GeezerVison

Release 2.1.5

[skip ci]

## <small>2.1.5 (2026-10-31)</small>

* fix: handle Windows symlinks across supported Node.js versions (#147) ([525e508](525e508)), closes [#147](#147)

Release 2.1.4

[skip ci]

## <small>2.1.4 (2026-10-31)</small>

* fix: validate symlink targets from their real parent ([663d174](663d174))
* Merge commit from fork ([0495f37](0495f37))
* chore(deps): update dependency dir-compare to v5 (#125) ([a6e7784](a6e7784)), closes [#125](#125)

Release 2.1.3

[skip ci]

## <small>2.1.3 (2026-08-05)</small>

* fix: replace @eggjs/yauzl with upstream yauzl 3.4.0, update yazl to 3.3.1 (#145) ([572a0ba](572a0ba)), closes [#145](#145) [#140](#140)
* chore(deps): update dependency @types/node to v24 (#123) ([3499eb2](3499eb2)), closes [#123](#123)
* chore(deps): update dependency iconv-lite to ^0.7.0 (#122) ([e7ba2a5](e7ba2a5)), closes [#122](#122)

Release 2.1.2

[skip ci]

## <small>2.1.2 (2026-08-05)</small>

* test: use node:crypto randomUUID instead of uuid dependency (#143) ([c0d269f](c0d269f)), closes [#143](#143) [#139](#139)
* ci: add Node.js 26 to the test matrix (#141) ([5c725e6](5c725e6)), closes [#141](#141) [#140](#140)
* fix: resolve symlink chains fully when extracting (#140) ([72a3c84](72a3c84)), closes [#140](#140)

Release 1.10.6

[skip ci]

## <small>1.10.6 (2026-08-05)</small>

* fix: resolve symlink chains fully when extracting (#142) ([90b2e54](90b2e54)), closes [#142](#142) [#140](#140)
* chore: replace var with let/const in isRealPathSafe (#135) ([60fa3af](60fa3af)), closes [#135](#135)

Release 2.1.1

[skip ci]

## <small>2.1.1 (2026-04-13)</small>

* fix: prevent symlink path traversal via pre-existing symlinks during tar extraction ([9c885e5](9c885e5))
* chore: map npm package links to npmx.dev (#134) ([fba303c](fba303c)), closes [#134](#134)

Release 1.10.5

[skip ci]

## <small>1.10.5 (2026-04-13)</small>

* fix: prevent symlink path traversal via pre-existing symlinks during tar extraction ([18def23](18def23))

Release 2.1.0

[skip ci]

## 2.1.0 (2026-01-28)

* feat: support strip for all archive `uncompress` (#117) ([15d24cd](15d24cd)), closes [#117](#117) [hi#level](https://github.com/hi/issues/level)

Release 2.0.1

[skip ci]

## <small>2.0.1 (2026-01-28)</small>

* fix: prevent arbitrary file write via symlink extraction ([b8dca23](b8dca23))
* Merge commit from fork ([ce1c013](ce1c013))
* chore: Configure Renovate (#121) ([fd321da](fd321da)), closes [#121](#121)
* chore: fix trust publish ([92df8f9](92df8f9))
* test: fix test cases for uncompress stream (#118) ([5f281d9](5f281d9)), closes [#118](#118)

Release 1.10.4

[skip ci]

## <small>1.10.4 (2026-01-28)</small>

* fix: prevent arbitrary file write via symlink extraction (#133) ([8d16c19](8d16c19)), closes [#133](#133)
* chore: add permissions to auto release ([01acc46](01acc46))
* chore: add warnning message ([2368a03](2368a03))
* chore: start 1.x branch ([6f936e0](6f936e0))
* chore: support auto merge queue ([f2344e7](f2344e7))
* chore: typo fix on branch ([41a5eae](41a5eae))