed converting JSON byte array data to XML
• Fix - Fixed reading some types from KeyValuePairConverter incorrectly
• Fix - Fixed comparing high precision decimal JValues
• Fix - Fixed JsonWriter.WriteToken(JsonReader) not erroring on incomplete token
• Fix - Fixed not preventing negative integers with StringEnumConverters.AllowIntegerValues

10.0.2

• Change - .NET 4 portable class library target added back to NuGet package
• Change - Changed NuGet dependencies to use NETStandard.Library 1.6.1
• Change - Changed double parsing back to double.TryParse to avoid small floating point precision errors
• Fix - Fixed binary serialization of JsonException and friends
• Fix - Fixed JsonLoadSettings.LineInfoHandling not being used correctly when loading JTokens
• Fix - Fixed serializing IListSource implementations
• Fix - Fixed handling errors when reading metadata properties during deserialization

10.0.1

• New feature - Added async read support to JsonReader
• New feature - Added async write support to JsonWriter
• New feature - Added async support for loading JObject and JArray
• New feature - Added non-allocating parsing of double and decimal values
• New feature - Added support for TypeConverters to netstandard1.0+
• New feature - Added support for BigInteger to netstandard1.3+
• New feature - Added support for ISerializable to netstandard1.3+
• New feature - Added support for XmlDocument to netstandard1.3+
• New feature - Added support for SerializableAttribute and NonSerializedAttribute to netstandard1.3+
• New feature - Added ISerializationBinder
• New feature - Added SerializationBinder properties to JsonSerializer and JsonSerializerSettings
• New feature - Added TypeNameAssemblyFormatHandling
• New feature - Added TypeNameAssemblyFormatHandling properties to JsonSerializer and JsonSerializerSettings
• New feature - Added support for root object selector in JSONPath filters
• New feature - Added support for multiple names in JSONPath scan filter
• New feature - Added support for any combination of paths and values in JSONPath filter expressions
• New feature - Added support for extension data names to NamingStrategy
• New feature - Added ProcessExtensionDataNames flag to NamingStrategy
• New feature - Added JsonWriter.AutoCompleteOnClose to control whether JSON is auto-completed on JsonWriter.Close
• New feature - Added JsonReaderException constructor with path, line number, line position
• New feature - Added JsonWriterException constructor with path
• New feature - Added JsonReader.SetToken method overload with option not to update position array index
• New feature - Added support for automatically calling single constructor on immutable structs
• Change - Removed .NET 4 portable class library target from NuGet package
• Change - Removed obsolete JsonConverter.GetSchema method
• Change - Removed obsolete constructor from DefaultContractResolver
• Change - Removed obsolete async methods from JsonConvert
• Change - Removed obsolete OnDeserialized, OnDeserializing, OnSerialized, OnSerializing, OnError from JsonContract
• Change - Removed obsolete JsonDictionaryContract.PropertyNameResolver
• Change - Removed obsolete ConstructorParameters, OverrideConstructor, ParametrizedConstructor from JsonObjectContract
• Change - Obsoleted TypeNameAssemblyFormat properties on JsonSerializer and JsonSerializerSettings
• Change - Obsoleted SerializationBinder
• Change - Obsoleted Binder properties on JsonSerializer and JsonSerializerSettings
• Change - Obsoleted FormatterAssemblyStyle in non-full .NET targets
• Change - Obsoleted Newtonsoft.Json.Bson (moved to new NuGet package)
• Change - Improved constructor parameter binding on .NET Core and portable builds
• Change - Improved error when attempting to convert root JSON object property to an XML attribute
• Change - Changed exception thrown when parsing invalid Unicode escape sequence to JsonReaderException
• Change - Changed StringEnumConverter.AllowIntegerValues to also reject reading integer strings
• Change - Changed StringEnumConverter.AllowIntegerValues to also reject writing enum values with no name
• Fix - Fixed JsonTextReader.ReadAsXXX methods not erroring on missing commas between values
• Fix - Fixed error when serializing F# lists with F# 4.1+
• Fix - Fixed StringEnumConverter reading specified enum names that contain a comma
• Fix - Fixed using a TraceWriter with nullable bytes
• Fix - Fixed deserializing null Regex values
• Fix - Fixed deserializing DataTable with error handling
• Fix - Fixed DynamicReflectionDelegateFactory creating typed value type constructors
• Fix - Fixed deserializing with type naming and complex nested generic types
• Fix - Fixed error when converting certain JSON to XML on .NET Core
• Fix - Fixed error handling skipping reading the next object value
  ... (truncated)

