Skip to content

deps: bump zip from 9.0.1 to 9.0.4 - #111

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/zip-9.0.1
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/cargo/dev/zip-9.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps zip from 9.0.1 to 9.0.4.

Release notes

Sourced from zip's releases.

v9.0.4

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

v9.0.3

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)
Changelog

Sourced from zip's changelog.

9.0.4 - 2026-10-16

🐛 Bug Fixes

  • enclosed_name rejects a separator inside one verbatim path component (#1066)
  • return Ok(None) when read_zipfile_from_stream is called on an empty archive (#1063)

⚙️ Miscellaneous Tasks

  • Revert impl Copy for Zip64CentralDirectoryEndLocator due to failing semver check, fix CI where most Miri tests weren't running, and other fixes so other PRs can pass CI (#1065)
  • update lzma-rust2 and ppmd-rust dependencies (#1060)

9.0.3 - 2026-10-13

🐛 Bug Fixes

  • Preserve directories' read-only status when extracting on non-Unix systems (#1054)

9.0.2 - 2026-10-11

🐛 Bug Fixes

  • additional bug fixes for symlink extraction
Commits
  • 7d99886 chore: release v9.0.4 (#1071)
  • f61665e ci(deps): bump the codeql group with 2 updates (#1072)
  • 3f4f58c ci(deps): bump release-plz/action from 0.5.139 to 0.5.140 (#1069)
  • 8853a03 ci(deps): bump step-security/harden-runner from 2.22.0 to 2.22.1 (#1070)
  • 3ea38eb ci(fuzz): Write errors to stderr rather than stdout (#1064)
  • a5a1a66 ci(deps): bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3 (#1073)
  • ca70ca9 ci(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1068)
  • 9d76832 fix: enclosed_name rejects a separator inside one verbatim path component (#1...
  • 0ebefb8 fix: return Ok(None) when read_zipfile_from_stream is called on an empty ar...
  • b7c1a5b ci: Exit read fuzzing early if a crash occurs (#1062)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026
@dependabot dependabot Bot changed the title deps: bump zip from 8.6.0 to 9.0.1 deps: bump zip from 9.0.1 to 9.0.2 Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/dev/zip-9.0.1 branch from e0439b8 to 19fc093 Compare October 15, 2026 08:27
Bumps [zip](https://github.com/zip-rs/zip2) from 9.0.1 to 9.0.4.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.0.1...v9.0.4)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: bump zip from 9.0.1 to 9.0.2 deps: bump zip from 9.0.1 to 9.0.4 Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/dev/zip-9.0.1 branch from 19fc093 to d170918 Compare October 19, 2026 10:36
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #125.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/dev/zip-9.0.1 branch October 21, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants