miniz provenance

Vendored third-party dependency used by src/core/zipextractor.{h,cpp} for the built-in incremental updater (ZIP reading and, in tests, ZIP writing).

Vendored file set

The GitHub release archive for miniz ships a pre-amalgamated source set, which is not the same layout as a git checkout of the tag (a checkout splits the implementation across miniz_tdef.c, miniz_tinfl.c, miniz_zip.c and a build step amalgamates them). The complete set that the 3.0.2 release requires is:

LICENSE and ChangeLog.md are copied verbatim from the same archive. The examples/ directory and readme.md are intentionally not vendored.

Local modifications

None. miniz.c and miniz.h are byte-identical to the upstream release archive. All configuration is done through compile definitions in CMakeLists.txt (currently only MINIZ_NO_TIME), never by editing the sources.

If you ever need to change miniz behavior, add a -D in CMakeLists.txt or wrap it in src/core/zipextractor.cpp. Keeping the vendored sources pristine is what makes re-pinning a newer tag a mechanical operation.

Re-pinning procedure

$ver = '3.0.3'
curl.exe -sSL -o "$env:TEMP\miniz.zip" `
  "https://github.com/richgel999/miniz/releases/download/$ver/miniz-$ver.zip"
Get-FileHash "$env:TEMP\miniz.zip" -Algorithm SHA256   # record in the table above
Expand-Archive "$env:TEMP\miniz.zip" -DestinationPath "$env:TEMP\miniz-$ver"
Copy-Item "$env:TEMP\miniz-$ver\miniz.c","$env:TEMP\miniz-$ver\miniz.h",`
          "$env:TEMP\miniz-$ver\LICENSE","$env:TEMP\miniz-$ver\ChangeLog.md" libs\miniz

Then update every hash and the tag in the tables above, and re-run ctest -R "^test_zipextractor$".