9.0.1

• New feature - Added support for .NET Core with netstandard1.0
• New feature - Added NamingStrategy, CamelCaseNamingStrategy, SnakeCaseNamingStrategy
• New feature - Added naming strategy properties to JsonObjectAttribute and JsonPropertyAttribute
• New feature - Updated build to use .NET CLI tools
• New feature - Improved performance of many operations on large JArrays
• Fix - Fixed converting XElements without a namespace attribute to JSON
• Fix - Fixed various bugs in JSONPath equals and not equals comparisions
• Fix - Fixed JsonTextReader.ReadAsString incorrectly erroring when reading some numbers
• Fix - Fixed JTokenWriter sometimes losing types when writing JTokens
• Fix - Fixed JTokenWriter sometimes losing types with JValue.WriteTo
• Fix - Fixed incorrect check when looking for non-default constructors on collections
• Fix - Fixed JsonReader.ReadAsDouble with a JValue BigInteger
• Fix - Fixed converting dollar JSON properties to XML
• Fix - Fixed dynamic property getter type information
• Fix - Fixed JsonTextReader reading NaN, Infinity, -Infinity with ReadAsDouble and ReadAsString

8.0.3

• New feature - Added MergeNullValueHandling
• New feature - Added constructor to StringEnumConverter for setting camelcase from attribute
• Fix - Fixed JsonTextWriter not getting buffer from buffer pool
• Fix - Fixed iterating over extension data multiple times
• Fix - Fixed JSONPath queries combining wildcard with property search
• Fix - Fixed serializing ISet with the .NET 4 portable assembly
• Fix - Fixed converting some property names to camel case
• Fix - Fixed F# serialization in partial trust issue

8.0.2

• New feature - Added ReadAsBoolean to JsonReader
• Fix - Fixed serializing certain objects with events
• Fix - Fixed reading booleans as strings
• Fix - Fixed reading large integers as booleans
• Fix - Fixed ReadAsBytes with type name handling

8.0.1

• New feature - Added IArrayPool and a setting on JsonTextReader and JsonTextWriter
• New feature - Added JsonReader.ReadAsDouble
• New feature - Added JsonLoadSettings and CommentHandling to control loading comments in LINQ to JSON
• New feature - Added JsonLoadSettings.LineInfoHandling
• New feature - Added support for JsonConstructorAttribute on list and dictionary collections
• New feature - Added support for deserializing string to Version
• New feature - Added ShouldDeserialize to JsonProperty
• New feature - Added Required.DisallowNull
• New feature - Added support for converting JSON to XML with invalid XML name chracters
• New feature - Improved case-insensitive deserialization performance
• New feature - Improved date parsing performance
• Change - Changed ReadAsDateTime, ReadAsDateTimeOffset, ReadAsBytes, ReadAsString, ReadAsInt32 on JsonReader from abstract to virtual
• Change - Changed parsing JArrays to not include comments by default
• Change - Changed JTokenWriter to use the last property instead of erroring when there are duplicate property names
• Change - Changed Uri JValues to use OriginalString when written to JSON
• Change - Changed DateTimeOffset JValues to return TypeCode.Object from IConvertible.GetTypeCode()
• Fix - Fixed converting JSON metadata array value to XML
• Fix - Fixed not including line information with some XML conversion errors
• Fix - Fixed error when writing certain JSON with escaped characters
• Fix - Fixed PopulateObject error when JSON starts with a comment
• Fix - Fixed incorrect IJsonLineInfo line position after the first line
• Fix - Fixed JSONPath when querying against Uri, Guid and Date values
• Fix - Fixed JsonReader.Path when the path is escaped
• Fix - Fixed writing JRaw twice when a TraceWriter is set
• Fix - Fixed getting the wrong value when reading certain large integers
• Fix - Fixed deserializing DataSet with a null DataTable
• Fix - Fixed deserializing a null DataSet
• Fix - Fixed error when serializing F# discriminated unions in Windows Store apps
• Fix - Fixed error serializing some types when there are conflicting interface properties
• Fix - Fixed error when settings ReferenceResolver is set to null
• Fix - Fixed DateTimeZoneHandling not being used when writing DateTime dictionary keys
• Fix - Fixed bug when converting an integer JValue to a nullable enum
• Fix - Fixed converting null string JValue to XML
• Fix - Fixed Mono generic class private field serialization bug
• Fix - Fixed error when deserializing ignored property with mismatched type
• Fix - Fixed deserializing to a type when setting JToken extension data
• Fix - Fixed setting default values onto properties already set in constructor
• Fix - Fixed casting dynamic JValue to JToken
• Fix - Fixed serializing non-zero based arrays
• Fix - Fixed reading 24 hour midnight ISO dates

