• Keep order of local extra fields, even if an identical extra field is present in the central directory.
• Add zip_source_at_eof() and ZIP_SOURCE_AT_EOF.
• Consistently report CRC and decryption errors when reading exactly to end-of-file.
• Remove Mbed TLS support - the required functions were made private.
• Make non-random tests work on macOS and Windows by using a special version of libzip.
• Securely clear passwords and key material before freeing it.
• Use SipHash hash function with per-table random keys. This prevents hash flooding attacks.
• Add compile time option to limit LZMA window size.
• Add more comprehensive fuzzers for metadata and write code paths.
• Fix zip_source_is_seekable().
• Fix setting incorrect WinZIP AES version in some cases.
• Further improvements to overall stability and other minor adjustments have been made.