Fix dest buffer bounds check in Snappy.uncompress - #734

HttpError: Resource not accessible by integration at /home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:7146:21 at process.processTicksAndRejections (node:internal/process/task_queues:104:5) at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:56365:18) { name: 'AggregateError', event: { id: '35137606584', name: 'pull_request_target', payload: { action: 'synchronize', after: '9b58271da2aa73a77fa9642e55e50e3f23fdf2b4', before: '3fc0b269ace193e7fb13828b4b63e81f82ed6fd2', number: 734, pull_request: { _links: { comments: { href: 'https://api.github.com/repos/xerial/snappy-java/issues/734/comments' }, commits: { href: 'https://api.github.com/repos/xerial/snappy-java/pulls/734/commits' }, html: { href: 'https://github.com/xerial/snappy-java/pull/734' }, issue: { href: 'https://api.github.com/repos/xerial/snappy-java/issues/734' }, review_comment: { href: 'https://api.github.com/repos/xerial/snappy-java/pulls/comments{/number}' }, review_comments: { href: 'https://api.github.com/repos/xerial/snappy-java/pulls/734/comments' }, self: { href: 'https://api.github.com/repos/xerial/snappy-java/pulls/734' }, statuses: { href: 'https://api.github.com/repos/xerial/snappy-java/statuses/9b58271da2aa73a77fa9642e55e50e3f23fdf2b4' } }, active_lock_reason: null, additions: 41, assignee: null, assignees: [], author_association: 'NONE', auto_merge: null, base: { label: 'xerial:main', ref: 'main', repo: { allow_auto_merge: true, allow_forking: true, allow_merge_commit: false, allow_rebase_merge: true, allow_squash_merge: true, allow_update_branch: false, archive_url: 'https://api.github.com/repos/xerial/snappy-java/{archive_format}{/ref}', archived: false, assignees_url: 'https://api.github.com/repos/xerial/snappy-java/assignees{/user}', blobs_url: 'https://api.github.com/repos/xerial/snappy-java/git/blobs{/sha}', branches_url: 'https://api.github.com/repos/xerial/snappy-java/branches{/branch}', clone_url: 'https://github.com/xerial/snappy-java.git', collaborators_url: 'https://api.github.com/repos/xerial/snappy-java/collaborators{/collaborator}', comments_url: 'https://api.github.com/repos/xerial/snappy-java/comments{/number}', commits_url: 'https://api.github.com/repos/xerial/snappy-java/commits{/sha}', compare_url: 'https://api.github.com/repos/xerial/snappy-java/compare/{base}...{head}', contents_url: 'https://api.github.com/repos/xerial/snappy-java/contents/{+path}', contributors_url: 'https://api.github.com/repos/xerial/snappy-java/contributors', created_at: '2012-09-06T01:30:21Z', default_branch: 'main', delete_branch_on_merge: true, deployments_url: 'https://api.github.com/repos/xerial/snappy-java/deployments', description: 'Snappy compressor/decompressor for Java', disabled: false, downloads_url: 'https://api.github.com/repos/xerial/snappy-java/downloads', events_url: 'https://api.github.com/repos/xerial/snappy-java/events', fork: false, forks: 255, forks_count: 255, forks_url: 'https://api.github.com/repos/xerial/snappy-java/forks', full_name: 'xerial/snappy-java', git_commits_url: 'https://api.github.com/repos/xerial/snappy-java/git/commits{/sha}', git_refs_url: 'https://api.github.com/repos/xerial/snappy-java/git/refs{/sha}', git_tags_url: 'https://api.github.com/r

Resource not accessible by integration { name: 'HttpError', id: '35137606584', status: 403, response: { url: 'https://api.github.com/repos/xerial/snappy-java/releases', status: 403, headers: { 'access-control-allow-origin': '*', 'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset, Warning', 'content-encoding': 'gzip', 'content-security-policy': "default-src 'none'", 'content-type': 'application/json; charset=utf-8', date: 'Wed, 16 Sep 2026 18:57:29 GMT', 'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin', server: 'github.com', 'strict-transport-security': 'max-age=31536000; includeSubdomains; preload', 'transfer-encoding': 'chunked', vary: 'Accept-Encoding, Accept, X-Requested-With', 'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write', 'x-content-type-options': 'nosniff', 'x-frame-options': 'deny', 'x-github-api-version-selected': '2022-11-28', 'x-github-edge-region': 'iad', 'x-github-media-type': 'github.v3; format=json', 'x-github-request-id': '3029:38771D:887EF0:1BFF8EC:6AAAE698', 'x-ratelimit-limit': '5000', 'x-ratelimit-remaining': '4991', 'x-ratelimit-reset': '1789587180', 'x-ratelimit-resource': 'core', 'x-ratelimit-used': '9', 'x-xss-protection': '0' }, data: { message: 'Resource not accessible by integration', documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release', status: '403' } }, request: { method: 'POST', url: 'https://api.github.com/repos/xerial/snappy-java/releases', headers: { accept: 'application/vnd.github.v3+json', 'user-agent': 'probot/12.4.0 octokit-core.js/3.6.0 Node.js/24', 'x-github-delivery': '35137606584', authorization: 'bearer [REDACTED]', 'content-type': 'application/json; charset=utf-8' }, body: `{"target_commitish":"refs/heads/main","name":"v1.1.11","tag_name":"v1.1.11","body":"## What's Changed\\n\\n- Add JAR integration test for JDK compatibility @xerial (#704)\\n- Add JDK 25 to CI test matrix @xerial (#703)\\n- Suppress AccessController deprecation warning for Java 17+ @xerial (#682)\\n- chore: update release CI to use Java 21 @xerial (#681)\\n\\n## 🔗 Dependency Updates\\n\\n- Update sbt, scripted-plugin to 1.12.0 @xerial-bot (#709)\\n- Bump peter-evans/create-pull-request from 7 to 8 @[dependabot[bot]](https://github.com/apps/dependabot) (#706)\\n- Bump actions/cache from 4 to 5 @[dependabot[bot]](https://github.com/apps/dependabot) (#707)\\n- Bump actions/checkout from 5 to 6 @[dependabot[bot]](https://github.com/apps/dependabot) (#705)\\n- Update sbt, scripted-plugin to 1.11.7 @xerial-bot (#698)\\n- Update sbt, scripted-plugin to 1.11.6 @xerial-bot (#695)\\n- Bump actions/setup-java from 4 to 5 @[dependabot[bot]](https://github.com/apps/dependabot) (#690)\\n- Bump actions/checkout from 4 to 5 @[dependabot[bot]](https://github.com/apps/dependabot) (#685)\\n- Update sbt, scripted-plugin to 1.11.5 @xerial-bot (#687)\\n\\n## 🛠 Internal Updates\\n\\n- Update airframe-log to 2025.1.23 @xerial-bot (#710)\\n- Update airframe-log to 2025.1.22 @xerial-bot (#708)\\n- Update hadoop-common to 3.4.2 @xerial-bot (#691)\\n- Update airframe-log to 2025.1.21 @xerial-bot (#700)\\n- Update sbt-scalafmt to 2.5.6 @xerial-bot (#701)\\n- Update airframe-log to 2025.1.19 @xerial-bot (#697)\\n- Update airframe-log to 2025.1.16 @xerial-bot (#686)\\n\\n## 📚 Docs\\n\\n- Document JDK 24+ native access requirements @xerial (#702)\\n\\n**Full Changelog**: https://github.com/xerial/snappy-java/compare/v1.1.10.8...v1.1.11\\n","draft":true,"prerelease":false,"make_latest":"true"}`, request: {} }, event: {

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: release-drafter/release-drafter@v6. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

"pull_request_target.edited" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)

"pull_request_target.synchronize" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)

"pull_request_target.reopened" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)