7.0.1

• New feature - DiscriminatedUnionConverter performance improvements
• New feature - Added JsonRequiredAttribute
• New feature - Added JsonSerializerSettings.ReferenceResolverProvider property
• New feature - Added DefaultContractResolver.ResolveDictionaryKey
• New feature - Added JsonDictionaryContract.DictionaryKeyResolver
• New feature - Added support for reading GUID strings as bytes in JsonTextReader
• New feature - Added EqualityComparer to JsonSerializer
• Change - Changed reading GUIDs as bytes to only support 00000000-0000-0000-0000-000000000000 format
• Change - Renamed aspnetcore50 target to dnxcore50
• Change - Marked JsonSchema as obsolete
• Change - Marked DefaultContractResolver(bool) as obsolete
• Change - Marked JsonSerializerSettings.ReferenceResolver as obsolete
• Change - Marked JsonDictionaryContract.PropertyNameResolver as obsolete
• Fix - Fixed deserializing empty strings in Hashtables
• Fix - Fixed incorrect JTokenReader.Path in certain situations
• Fix - Fixed error when serializing certain objects in medium trust
• Fix - Fixed deserializing large nullable UInt64 values
• Fix - Fixed writing large UInt64 JValues
• Fix - Fixed converting unmatched namespace prefixes in JSON to XML
• Fix - Fixed IsoDateTimeConverter on DateTime properties with DateTimeFormatHandling.DateTimeOffset
• Fix - Fixed preserving object references with read only properties
• Fix - Fixed error when deserializing large JSON integers to XML
• Fix - Fixed serializing extension data properties with no setter
• Fix - Fixed serializing discriminated unions with type name or reference tracking enabled
• Fix - Fixed DataTableConverter not using JsonSerializer settings
• Fix - Fixed resolving properties from nested interfaces
• Fix - Fixed deserializing classes derived from ConcurrentDictionary
• Fix - Fixed passing default values to constructors
• Fix - Fixed serializing root references from JsonConverters
• Fix - Fixed empty strings coerced to null not erroring with Required.Always
• Fix - Fixed invalid Required.Always error with constructor property name casing
• Fix - Fixed empty string coerce check with Required.Always and constructor

Commits viewable in compare view.

Updated SharpZipLib from 0.86.0 to 1.3.3.

Release notes

Sourced from SharpZipLib's releases.

1.3.3

Another minor release, containing security fixes and smaller bugfixes.

Fixes:

• 🐛 specialized tar extract traversal by nils måsén
• 🐛 [#​635] bzip2 use explicit feature defs for vectorized memory move by Jackson Wood
• 🐛 [#​645] tar create translated files in temp by nils måsén

Smaller changes:

• 🔨 [#​604] Move the Password property from DeflaterOutputStream into ZipOutputStream by Richard Webb
• 🔨 [#​625] Make BZip2Constants static instead of sealed by Richard Webb
• 🔨 [#​626] make a couple of private functions static by Richard Webb

Other changes (not related to library code):

• 📚 [#​648] zip fix ZipStrings typo by Friedrich von Never
• 🚨 add tests for tar path traversal by nils måsén
• ⚙️ add codeql analysis by nils måsén
• 🚨 [#​636] Fix unstable tests and switch to dotcover by nils måsén
• 🚨 [#​634] add an async version of the WriteZipOutputStream benchmark by Richard Webb
• ⚙️ [#​628] Limit code coverage to windows CI by nils måsén
• 🚨 [#​627] fix the expected/actual value ordering in unit tests by Richard Webb

1.3.2

Another minor release, containing security fixes and smaller bugfixes.
Additionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when
used in newer versions of .NET (Core), mainly in Bzip2.

Features

• [#​611] Bzip input stream simple vectorization by Konrad Kruczyński
• [#​351] Add support for Filename field in GZip by nils måsén

Smaller fixes and optimizations

• [#​579] Implement very simple ReadAsync in ZipAESStream by Richard Webb
• [#​587] Remove supported method checks from ZipEntry.CompressionMethod setter by Richard Webb
• [#​593] Simplify DropPathRoot and fix out of bounds issue by nils måsén
• [#​575] Replace uses of new T[0] with Array.Empty<T> by Richard Webb
• [#​583] Restore entry times on FastZip extract by nils måsén
• [#​517] Throw exception on Store+Descriptor entries by nils måsén
• [#​578] Fix typos in the StreamDecodingException doc comments by Richard Webb
• [#​577] Throw ZipException in ZipAESStream instead of generic Exception by Richard Webb
• [#​510] Build the test bootstrapper app as netcoreapp3.1 instead of netcoreapp2.0 by Richard Webb
• [#​546] Make pure private functions static by Richard Webb
• [#​554] Skip CRC calculation for AES zip entries by nils måsén
• [#​605] Suppress CA1707 warnings in the Constants classes by Richard Webb
• [#​549] Add .NET Standard 2.1 target framework by Cédric Luthi

Other changes (not related to library code)

• [#​586] Convert VB sample projects to PackageReference format by Richard Webb
• [#​533] Convert the C# sample projects to PackageReference format by Richard Webb
• [#​457] add basic async unit tests for the inflator/deflator streams by Richard Webb
• [#​588] Add a simple async read test for ZipFile by Richard Webb
• [#​621] unify PR/push CI build actions by nils måsén
• [#​616] Change the build status badge to reference github actions by Richard Webb
• [#​603] pass CreateZip tests that are within time tolerance by nils måsén
• [#​602] Update test/coverage packages and push to codecov by nils måsén
• [#​601] pass tests that are within time tolerance by nils måsén
• [#​599] Use net46 as CI target framework for windows tests by nils måsén
• [#​594] Remove the local nuget.config files from the test projects by Richard Webb
• [#​553] Remove broken codacy integration by nils måsén
• [#​542] Build and publish documentation on release by nils måsén

1.3.1

Minor release, mainly to address the incorrect file version of v1.3.0, but also contains some security fixes and performance improvements.

Highlights

• Correct FileVersion and AssemblyVersion
• Security fixes for ZipFile and Zip*Streams
• Improved CRC32 performance
• BZip2 compression support for Zip files

Features

• [#​355] Wire up BZip2 compression support for Zip files by Richard Webb

Fixes

• [#​475] Fix updating zips with descriptor entries by Richard Webb & nils måsén
• [#​516] Improve CRC32 performance by Nelson Gomez
• [#​538] Use RNGCryptoServiceProvider for crypto headers by nils måsén
• [#​539] Use securely generated random temporary file names by nils måsén
• [#​509] Make PutNextEntry throw if the entry is AES and no password has been set by Richard Webb

Other changes (not related to library code)

• [#​541] Update csproj for new release by nils måsén
• [#​530] Fix Codacy Workflows by nils måsén
• [#​529] Add release workflow by nils måsén
• [#​511] Move the 7zip helper functions into their own class for easier reuse by Richard Webb
• [#​525] Update the sample projects to use the v1.3 release by Richard Webb
• [#​522] Use PackageIcon instead of PackageIconUrl in csproj by nils måsén
• [#​523] Fix Codacy workflows by nils måsén

1.3.0

Highlights

• AES encryption fixes and support in FastZip
• File name encoding support for Tar
• Improved Unix timestamp support
• Better handling of entry file names
• Fix errors with entries using Stored compression method

Changes

• TarArchive.ExtractContents() now needs another parameter set to true to allow the extraction to traverse outside of the target directory.
• TarArchive constructors now includes an Encoding parameter. Omitting it will discard any non-ASCII bytes in file names.

