deps(cargo): bump zip from 4.6.1 to 8.6.0 #123

Merged
dependabot[bot] merged 1 commits from dependabot/cargo/zip-8.6.0 into main 2026-07-23 20:37:50 +00:00
dependabot[bot] commented 2026-07-23 20:34:22 +00:00 (Migrated from github.com)

Bumps zip from 4.6.1 to 8.6.0.

Release notes

Sourced from zip's releases.

v8.6.0

🚀 Features

  • add compression not supported as enum error (#774)

🐛 Bug Fixes

  • allow for [u8] as filename (#775)

🚜 Refactor

  • mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
  • use and simplify is_dir (#776)

v8.5.1

🚜 Refactor

  • change magic finder to stack buffer (#763)
  • simplify extra field parsing (#764)

v8.5.0

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

v8.4.0

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

  • skip BufReader for Stored files in make_reader (#739)

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from zip's changelog.

8.6.0 - 2026-04-25

🚀 Features

  • add compression not supported as enum error (#774)

🐛 Bug Fixes

  • allow for [u8] as filename (#775)

🚜 Refactor

  • mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#777)
  • use and simplify is_dir (#776)

8.5.1 - 2026-04-06

🚜 Refactor

  • change magic finder to stack buffer (#763)
  • simplify extra field parsing (#764)

8.5.0 - 2026-04-01

🐛 Bug Fixes

  • remove zip64 comment and add zip64 extensible data sector (#747)

🚜 Refactor

  • remove useless magic in struct (#730)
  • change extra_field from Arc<Vec> to Arc<[u8]> (#741)

⚙️ Miscellaneous Tasks

  • cleanup README (#758)

8.4.0 - 2026-03-23

🚀 Features

  • add a check for building benches (#748)

🚜 Refactor

  • split part of read.rs for code readability (#744)
  • remove unused allow (#745)

⚡ Performance

... (truncated)

Commits
  • 771dfc5 chore: release v8.6.0 (#781)
  • 8e480cc chore(deps): update sha1 requirement from 0.10 to 0.11 (#767)
  • 2513bbe chore(deps): update aes requirement from 0.8 to 0.9 (#787)
  • 957e240 ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (#786)
  • 0329d9d fix: allow for [u8] as filename (#775)
  • ddcf854 ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#788)
  • 42323a8 ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#785)
  • 901014a ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#784)
  • 07702d4 feat: add compression not supported as enum error (#774)
  • 2d0c46b ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#783)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [zip](https://github.com/zip-rs/zip2) from 4.6.1 to 8.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zip-rs/zip2/releases">zip's releases</a>.</em></p> <blockquote> <h2>v8.6.0</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/pull/774">#774</a>)</li> </ul> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/pull/775">#775</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>mark <code>ZipFlags</code> as non-exhaustive and add test for <code>HasZipMetadata</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/777">#777</a>)</li> <li>use and simplify is_dir (<a href="https://redirect.github.com/zip-rs/zip2/pull/776">#776</a>)</li> </ul> <h2>v8.5.1</h2> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>change magic finder to stack buffer (<a href="https://redirect.github.com/zip-rs/zip2/pull/763">#763</a>)</li> <li>simplify extra field parsing (<a href="https://redirect.github.com/zip-rs/zip2/pull/764">#764</a>)</li> </ul> <h2>v8.5.0</h2> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>remove <code>zip64 comment</code> and add <code>zip64 extensible data sector</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/747">#747</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>remove useless magic in struct (<a href="https://redirect.github.com/zip-rs/zip2/pull/730">#730</a>)</li> <li>change extra_field from Arc&lt;Vec<!-- raw HTML omitted -->&gt; to Arc&lt;[u8]&gt; (<a href="https://redirect.github.com/zip-rs/zip2/pull/741">#741</a>)</li> </ul> <h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3> <ul> <li>cleanup README (<a href="https://redirect.github.com/zip-rs/zip2/pull/758">#758</a>)</li> </ul> <h2>v8.4.0</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>add a check for building benches (<a href="https://redirect.github.com/zip-rs/zip2/pull/748">#748</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>split part of <code>read.rs</code> for code readability (<a href="https://redirect.github.com/zip-rs/zip2/pull/744">#744</a>)</li> <li>remove unused allow (<a href="https://redirect.github.com/zip-rs/zip2/pull/745">#745</a>)</li> </ul> <h3><!-- raw HTML omitted -->⚡ Performance</h3> <ul> <li>skip BufReader for Stored files in make_reader (<a href="https://redirect.github.com/zip-rs/zip2/pull/739">#739</a>)</li> </ul> <h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md">zip's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/zip-rs/zip2/compare/v8.5.1...v8.6.0">8.6.0</a> - 2026-04-25</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/pull/774">#774</a>)</li> </ul> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/pull/775">#775</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>mark <code>ZipFlags</code> as non-exhaustive and add test for <code>HasZipMetadata</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/777">#777</a>)</li> <li>use and simplify is_dir (<a href="https://redirect.github.com/zip-rs/zip2/pull/776">#776</a>)</li> </ul> <h2><a href="https://github.com/zip-rs/zip2/compare/v8.5.0...v8.5.1">8.5.1</a> - 2026-04-06</h2> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>change magic finder to stack buffer (<a href="https://redirect.github.com/zip-rs/zip2/pull/763">#763</a>)</li> <li>simplify extra field parsing (<a href="https://redirect.github.com/zip-rs/zip2/pull/764">#764</a>)</li> </ul> <h2><a href="https://github.com/zip-rs/zip2/compare/v8.4.0...v8.5.0">8.5.0</a> - 2026-04-01</h2> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>remove <code>zip64 comment</code> and add <code>zip64 extensible data sector</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/747">#747</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>remove useless magic in struct (<a href="https://redirect.github.com/zip-rs/zip2/pull/730">#730</a>)</li> <li>change extra_field from Arc&lt;Vec<!-- raw HTML omitted -->&gt; to Arc&lt;[u8]&gt; (<a href="https://redirect.github.com/zip-rs/zip2/pull/741">#741</a>)</li> </ul> <h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3> <ul> <li>cleanup README (<a href="https://redirect.github.com/zip-rs/zip2/pull/758">#758</a>)</li> </ul> <h2><a href="https://github.com/zip-rs/zip2/compare/v8.3.1...v8.4.0">8.4.0</a> - 2026-03-23</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>add a check for building benches (<a href="https://redirect.github.com/zip-rs/zip2/pull/748">#748</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>split part of <code>read.rs</code> for code readability (<a href="https://redirect.github.com/zip-rs/zip2/pull/744">#744</a>)</li> <li>remove unused allow (<a href="https://redirect.github.com/zip-rs/zip2/pull/745">#745</a>)</li> </ul> <h3><!-- raw HTML omitted -->⚡ Performance</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zip-rs/zip2/commit/771dfc534d2614158af5497ea3dff4d4208d7db1"><code>771dfc5</code></a> chore: release v8.6.0 (<a href="https://redirect.github.com/zip-rs/zip2/issues/781">#781</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/8e480ccb01def04dc4f15e3510ed435276c0df9f"><code>8e480cc</code></a> chore(deps): update sha1 requirement from 0.10 to 0.11 (<a href="https://redirect.github.com/zip-rs/zip2/issues/767">#767</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/2513bbe9a669f4d3c71fd6cf63e2c8f7cd63404d"><code>2513bbe</code></a> chore(deps): update aes requirement from 0.8 to 0.9 (<a href="https://redirect.github.com/zip-rs/zip2/issues/787">#787</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/957e240eb3e0caca1152bfef114cca260ff7755d"><code>957e240</code></a> ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (<a href="https://redirect.github.com/zip-rs/zip2/issues/786">#786</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/0329d9d0b63d2648e52a89d27437315b71343852"><code>0329d9d</code></a> fix: allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/issues/775">#775</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/ddcf8544c64ce6496b19df9ea84211deefbdd714"><code>ddcf854</code></a> ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (<a href="https://redirect.github.com/zip-rs/zip2/issues/788">#788</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/42323a87ef97bb71f0a0506cfdbf5b4c815dcffc"><code>42323a8</code></a> ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/785">#785</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/901014a1f2123697ea3803140bfc3b4f0565b205"><code>901014a</code></a> ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/784">#784</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/07702d4e432ef7a349b81a9dbb88df17a2e7b9d1"><code>07702d4</code></a> feat: add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/issues/774">#774</a>)</li> <li><a href="https://github.com/zip-rs/zip2/commit/2d0c46b7baf11bf7f461b54ac69a681bc8b89557"><code>2d0c46b</code></a> ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/783">#783</a>)</li> <li>Additional commits viewable in <a href="https://github.com/zip-rs/zip2/compare/v4.6.1...v8.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zip&package-manager=cargo&previous-version=4.6.1&new-version=8.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
KofTwentyTwo commented 2026-07-23 20:37:50 +00:00 (Migrated from github.com)

Reviewed and reconciled against main workspace dependency tree.

Reviewed and reconciled against main workspace dependency tree.
dependabot[bot] commented 2026-07-23 20:37:52 +00:00 (Migrated from github.com)

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Sign in to join this conversation.