deps: update libarchive to v3.8.4

[github-actions]

What does this PR do?

Updates libarchive to version v3.8.4

Compare: libarchive/libarchive@9525f90...d114cee

Auto-updated by this workflow

[robobun]

^{Updated 7:48 PM PT - Dec 6th, 2025}

❌ @RiskyMH, your commit 19f19aa has 1 failures in Build #32968 (All Failures):

• cmake/scripts/GitClone.cmake - cmake error on 🍎 aarch64 - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🍎 x64 - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 x64-musl - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 x64-musl-baseline - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 aarch64-musl - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 x64 - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 x64-asan - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 x64-baseline - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🐧 aarch64 - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🪟 x64-baseline - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🪟 x64-baseline - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🪟 x64 - build-cpp
• cmake/scripts/GitClone.cmake - cmake error on 🪟 x64 - build-cpp

---

🧪   To try this PR locally:

bunx bun-pr 25380

That installs a local version of the PR into your bun-25380 executable, so you can run:

bun-25380 --bun

[coderabbitai]

Walkthrough

Updated the libarchive repository commit hash in the CMake build configuration from 9525f90ca4bd14c7b335e2f8c84a4607b0af6bdf to d114ceee6de08a7a60ff1209492ba38bf9436f79. No changes to logic, error handling, or control flow.

Changes

Cohort / File(s)	Summary
Build configuration dependency updates cmake/targets/BuildLibArchive.cmake	Updated libarchive repository commit hash reference

Pre-merge checks

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description covers the 'What does this PR do?' section with version info and comparison link, but completely omits the 'How did you verify your code works?' section required by the template.	Add the 'How did you verify your code works?' section to the description to fully comply with the repository's template requirements.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: updating libarchive to v3.8.4, which matches the single file modification in the changeset.

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Disabled knowledge base sources:

• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 5eb2145 and 19f19aa.

📒 Files selected for processing (1)

• cmake/targets/BuildLibArchive.cmake (1 hunks)

🧰 Additional context used

🧠 Learnings (1)

📓 Common learnings

Learnt from: ShlomoCode
Repo: oven-sh/bun PR: 23515
File: .github/workflows/claude.yml:60-60
Timestamp: 2025-10-12T02:25:02.232Z
Learning: When reviewing GitHub Actions workflows, using semantic version tags (like v1, v2) for official actions from reputable organizations (e.g., actions from github/, anthropics/, etc.) is common and acceptable practice. Don't flag these as security issues requiring commit SHA pinning.

🔇 Additional comments (1)

cmake/targets/BuildLibArchive.cmake (1)

7-7: Commit hash verified — this update includes security fixes.

The commit hash d114ceee6de08a7a60ff1209492ba38bf9436f79 is confirmed as the v3.8.4 release (published December 1, 2025). This version includes fixes for CVE-2025-5914, CVE-2025-5915, CVE-2025-5916, CVE-2025-5917, and CVE-2025-5918, making this a security-focused release. The update is safe to proceed.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}