🐛 Bug Fixes
- set_permissions was still following symlinks in non-streaming extraction (#1038)
- two arithmetic overflows in the implode decoder (#1028)
- reject an empty archive whose central directory offset is past the EOCD (#1025)
- don't panic when two entries extract to the same path (#1023)
- fail reads that exceed the declared uncompressed size (#1022)
- shrink decoder skipped LZW code 8191 (#1029)
- write only the sentinel-marked values in a central ZIP64 field (#1027)