Bump SharpCompress from 0.48.1 to 0.49.1

[dependabot]

Updated SharpCompress from 0.48.1 to 0.49.1.

Release notes

Sourced from SharpCompress's releases.

0.49.1

What's Changed

• Close writable entry streams during async archive disposal by @​Copilot in Close writable entry streams during async archive disposal adamhathcock/sharpcompress#1338
• Restore WriteToDirectoryAsync progress callbacks for solid 7z archives by @​Copilot in Restore WriteToDirectoryAsync progress callbacks for solid 7z archives adamhathcock/sharpcompress#1340
• Try to fix global.json to avoid churn in locks by @​adamhathcock in Try to fix global.json to avoid churn in locks adamhathcock/sharpcompress#1341
• Fix tar archive enumeration after fully reading entry streams by @​adamhathcock in Fix tar archive enumeration after fully reading entry streams adamhathcock/sharpcompress#1342

Full Changelog: adamhathcock/sharpcompress@0.49.0...0.49.1

0.49.0

This should contain a lot of write async fixes and some breaking API changes that fix previous broke net48 usage

What's Changed

• Rename IWriteableArchiveFactory.cs to IWritableArchiveFactory.cs by @​Copilot in Rename IWriteableArchiveFactory.cs to IWritableArchiveFactory.cs adamhathcock/sharpcompress#1244
• Some API clean up from GPT 5.4 by @​adamhathcock in Some API clean up from GPT 5.4 adamhathcock/sharpcompress#1243
• Release to master by @​adamhathcock in Release to master adamhathcock/sharpcompress#1267
• Fix three BLAKE2sp correctness bugs and eliminate allocations in hot path by @​coderb in Fix three BLAKE2sp correctness bugs and eliminate allocations in hot path adamhathcock/sharpcompress#1266
• Corrected async examples. by @​dlemstra in Corrected async examples. adamhathcock/sharpcompress#1277
• Fix setting invalid access time fails extraction by @​aromaa in Fix setting invalid access time fails extraction adamhathcock/sharpcompress#1279
• Fix incorrect code examples in docs for sync/async usage by @​Copilot in Fix incorrect code examples in docs for sync/async usage adamhathcock/sharpcompress#1280
• Replace APPNOTE.TXT contents with reference link note by @​puk06 in Replace APPNOTE.TXT contents with reference link note adamhathcock/sharpcompress#1286
• Release to Master by @​adamhathcock in Release to Master adamhathcock/sharpcompress#1274
• update docs for tar gap analysis and XZ usage by @​adamhathcock in update docs for tar gap analysis and XZ usage adamhathcock/sharpcompress#1288
• Add a PooledMemoryStream to avoid allocating by @​adamhathcock in Add a PooledMemoryStream to avoid allocating adamhathcock/sharpcompress#1275
• fix: Change LeaveStreamOpen default from true to false by @​puk06 in fix: Change LeaveStreamOpen default from true to false adamhathcock/sharpcompress#1293
• Fix usage of ReaderOptions and pre-defined values by @​adamhathcock in Fix usage of ReaderOptions and pre-defined values adamhathcock/sharpcompress#1295
• Enforce seekable, readable and writable on streams by @​adamhathcock in Enforce seekable, readable and writable on streams adamhathcock/sharpcompress#1297
• Add ArchiveInformation record for consolidated archive detection and capability inspection by @​Copilot in Add ArchiveInformation record for consolidated archive detection and capability inspection adamhathcock/sharpcompress#1299
• merge release to master by @​adamhathcock in merge release to master adamhathcock/sharpcompress#1314
• Some clean up and test clean up by @​adamhathcock in Some clean up and test clean up adamhathcock/sharpcompress#1321
• Finish Write Async by @​adamhathcock in Finish Write Async adamhathcock/sharpcompress#1323
• More complete Tar implementation: USTAR, PAX, etc. by @​adamhathcock in More complete Tar implementation: USTAR, PAX, etc. adamhathcock/sharpcompress#1289
• Add Polysharp and adjustments that do not break legacy frameworks by @​adamhathcock in Add Polysharp and adjustments that do not break legacy frameworks adamhathcock/sharpcompress#1330
• Fix null IVolume.FileName for single-volume file-based archives by @​Copilot in Fix null IVolume.FileName for single-volume file-based archives adamhathcock/sharpcompress#1333
• Add skills by @​adamhathcock in Add skills adamhathcock/sharpcompress#1332
• add AOT smoke and missing tests by @​adamhathcock in add AOT smoke and missing tests adamhathcock/sharpcompress#1334

New Contributors

• @​dlemstra made their first contribution in Corrected async examples. adamhathcock/sharpcompress#1277
• @​aromaa made their first contribution in Fix setting invalid access time fails extraction adamhathcock/sharpcompress#1279
• @​puk06 made their first contribution in Replace APPNOTE.TXT contents with reference link note adamhathcock/sharpcompress#1286

Full Changelog: adamhathcock/sharpcompress@0.48.1...0.49.0

0.49.0-beta.140

What's Changed

• Add Polysharp and adjustments that do not break legacy frameworks by @​adamhathcock in Add Polysharp and adjustments that do not break legacy frameworks adamhathcock/sharpcompress#1330

Full Changelog: adamhathcock/sharpcompress@0.49.0-beta.136...0.49.0-beta.140

0.49.0-beta.136

What's Changed

• Rename IWriteableArchiveFactory.cs to IWritableArchiveFactory.cs by @​Copilot in Rename IWriteableArchiveFactory.cs to IWritableArchiveFactory.cs adamhathcock/sharpcompress#1244
• Some API clean up from GPT 5.4 by @​adamhathcock in Some API clean up from GPT 5.4 adamhathcock/sharpcompress#1243
• Release to master by @​adamhathcock in Release to master adamhathcock/sharpcompress#1267
• Fix three BLAKE2sp correctness bugs and eliminate allocations in hot path by @​coderb in Fix three BLAKE2sp correctness bugs and eliminate allocations in hot path adamhathcock/sharpcompress#1266
• Corrected async examples. by @​dlemstra in Corrected async examples. adamhathcock/sharpcompress#1277
• Fix setting invalid access time fails extraction by @​aromaa in Fix setting invalid access time fails extraction adamhathcock/sharpcompress#1279
• Fix incorrect code examples in docs for sync/async usage by @​Copilot in Fix incorrect code examples in docs for sync/async usage adamhathcock/sharpcompress#1280
• Replace APPNOTE.TXT contents with reference link note by @​puk06 in Replace APPNOTE.TXT contents with reference link note adamhathcock/sharpcompress#1286
• Release to Master by @​adamhathcock in Release to Master adamhathcock/sharpcompress#1274
• update docs for tar gap analysis and XZ usage by @​adamhathcock in update docs for tar gap analysis and XZ usage adamhathcock/sharpcompress#1288
• Add a PooledMemoryStream to avoid allocating by @​adamhathcock in Add a PooledMemoryStream to avoid allocating adamhathcock/sharpcompress#1275
• fix: Change LeaveStreamOpen default from true to false by @​puk06 in fix: Change LeaveStreamOpen default from true to false adamhathcock/sharpcompress#1293
• Fix usage of ReaderOptions and pre-defined values by @​adamhathcock in Fix usage of ReaderOptions and pre-defined values adamhathcock/sharpcompress#1295
• Enforce seekable, readable and writable on streams by @​adamhathcock in Enforce seekable, readable and writable on streams adamhathcock/sharpcompress#1297
• Add ArchiveInformation record for consolidated archive detection and capability inspection by @​Copilot in Add ArchiveInformation record for consolidated archive detection and capability inspection adamhathcock/sharpcompress#1299
• merge release to master by @​adamhathcock in merge release to master adamhathcock/sharpcompress#1314
• Some clean up and test clean up by @​adamhathcock in Some clean up and test clean up adamhathcock/sharpcompress#1321
• Finish Write Async by @​adamhathcock in Finish Write Async adamhathcock/sharpcompress#1323
• More complete Tar implementation: USTAR, PAX, etc. by @​adamhathcock in More complete Tar implementation: USTAR, PAX, etc. adamhathcock/sharpcompress#1289

New Contributors

• @​dlemstra made their first contribution in Corrected async examples. adamhathcock/sharpcompress#1277
• @​aromaa made their first contribution in Fix setting invalid access time fails extraction adamhathcock/sharpcompress#1279
• @​puk06 made their first contribution in Replace APPNOTE.TXT contents with reference link note adamhathcock/sharpcompress#1286

Full Changelog: adamhathcock/sharpcompress@0.48.1...0.49.0-beta1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Claude finished @dependabot[bot]'s task in 1m 13s —— View job

---

Review: SharpCompress 0.48.1 → 0.49.1

• Gather context
• Check SharpCompress usage in codebase for breaking changes
• Assess 0.49.0 breaking API changes impact
• Post review findings

---

Verdict: Safe to merge. This is a low-risk patch-level bump. Here's the analysis:

Breaking changes in 0.49.0 vs. codebase usage

SharpCompress usage in this repo is limited to a single call site: OvfMetadata.cs:89.

using var stream = File.OpenRead(tarPath);
using var reader = SharpCompress.Readers.ReaderFactory.OpenReader(stream, new SharpCompress.Readers.ReaderOptions());

IWriteableArchiveFactory → IWritableArchiveFactory rename — not used anywhere in this codebase. No impact.

LeaveStreamOpen default changed from true to false — this silently affects the code above. With 0.49.0+, when reader is disposed, it will now also close the underlying stream. The outer using var stream then disposes an already-closed FileStream, which is a safe no-op in .NET. No behavioral regression, but worth noting for future patterns.

0.49.1 bugfixes that benefit this codebase

• "Fix tar archive enumeration after fully reading entry streams" (PR #1342) directly helps ExtractOvfFromTar. If an OVF entry stream is fully read and then the TAR reader attempts to advance to the next entry, prior versions could misbehave. This fix is a net improvement for OVA parsing.
• "Close writable entry streams during async archive disposal" — not directly exercised by the current read-only usage.

CI

Build, Unit Tests, and Claude Code Review are all in progress at the time of this review. No failures observed.

Summary

No code changes are needed. The only SharpCompress API in use (ReaderFactory.OpenReader + sequential entry reading) is unaffected by breaking changes in 0.49.0. The 0.49.1 tar fix is a genuine improvement for the OVA import path. ✓