+hco another variant of StreamUtils.runStrict that takes an Iterator of inputs
+htp #16516 rewrite Deflate/GzipDecompressor as StatefulStage to defuse zip bomb

Also, the tests have been DRY'd up.
+htp #16516 allow setting maximum ByteString chunk size for decoding operations
Merge pull request #16517 from spray/w/deflater-dos

+htp #16516 rewrite Deflate/GzipDecompressor as StatefulStage to defuse zip bomb