From 1481d93d61685aa2880285e76a4fd3f1a4812d48 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 30 Sep 2026 23:43:41 +0000
Subject: [PATCH] fix(deps): update module github.com/ulikunitz/xz to v0.5.17

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 go.mod                                         |  2 +-
 go.sum                                         |  4 ++--
 vendor/github.com/ulikunitz/xz/TODO.md         |  4 ++++
 vendor/github.com/ulikunitz/xz/lzma/breader.go | 15 ++++++++-------
 vendor/modules.txt                             |  2 +-
 5 files changed, 16 insertions(+), 11 deletions(-)

diff --git a/go.mod b/go.mod
index ff55fd44..864b4c4a 100644
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/onsi/gomega v1.44.0
 	github.com/schollz/progressbar/v3 v3.19.1
 	github.com/sirupsen/logrus v1.10.2
-	github.com/ulikunitz/xz v0.5.16
+	github.com/ulikunitz/xz v0.5.17
 	go.podman.io/common v0.0.0-20250901164813-7046ad001ce8
 	go.podman.io/storage v1.59.1-0.20250820085751-a13b38f45723
 	golang.org/x/sys v0.48.0
diff --git a/go.sum b/go.sum
index 21f194e9..a18f694d 100644
--- a/go.sum
+++ b/go.sum
@@ -56,8 +56,8 @@ github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4=
 github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU=
 github.com/tidwall/sjson v1.2.5 h1:kLy8mja+1c9jlljvWTlSazM7cKDRfJuR/bOJhcY5NcY=
 github.com/tidwall/sjson v1.2.5/go.mod h1:Fvgq9kS/6ociJEDnK0Fk1cpYF4FIW6ZF7LAe+6jwd28=
-github.com/ulikunitz/xz v0.5.16 h1:ld6NyySjx5lowVKwJvMRLnW5nxKX/xnpSiFYZ/Lxur0=
-github.com/ulikunitz/xz v0.5.16/go.mod h1:H9Rt/W6/Qj27PGauhQc6nfCDy7vHpzsOThBSaYDoEhw=
+github.com/ulikunitz/xz v0.5.17 h1:flR0y/x1hgM8EGV1AW3Xll6T413G0glV8UfBwR617V4=
+github.com/ulikunitz/xz v0.5.17/go.mod h1:H9Rt/W6/Qj27PGauhQc6nfCDy7vHpzsOThBSaYDoEhw=
 go.podman.io/common v0.0.0-20250901164813-7046ad001ce8 h1:ew7j982wUjK6RdtNAddeVp2QaXvqde/wTBVh5KfSFiA=
 go.podman.io/common v0.0.0-20250901164813-7046ad001ce8/go.mod h1:9opewjDkwNZ7ulCCAhfRmpc3ZObqR/2LRM6DZiSj9So=
 go.podman.io/storage v1.59.1-0.20250820085751-a13b38f45723 h1:Yvy8mEjlmlocJETNBKr1PV3BuwhNEKiRj8mFUPjsHWA=
diff --git a/vendor/github.com/ulikunitz/xz/TODO.md b/vendor/github.com/ulikunitz/xz/TODO.md
index ad1ab306..5496e79a 100644
--- a/vendor/github.com/ulikunitz/xz/TODO.md
+++ b/vendor/github.com/ulikunitz/xz/TODO.md
@@ -82,6 +82,10 @@
 
 ## Log
 
+## 2026-09-19
+
+Includes a fix for lzma.breader handling 0, nil Reader returns correctly.
+
 ## 2026-07-20
 
 New release v0.5.16 to support other operating systems like Illumos using a
diff --git a/vendor/github.com/ulikunitz/xz/lzma/breader.go b/vendor/github.com/ulikunitz/xz/lzma/breader.go
index 9dfdf28b..81bd6718 100644
--- a/vendor/github.com/ulikunitz/xz/lzma/breader.go
+++ b/vendor/github.com/ulikunitz/xz/lzma/breader.go
@@ -5,7 +5,6 @@
 package lzma
 
 import (
-	"errors"
 	"io"
 )
 
@@ -28,12 +27,14 @@ func ByteReader(r io.Reader) io.ByteReader {
 
 // ReadByte read byte function.
 func (r *breader) ReadByte() (c byte, err error) {
-	n, err := r.Reader.Read(r.p)
-	if n < 1 {
-		if err == nil {
-			err = errors.New("breader.ReadByte: no data")
+	for i := 0; i < 100; i++ {
+		n, err := r.Reader.Read(r.p)
+		if n > 0 {
+			return r.p[0], nil
+		}
+		if err != nil {
+			return 0, err
 		}
-		return 0, err
 	}
-	return r.p[0], nil
+	return 0, io.ErrNoProgress
 }
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 8fa0026b..1c7727b2 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -70,7 +70,7 @@ github.com/schollz/progressbar/v3
 # github.com/sirupsen/logrus v1.10.2
 ## explicit; go 1.23
 github.com/sirupsen/logrus
-# github.com/ulikunitz/xz v0.5.16
+# github.com/ulikunitz/xz v0.5.17
 ## explicit; go 1.20
 github.com/ulikunitz/xz
 github.com/ulikunitz/xz/internal/hash