3.0.0

Breaking Changes

• Changed ZIP bomb detection to rely on ZIP central directory metadata instead
  of local file headers. ZIP fixtures or archives that only appeared dangerous
  because of the previous first-entry local-header comparison may no longer be
  reported as bombs.
• ZIP entries using unsupported compression methods are not decompressed for
  nested ZIP inspection and are evaluated from their central directory sizes.

Fixed

• Fixed ZIP bomb detection for valid ZIP archives containing multiple files.
• Read ZIP archive metadata from the central directory instead of comparing the
  total uncompressed size with the first local file header.
• Avoided false positives caused by assuming a ZIP archive contains only one
  file entry.

Changed

• Updated the GitHub Actions build workflow to include PHP 8.5.
• Moved coverage generation to the PHP 8.5 workflow job.
• Updated the checkout action to actions/checkout@v4.
• Removed Composer's deprecated --no-suggest install option.

2.2.0

Added

• Add support for PHP 8.4

Fixed

• Fix detection logic. Check all entries for RAR bomb detection #17
• Update dependencies to fix RAR5 VINT decoding for 64-bit values

2.1.0

Changed

• Change minimum to PHP 8.1

Thanks to: peter279k

2.0.0

Breaking Changes

• Require 7.3+ or 8.0+
• Drop support for PHP 7.2

Changed

• Optimize rar engine performance
• Update dependencies
• Improve PHPStan, PHP-CS-Fixer and stuffs

Removed

• Drop Travis CI build and Improve some stuffs

1.1.0

Changes

• Check if the ZIP archive has been opened #10
• Open ZIP archive in CREATE mode #10

Thanks to: @twisted1919

1.0.0

Fix typo

0.3.0

Added

• RAR archive bomb engine #8

0.2.0

New features

• Add PNG engine #6
• The ZipBombEngine will only scan valid ZIP files

Breaking Changes

• Renamed ArchiveBombScanner to BombScanner
• Renamed ScannerResult to BombScannerResult

0.1.0

Init