node-liblzma 2.0.3 → 2.1.0

package/lib/types.d.ts

@@ -17,11 +17,78 @@ export interface LZMAOptions {
     /** Flush flag to use */
     flushFlag?: number;
 }
+/**
+ * Callback function for asynchronous compression/decompression operations.
+ * @param error - Error object if operation failed, null otherwise
+ * @param result - Compressed or decompressed data buffer
+ */
 export type CompressionCallback = (error: Error | null, result?: Buffer) => void;
+/**
+ * LZMA action type for stream operations.
+ * - `0` (RUN): Normal processing
+ * - `1` (SYNC_FLUSH): Flush pending output
+ * - `2` (FULL_FLUSH): Flush and reset encoder state
+ * - `3` (FINISH): Finish the stream
+ */
 export type LZMAActionType = 0 | 1 | 2 | 3;
+/**
+ * LZMA status codes returned by operations.
+ * - `0` (OK): Operation completed successfully
+ * - `1` (STREAM_END): End of stream reached
+ * - `2` (NO_CHECK): Input has no integrity check
+ * - `3` (UNSUPPORTED_CHECK): Cannot calculate integrity check
+ * - `4` (GET_CHECK): Integrity check available
+ * - `5` (MEM_ERROR): Memory allocation failed
+ * - `6` (MEMLIMIT_ERROR): Memory limit reached
+ * - `7` (FORMAT_ERROR): File format not recognized
+ * - `8` (OPTIONS_ERROR): Invalid options
+ * - `9` (DATA_ERROR): Data is corrupt
+ * - `10` (BUF_ERROR): No progress possible
+ * - `11` (PROG_ERROR): Programming error
+ */
 export type LZMAStatusType = 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11;
+/**
+ * Integrity check type for XZ streams.
+ * - `0` (NONE): No integrity check
+ * - `1` (CRC32): 32-bit CRC
+ * - `4` (CRC64): 64-bit CRC (recommended)
+ * - `10` (SHA256): SHA-256 hash
+ */
 export type CheckType = 0 | 1 | 4 | 10;
-export type PresetType = 6 | 9;
+/**
+ * Compression preset level (0-9), optionally combined with EXTREME flag.
+ * Higher values = better compression but slower.
+ * @example
+ * ```ts
+ * const preset = 6; // Default compression
+ * const extreme = 6 | 0x80000000; // Default with extreme flag
+ * ```
+ */
+export type PresetType = number;
+/**
+ * Filter type for LZMA2 compression chain.
+ * - `0x21` (LZMA2): Main compression filter
+ * - `0x03` (X86): BCJ filter for x86 executables
+ * - `0x04` (POWERPC): BCJ filter for PowerPC
+ * - `0x06` (IA64): BCJ filter for IA-64
+ * - `0x07` (ARM): BCJ filter for ARM
+ * - `0x08` (ARMTHUMB): BCJ filter for ARM-Thumb
+ * - `0x09` (SPARC): BCJ filter for SPARC
+ */
 export type FilterType = 0x21 | 0x03 | 0x04 | 0x06 | 0x07 | 0x08 | 0x09;
+/**
+ * Compression mode.
+ * - `1` (FAST): Faster compression, less memory
+ * - `2` (NORMAL): Better compression ratio
+ */
 export type ModeType = 1 | 2;
+/**
+ * Progress event data emitted during compression/decompression
+ */
+export interface ProgressInfo {
+    /** Total bytes read from input so far */
+    bytesRead: number;
+    /** Total bytes written to output so far */
+    bytesWritten: number;
+}
 //# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAGjF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3C,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAC7E,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;AACvC,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACxE,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE3C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "node-liblzma",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "description": "NodeJS wrapper for liblzma",
   "type": "module",
   "main": "./lib/lzma.js",
   "exports": {
     ".": {
       "import": "./lib/lzma.js",
-      "types": "./index.d.ts"
+      "types": "./index.d.ts",
+      "default": "./lib/lzma.js"
     }
   },
   "scripts": {
@@ -21,6 +22,7 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --config vitest.config.monocart.ts --coverage",
     "test:coverage-v8": "vitest run --coverage",
+    "test:ui": "vitest --ui",
     "type-check": "tsc --noEmit",
     "clean": "rm -rf lib",
     "lint": "biome lint",
@@ -32,28 +34,43 @@
     "release": "release-it-preset default",
     "release:manual": "release-it-preset --config .release-it.manual.json",
     "release:hotfix": "release-it-preset hotfix",
-    "changelog:update": "release-it-preset changelog-only"
+    "changelog:update": "release-it-preset changelog-only",
+    "typedoc": "typedoc",
+    "typedoc:watch": "typedoc --watch"
   },
   "dependencies": {
     "node-addon-api": "^8.5.0",
     "node-gyp-build": "^4.8.4"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.2.3",
+    "@biomejs/biome": "^2.3.12",
     "@oorabona/release-it-preset": "^0.9.0",
     "@oorabona/vitest-monocart-coverage": "^2.0.1",
-    "@types/node": "^24.3.1",
-    "@vitest/coverage-istanbul": "^3.2.4",
-    "@vitest/coverage-v8": "^3.2.4",
-    "@vitest/ui": "3.2.4",
-    "nano-staged": "^0.8.0",
-    "release-it": "^19.0.5",
+    "@types/node": "^25.0.10",
+    "@vitest/coverage-istanbul": "^4.0.18",
+    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/ui": "4.0.18",
+    "nano-staged": "^0.9.0",
+    "release-it": "^19.2.4",
     "simple-git-hooks": "^2.13.1",
     "tsd": "^0.33.0",
-    "typescript": "^5.9.2",
-    "vitest": "^3.2.4"
+    "typedoc": "^0.28.16",
+    "typedoc-material-theme": "^1.4.1",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
   },
   "types": "index.d.ts",
+  "files": [
+    "lib/",
+    "src/bindings/",
+    "scripts/build_xz_with_cmake.py",
+    "scripts/download_xz_from_github.py",
+    "scripts/copy_dll.py",
+    "scripts/walk_sources.py",
+    "binding.gyp",
+    "index.d.ts",
+    "xz-version.json"
+  ],
   "engines": {
     "node": ">=16.0.0"
   },

package/scripts/build_xz_with_cmake.py

@@ -282,16 +282,20 @@ def main():
     parser = argparse.ArgumentParser(
         description='Build XZ Utils using CMake',
         epilog='''
-Required environment variables (strict validation):
-  RUNTIME_LINK: 'static' or 'shared' (REQUIRED)
-  ENABLE_THREAD_SUPPORT: 'yes' or 'no' (REQUIRED)
-  USE_GLOBAL: 'true' or 'false' (REQUIRED)
+Optional environment variables (with sensible defaults matching binding.gyp):
+  RUNTIME_LINK: 'static' or 'shared'
+    Default: 'static' on Windows, 'shared' on Linux/macOS
+  ENABLE_THREAD_SUPPORT: 'yes' or 'no'
+    Default: 'yes'
+  USE_GLOBAL: 'true' or 'false'
+    Default: 'false' on Windows, 'true' on Linux/macOS
 
 Examples:
-  RUNTIME_LINK=static ENABLE_THREAD_SUPPORT=yes USE_GLOBAL=false \\
-    python3 build_xz_with_cmake.py deps/xz build/liblzma
-  
-  RUNTIME_LINK=shared ENABLE_THREAD_SUPPORT=no USE_GLOBAL=true \\
+  # Use defaults (recommended)
+  python3 build_xz_with_cmake.py deps/xz build/liblzma
+
+  # Override specific values
+  RUNTIME_LINK=static USE_GLOBAL=false \\
     python3 build_xz_with_cmake.py deps/xz build/liblzma
         ''',
         formatter_class=argparse.RawDescriptionHelpFormatter
@@ -304,24 +308,17 @@ Examples:
     
     args = parser.parse_args()
     
