Bump the nuget-minor-patch group with 5 updates by dependabot[bot] · Pull Request #14 · purelogiccode/SimpleZipDrive

World-class library release. This merges everything from the unreleased
1.5.0/1.6.0 tree (CCI, split ISO, ZAR input, traversal hardening, batch
conversion, JSON, preallocation and explicit layout packing) with the Phase 9
productization work: an open-once XisoImage facade, full-image
CRC32/MD5/SHA-1/SHA-256/SHA3-256, .hash verification, title metadata,
Windows long-path/reserved-name hardening, ZAR extraction caps, mutation
fuzzing, AOT smoke, 3-OS tests, a dotnet tool, SBOM and provenance.

Full suite green on all three targets: 1979 passed / 1 opt-in skip (1980) on
net8.0/net9.0 and 2043 passed / 1 opt-in skip (2044) on net10.0.

Phase 9 — world-class library

XisoImage (XISOSharp): Open/OpenAsync, List/ListFlat,
ReadFile/OpenReadStream, Extract/ExtractAsync, Validate,
GetTitleInfo, ComputeImageHash, IDisposable/IAsyncDisposable.
Full-image hashes: XisoImageHash.Compute streams CRC32, MD5, SHA-1,
SHA-256 and SHA3-256 in one pass through the decompressed view.
verify-hashes: verifies a --petrify/XboxKit .hash sidecar for ISO,
CISO, CCI, split ISO and ZAR inputs.
Title metadata: title-info / XisoReader.GetTitleInfo find
default.xbe and report title name, ID, region, disc and version.
Hardening: Windows longPathAware manifests, reserved device-name
rejection/sanitization, ZAR extraction byte/entry caps, CISO malformed-index
and alignment validation (found by the new mutation fuzzer).
Quality gates: 3-OS test matrix, dotnet format gate, AOT publish smoke,
mutation fuzz job, 75% line / 60% branch coverage floors, package validation
against 1.4.4 with a reviewed suppression baseline.
Packaging: XISOSharp.Tool dotnet tool, SBOM + build provenance on
releases, community files and a console sample.

Layout packing (Phase 8)

Sector-layout packing release (PlanToEnhance Phase 8), plus the Phase 4 TOC
hardening follow-up. Images can now be repacked at
an explicit layout: XisoLayoutSpec accepts the JSON emitted by
--sector-layout --json (or a compact path=sector text spec), fixes the sectors of
matching files and directory tables, and allocates every other entry first-fit around
the reserved extents. -c, --pack <dir> and build-image gain --layout <file>.
The audit, sector-range, repair, salvage and ZAR walks now use the same explicit
in-order table traversal as extract/list/rewrite, so MaxTocDepth bounds real
subdirectory nesting only. The raw-sector redump modes also reject compressed
and split containers up front, and the GUI ZAR tab converts a .zar back to a
plain ISO. ZAR extraction is now depth-bounded, pre-sized and exact-length, and
CISO compression reads split/container sources through the decompressed view
instead of a joined temporary ISO.

Full suite green on all three targets: 1979 passed / 1 opt-in skip (1980) on
net8.0/net9.0 and 2043 passed / 1 opt-in skip (2044) on net10.0.
... (truncated)

1.4.4

Extraction-cleanup and static-analysis release. A failed or cancelled extraction no
longer leaves a truncated destination file behind: ExtractFile/CopyOutFile
delete the partial output through the new IFilesystem.DeleteFile member, which
custom destination stores can override (the default keeps the previous no-op
behavior). The solution is clean under JetBrains InspectCode - 0 errors and 0
warnings across every project - and dead members found by the inspection were
removed from the Tester. Full suite green on all three targets: 1760 passed / 1
opt-in skip (1761) on net8.0/net9.0, 1821 passed / 1 opt-in skip (1822) on net10.0.

Library

Partial-destination cleanup: a copy that throws, reports truncation, or is
cancelled removes the destination it wrote, so callers (drag-and-drop prep,
batch extraction, resume runs) can never mistake a partial file for a complete
one. Cleanup is best-effort and never masks the extraction error.
IFilesystem.DeleteFile: new member with a default no-op implementation -
existing custom stores still compile and keep their partial content if they
cannot delete. LocalFilesystem deletes from disk (a missing file is a no-op);
MemoryFilesystem removes the stored snapshot.
Static-analysis cleanup across the library, CLI, GUI, Tester, benchmarks and
tests: redundant default arguments, redundant casts and assignments, dead null
guards, unused fields/properties, and simplified nullability in
Logger.Out/Logger.Error (assigning null now stores TextWriter.Null, so
the getters never return null). No output or format changes.

Tests

ExtractRobustnessTests: a truncated copy and a mid-write failure both leave no
destination file, including through a custom IFilesystem.
XisoFilesystemTests: LocalFilesystem.DeleteFile removes files and treats a
missing path as a no-op.
Suite: net8.0/net9.0 - 1761 tests (1760 passed, 1 opt-in skip);
net10.0 - 1822 tests (1821 passed, 1 opt-in skip, adds the GUI tests).

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.299 to 3.0.320 Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0 Bumps SharpCompress from 0.50.5 to 0.50.7 Bumps winfsp.net from 2.1.25156 to 2.2.26286 Bumps XISOSharp from 1.4.2 to 1.5.0 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.320 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Meziantou.Analyzer dependency-version: 3.0.320 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: SharpCompress dependency-version: 0.50.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: winfsp.net dependency-version: 2.2.26286 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: XISOSharp dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Nov 2, 2026

dependabot Bot mentioned this pull request Nov 2, 2026

Bump the nuget-minor-patch group with 5 updates #12

Closed

Navigation Menu

Repository navigation

Bump the nuget-minor-patch group with 5 updates - #14

Bump the nuget-minor-patch group with 5 updates#14
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/FileBenchmark/nuget-minor-patch-acf5f6f767

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

3.0.320

What's Changed

3.0.319

What's Changed

3.0.318

What's Changed

3.0.317

What's Changed

3.0.316

What's Changed

3.0.315

What's Changed

3.0.314

What's Changed

3.0.313

What's Changed

3.0.312

What's Changed

3.0.311

What's Changed

3.0.310

What's Changed

3.0.309

What's Changed

3.0.308

What's Changed

3.0.307

What's Changed

3.0.306

What's Changed

3.0.305

What's Changed

3.0.304

What's Changed

3.0.303

What's Changed

3.0.302

What's Changed

3.0.301

What's Changed

3.0.300

What's Changed

18.11.0

What's Changed

New Contributors

0.50.7

What's Changed

0.50.6

What's Changed

1.5.0

Phase 9 — world-class library

Layout packing (Phase 8)

1.4.4

Library

Tests

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants