ci: add permissions blocks to all workflows

.github/workflows/c-std.yml

@@ -8,6 +8,9 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
 
   main:
@@ -46,7 +49,6 @@ jobs:
             compiler-opt: -m32
             cmake-opt: -A Win32
 
-
         builder:
           - configure
           - cmake
@@ -152,31 +154,18 @@ jobs:
     - name: Generate project files (cmake)
       if: matrix.builder == 'cmake'
       run: |
-        cmake -S . -B ./build1 -D CMAKE_BUILD_TYPE=Release ${{ matrix.os.cmake-opt }} -DZLIB_BUILD_TESTING=OFF
+        cmake -S . -B ./build -D CMAKE_BUILD_TYPE=Release ${{ matrix.os.cmake-opt }} -DZLIB_BUILD_TESTING=OFF -DZLIB_BUILD_MINIZIP=OFF
       env:
         CC: ${{ matrix.compiler }}
         CFLAGS: -std=${{ matrix.std.value }} ${{ matrix.std.compiler-opt }} ${{ matrix.arch.compiler-opt }} -Werror -Wall -Wextra
 
-    - name: Generate project files with tests (cmake)
-      if: matrix.builder == 'cmake'
-      run: |
-        cmake -S . -B ./build2 -D CMAKE_BUILD_TYPE=Release ${{ matrix.os.cmake-opt }} -DZLIB_BUILD_MINIZIP=ON -DMINIZIP_ENABLE_BZIP2=OFF
-      env:
-        CC: ${{ matrix.compiler }}
-        CFLAGS: -std=${{ matrix.std.value }} ${{ matrix.std.compiler-opt }} ${{ matrix.arch.compiler-opt }} -Wall -Wextra
-
     - name: Compile source code (cmake)
       if: matrix.builder == 'cmake'
-      run: cmake --build ./build1 --config Release
-
-    - name: Compile source code with tests (cmake)
-      if: matrix.builder == 'cmake'
-      run: cmake --build ./build2 --config Release
+      run: cmake --build ./build --config Release
 
     - name: Run test cases (cmake)
       if: matrix.builder == 'cmake'
-      run: ctest ./build2 -C Release --output-on-failure --max-width 120
-
+      run: ctest ./build -C Release --output-on-failure --max-width 120
 
   msvc:
     name: ${{ matrix.os.name }} ${{ matrix.compiler }} ${{ matrix.arch.name }} ${{ matrix.std.name }}  ${{ matrix.builder }}

.github/workflows/cmake.yml

@@ -1,5 +1,9 @@
 name: CMake
 on: [push, pull_request]
+
+permissions:
+  contents: read
+
 jobs:
   ci-cmake:
     name: ${{ matrix.name }}

.github/workflows/configure.yml

@@ -1,5 +1,9 @@
 name: Configure
 on: [push, pull_request]
+
+permissions:
+  contents: read
+
 jobs:
   ci-configure:
     name: ${{ matrix.name }}

.github/workflows/contribs.yml

@@ -1,5 +1,9 @@
 name: contribs
 on: [push, pull_request]
+
+permissions:
+  contents: read
+
 jobs:
   ci-cmake:
     name: ${{ matrix.name }}
@@ -12,37 +16,79 @@ jobs:
             os: ubuntu-latest
             cmake-args: -DZLIB_BUILD_ADA=ON -DZLIB_BUILD_BLAST=ON -DZLIB_BUILD_IOSTREAM3=ON -DZLIB_BUILD_MINIZIP=ON -DZLIB_BUILD_PUFF=ON -DZLIB_WITH_INFBACK9=ON -DZLIB_WITH_CRC32VX=ON -DZLIB_WITH_GVMAT64=ON
             src_dir: .
+            sudo: sudo
+
+          - name: Windows all contribs
+            os: windows-latest
+            cmake-args: -DZLIB_BUILD_BLAST=ON -DZLIB_BUILD_IOSTREAM3=ON -DZLIB_BUILD_MINIZIP=ON -DZLIB_BUILD_PUFF=ON -DZLIB_BUILD_TESTZLIB=ON -DZLIB_BUILD_ZLIB1_DLL=ON -DZLIB_WITH_INFBACK9=ON -DZLIB_WITH_CRC32VX=ON -DZLIB_WITH_GVMAT64=ON
+            src_dir: .
 
           - name: Ubuntu ADA
             os: ubuntu-latest
             src_dir: contrib/ada
             install_zlib: yes
+            sudo: sudo
 
           - name: Ubuntu BLAST
             os: ubuntu-latest
             src_dir: contrib/blast
             install_zlib: yes
+            sudo: sudo
+
+          - name: Windows BLAST
+            os: Windows-latest
+            src_dir: contrib/blast
+            install_zlib: yes
 
           - name: Ubuntu IOSTREAM
             os: ubuntu-latest
             src_dir: contrib/iostream3
             install_zlib: yes
+            sudo: sudo
+
+          - name: Windows IOSTREAM
+            os: Windows-latest
+            src_dir: contrib/iostream3
+            install_zlib: yes
 
           - name: Ubuntu MINIZIP
             os: ubuntu-latest
             src_dir: contrib/minizip
             install_zlib: yes
+            sudo: sudo
+
+          - name: Windows MINIZIP
+            os: Windows-latest
+            src_dir: contrib/minizip
+            install_zlib: yes
 
           - name: Ubuntu PUFF
             os: ubuntu-latest
             src_dir: contrib/puff
             install_zlib: yes
+            sudo: sudo
+
+          - name: Windows PUFF
+            os: Windows-latest
+            src_dir: contrib/puff
+            install_zlib: yes
+
+          - name: Windows testzlib
+            os: windows-latest
+            src_dir: contrib/testzlib
+            install_zlib: yes
+
+          - name: Windows zlib1-dll
+            os: windows-latest
+            src_dir: contrib/zlib1-dll
+            install_zlib: yes
 
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
 
     - name: Install packages
+      if: runner.os == 'Linux'
       run: |
         sudo apt install gnat libbz2-dev
 
@@ -51,7 +97,7 @@ jobs:
       run: |
         cmake -S . -B ../build-zlib -DCMAKE_BUILD_TYPE=Release
         cmake --build ../build-zlib --config Release
-        sudo cmake --install ../build-zlib
+        ${{ matrix.sudo }} cmake --install ../build-zlib
 
     - name: Generate project files
       run: cmake -S ${{ matrix.src_dir }} -B ../build ${{ matrix.cmake-args }} -DCMAKE_BUILD_TYPE=Release

.github/workflows/fuzz.yml

@@ -1,5 +1,9 @@
 name: OSS-Fuzz
 on: [pull_request]
+
+permissions:
+  contents: read
+
 jobs:
   Fuzzing:
     runs-on: ubuntu-latest

.github/workflows/msys-cygwin.yml

@@ -2,6 +2,9 @@ name: mingw/cygwin
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   MSys:
     runs-on: ${{ matrix.os || 'windows-latest' }}

.github/workflows/others.yml

@@ -2,6 +2,9 @@ name: anyVM-OSes
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
 
   dragonflybsd:
@@ -13,6 +16,7 @@ jobs:
       uses: vmactions/dragonflybsd-vm@v1
       with:
         copyback: false
+        sync: scp
         prepare: |
           pkg install -y cmake gcc14 bzip2
 
