Release version 1.1.3: Fix multiple vulnerabilities

• CVE-2026-23879: Arbitrary File Write Vulnerability in py7zr (high severity)
  • Harden check of path traversal and enhance test cases to reproduce many attack scenarios.
• CVE-2026-55206: O(n^2) algorithmic complexity DoS in PackInfo._read() in py7zr
  • Enforced variation of the parameter with a limit and optimized calculation algorithm to prevent excessive CPU consumption.
• CVE-2026-55195: py7zr <= 1.1.2: Decompression bomb (zip bomb) denial of service via unchecked extraction size
  • Added check of extraction size and introduced max_extract_size as constructor parameter to guard against excessive decompression.

Update path sanitize

Release v1.1.2

- Fix Zip-Slip vulnerability by symlink

Release version 1.1.0

Requirements

• Minimum required Python 3.10
• Add support for Python 3.14

Security

• CVE-2025-6176: bump brotli@1.2.0

Fixed

• The is_78zfile accept any path-like
• The SevenZipFile accept IO[bytes]
• Make FileInfo and ArchiveInfo dataclasses
• The getInfo() returns FileInfo object

What's Changed in details

• Add type annotations to ExtractCallback by @JohnDevlopment in #668
• fix(is_7zfile): accept any path-like instead of just pathlib.Path by @Ravencentric in #663
• Fix WriterFactory example by @mxmlnkn in #660
• Update docs on deflate64 dependency by @quassy in #671
• Accept IO[bytes] instead of BinaryIO by @mxmlnkn in #661
• feat(cli): add support for extracting specific archive members by @moi90 in #670
• chore: fix broken Changelog link by @orgads in #674
• fix: SevenZipFile.getinfo() now returns FileInfo as originally intended by @Ravencentric in #676
• fix: type hints and style by @Ravencentric in #677
• feat: make FileInfo and ArchiveInfo dataclasses by @Ravencentric in #678
• feat: add is_file and is_symlink to FileInfo by @Ravencentric in #680
• style: apply black by @miurahr in #685
• Use zstandard implementation from stdlib (PEP-784) by @Rogdham in #682
• chore: update supported Python versions, refine workflows and tox configuration by @miurahr in #687
• security: bump brotli@1.2.0 by @miurahr in #686
• chore: bump minimum Python version to 3.10 and update development deps by @miurahr in #688
• Update build dependencies and drop 3.9 and pypy 3.10 by @Ravencentric in #691
• chore: bump workflow dependencies, update Python versions, and refine matrix configurations by @miurahr in #692
• chore: tox configuration in pyproject.toml native by @miurahr in #689
• Use 3.10 type hint syntax by @Ravencentric in #690
• README: Bump PyPy/Python - Minimum & Recommended versions. by @xavier2k6 in #700
• Update run-linter workflow by @xavier2k6 in #698
• Update publish-to-pypi workflow by @xavier2k6 in #697
• Update codeql-analysis workflow by @xavier2k6 in #696
• Update run-tox-tests workflow by @xavier2k6 in #695

New Contributors

• @JohnDevlopment made their first contribution in #668
• @mxmlnkn made their first contribution in #660
• @quassy made their first contribution in #671
• @moi90 made their first contribution in #670
• @orgads made their first contribution in #674
• @Rogdham made their first contribution in #682

Full Changelog: v1.0.0...v1.1.0

Release version 1.0.0

Celebrating the official 1.0.0 release!

Release version 1.0.0rc3

v1.0.0rc3

Release v1.0.0rc3

Release v1.0.0-rc1

Release v1.0.0-rc1

Version 0.22.0

Release version 0.22.0

Added
-----
* Add mode "x" for SevenZipFile (#588)
* Add SevenZipFile#namelist method (#600)

Fixed
-----
* Append mode on non-existent files (#604)
* Fix NUMBER encoding of integer when 8 bytes(#591)

Changed
-------
* Minimum required Python version to be Python 3.8 (#601)
* Remove pyannotate from pyproject.toml (#598)

Document
--------
* Update user guide (#596)

Release v0.21.1

What's Changed

• Treat zero byte stream as a file. by @diedmon in #551
• feat: check targets argument type for read and extract method by @miurahr in #577
• feat: Add recursive sudirectories and files extraction. by @nepiskopos in #585
• feat: ensure unpack_7zarchive closes the archive by @francoisfreitag in #584
• docs: Use same format for unpack_archive example as for make_archive by @hoel-bagard in #590
• fix bug in function is_64bit() by @johnking0099 in #580
• feat: make unpack_7zarchive raise ReadError for invalid files by @francoisfreitag in #583

New Contributors

• @diedmon made their first contribution in #551
• @nepiskopos made their first contribution in #585
• @francoisfreitag made their first contribution in #584
• @hoel-bagard made their first contribution in #590
• @johnking0099 made their first contribution in #580

Full Changelog: v0.21.0...v0.21.1

Release v0.21.0

Speed up extraction when number of files is large

Release v0.20.7

Support Python 3.12