[bmehta001]

Summary

• Update the vendored zlib sources and bundled minizip files from 1.3.2 to the latest upstream release, 1.4, including its security and correctness fixes.
• Record upstream commit 99623ef7097352da7993ba614161fd6a311e046e in cgmanifest.json.
• Preserve the SDK's act_z_ symbol isolation and legacy Windows/CMake library names. Synchronize the CMake header template with 1.4's Windows large-file support, fix prefixed large-file macro redefinitions, populate pkg-config metadata, and run the existing 64-bit-offset examples on Windows too.

vcpkg behavior

The SDK's vcpkg recipes already select an external zlib package rather than the vendored copy (Apple uses the OS library). The public vcpkg registry currently provides zlib 1.3.2#3, so this PR cannot update that dependency just by replacing the SDK's sources. vcpkg needs its own zlib port update to 1.4; consumers then need a registry checkout/baseline that includes that update. Existing pinned baselines do not advance automatically. No unrelated registry PR or custom overlay is introduced here.

Validation

• Windows x64, Visual Studio 2026: SDK build and all 29 selected compression, HTTP encoding/decoding, payload decoding, and zlib utility tests passed.
• Linux x64, Ubuntu/WSL with GCC 13: SDK build and the same 29 selected tests passed.
• Standalone zlib: both normal and 64-bit-offset example tests passed on Windows and Linux; Windows 64-bit static consumer also compiled under /W4 /WX and ran successfully.
• Linux static-library symbol inspection: every defined global symbol retains the SDK's act_z_ prefix.
• vcpkg native and registry feature contracts, package dependency contracts, and all 13 release-port tests passed. These are recipe contract checks, not a full vcpkg package installation.
• Existing repository spellcheck lint and git diff --check passed.

Only targeted SDK suites were run; no selected tests were skipped. Existing unrelated GoogleTest CMake deprecations, MSVC warning-level override notices, and SQLite macro redefinition warnings remain. The standalone zlib build was also exercised without the SDK's third-party warning suppression.

CI runner compatibility

Replace the retired macos-14 iOS matrix lane with supported macos-26 and its installed iPhone 17 / iPad Pro 11-inch (M5) simulators. Keep the macos-15 lane and all eight debug/release phone/tablet combinations. Existing iOS deployment targets remain unchanged.

Verified supported labels and simulator inventories against GitHub's runner reference and the macOS 26 image inventory. Parsed workflow YAML and validated all expanded matrix combinations locally on Windows and Linux; existing spellcheck lint and whitespace checks passed. Actual Xcode/simulator execution requires hosted CI.

[Copilot]

🟡 Changes recommended

A partial transparent read followed by EIO can leave a stale buffer pointer, allowing subsequent reads to access memory beyond the allocation.

4 open issues

• Reset the output pointer before loading after partial read errors · New
• Order minizip before its dependencies in pkg-config output · New
• Export the installed minizip header directory to consumers · New
• Use minizip version variables for the shared-library SONAME · New

What changed in this PR

Updates the SDK’s vendored zlib to 1.4, bringing upstream security and correctness fixes while retaining SDK-specific symbol isolation and legacy library names. External vcpkg dependencies remain unchanged.

Changes:

• Refresh zlib and minizip sources, documentation, version metadata, and upstream provenance.
• Update Windows large-file support, packaging metadata, and standalone build/test integration.
• Refresh iOS CI runners, add an Android dependency mirror, and advance SDK/Swift package version references.