@@ -37,6 +41,7 @@ jobs:
       with:
         arch: ${{ matrix.name }}
         copyback: false
+        sync: scp
         release: "15.0"
         prepare: |
           pkg install -y cmake gcc14 bzip2
@@ -61,6 +66,7 @@ jobs:
       uses: vmactions/netbsd-vm@v1
       with:
         copyback: false
+        sync: scp
         prepare: |
           export PATH="/usr/pkg/sbin:/usr/pkg/bin:$PATH"
           export PKG_PATH="https://cdn.NetBSD.org/pub/pkgsrc/packages"
@@ -82,6 +88,7 @@ jobs:
       uses: vmactions/omnios-vm@v1
       with:
         copyback: false
+        sync: scp
         prepare: |
           pkg install cmake gcc14 make bzip2
 
@@ -107,6 +114,7 @@ jobs:
       with:
         arch: ${{ matrix.name }}
         copyback: false
+        sync: scp
         prepare: |
           pkg_add cmake
           bzip2
@@ -125,6 +133,7 @@ jobs:
 #      uses: vmactions/openindiana-vm@v0
 #      with:
 #        copyback: false
+#        sync: scp
 #        prepare: |
 #          pkg install cmake gcc-14 make bzip2
 
@@ -142,6 +151,7 @@ jobs:
       uses: vmactions/solaris-vm@v1
       with:
         copyback: false
+        sync: scp
         release: "11.4-gcc"
         prepare: |
           pkgutil -U

CMakeLists.txt

@@ -3,7 +3,7 @@ cmake_minimum_required(VERSION 3.12...3.31)
 project(
     zlib
     LANGUAGES C
-    VERSION 1.3.2
+    VERSION 1.3.2.1
     HOMEPAGE_URL "https://zlib.net/"
     DESCRIPTION "a general-purpose lossless data-compression library")
 
@@ -112,6 +112,16 @@ check_c_source_compiles(
 
 unset(CMAKE_COMPILE_FLAGS)
 set(ZLIB_PC ${zlib_BINARY_DIR}/zlib.pc)
+if(IS_ABSOLUTE "${CMAKE_INSTALL_INCLUDEDIR}")
+    set(pc_includedir "${CMAKE_INSTALL_INCLUDEDIR}")
+else()
+    set(pc_includedir "\${prefix}/${CMAKE_INSTALL_INCLUDEDIR}")
+endif()
+if(IS_ABSOLUTE "${CMAKE_INSTALL_LIBDIR}")
+    set(pc_libdir "${CMAKE_INSTALL_LIBDIR}")
+else()
+    set(pc_libdir "\${exec_prefix}/${CMAKE_INSTALL_LIBDIR}")
+endif()
 configure_file(${zlib_SOURCE_DIR}/zlib.pc.cmakein ${ZLIB_PC} @ONLY)
 configure_file(${zlib_BINARY_DIR}/zconf.h.cmakein ${zlib_BINARY_DIR}/zconf.h)
 
@@ -157,8 +167,9 @@ endif(WIN32)
 if(ZLIB_BUILD_SHARED)
     add_library(
         zlib SHARED ${ZLIB_SRCS} ${ZLIB_PUBLIC_HDRS} ${ZLIB_PRIVATE_HDRS}
-                    $<$<OR:$<BOOL:${WIN32}>,$<BOOL:${CYGWIN}>>:win32/zlib1.rc>)
+                    $<$<OR:$<BOOL:${WIN32}>,$<BOOL:${CYGWIN}>>:win32/zlib-cmake.rc>)
     add_library(ZLIB::ZLIB ALIAS zlib)
+
     target_include_directories(
         zlib
         PUBLIC $<BUILD_INTERFACE:${zlib_BINARY_DIR}>
@@ -174,16 +185,24 @@ if(ZLIB_BUILD_SHARED)
         PUBLIC $<$<BOOL:${HAVE_OFF64_T}>:_LARGEFILE64_SOURCE=1>)
     set(INSTALL_VERSION ${zlib_VERSION})
 