Fixes

• [#​503] Consider AES overhead when testing encrypted folder entries by Richard Webb
• [#​452] Ensure crypto streams are disposed in ZipFile.GetOutputStream by Richard Webb
• [#​333] Handle unsupported compression methods in ZipInputStream better by Richard Webb
• [#​402] Only convert entry.Name once when accessing updateIndex by Vladyslav Taranov
• [#​353] Fix ZipFile.TestLocalHeader CompressionMethod resolving for AES entries by Richard Webb
• [#​460] Account for AES overhead in compressed entry size by Richard Webb
• [#​422] Change ZipOutputStream.PutNextEntry to explicity validate the requested compression method by Richard Webb
• [#​467] Allow seeking a PartialInputStream to the very end by Víctor M. González
• [#​440] Use CompressionMethodForHeader for header entries by Richard Webb
• [#​420] Throw NotSupportedException in ZipFile.Add when trying to add AES entry by Richard Webb
• [#​421] Have ZipFile.Add validate compression compability internally by Richard Webb
• [#​387] Better handle baseStreams closing themselves unexpectedly by Richard Webb
• [#​408] When searching for the Zip64 end of central directory locator, pay attention to its fixed size by Richard Webb
• [#​406] Skip forced Deflate flush when using Stored compression by nils måsén
• [#​362] Don&#​39;t call CleanName from the ZipEntry constructor by Richard Webb
• [#​465] Use correct count in ZipAESStream.ReadBufferedData by Víctor M. González
• [#​390] Ensure GZipOutputStream headers are written before flush by Richard Webb
• [#​498] Use string.Trim to trim strings by Richard Webb
• [#​432] Throw ArgumentNullException in BZip2 by Richard Webb
• [#​519] Restrict path traversal on TarArchive extraction by nils måsén

Features

• [#​201] Raise ProcessDirectory event for FastZip extract by Stevie-O
• [#​380] Add support for AES encryption in FastZip.CreateZip by Richard Webb
• [#​497] Transform new entry names using an INameTranform in ZipOutputStream by Richard Webb
• [#​482] Add variants of FastZip.CreateZip taking IScanFilter instead of strings by Richard Webb
• [#​455] Add FastZip.CreateZip with a leaveOpen parameter by Richard Webb
• [#​433] Restore directory timestamps when extracting with FastZip by Richard Webb
• [#​472] Allow ZipFile to accept empty strings as passwords when decrypting AES entries by Richard Webb
• [#​364] Add nameEncoding parameter to Tar entries by Yusuke Ito
• [#​463] Improve support for Unix timestamps in ZIP archives by Bastian Eicher

Other changes (not related to library code)

• [#​346] Add a Security Policy by nils måsén
  ... (truncated)

1.2.0

Fixes:

• ZipEntry name mismatch when attempting to delete a directory entry (#​295)
• Revert ArraySegment simplification to speed up CRC32 calculation (#​301)
• Allow AES Zip to better handle reading partial stream data (#​308)
• Always write Zip64 extra size fields when size is -1 (too big for non-Zip64) (#​314)
• Throw exception when attempting to read a zero code length symbol (#​316)
  • This should fix most issues where reading Zip-files get stuck in an infinite loop
• ZipOutputStream.CloseEntry() now works for Stored AES encrypted entries (#​323)
• Empty string is now treated as no RootPath in TarArchive (#​336)
• ZipAESStream now handle reads of less data than the AES block size (#​331)
• Flushing a GZipOutputStream now attempts to deflate all input data before writing it to the underlying stream (#​225)
• StrongEncryption flag is no longer (incorrectly) set for WinzipAES encrypted entries (#​329)
• Attempting to read 0 bytes from a GZipInputStream no longer causes it to hang indefinitely (#​372)

Features:

• HostSystem can now be set for Zipfiles, allowing creation of files targeting Linux filesystems (#​325)
• The SharpZip custom Exception types now implements ISerializable (#​369)
  • This allows them to be transmitted when using WCF

Changes:

• ZipFile constructor now has a leaveOpen parameter (#​302)
• FastZip.ExtractZip now sets isStreamOwner in the ZipFile constructor (#​311)
• ZipFile now always tries to find the Zip64 central directory and prefers it if exists (#​363)
  • This will allow for better compatibility with other archivers.