-    # Get configuration from environment variables with strict validation
-    runtime_link = os.environ.get('RUNTIME_LINK')
-    enable_threads = os.environ.get('ENABLE_THREAD_SUPPORT')
-    use_global = os.environ.get('USE_GLOBAL')
-    
-    # Strict validation - fail if critical variables are not explicitly set
-    if runtime_link is None:
-        print("[ERROR] RUNTIME_LINK environment variable must be explicitly set ('static' or 'shared')")
-        return 1
-    
-    if enable_threads is None:
-        print("[ERROR] ENABLE_THREAD_SUPPORT environment variable must be explicitly set ('yes' or 'no')")
-        return 1
-        
-    if use_global is None:
-        print("[ERROR] USE_GLOBAL environment variable must be explicitly set ('true' or 'false')")
-        return 1
-    
+    # Get configuration from environment variables with sensible defaults
+    # Defaults match binding.gyp for consistency
+    is_windows = sys.platform == 'win32'
+
+    # Default: 'shared' on Linux/macOS, 'static' on Windows
+    runtime_link = os.environ.get('RUNTIME_LINK') or ('static' if is_windows else 'shared')
+    # Default: 'yes' (threading enabled)
+    enable_threads = os.environ.get('ENABLE_THREAD_SUPPORT') or 'yes'
+    # Default: 'false' on Windows, 'true' on Linux/macOS (use system library)
+    use_global = os.environ.get('USE_GLOBAL') or ('false' if is_windows else 'true')
+
     # Validate values
     if runtime_link not in ['static', 'shared']:
         print(f"[ERROR] Invalid RUNTIME_LINK: {runtime_link}. Must be 'static' or 'shared'")

package/src/bindings/node-liblzma.cpp

@@ -29,6 +29,12 @@ Napi::Value LZMA::Close(const Napi::CallbackInfo &info)
 
 Napi::Value LZMA::Close(const Napi::Env &env)
 {
+	// F-006: Idempotency guard - prevent double-subtract of external memory
+	if (_closed)
+	{
+		return env.Undefined();
+	}
+	_closed = true;
 	Napi::MemoryManagement::AdjustExternalMemory(env, -int64_t(sizeof(LZMA)));
 
 	if (_wip)
@@ -63,7 +69,7 @@ void LZMA::Init(Napi::Env env, Napi::Object exports)
 }
 
 LZMA::LZMA(const Napi::CallbackInfo &info) : Napi::ObjectWrap<LZMA>(info), _stream(LZMA_STREAM_INIT),
-											 _wip(false), _pending_close(false), _worker(nullptr)
+											 _wip(false), _pending_close(false), _closed(false), _worker(nullptr)
 {
 	Napi::Env env = info.Env();
 
@@ -103,7 +109,7 @@ LZMA::LZMA(const Napi::CallbackInfo &info) : Napi::ObjectWrap<LZMA>(info), _stre
 	switch (mode)
 	{
 	case STREAM_DECODE:
-		success = InitializeDecoder();
+		success = InitializeDecoder(env);
 		break;
 	case STREAM_ENCODE:
 		success = InitializeEncoder(opts, preset, check);
@@ -163,6 +169,13 @@ LZMA::~LZMA()
 template <bool async>
 Napi::Value LZMA::Code(const Napi::CallbackInfo &info)
 {
+	// F-001: Guard against concurrent calls - liblzma is not thread-safe per stream
+	if (this->_wip)
+	{
+		Napi::Error::New(info.Env(), "Stream is busy - concurrent operations not allowed").ThrowAsJavaScriptException();
+		return info.Env().Undefined();
+	}
+
 	// Setup with manual guard (safer than RAII for JS exceptions)
 	this->_wip = true;
 	this->Ref();
@@ -285,6 +298,14 @@ bool LZMA::ValidateAndPrepareBuffers(const Napi::CallbackInfo &info, BufferConte
 	}
 
 	ctx.out_off = info[5].ToNumber().Uint32Value();
+
+	// F-002: Validate output offset bounds to prevent underflow in out_len calculation
+	if (ctx.out_off > out_max)
+	{
+		Napi::RangeError::New(env, "Output offset exceeds buffer length").ThrowAsJavaScriptException();
+		return false;
+	}
+
 	ctx.out_len = out_max - ctx.out_off;
 	ctx.out = out_buf + ctx.out_off;
 
@@ -461,10 +482,18 @@ bool LZMA::InitializeEncoder(const Napi::Object &opts, uint32_t preset, lzma_che
 	return true;
 }
 