-    if(NOT CYGWIN)
+    if(CYGWIN)
+        set_target_properties(zlib PROPERTIES PREFIX "lib")
+    else(CYGWIN)
         set_target_properties(zlib PROPERTIES SOVERSION ${zlib_VERSION_MAJOR}
                                               VERSION ${INSTALL_VERSION})
-    endif(NOT CYGWIN)
+    endif(CYGWIN)
 
     set_target_properties(
         zlib
         PROPERTIES DEFINE_SYMBOL ZLIB_DLL
-                   EXPORT_NAME ZLIB
-                   OUTPUT_NAME z)
+                   EXPORT_NAME ZLIB)
+
+    if(MSVC)
+        set_target_properties(zlib PROPERTIES OUTPUT_NAME libz)
+    else(MSVC)
+        set_target_properties(zlib PROPERTIES OUTPUT_NAME z)
+    endif(MSVC)
+
     if(UNIX
         AND NOT APPLE
         AND NOT (CMAKE_SYSTEM_NAME STREQUAL AIX)
@@ -217,9 +236,23 @@ if(ZLIB_BUILD_STATIC)
                 $<$<BOOL:${MSVC}>:_CRT_SECURE_NO_DEPRECATE>
                 $<$<BOOL:${MSVC}>:_CRT_NONSTDC_NO_DEPRECATE>
         PUBLIC $<$<BOOL:${HAVE_OFF64_T}>:_LARGEFILE64_SOURCE=1>)
+
+    if(CYGWIN)
+        set_target_properties(zlibstatic PROPERTIES PREFIX "lib")
+    endif(CYGWIN)
+
+    if(MSVC)
+        set_target_properties(zlibstatic
+            PROPERTIES
+                ARCHIVE_OUTPUT_NAME libz${zlib_static_suffix})
+    else(MSVC)
+        set_target_properties(zlibstatic
+            PROPERTIES
+                ARCHIVE_OUTPUT_NAME z${zlib_static_suffix})
+    endif(MSVC)
+
     set_target_properties(
-        zlibstatic PROPERTIES EXPORT_NAME ZLIBSTATIC OUTPUT_NAME
-                                                     z${zlib_static_suffix})
+        zlibstatic PROPERTIES EXPORT_NAME ZLIBSTATIC)
 endif(ZLIB_BUILD_STATIC)
 
 if(ZLIB_INSTALL)

ChangeLog

@@ -1,6 +1,9 @@
 
                 ChangeLog file for zlib
 
+Changes in 1.3.2.1 (xx Feb 2026)
+- 
+
 Changes in 1.3.2 (17 Feb 2026)
 - Continued rewrite of CMake build [Vollstrecker]
 - Various portability improvements

Makefile.in

@@ -31,7 +31,7 @@ VGFMAFLAG=
 
 STATICLIB=libz.a
 SHAREDLIB=libz.so
-SHAREDLIBV=libz.so.1.3.2
+SHAREDLIBV=libz.so.1.3.2.1
 SHAREDLIBM=libz.so.1
 LIBS=$(STATICLIB) $(SHAREDLIBV)
 

README

@@ -1,6 +1,6 @@
 ZLIB DATA COMPRESSION LIBRARY
 
-zlib 1.3.2 is a general purpose data compression library.  All the code is
+zlib 1.3.2.1 is a general purpose data compression library.  All the code is
 thread safe (though see the FAQ for caveats).  The data format used by the zlib
 library is described by RFCs (Request for Comments) 1950 to 1952 at
 https://datatracker.ietf.org/doc/html/rfc1950 (zlib format), rfc1951 (deflate
@@ -31,7 +31,7 @@ Mark Nelson <markn@ieee.org> wrote an article about zlib for the Jan.  1997
 issue of Dr.  Dobb's Journal; a copy of the article is available at
 https://zlib.net/nelson/ .
 
-The changes made in version 1.3.2 are documented in the file ChangeLog.
+The changes made in version 1.3.2.1 are documented in the file ChangeLog.
 
 Unsupported third party contributions are provided in directory contrib/ .