File	Description
zlib/​zutil.c	Fix allocation cleanup.
zlib/​zlib.pc.cmakein	Populate configured installation paths.
zlib/​zlib.h	Update version, API documentation, and large-file aliases.
zlib/​zlib.3	Update manual release information.
zlib/​zconf.h.in	Update offset types and Windows large-file support.
zlib/​zconf.h.cmakein	Synchronize CMake-generated offset definitions.
zlib/​zconf.h	Update bundled offset definitions.
zlib/​win32/​README-WIN32.txt	Update Windows release references.
zlib/​win32/​Makefile.msc	Remove the fixed DLL base address.
zlib/​uncompr.c	Use portable null-pointer macros.
zlib/​trees.c	Bound character classification input.
zlib/​treebuild.xml	Update package version metadata.
zlib/​test/​minigzip.c	Improve memory-mapping portability.
zlib/​test/​infcover.c	Extend invalid-dictionary coverage and allocation handling.
zlib/​qnx/​package.qpg	Update QNX library version references.
zlib/​Makefile.in	Update version and AIX export generation.
zlib/​inftrees.h	Adjust workaround decoding-table limits.
zlib/​inftrees.c	Update version and invalid-code entries.
zlib/​inflate.h	Track requested window and wrapper settings.
zlib/​inflate.c	Fix reset, synchronization, dictionary, and copy handling.
zlib/​infback.c	Correct fast-path window bookkeeping.
zlib/​gzwrite.c	Fix buffering, zero-fill, and stalled-write handling.
zlib/​gzread.c	Revise buffered errors, skipping, and stream-end handling.
zlib/​gzlib.c	Harden file opening, seeking, and error state.
zlib/​gzguts.h	Add portable blocking checks and offset limits.
zlib/​deflate.c	Fix reset, priming, copying, and block completion.
zlib/​crc32.c	Explicitly cast the initial braid checksum.
zlib/​contrib/​pascal/​zlibpas.pas	Update Pascal version constants.
zlib/​contrib/​minizip/​zip.h	Document extra-field size limits.
zlib/​contrib/​minizip/​zip.c	Harden ZIP64 metadata, parsing, and cleanup.
zlib/​contrib/​minizip/​unzip.h	Clarify truncated-string handling.
zlib/​contrib/​minizip/​unzip.c	Validate ZIP64 locations and extra-field boundaries.
zlib/​contrib/​minizip/​test/​find_package_wrong_components_test.cmake.in	Raise the test’s CMake minimum.
zlib/​contrib/​minizip/​test/​find_package_test.cmake.in	Update CMake minimum and format component requests.
zlib/​contrib/​minizip/​test/​find_package_no_components_test.cmake.in	Raise the test’s CMake minimum.
zlib/​contrib/​minizip/​test/​CMakeLists.txt	Revise package-test paths, fixtures, and platform options.
zlib/​contrib/​minizip/​test/​add_subdirectory_test.cmake.in	Raise the test’s CMake minimum.
zlib/​contrib/​minizip/​test/​add_subdirectory_exclude_test.cmake.in	Raise the test’s CMake minimum.
zlib/​contrib/​minizip/​skipset.h	Localize helpers and improve C compatibility.
zlib/​contrib/​minizip/​mztools.c	Use unsigned arithmetic for 32-bit reads.
zlib/​contrib/​minizip/​minizipConfig.cmake.in	Improve dependency and component reporting.
zlib/​contrib/​minizip/​miniunz.c	Sanitize extraction paths and revise directory creation.
zlib/​contrib/​minizip/​Makefile.am	Install integer definitions and link miniunzip with zlib.
zlib/​contrib/​minizip/​ioapi.h	Correct Android large-file feature detection.
zlib/​contrib/​minizip/​crypt.h	Switch encryption-header generation to PCG32.
zlib/​contrib/​minizip/​configure.ac	Update the Autoconf package version.
zlib/​contrib/​minizip/​CMakeLists.txt	Revise targets, installation metadata, and test setup.
zlib/​contrib/​infback9/​inftree9.c	Remove out-of-bounds table-pointer arithmetic.
zlib/​contrib/​dotzlib/​DotZLib/​UnitTests.cs	Update the expected zlib version.
zlib/​contrib/​delphi/​ZLib.pas	Update the Delphi version constant.
zlib/​configure	Improve generated-header and platform linker handling.
zlib/​compress.c	Use portable null-pointer macros.
zlib/​CMakeLists.txt	Update version, pkg-config paths, and Windows examples.
zlib/​ChangeLog	Record upstream 1.4 changes.
Package.swift	Update the binary release URL and checksum.
lib/​include/​public/​Version.hpp	Advance the SDK build version.
lib/​android_build/​build.gradle	Add a Maven Central mirror before the primary repository.
cgmanifest.json	Record the zlib 1.4 upstream commit.
.github/​workflows/​build-ios-mac.yml	Replace the macOS 14 lane and its simulators.

_{Review effort: Balanced}

[bmehta001]

These zlib comments CoPilot made are perhaps accurate, but I would prefer to copy the library as is rather than making my own modifications, so I am resolving them.