-bool LZMA::InitializeDecoder()
+bool LZMA::InitializeDecoder(const Napi::Env &env)
 {
 	lzma_ret ret = lzma_stream_decoder(&this->_stream, UINT64_MAX, LZMA_CONCATENATED);
-	return ret == LZMA_OK;
+
+	// F-005: Throw exception on decoder init failure (consistent with InitializeEncoder)
+	if (ret != LZMA_OK)
+	{
+		Napi::Error::New(env, "LZMA decoder failure, returned " + std::to_string(ret)).ThrowAsJavaScriptException();
+		return false;
+	}
+
+	return true;
 }
 
 void LZMA::AfterCommon(const Napi::Env &env)
@@ -515,8 +544,15 @@ void LZMA::After(const Napi::Env &env, const Napi::Function &cb)
 	Napi::Number avail_in = Napi::Number::New(env, this->_stream.avail_in);
 	Napi::Number avail_out = Napi::Number::New(env, this->_stream.avail_out);
 
+	// F-001: Clear _wip BEFORE callback so callback can call code() again for iterative processing
+	// Note: Buffer refs are released after callback in case callback needs to access them
+	this->_wip = false;
+
 	// Call the provided JS callback with the three numeric results
+	// The callback may call code() again for iterative processing (this is the normal pattern)
 	cb.Call({ret, avail_in, avail_out});
 
+	// F-004: Ensure cleanup runs even if callback threw an exception
+	// With NAPI_DISABLE_CPP_EXCEPTIONS, exceptions are pending rather than thrown
 	AfterCommon(env);
 }

package/src/bindings/node-liblzma.hpp

@@ -81,7 +81,7 @@ private:
 	bool ValidateConstructorArgs(const Napi::CallbackInfo &info, uint32_t &mode, Napi::Object &opts);
 	bool InitializeFilters(const Napi::Object &opts, uint32_t preset);
 	bool InitializeEncoder(const Napi::Object &opts, uint32_t preset, lzma_check check);
-	bool InitializeDecoder();
+	bool InitializeDecoder(const Napi::Env &env);
 
 	// Common cleanup operations for both sync and async completion
 	void AfterCommon(const Napi::Env &env);
@@ -95,6 +95,7 @@ private:
 	lzma_stream _stream;
 	bool _wip;
 	bool _pending_close;
+	bool _closed;  // F-006: Prevent double-subtract in AdjustExternalMemory
 
 	LZMAWorker *_worker;
 

package/xz-version.json

@@ -1,7 +1,7 @@
 {
-  "version": "v5.8.1",
-  "comment": "Latest version with full XZ_THREADS support and modern CMake. XZ 5.8+ includes the complete threading API with XZ_THREADS variable.",
-  "last_checked": "2025-09-02",
+  "version": "v5.8.2",
+  "comment": "Stable version tested and validated for production. Auto-updated by GitHub Actions.",
+  "last_checked": "2026-01-25",
   "allow_override": true,
   "repository": "tukaani-project/xz",
   "changelog": "https://github.com/tukaani-project/xz/releases/tag/v5.8.1"

package/.gitattributes

@@ -1,3 +0,0 @@
-* text=auto eol=lf
-*.{cmd,[cC][mM][dD]} text eol=crlf
-*.{bat,[bB][aA][tT]} text eol=crlf

package/.release-it.json

@@ -1,7 +0,0 @@
-{
-  "extends": "@oorabona/release-it-preset/config/default",
-  "git": {
-    "requireBranch": "master",
-    "requireCleanWorkingDir": true
-  }
-}

package/.release-it.manual.json

@@ -1,7 +0,0 @@
-{
-  "extends": "@oorabona/release-it-preset/config/manual-changelog",
-  "git": {
-    "requireBranch": "master",
-    "requireCleanWorkingDir": true
-  }
-}

package/.release-it.retry.json

@@ -1,3 +0,0 @@
-{
-  "extends": "@oorabona/release-it-preset/config/retry-publish"
-}

package/CHANGELOG.md

@@ -1,271 +0,0 @@
-# Changelog
-
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [Unreleased]
-
-## [2.0.3] - 2025-10-07
-
-### Fixed
-- create dedicated .release-it.retry.json for publish workflow (ci) ([007ec61](https://github.com/oorabona/node-liblzma/commit/007ec61))
-- ignore local .release-it.json in publish workflow (ci) ([0958cc3](https://github.com/oorabona/node-liblzma/commit/0958cc3))
-- use correct release-it-preset CLI syntax (ci) ([210343e](https://github.com/oorabona/node-liblzma/commit/210343e))
-- use npm config set for authentication (ci) ([8e6abcc](https://github.com/oorabona/node-liblzma/commit/8e6abcc))
-- configure npm authentication in publish workflow (ci) ([5b085e4](https://github.com/oorabona/node-liblzma/commit/5b085e4))
-- use tar.gz archives for cross-platform prebuild distribution (ci) ([bc6c213](https://github.com/oorabona/node-liblzma/commit/bc6c213))
-- preserve prebuild directory structure to prevent file overwriting (ci) ([ac8f364](https://github.com/oorabona/node-liblzma/commit/ac8f364))
-- remove build duplication and fix release-it command in publish workflow (ci) ([b0588ca](https://github.com/oorabona/node-liblzma/commit/b0588ca))
-- skip build scripts in publish workflow (ci) ([eb7ab76](https://github.com/oorabona/node-liblzma/commit/eb7ab76))
-- force bash shell for XZ download step on Windows (ci) ([73b6839](https://github.com/oorabona/node-liblzma/commit/73b6839))
-
-## [2.0.2] - 2025-10-07
-
-### Added
-- refactor release workflow to use Pull Request strategy (ci) ([b2797fd](https://github.com/oorabona/node-liblzma/commit/b2797fd))
-- optimize XZ management with artifacts and move prebuildify to CI-only (ci) ([de7d825](https://github.com/oorabona/node-liblzma/commit/de7d825))
-- optimize XZ source management with artifacts and fix prebuildify PATH (ci) ([3984e19](https://github.com/oorabona/node-liblzma/commit/3984e19))
-- optimize XZ source management with GitHub Actions artifacts (ci) ([0dec8f8](https://github.com/oorabona/node-liblzma/commit/0dec8f8))
-- simplify republish workflow by removing target options and using boolean for npm publish (workflows) ([d1e188d](https://github.com/oorabona/node-liblzma/commit/d1e188d))
-
-### Fixed
-- remove CHANGELOG update and dry-run validation steps since default handles both directly (release) ([8ff80f8](https://github.com/oorabona/node-liblzma/commit/8ff80f8))
-- skip native module compilation in release workflow (ci) ([53fc871](https://github.com/oorabona/node-liblzma/commit/53fc871))
-- correct gyp staleness detection to prevent unconditional XZ downloads (build) ([6ed20dd](https://github.com/oorabona/node-liblzma/commit/6ed20dd))
-- prevent double compilation and ensure prebuildify executes (ci) ([4dece66](https://github.com/oorabona/node-liblzma/commit/4dece66))
-- add tag normalization and fix checkout refs for reproducible builds (workflows) ([2c7beee](https://github.com/oorabona/node-liblzma/commit/2c7beee))
-- add automatic 'v' prefix normalization to prevent tag mismatch (workflows) ([862dd89](https://github.com/oorabona/node-liblzma/commit/862dd89))
-
-## [2.0.1] - 2025-10-07
-
-### Changed
-- **Vitest Configuration**: Universal fork-based worker pool with increased timeouts to resolve Vitest bug #8201
-  - Changed from conditional forks (macOS only) to universal forks for all platforms
-  - Increased testTimeout from 5000ms to 10000ms
-  - Added hookTimeout of 10000ms
-  - Configured singleFork and isolate options for better stability
-  - Increased workflow retry attempts from 3 to 5 for better reliability
-- **CI/CD Workflow Architecture**:
-  - Extracted hardcoded Node.js version to environment variable (NODE_VERSION: '22')
-  - Added retry mechanism for all test executions (5 attempts with 10-minute timeout)
-  - Changed `tags-ignore` to `tags` in ci-unified.yml to allow CI validation before releases
-  - Removed duplicate test execution from release.yml (violates DRY and SRP principles)
-  - Added check-ci job to verify CI passed before building prebuilds and publishing
-
-### Fixed
-- **Test Stability**: Fixed "Channel closed" (ERR_IPC_CHANNEL_CLOSED) errors on GitHub Actions macOS runners
-- **Workflow Duplication**: Eliminated duplicate test execution between ci-unified.yml and release.yml
-- **Release Safety**: Added CI verification step to ensure all checks pass before publishing to npm
-
-## [2.0.0] - 2025-10-06
-
-### Added
-- **TypeScript Support**: Complete migration from CoffeeScript to TypeScript for better type safety and developer experience
-- **Promise APIs**: New async functions `xzAsync()` and `unxzAsync()` with Promise support
-- **Typed Error Classes**: 8 specialized error classes (`LZMAMemoryError`, `LZMADataError`, `LZMAFormatError`, etc.) with factory pattern for precise error handling
-- **Concurrency Control**: `LZMAPool` class with EventEmitter-based monitoring for production environments
-  - Automatic backpressure and queue management
-  - Configurable concurrency limits
-  - Real-time metrics (`active`, `queued`, `completed`, `failed`)
-  - Events: `queue`, `start`, `complete`, `error-task`, `metrics`
-- **File Helpers**: Simplified `xzFile()` and `unxzFile()` functions for file-based compression
-- **Modern Testing**: Migrated from Mocha to Vitest with improved performance and TypeScript integration
-- **100% Code Coverage**: Comprehensive test suite (320+ tests) covering all statements, branches, functions, and lines
-- **Enhanced Tooling**:
-  - [Biome](https://biomejs.dev/) for fast linting and formatting
-  - Pre-commit hooks with nano-staged and simple-git-hooks
-  - pnpm as package manager for better dependency management
-- **Security**:
-  - Fixed FunctionReference memory leak using smart pointers with custom deleter
-  - Added 512MB buffer size validation to prevent DoS attacks
-  - CodeQL workflow for continuous security scanning
-  - Dependabot configuration for automated dependency updates
-  - Enhanced tarball extraction with path validation and safety checks against path traversal
-- **Thread Support**: Multi-threaded compression with configurable thread count
-- **Automatic Filter Reordering**: LZMA2 filter automatically moved to end as required by liblzma
-- **Factory Functions**: `createXz()` and `createUnxz()` to avoid circular dependencies in ESM
-- **XZ Version Management**: Automated version tracking and update workflows for XZ Utils
-- **CI/CD Enhancements**:
-  - Unified CI pipeline with smart smoke/full test detection
-  - Conditional test execution based on PR vs push vs schedule
-  - Composite GitHub Actions for dependency installation and environment setup
-  - XZ source caching with GitHub token support
-  - Upgraded to setup-node v5 across all workflows
-  - GITHUB_TOKEN environment variable for authenticated downloads
-- **.gitattributes**: Line ending normalization for cross-platform consistency
-
-### Changed
-- **Breaking**: Requires Node.js >= 16 (updated from >= 12)
-- **Breaking**: Module is now ESM-only (`"type": "module"`)
-- **Build System**: Modernized to use CMake for XZ Utils compilation
-  - Environment variable configuration for runtime linking (`RUNTIME_LINK=static|shared`)
-  - Threading support configuration (`ENABLE_THREAD_SUPPORT=yes|no`)
-  - Global liblzma usage option (`USE_GLOBAL=true|false`)
-  - Disabled CLI tools to avoid libintl dependency on macOS
-- **XZ Utils**: Updated from 5.6.3 to 5.8.1 with complete CMake support
-- **macOS Support**: Enhanced dylib handling with proper RPATH configuration
-  - Smart install_name verification and fixing for shared libraries
-  - Proper linker flags via xcode_settings
-  - Only applies install_name fixes to shared library builds
-- **Windows Support**: Improved threading and DLL handling
-  - Thread support now works with both static and shared builds
-  - Fixed kernel32.lib linking for MSVC
-  - Automated library name fixing for binding.gyp compatibility
-  - Python-based DLL copying for better reliability
-- **Vitest Configuration**: Fork-based worker pool on macOS to avoid IPC channel errors
-- **CI Workflows**:
-  - Consolidated from 5 workflows to 1 unified pipeline
-  - Smoke tests and full tests are now mutually exclusive
-  - Proper handling of skipped job states in CI summary
-  - Enhanced caching strategy and matrix testing
-  - Path filters to avoid unnecessary runs
-- **Code Quality**: Simplified instance data management and improved buffer handling
-- Standardized error messages (removed "BUG?" prefixes) for production-ready error handling
-- Improved async callback handling and error management
-- Enhanced TypeScript configuration for better test reliability
-
-### Fixed
-- **macOS Build Issues**:
-  - Fixed dylib loading errors (`Library not loaded: @rpath/liblzma.5.dylib`)
-  - Resolved libintl dependency issues by disabling XZ CLI tools
-  - Fixed RPATH configuration in binding.gyp and CMake
-  - Corrected install_name verification for shared vs static builds
-- **Windows Build Issues**:
-  - Fixed NAPI_VERSION redefinition error
-  - Resolved DLL loading for shared library builds
-  - Fixed threading support configuration
-  - Corrected Windows library naming for compatibility
-- **CI/CD Issues**:
-  - Fixed pipeline failure when smoke test is skipped
-  - Fixed conditional check for global liblzma usage
-  - Removed unnecessary shell specifications
-  - Fixed caching strategy and matrix configuration
-- **Test Issues**:
-  - Skip negative threads test if threading not supported
-  - Fixed TypeScript error handling in tests
-- **Code Issues**:
-  - Resolved C++ exception handling with `NAPI_DISABLE_CPP_EXCEPTIONS`
-  - Corrected memory management in async operations (Ref/Unref balance)
-  - Fixed filter validation bug causing `LZMA_OPTIONS_ERROR` with multiple filters
-  - Fixed memory leak in FunctionReference lifecycle management
-  - Fixed memory leaks and race conditions in C++ bindings
-  - Fixed filters array mutation by cloning in LZMAOptions
-  - Fixed XzStream destructuring for clarity
-  - Fixed LZMA2 filter ordering to ensure it's always last
-- **General**:
-  - Fixed download script symbolic link safety checks
-  - Added `*.log` to .gitignore
-  - Fixed tsconfig formatting
-  - Improved code formatting consistency
-
-## [1.1.9] - Previous Release
-
-### Fixed
-- Fix building if no prebuilt binary found
-
-## [1.1.7]
-
-### Fixed
-- Fix build system
-- Fix release system
-- Fix documentation
-
-## [1.1.0]
-
-### Changed
-- Refactor to deprecate Nan in favor of N-API
-- Drop UBS building system to use standard `node-gyp`
-- Support building on Linux, MacOSX and Windows
-- Ability to build from preinstalled libraries as well as download from XZ website
-- Deprecate Travis CI and AppVeyor to use GitHub Workflows
-
-## [1.0.5]
-
-### Added
-- Added CI for OSX and Windows
-- Implemented use of node-pre-gyp instead of node-gyp
-
-### Fixed
-- Better build script, bug fixing
-
-## [1.0.3]
-
-### Changed
-- Updated to latest versions of dependencies
-
-### Added
-- NodeJS 6.x is now supported
-
-## [1.0.2]
-
-### Fixed
-- Fixed build.yml to work with new UBS 0.6.1
-
-## [1.0.1]
-
-### Fixed
-- Fixed minor bugs
-
-## [1.0.0]
-
-### Changed
-- JS Library has been renamed to `lzma`
-
-### Fixed
-- All known bugs have been fixed
-
-## [0.5.0]
-
-### Changed
-- Rewrote large parts with Nan so now it supports 0.12+, 3+, 4+
-
-### Fixed
-- Fixed syntax in XzStream.coffee
-
-### Removed
-- Apparently not anymore 0.10 support
-
-## [0.4.3]
-
-### Changed
-- Changes in build system (now using ubs to compile/run tests)
-
-### Fixed
-- Applied a fix for 'availInAfter' in stream callback, after [#6032](https://github.com/joyent/node/issues/6032)
-- Fixed bad variable init in binding module
-
-## [0.3.0]
-
-### Added
-- Added multithread support
-- ENABLE_MT is now available to compile with thread support
-- Added new test cases
-
-## [0.2.0]
-
-### Added
-- Full sync support
-- Added new test cases (sync/async)
-
-### Changed
-- Completed import of NodeJS Zlib API
-
-### Fixed
-- Bug fixes
-
-## [0.1.0] - Initial Release
-
-### Added
-- Initial version
-- C++ binding support ENCODE/DECODE
-- Async support
-
-[Unreleased]: https://github.com/oorabona/node-liblzma/compare/v2.0.3...HEAD
-[v2.0.1]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.1
-[2.0.1]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.1
-[v2.0.2]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.2
-[2.0.2]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.2
-[v2.0.3]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.3
-[2.0.3]: https://github.com/oorabona/node-liblzma/releases/tag/v2.0.3