1.1.0

Changes:

• AES256 decryption now works as intended.
• AES encryption should also be working but the code is not sufficiently tested and may be buggy.
• Sourcelink debugging is now enabled and the symbols are included in the nuget package.
• Overriding the codepage used for the file names and comments is now possible when extracting archives by setting ZipStrings.Codepage or ZipStrings.UseUnicode.
• Calculating the Adler checksum is now skipped for Zip and Gzip since it's not actually used for the formats. This should greatly improve performance.

1.0.0

With the move to .NET Standard and the re-licensing to MIT, effort has been put into creating a stable v1.0 API for SharpZipLib.

Major changes since 0.86:

• The targeted frameworks are now:
  • .NET Standard 2.0 netstandard2 (Core 2.0+, FW 4.6.1+, Mono 5.2+, UWP 16299)
  • .NET Framework 4.5 net45 (Mono 4, Dependency-free on Windows 8+/2012+)
    See .NET implementation support
• The library is now released under the MIT license. See Issue #​103.
• The legacy Stream API has been replaced by the IDisposable pattern. (Stream.Close() calls Dispose(true) by default, so it should be backwards compatible)
  See Stream.Close Method.
• Encoding now works more predictably, defaulting to UTF-8 encoding and correctly specifying it as such.
  See ZipStrings and Unicode.
• FastZip now prevents traversal outside of the target directory when extracting unless this is explicitly allowed. See Restrict path traversal on FastZip extraction
• The ICSharpCode.SharpZipLib.Checksums namespace has been renamed ICSharpCode.SharpZipLib.Checksum.

For more detailed notes, see Pre-release version notes.

1.0.0-rc2

Changes

• ZipEntry.IsUnicodeText now defaults to true
• ZipConstants.DefaultCodePage is now called ZipStrings.CodePage (but backwards-compatible wrappers exists on ZipConstants)
  For more information, see ZipStrings and Unicode

Fixes

• #​253 InflaterInputStream throws 'Invalid input data' when unpacking certain files using RC1
• #​251 ZipConstants.DefaultCodePage is set as UTF-8, but the default for FileEntry.IsUnicodeText is still false

1.0.0-rc1

Changes

• Supported frameworks are now NET45 and NETSTANDARD2

Fixes

• #​232 SECURITY: vulnerable to zip-slip (possible remote code execution/file overwrite)
• #​164 System.NotSupportedException when zipping more than ~4.2 gb of data to a stream that doesn't support seeking
• #​229 TestArchive hangs
• #​121 TAR in ustar format with long file names: TarEntry name is incomplete
• #​151 GZip.Compress ArgumentOutOfRangeException:bufferSize
• #​183 0 byte buffers writing 0 bytes fails CRC
• #​213 Tar does not read the same number of blocks as it wrote - causes potential socket issues

0.86.0.518

Changes for 0.86.0

• Multi-member gzip files are now supported. Contributed by Geoff Hart.
• Zero byte files caused ZipOutputStream to create invalid zipfiles. Contributed by Mark Ritchie.
• ZipFile.CommitUpdate failed on ODT (Open Document) files when updating in memory. Contributed by Dricks.
• Exceptions occurring within ZipFile.CommitUpdate were being silently discarded.
• In FastZip, the NameFilter erroneously removed all escapes from regex. Contributed by John Lemberger.
  Note: This is a breaking change - if you had detoured this filter bug via doubled-up backslashes,
  please halve them - for example change @"\myextract.txt$" to @"\myextract.txt$", or
  change "\\myextract.txt$" to "\myextract.txt$".
• AES Encryption and Decryption is now supported.
• TarArchive now has IsStreamOwner property, for use with MemoryStream.
• Removed exception "Extra data contains Zip64 information but version 2.0 is not high enough" due to rogue zip creators.
• FastZip.ExtractZip now accepts an Input Stream.
• Zip input and output streams can now specify buffer sizes.
• Solved "NTFS Extra data invalid" exception when reading zip files with zero-length NTFS ExtraData entry.
• Fixed "Size mismatch" exceptions reading zips created by SharpZipLib with an explicit entry CRC and Size.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.