Skip to content

chore(deps): bump zip from 8.1.0 to 8.2.0 in the security-updates group#184

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/security-updates-07124b29da
Closed

chore(deps): bump zip from 8.1.0 to 8.2.0 in the security-updates group#184
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/security-updates-07124b29da

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 4, 2026

Bumps the security-updates group with 1 update: zip.

Updates zip from 8.1.0 to 8.2.0

Release notes

Sourced from zip's releases.

v8.2.0

🚀 Features

  • allow custom salt (#680)
  • Support compressing bzip2 when feature bzip2-rs is enabled, since bzip2/bzip2-sys now supports it (#685)
  • enforce clippy in CI (#674)

🐛 Bug Fixes

  • zip64 central header (issue 617) (#629)
  • allow aes password as bytes (#686)
  • handle extra field padding (#682)

🚜 Refactor

  • Simplify 2 type conversions in src/write.rs (#687)

⚡ Performance

  • AI tweaks for string type conversions in src/types.rs (#670)
Changelog

Sourced from zip's changelog.

8.2.0 - 2026-03-02

🚀 Features

  • allow custom salt (#680)
  • Support compressing bzip2 when feature bzip2-rs is enabled, since bzip2/bzip2-sys now supports it (#685)
  • enforce clippy in CI (#674)

🐛 Bug Fixes

  • zip64 central header (issue 617) (#629)
  • allow aes password as bytes (#686)
  • handle extra field padding (#682)

🚜 Refactor

  • Simplify 2 type conversions in src/write.rs (#687)

⚡ Performance

  • AI tweaks for string type conversions in src/types.rs (#670)
Commits
  • ff001c6 chore: release v8.2.0 (#678)
  • 9c328dc ci(deps): bump github/codeql-action from 4.32.2 to 4.32.4 (#707)
  • f2bd439 test: add test to check len of zip64 (#705)
  • 617cee1 test: Add a test that validates CRC_TABLE (#690)
  • 2ee1e93 style: Rename KEYSTREAM_BASE_SUFFIX to KEYSTREAM_BITMASK and clarify comment ...
  • 18301ce style: Potential fix for 1 code quality finding in tests/zip_ntfs.rs (#702)
  • 240f27a feat: allow custom salt (#680)
  • 8c36837 ci(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 (#698)
  • 79a46ea Apply suggested fix to tests/zip_extra_field.rs from Copilot Autofix (#701)
  • 7c2c6bd style: Remove macros (#689)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security-updates group with 1 update: [zip](https://github.com/zip-rs/zip2).


Updates `zip` from 8.1.0 to 8.2.0
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.1.0...v8.2.0)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 4, 2026
@codecov
Copy link

codecov bot commented Mar 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.64%. Comparing base (1de613c) to head (49d3d8e).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #184   +/-   ##
=======================================
  Coverage   89.64%   89.64%           
=======================================
  Files          34       34           
  Lines        3187     3187           
=======================================
  Hits         2857     2857           
  Misses        330      330           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 4, 2026

Looks like zip is no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 4, 2026
@dependabot dependabot bot deleted the dependabot/cargo/security-updates-07124b29da branch March 4, 2026 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants