github tristanisham/zvm v0.8.21
Swap system dependency on tar for native go

4 hours ago

What's Changed

  • remove dependancy on system tar for xz and tar decompression by @tristanisham in #164

Full Changelog: v0.8.20...v0.8.21

BSD systems were failing to extract Zig because their tar implementation differs from the tar I used to target. Instead of making a more complex system that depends on tar being installed, I just wrote a Go-native extractor that is platform independent.

This release ports to that, and updates path traversal mitigation to use os.Root instead of a bespoke check of the string in the zip extract function.

Don't miss a new zvm release

NewReleases is sending notifications on new releases.