8000 chore(deps): bump archive from 4.0.9 to 4.3.0 in /openhealth by dependabot[bot] · Pull Request #221 · shroominic/OpenGlucose · GitHub
[go: up one dir, main page]
Skip to content

chore(deps): bump archive from 4.0.9 to 4.3.0 in /openhealth - #221

Merged
cursor[bot] merged 5 commits into
mainfrom
dependabot/pub/openhealth/archive-4.3.0
Sep 28, 2026
Merged

chore(deps): bump archive from 4.0.9 to 4.3.0 in /openhealth#221
cursor[bot] merged 5 commits into
mainfrom
dependabot/pub/openhealth/archive-4.3.0

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Sep 21, 2026
Copy link
Copy Markdown
Contributor

Bumps archive from 4.0.9 to 4.3.0.

Changelog

Sourced from archive's changelog.

4.3.0

  • Added multithreaded decoding to XZDecoder. Passing an XZMultithreadOptions to decodeBytes or decodeStream spreads the work over isolates, one xz block per job, and reports the result through its onDone callback. Both methods behave exactly as before when it is omitted. On a 1.1 GB archive of six blocks: 16.1 s single threaded, 8.0 s on the default three workers, 5.0 s on six.
  • decodeStream reading from an InputFileStream now lets each worker read its own block straight from disk, so the compressed archive never passes through the calling isolate. Decoding a 1.1 GB archive to an OutputFileStream peaks at 1.8 GB, below the 3.0 GB the single threaded path uses, while being twice as fast.
  • Multithreaded decoding falls back to the single threaded path on the web, where there are no isolates, and the isolate machinery is tree-shaken out of web builds entirely.
  • Added InputFileStream.fileBuffer, fileOffset and fileLength.
  • Added --x86 flag support to XZDecoder
  • Improved verify: true speed for XZDecoder
  • Improved overall decode speed for XZDecoder
  • Decreased RAM usage for XZDecoder
  • Added concatenated streams support for XZDecoder
  • Added crc64 wasm support (verify: true)
  • Added uncompressedSize getter for XZDecoder, returning the original file size before compression.
  • Fix: pb=4 flag range error in XZDecoder
  • Fix: padding for _streamStart in XZDecoder
  • Added throwOnError to XZDecoder.decodeBytes and decodeStream. Without it a malformed or truncated archive still returns the partial output with nothing to say it is not the whole file, which was the only decode with no way at all to report a failure. In multithreaded mode the exception is delivered to XZMultithreadOptions.onError, and setting throwOnError without an onError is now refused rather than losing the failure.
  • Fix: a corrupt xz block lost the part of itself that had already decoded when verify: true was used with an output that cannot be read back, such as an OutputFileStream or any multithreaded decode. The output now stops in the same place whichever way the decode was asked for.
  • Added XZDecoder.maxPreallocateSize, capping how large an output buffer is allocated from a size the archive itself declares. Defaults to xzDefaultMaxPreallocateSize, 2 GB natively and 256 MB on the web.
  • Added XZMultithreadOptions.fileReadBufferSize.
  • Fix: an xz --check=none archive with corrupt blocks passed verify: true.
  • Fix: the xz block header reader trusted its own fields, accepting an unterminated multibyte integer, a filter properties length past the end of the header, empty delta or LZMA2 properties, and a bad stream header or footer CRC.
  • Fix: the zip End of Central Directory record was missed when its signature straddled a chunk of the backwards search, or sat within the last 21 bytes of the file, so a valid archive could decode as empty.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump archive from 4.0.9 to 4.3.0 in /openhealth
00dc60c 
Bumps [archive](https://github.com/brendan-duncan/archive) from 4.0.9 to 4.3.0.
- [Changelog](https://github.com/brendan-duncan/archive/blob/main/CHANGELOG.md)
- [Commits](https://github.com/brendan-duncan/archive/commits)

---
updated-dependencies:
- dependency-name: archive
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
dependabot Bot commented on behalf of github Sep 21, 2026
Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from shroominic as a code owner September 21, 2026 05:20
@dependabot dependabot Bot mentioned this pull request Sep 21, 2026
Closed
cursoragent and others added 4 commits September 28, 2026 13:57
@cursoragent @shroominic
chore: merge main into dependency bump
97d7736 
Co-authored-by: shroominic <shroominic@users.noreply.github.com>
@cursoragent @shroominic
chore(deps): refresh lockfile for archive 4.3.0
bd5b4d4 
Dependabot solved pubspec.lock with a newer Dart SDK than the pinned
Flutter 3.41.6 toolchain, so enforce-lockfile failed in CI. Regenerated
the lock with that toolchain and kept the 4.3.0 bump.

Co-authored-by: shroominic <shroominic@users.noreply.github.com>
@cursoragent @shroominic
chore: merge main into archive 4.3.0
73034c1 
Co-authored-by: shroominic <shroominic@users.noreply.github.com>
@cursoragent @shroominic
chore: merge main into archive 4.3.0
b2e1739 
Co-authored-by: shroominic <shroominic@users.noreply.github.com>
@cursor
cursor Bot merged commit 4a49111 into main Sep 28, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/pub/openhealth/archive-4.3.0 branch September 28, 2026 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@shroominic shroominic Awaiting requested review from shroominic shroominic is a code own 5456 er

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cursoragent
0