An open index of dependabot pull requests across open source projects.

build(deps): bump zip from 9.0.4 to 9.5.1

Open
Number: #25
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: November 14, 2026 at 02:43 PM UTC
(about 7 hours ago)
Updated: November 14, 2026 at 02:43 PM UTC
(about 7 hours ago)
Labels:
dependencies rust
Description:

Bumps zip from 9.0.4 to 9.5.1.

Release notes

Sourced from zip's releases.

v9.5.1

🐛 Bug Fixes

  • (write) raw_copy_file corrupted ZipCrypto metadata (#1288)

v9.5.0

🚀 Features

  • ExtractOptions root_dir filter (#1279)

v9.4.2

🚜 Refactor

  • Replace std::num and std::cmp with core::num and core::cmp (#1276)

⚙️ Miscellaneous Tasks

  • apply cargo fmt to security patches (#1275)

v9.4.1

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

v9.4.0

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

v9.3.0

🚀 Features

  • (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

  • (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

  • Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

... (truncated)

Changelog

Sourced from zip's changelog.

9.5.1 - 2026-11-10

🐛 Bug Fixes

  • (write) raw_copy_file corrupted ZipCrypto metadata (#1288)

9.5.0 - 2026-11-08

🚀 Features

  • ExtractOptions root_dir filter (#1279)

9.4.2 - 2026-11-07

🚜 Refactor

  • Replace std::num and std::cmp with core::num and core::cmp (#1276)

9.4.1 - 2026-11-06

🐛 Bug Fixes

🚜 Refactor

  • Use boxed slices instead of Vec when growability isn't needed (#1271)

9.4.0 - 2026-11-05

🚀 Features

  • Implement ZipIterable::files_with_reader (#1267)

9.3.0 - 2026-11-03

🚀 Features

  • (write) implement TryFrom<ZipFileBuilder> for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🚜 Refactor

  • Replace most equivalent uses of std:: with core:: (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

... (truncated)

Commits
  • ee61677 chore: release v9.5.1 (#1290)
  • d4976d1 fix(write): raw_copy_file keeps an encrypted entry decryptable (#1288)
  • 43297e2 ci(deps): bump the codeql group with 2 updates (#1286)
  • 14ea209 ci(deps): bump github/codeql-action/upload-sarif from 4.39.1 to 4.39.2 (#1287)
  • b03a868 ci(deps): bump rust from 09027f8 to 8a4e90c in /.devcontainer (#1284)
  • 5a8b69a ci(deps): bump release-plz/action from 0.5.147 to 0.5.148 (#1283)
  • 6ec8a2a ci(deps): bump crate-ci/typos from 1.51.1 to 1.52.0 (#1282)
  • ddf3ec3 chore: release v9.5.0 (#1281)
  • 42ad84b feat: ExtractOptions root_dir filter (#1279)
  • ce7aad0 ci: Use an orchestrator pattern to trigger size labels on forked PRs without ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
zip
Ecosystem:
cargo
Version Change:
9.0.4 → 9.5.1
Update Type:
Minor
Technical Details
ID: 16820607
UUID: 6391439575
Node ID: PR_kwDOVMbJxs8AAAABPKWHXw
Host: GitHub
Repository: Cihaimasuiro/ozipdecrypt-tools