This commit is contained in:
Charlie Marsh 2025-07-05 16:47:24 +02:00 committed by GitHub
commit e1f8ef28bc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 6 additions and 1 deletions

View file

@ -75,7 +75,7 @@ uv-workspace = { path = "crates/uv-workspace" }
anstream = { version = "0.6.15" } anstream = { version = "0.6.15" }
anyhow = { version = "1.0.89" } anyhow = { version = "1.0.89" }
arcstr = { version = "1.2.0" } arcstr = { version = "1.2.0" }
astral-tokio-tar = { version = "0.5.1" } astral-tokio-tar = { version = "0.5.2" }
async-channel = { version = "2.3.1" } async-channel = { version = "2.3.1" }
async-compression = { version = "0.4.12", features = ["bzip2", "gzip", "xz", "zstd"] } async-compression = { version = "0.4.12", features = ["bzip2", "gzip", "xz", "zstd"] }
async-trait = { version = "0.1.82" } async-trait = { version = "0.1.82" }

View file

@ -236,6 +236,7 @@ pub async fn untar_gz<R: tokio::io::AsyncRead + Unpin>(
) )
.set_preserve_mtime(false) .set_preserve_mtime(false)
.set_preserve_permissions(false) .set_preserve_permissions(false)
.set_allow_external_symlinks(false)
.build(); .build();
Ok(untar_in(archive, target.as_ref()).await?) Ok(untar_in(archive, target.as_ref()).await?)
} }
@ -255,6 +256,7 @@ pub async fn untar_bz2<R: tokio::io::AsyncRead + Unpin>(
) )
.set_preserve_mtime(false) .set_preserve_mtime(false)
.set_preserve_permissions(false) .set_preserve_permissions(false)
.set_allow_external_symlinks(false)
.build(); .build();
Ok(untar_in(archive, target.as_ref()).await?) Ok(untar_in(archive, target.as_ref()).await?)
} }
@ -274,6 +276,7 @@ pub async fn untar_zst<R: tokio::io::AsyncRead + Unpin>(
) )
.set_preserve_mtime(false) .set_preserve_mtime(false)
.set_preserve_permissions(false) .set_preserve_permissions(false)
.set_allow_external_symlinks(false)
.build(); .build();
Ok(untar_in(archive, target.as_ref()).await?) Ok(untar_in(archive, target.as_ref()).await?)
} }
@ -293,6 +296,7 @@ pub async fn untar_xz<R: tokio::io::AsyncRead + Unpin>(
) )
.set_preserve_mtime(false) .set_preserve_mtime(false)
.set_preserve_permissions(false) .set_preserve_permissions(false)
.set_allow_external_symlinks(false)
.build(); .build();
untar_in(archive, target.as_ref()).await?; untar_in(archive, target.as_ref()).await?;
Ok(()) Ok(())
@ -311,6 +315,7 @@ pub async fn untar<R: tokio::io::AsyncRead + Unpin>(
tokio_tar::ArchiveBuilder::new(&mut reader as &mut (dyn tokio::io::AsyncRead + Unpin)) tokio_tar::ArchiveBuilder::new(&mut reader as &mut (dyn tokio::io::AsyncRead + Unpin))
.set_preserve_mtime(false) .set_preserve_mtime(false)
.set_preserve_permissions(false) .set_preserve_permissions(false)
.set_allow_external_symlinks(false)
.build(); .build();
untar_in(archive, target.as_ref()).await?; untar_in(archive, target.as_ref()).await?;
Ok(()) Ok(())