Skip to content

build(deps): bump zip from 2.2.3 to 7.0.0#65

Merged
liulyxandy-codemao merged 1 commit into
mainfrom
dependabot/cargo/zip-7.0.0
Apr 3, 2026
Merged

build(deps): bump zip from 2.2.3 to 7.0.0#65
liulyxandy-codemao merged 1 commit into
mainfrom
dependabot/cargo/zip-7.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Bumps zip from 2.2.3 to 7.0.0.

Release notes

Sourced from zip's releases.

v7.0.0

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)*] Remove lzma-static and xz-static feature flags, which are deprecated synonyms of lzma and xz. (#405, #425)

v6.0.0

🐛 Bug Fixes

  • panic when reading empty extended-timestamp field (#404) (#422)
  • Restore original file timestamp when unzipping with chrono (#46)

⚙️ Miscellaneous Tasks

  • Configure Amazon Q rules (#421)

v5.1.1

🐛 Bug Fixes

  • panic when reading empty extended-timestamp field (#404) (#422)
  • Restore original file timestamp when unzipping with chrono (#46)

⚙️ Miscellaneous Tasks

  • Configure Amazon Q rules (#421)

v5.1.0

... (truncated)

Changelog

Sourced from zip's changelog.

7.0.0 - 2025-12-05

⚠️ Breaking Changes

  • Removed the following features: getrandom, hmac, pbkdf2, sha1, zeroize.
  • Removed lzma-static and xz-static feature flags, which were deprecated synonyms of lzma and xz. (#405, #425)

🚀 Features

  • (SimpleFileOptions) const DEFAULT implementation (#474)
  • ZipWriter set_auto_large_file() method to enable large-file data descriptor when necessary (#468)

🐛 Bug Fixes

  • print previous error when failing to search another cde (#460)
  • cargo doc warnings (#472)
  • Write ZIP64 data descriptors when large_file option is true (#467)
  • Pin generic-array to an old version to work around RustCrypto/traits#2036 until next RustCrypto & aes-crypto releases (#458)

⚙️ Miscellaneous Tasks

  • Revert version bump so that release-plz will trigger
  • expose more flate2 feature flags (#476)
  • Next release will be 7.0.0
  • release v6.0.0 (#442)

Deps

  • Bump lzma-rust2 to v0.15 (#465)

6.0.0 - 2025-10-09

🚀 Features

  • Add by_index_with_options(), which can be used to ignore encryption in a file's metadata (#439) and may be used for other file-specific overrides in the future.

⚙️ Miscellaneous Tasks

  • [breaking] FileOptions::add_extra_data is now generic and accepts any AsRef<[u8]>. (#435)

5.1.1 - 2025-09-11

🐛 Bug Fixes

  • panic when reading empty extended-timestamp field (#404) (#422)
  • Restore original file timestamp when unzipping with chrono (#46)

⚙️ Miscellaneous Tasks

  • Configure Amazon Q rules (#421)

... (truncated)

Commits
  • c864a14 chore: release v7.0.0 (#482)
  • 8085fe5 fix: print previous error when failing to search another cde (#460)
  • aa8f933 chore: Revert version bump so that release-plz will trigger
  • 13005c5 ci: Fix? run apt-get update at start of miri job
  • f99a32f chore: expose more flate2 feature flags (#476)
  • 9b5dd0b feat(SimpleFileOptions): const DEFAULT implementation (#474)
  • a8a4729 ci: Fix: Miri now requires g++, not just gcc (#477)
  • 57d26a7 fix: cargo doc warnings (#472)
  • 69533f1 feat: ZipWriter set_auto_large_file() method to enable large-file data desc...
  • fadbd48 chore(deps): update lzma-rust2 requirement from 0.13 to 0.14 (#450)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 2, 2026
Bumps [zip](https://github.com/zip-rs/zip2) from 2.2.3 to 7.0.0.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v2.2.3...v7.0.0)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Rust zip dependency to a new major version (2.2.37.0.0) and refreshes the lockfile accordingly, bringing the project’s ZIP implementation in line with the upstream zip crate’s latest release.

Changes:

  • Bump zip crate version in Cargo.toml to 7.0.0.
  • Update Cargo.lock to reflect the new zip version and its transitive dependency graph.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
Cargo.toml Updates the zip dependency version to 7.0.0.
Cargo.lock Regenerates locked dependencies to match zip 7.0.0 and related transitive updates.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@liulyxandy-codemao liulyxandy-codemao merged commit 198781b into main Apr 3, 2026
5 of 6 checks passed
@dependabot dependabot Bot deleted the dependabot/cargo/zip-7.0.0 branch April 3, 2026 07:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants