Skip to content

build(deps): bump com.github.junrar:junrar from 7.6.1 to 8.1.1 - #737

Merged
AloysHF merged 2 commits into
masterfrom
dependabot/maven/com.github.junrar-junrar-8.1.1
Sep 12, 2026
Merged

AloysHF merged 2 commits into
masterfrom
dependabot/maven/com.github.junrar-junrar-8.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps com.github.junrar:junrar from 7.6.1 to 8.1.1.

Release notes

Sourced from com.github.junrar:junrar's releases.

Release v8.1.1

Changelog

🐛 Fixes

io

  • readLongBigEndian returned only the low 32 bits (efdbd79)

rar3

  • read the Unix owners sub-block names within its bounds (27d7755)
  • bound the remaining header reads and keep reading past a broken header (8301bcb), closes #12
  • bound the extended-time reads left unguarded by v7.5.1 (da5ef82), closes #12 #86 #87

unscoped

  • keep extracting when an entry name has no Path on this JVM (510b792)

🔄️ Changes

  • satisfy spotless in the changed method (6557837)

🧪 Tests

  • reproduce the unrepresentable name without a locale (06aefef)

🛠 Build

deps

  • bump gradle from 9.6.1 to 9.7.1 (1de660e)
  • bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310 (d79e3a5)
  • bump com.diffplug.spotless from 8.9.0 to 8.10.0 (8787a21)
  • bump com.fasterxml.jackson.core:jackson-databind (facf4d5)
  • bump io.github.ben-manes.versions.settings (a17162c)
  • bump EndBug/add-and-commit from 10 to 11 (c866a6f)
  • bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 (8017539)
  • bump gradle/actions from 6.2.0 to 6.3.0 (1397fab)
  • bump com.github.ben-manes.versions from 0.58.0 to 0.59.0 (a16c9f4)
  • bump com.github.ben-manes.versions from 0.54.0 to 0.58.0 (dcb0afb)
  • bump com.diffplug.spotless from 8.8.0 to 8.9.0 (5829d84)
  • bump gradle/actions from 6 to 6.2.0 (0b3f663)

unscoped

Contributors

We'd like to thank the following people for their contributions: Andre Brait, Gauthier, Gauthier Roebroeck, Nexory, Sean R

Release v8.1.0

Changelog

🚀 Features

... (truncated)

Changelog

Sourced from com.github.junrar:junrar's changelog.

8.1.1 (2026-08-31)

🐛 Fixes

io

  • readLongBigEndian returned only the low 32 bits (efdbd79)

rar3

  • read the Unix owners sub-block names within its bounds (27d7755)
  • bound the remaining header reads and keep reading past a broken header (8301bcb), closes #12
  • bound the extended-time reads left unguarded by v7.5.1 (da5ef82), closes #12 #86 #87

unscoped

  • keep extracting when an entry name has no Path on this JVM (510b792)

🔄️ Changes

  • satisfy spotless in the changed method (6557837)

🧪 Tests

  • reproduce the unrepresentable name without a locale (06aefef)

🛠 Build

deps

  • bump gradle from 9.6.1 to 9.7.1 (1de660e)
  • bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310 (d79e3a5)
  • bump com.diffplug.spotless from 8.9.0 to 8.10.0 (8787a21)
  • bump com.fasterxml.jackson.core:jackson-databind (facf4d5)
  • bump io.github.ben-manes.versions.settings (a17162c)
  • bump EndBug/add-and-commit from 10 to 11 (c866a6f)
  • bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 (8017539)
  • bump gradle/actions from 6.2.0 to 6.3.0 (1397fab)
  • bump com.github.ben-manes.versions from 0.58.0 to 0.59.0 (a16c9f4)
  • bump com.github.ben-manes.versions from 0.54.0 to 0.58.0 (dcb0afb)
  • bump com.diffplug.spotless from 8.8.0 to 8.9.0 (5829d84)
  • bump gradle/actions from 6 to 6.2.0 (0b3f663)

unscoped

8.1.0 (2026-08-03)

🚀 Features

crypt

  • decrypt legacy RAR 1.3/1.5/2.0 encrypted entries (5da2cb6)

rar14

  • extract entries spanning multiple RAR 1.4 volumes (a4b9591)
  • extract RAR 1.4 entries with Checksum14 verification (11f1d23)
  • parse RAR 1.4 headers and list entries (7ac5a8c)

🐛 Fixes

... (truncated)

Commits
  • 1de660e build(deps): bump gradle from 9.6.1 to 9.7.1
  • d79e3a5 build(deps): bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  • 8787a21 build(deps): bump com.diffplug.spotless from 8.9.0 to 8.10.0
  • facf4d5 build(deps): bump com.fasterxml.jackson.core:jackson-databind
  • a17162c build(deps): bump io.github.ben-manes.versions.settings
  • efdbd79 fix(io): readLongBigEndian returned only the low 32 bits
  • 6557837 style: satisfy spotless in the changed method
  • 06aefef test: reproduce the unrepresentable name without a locale
  • 510b792 fix: keep extracting when an entry name has no Path on this JVM
  • c866a6f build(deps): bump EndBug/add-and-commit from 10 to 11
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.github.junrar:junrar](https://github.com/junrar/junrar) from 7.6.1 to 8.1.1.
- [Release notes](https://github.com/junrar/junrar/releases)
- [Changelog](https://github.com/junrar/junrar/blob/master/CHANGELOG.md)
- [Commits](junrar/junrar@v7.6.1...v8.1.1)

---
updated-dependencies:
- dependency-name: com.github.junrar:junrar
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 8, 2026
@sonarqubecloud

Copy link
Copy Markdown

@AloysHF
AloysHF merged commit 141609e into master Sep 12, 2026
16 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/com.github.junrar-junrar-8.1.1 branch September 12, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant