Skip to content

Bump SharpCompress from 0.48.1 to 0.50.0#75

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/PSProxmoxVE.Core/main/SharpCompress-0.50.0
Open

Bump SharpCompress from 0.48.1 to 0.50.0#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/PSProxmoxVE.Core/main/SharpCompress-0.50.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Updated SharpCompress from 0.48.1 to 0.50.0.

Release notes

Sourced from SharpCompress's releases.

0.50.0

Breaking changes:

  • Tar Archive does not try to decompress streams anymore. TarReader will still do this.
  • Detection API changed.
  • CRC should be more complete and enabled by default

What's Changed

New Contributors

Full Changelog: adamhathcock/sharpcompress@0.49.1...0.50.0

0.49.1

What's Changed

Full Changelog: adamhathcock/sharpcompress@0.49.0...0.49.1

0.49.0

This should contain a lot of write async fixes and some breaking API changes that fix previous broke net48 usage

What's Changed

New Contributors

Full Changelog: adamhathcock/sharpcompress@0.48.1...0.49.0

0.49.0-beta.140

What's Changed

Full Changelog: adamhathcock/sharpcompress@0.49.0-beta.136...0.49.0-beta.140

0.49.0-beta.136

What's Changed

New Contributors

Full Changelog: adamhathcock/sharpcompress@0.48.1...0.49.0-beta1

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump SharpCompress from 0.48.1 to 0.50.0
1e39f64 
---
updated-dependencies:
- dependency-name: SharpCompress
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from GoodOlClint as a code owner July 13, 2026 12:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 13, 2026
@dependabot dependabot Bot mentioned this pull request Jul 13, 2026
Closed
@claude

claude Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Claude finished @dependabot[bot]'s task in 1m 29s —— View job

Claude's Review

  • Gather context (diff, CLAUDE.md, DECISIONS.md)
  • Check DECISIONS.md compliance
  • Check code quality conventions
  • Check API correctness (n/a — dependency bump only)
  • Check test coverage impact
  • Check security implications (breaking changes in 0.50.0)
  • Post final review

Summary

Pure dependency bump: SharpCompress 0.48.1 → 0.50.0 in src/PSProxmoxVE.Core/PSProxmoxVE.Core.csproj (1 line changed, no source changes).

Usage in this repo: SharpCompress is used in exactly one place — src/PSProxmoxVE.Core/Models/Vms/OvfMetadata.cs (ExtractOvfFromTar), via SharpCompress.Readers.ReaderFactory.OpenReader(stream, new ReaderOptions()) to stream a .ovf entry out of an OVA (tar) archive.

Breaking changes in 0.50.0 relevant to that usage:

  • "Tar Archive does not try to decompress streams anymore. TarReader will still do this." — this code uses the streaming ReaderFactory/TarReader path (not the Archive API), so decompression behavior should be unaffected.
  • "Detection API changed." — ReaderFactory.OpenReader itself is not renamed/removed and the call signature here is unchanged, so this should still compile and behave the same for plain/gzip-compressed tar OVAs.
  • "CRC should be more complete and enabled by default" — could theoretically cause a CRC mismatch exception to surface on entries that previously extracted silently despite corrupt CRC data. Low risk for well-formed OVAs, but worth keeping in mind if the 12_OVA.Tests.ps1 integration test starts failing against real export files.

No source code changes were required to accommodate the bump, which is consistent with the breaking changes being scoped to the Archive/detection APIs rather than the Reader API used here.

DECISIONS.md / code conventions: N/A — no cmdlet, service, or model code touched.

Tests: tests/PSProxmoxVE.Tests/Integration/12_OVA.Tests.ps1 exercises FromOva/OVA extraction and would catch a regression, but it's an integration test that requires the dev container / nested PVE provisioning to run — I was not able to execute dotnet build/dotnet test in this sandbox (network/NuGet restore access is blocked here), so I could not verify the build against the new package version directly. Recommend confirming the CI build (which this PR should already trigger) passes and that 12_OVA.Tests.ps1 is green before merging.

Verdict: No issues found. Safe to merge pending green CI (build + xUnit + Pester/integration OVA test).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@GoodOlClint GoodOlClint Awaiting requested review from GoodOlClint GoodOlClint is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants