Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [zip](https://github.com/zip-rs/zip2) from 4.6.1 to 8.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/zip-rs/zip2/releases">zip's releases</a>.</em></p>
<blockquote>
<h2>v8.6.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/pull/774">#774</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/pull/775">#775</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>mark <code>ZipFlags</code> as non-exhaustive and add test for <code>HasZipMetadata</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/777">#777</a>)</li>
<li>use and simplify is_dir (<a href="https://redirect.github.com/zip-rs/zip2/pull/776">#776</a>)</li>
</ul>
<h2>v8.5.1</h2>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>change magic finder to stack buffer (<a href="https://redirect.github.com/zip-rs/zip2/pull/763">#763</a>)</li>
<li>simplify extra field parsing (<a href="https://redirect.github.com/zip-rs/zip2/pull/764">#764</a>)</li>
</ul>
<h2>v8.5.0</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>remove <code>zip64 comment</code> and add <code>zip64 extensible data sector</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/747">#747</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>remove useless magic in struct (<a href="https://redirect.github.com/zip-rs/zip2/pull/730">#730</a>)</li>
<li>change extra_field from Arc<Vec<!-- raw HTML omitted -->> to Arc<[u8]> (<a href="https://redirect.github.com/zip-rs/zip2/pull/741">#741</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<ul>
<li>cleanup README (<a href="https://redirect.github.com/zip-rs/zip2/pull/758">#758</a>)</li>
</ul>
<h2>v8.4.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>add a check for building benches (<a href="https://redirect.github.com/zip-rs/zip2/pull/748">#748</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>split part of <code>read.rs</code> for code readability (<a href="https://redirect.github.com/zip-rs/zip2/pull/744">#744</a>)</li>
<li>remove unused allow (<a href="https://redirect.github.com/zip-rs/zip2/pull/745">#745</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚡ Performance</h3>
<ul>
<li>skip BufReader for Stored files in make_reader (<a href="https://redirect.github.com/zip-rs/zip2/pull/739">#739</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md">zip's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/zip-rs/zip2/compare/v8.5.1...v8.6.0">8.6.0</a> - 2026-04-25</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/pull/774">#774</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/pull/775">#775</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>mark <code>ZipFlags</code> as non-exhaustive and add test for <code>HasZipMetadata</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/777">#777</a>)</li>
<li>use and simplify is_dir (<a href="https://redirect.github.com/zip-rs/zip2/pull/776">#776</a>)</li>
</ul>
<h2><a href="https://github.com/zip-rs/zip2/compare/v8.5.0...v8.5.1">8.5.1</a> - 2026-04-06</h2>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>change magic finder to stack buffer (<a href="https://redirect.github.com/zip-rs/zip2/pull/763">#763</a>)</li>
<li>simplify extra field parsing (<a href="https://redirect.github.com/zip-rs/zip2/pull/764">#764</a>)</li>
</ul>
<h2><a href="https://github.com/zip-rs/zip2/compare/v8.4.0...v8.5.0">8.5.0</a> - 2026-04-01</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>remove <code>zip64 comment</code> and add <code>zip64 extensible data sector</code> (<a href="https://redirect.github.com/zip-rs/zip2/pull/747">#747</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>remove useless magic in struct (<a href="https://redirect.github.com/zip-rs/zip2/pull/730">#730</a>)</li>
<li>change extra_field from Arc<Vec<!-- raw HTML omitted -->> to Arc<[u8]> (<a href="https://redirect.github.com/zip-rs/zip2/pull/741">#741</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<ul>
<li>cleanup README (<a href="https://redirect.github.com/zip-rs/zip2/pull/758">#758</a>)</li>
</ul>
<h2><a href="https://github.com/zip-rs/zip2/compare/v8.3.1...v8.4.0">8.4.0</a> - 2026-03-23</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>add a check for building benches (<a href="https://redirect.github.com/zip-rs/zip2/pull/748">#748</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🚜 Refactor</h3>
<ul>
<li>split part of <code>read.rs</code> for code readability (<a href="https://redirect.github.com/zip-rs/zip2/pull/744">#744</a>)</li>
<li>remove unused allow (<a href="https://redirect.github.com/zip-rs/zip2/pull/745">#745</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚡ Performance</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/zip-rs/zip2/commit/771dfc534d2614158af5497ea3dff4d4208d7db1"><code>771dfc5</code></a> chore: release v8.6.0 (<a href="https://redirect.github.com/zip-rs/zip2/issues/781">#781</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/8e480ccb01def04dc4f15e3510ed435276c0df9f"><code>8e480cc</code></a> chore(deps): update sha1 requirement from 0.10 to 0.11 (<a href="https://redirect.github.com/zip-rs/zip2/issues/767">#767</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/2513bbe9a669f4d3c71fd6cf63e2c8f7cd63404d"><code>2513bbe</code></a> chore(deps): update aes requirement from 0.8 to 0.9 (<a href="https://redirect.github.com/zip-rs/zip2/issues/787">#787</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/957e240eb3e0caca1152bfef114cca260ff7755d"><code>957e240</code></a> ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (<a href="https://redirect.github.com/zip-rs/zip2/issues/786">#786</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/0329d9d0b63d2648e52a89d27437315b71343852"><code>0329d9d</code></a> fix: allow for <code>[u8]</code> as filename (<a href="https://redirect.github.com/zip-rs/zip2/issues/775">#775</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/ddcf8544c64ce6496b19df9ea84211deefbdd714"><code>ddcf854</code></a> ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (<a href="https://redirect.github.com/zip-rs/zip2/issues/788">#788</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/42323a87ef97bb71f0a0506cfdbf5b4c815dcffc"><code>42323a8</code></a> ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/785">#785</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/901014a1f2123697ea3803140bfc3b4f0565b205"><code>901014a</code></a> ci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/784">#784</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/07702d4e432ef7a349b81a9dbb88df17a2e7b9d1"><code>07702d4</code></a> feat: add <code>compression not supported</code> as enum error (<a href="https://redirect.github.com/zip-rs/zip2/issues/774">#774</a>)</li>
<li><a href="https://github.com/zip-rs/zip2/commit/2d0c46b7baf11bf7f461b54ac69a681bc8b89557"><code>2d0c46b</code></a> ci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/zip-rs/zip2/issues/783">#783</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/zip-rs/zip2/compare/v4.6.1...v8.6.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps zip from 4.6.1 to 8.6.0.
Release notes
Sourced from zip's releases.
... (truncated)
Changelog
Sourced from zip's changelog.
... (truncated)
Commits
771dfc5chore: release v8.6.0 (#781)8e480ccchore(deps): update sha1 requirement from 0.10 to 0.11 (#767)2513bbechore(deps): update aes requirement from 0.8 to 0.9 (#787)957e240ci(deps): bump actions/cache from 5.0.4 to 5.0.5 (#786)0329d9dfix: allow for[u8]as filename (#775)ddcf854ci(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#788)42323a8ci(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#785)901014aci(deps): bump crate-ci/typos from 1.45.0 to 1.45.1 (#784)07702d4feat: addcompression not supportedas enum error (#774)2d0c46bci(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#783)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Reviewed and reconciled against main workspace dependency tree.
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting
@dependabot ignore this major versionor@dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding anignorecondition with the desiredupdate_typesto your config file.If you change your mind, just re-open this PR and I'll resolve any conflicts on it.