From 5378525e702e4894f2bb95db1c5a3424d846c6c1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Oct 2025 03:33:19 +0000
Subject: [PATCH] build(deps): bump zip from 2.4.2 to 5.1.1 in /rust (#10652)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [zip](https://github.com/zip-rs/zip2) from 2.4.2 to 5.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/zip-rs/zip2/releases">zip's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.1</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>panic when reading empty extended-timestamp field (<a
href="https://redirect.github.com/zip-rs/zip2/pull/404">#404</a>) (<a
href="https://redirect.github.com/zip-rs/zip2/pull/422">#422</a>)</li>
<li>Restore original file timestamp when unzipping with
<code>chrono</code> (<a
href="https://redirect.github.com/zip-rs/zip2/pull/46">#46</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<ul>
<li>Configure Amazon Q rules (<a
href="https://redirect.github.com/zip-rs/zip2/pull/421">#421</a>)</li>
</ul>
<h2>v5.1.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Add legacy shrink/reduce/implode compression (<a
href="https://redirect.github.com/zip-rs/zip2/pull/303">#303</a>)</li>
</ul>
<h2>v5.0.1</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>AES metadata was not copied correctly in raw copy methods, which
could corrupt the copied file. (<a
href="https://redirect.github.com/zip-rs/zip2/pull/417">#417</a>)</li>
</ul>
<h2>v5.0.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Implement by_path*() methods on ZipArchive (<a
href="https://redirect.github.com/zip-rs/zip2/pull/382">#382</a>)</li>
</ul>
<h2>v4.6.1</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>Fixes an issue introduced by the swap from <code>lzma-rs</code> to
<code>liblzma</code> (<a
href="https://redirect.github.com/zip-rs/zip2/pull/407">#407</a>)</li>
</ul>
<h2>v4.6.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Allow to read zip files with unsupported extended timestamps (<a
href="https://redirect.github.com/zip-rs/zip2/pull/400">#400</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>enable clamp_opt for ppmd and xz (<a
href="https://redirect.github.com/zip-rs/zip2/pull/401">#401</a>)</li>
</ul>
<h2>v4.5.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Allow reading ZIP files where the central directory comes
<em>before</em> the files (<a
href="https://redirect.github.com/zip-rs/zip2/pull/384">#384</a>) (<a
href="https://redirect.github.com/zip-rs/zip2/pull/396">#396</a>)</li>
</ul>
<h2>v4.4.0</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Add <code>lzma-static</code> and <code>xz-static</code> features
that enable <code>liblzma/static</code> (<a
href="https://redirect.github.com/zip-rs/zip2/pull/393">#393</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md">zip's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v5.1.0...v5.1.1">5.1.1</a>
- 2025-09-11</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>panic when reading empty extended-timestamp field (<a
href="https://redirect.github.com/zip-rs/zip2/pull/404">#404</a>) (<a
href="https://redirect.github.com/zip-rs/zip2/pull/422">#422</a>)</li>
<li>Restore original file timestamp when unzipping with
<code>chrono</code> (<a
href="https://redirect.github.com/zip-rs/zip2/pull/46">#46</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3>
<ul>
<li>Configure Amazon Q rules (<a
href="https://redirect.github.com/zip-rs/zip2/pull/421">#421</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v5.0.1...v5.1.0">5.1.0</a>
- 2025-09-10</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Add legacy shrink/reduce/implode compression (<a
href="https://redirect.github.com/zip-rs/zip2/pull/303">#303</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v5.0.0...v5.0.1">5.0.1</a>
- 2025-09-09</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>AES metadata was not copied correctly in raw copy methods, which
could corrupt the copied file. (<a
href="https://redirect.github.com/zip-rs/zip2/pull/417">#417</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v4.6.1...v5.0.0">5.0.0</a>
- 2025-09-05</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Implement by_path*() methods on ZipArchive (<a
href="https://redirect.github.com/zip-rs/zip2/pull/382">#382</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v4.6.0...v4.6.1">4.6.1</a>
- 2025-09-03</h2>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>Fixes an issue introduced by the swap from <code>lzma-rs</code> to
<code>liblzma</code> (<a
href="https://redirect.github.com/zip-rs/zip2/pull/407">#407</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v4.5.0...v4.6.0">4.6.0</a>
- 2025-08-30</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Allow to read zip files with unsupported extended timestamps (<a
href="https://redirect.github.com/zip-rs/zip2/pull/400">#400</a>)</li>
</ul>
<h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3>
<ul>
<li>enable clamp_opt for ppmd and xz (<a
href="https://redirect.github.com/zip-rs/zip2/pull/401">#401</a>)</li>
</ul>
<h2><a
href="https://github.com/zip-rs/zip2/compare/v4.4.0...v4.5.0">4.5.0</a>
- 2025-08-21</h2>
<h3><!-- raw HTML omitted -->🚀 Features</h3>
<ul>
<li>Allow reading ZIP files where the central directory comes
<em>before</em> the files (<a
href="https://redirect.github.com/zip-rs/zip2/pull/384">#384</a>) (<a
href="https://redirect.github.com/zip-rs/zip2/pull/396">#396</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zip-rs/zip2/commit/6423fee132a8819c82c2cf73ea6fb07dd3016b72"><code>6423fee</code></a>
chore: release v5.1.1 (<a
href="https://redirect.github.com/zip-rs/zip2/issues/423">#423</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/97c33a6cefaed17bb908f02e8deac258ac78e471"><code>97c33a6</code></a>
fix: panic when reading empty extended-timestamp field (<a
href="https://redirect.github.com/zip-rs/zip2/issues/404">#404</a>) (<a
href="https://redirect.github.com/zip-rs/zip2/issues/422">#422</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/8d094b8fc84d8ee5cac899fac07d6ba3fae6652f"><code>8d094b8</code></a>
chore: Configure Amazon Q rules (<a
href="https://redirect.github.com/zip-rs/zip2/issues/421">#421</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/5362be0ac3e359a5b73b3b5588d0fc4e90dca9fc"><code>5362be0</code></a>
fix: Restore original file timestamp when unzipping with
<code>chrono</code> (<a
href="https://redirect.github.com/zip-rs/zip2/issues/46">#46</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/4802b878346334570214fcfe5e0c1818bb0b2b73"><code>4802b87</code></a>
chore(deps): update nt-time requirement from 0.10.6 to 0.12.1 (<a
href="https://redirect.github.com/zip-rs/zip2/issues/416">#416</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/e341b3d6b47f2022bf6a6794abb21e80cc05737d"><code>e341b3d</code></a>
chore: release v5.1.0 (<a
href="https://redirect.github.com/zip-rs/zip2/issues/419">#419</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/0abee77b3f4c975382d440f74933facdf1f1c6c9"><code>0abee77</code></a>
feat: Add legacy shrink/reduce/implode compression (<a
href="https://redirect.github.com/zip-rs/zip2/issues/303">#303</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/12c87d175f51debd49a38486a1708de9fdbc3052"><code>12c87d1</code></a>
chore: release v5.0.1 (<a
href="https://redirect.github.com/zip-rs/zip2/issues/418">#418</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/b611a5965aa584902a9875dba58ab6629b0a7620"><code>b611a59</code></a>
fix: aes was not copied correctly in raw copy methods (<a
href="https://redirect.github.com/zip-rs/zip2/issues/417">#417</a>)</li>
<li><a
href="https://github.com/zip-rs/zip2/commit/e1d74a0fb5e5260163c94e1371c505db30e84112"><code>e1d74a0</code></a>
chore: release v5.0.0 (<a
href="https://redirect.github.com/zip-rs/zip2/issues/415">#415</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/zip-rs/zip2/compare/v2.4.2...v5.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zip&package-manager=cargo&previous-version=2.4.2&new-version=5.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 rust/Cargo.lock | 25 +++++++++++++++++++------
 rust/Cargo.toml |  2 +-
 2 files changed, 20 insertions(+), 7 deletions(-)

diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 3c48f2358..8e853c3c8 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -2704,6 +2704,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
 dependencies = [
  "crc32fast",
+ "libz-rs-sys",
  "miniz_oxide",
 ]
 
@@ -4246,6 +4247,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "libz-rs-sys"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "840db8cf39d9ec4dd794376f38acc40d0fc65eec2a8f484f7fd375b84602becd"
+dependencies = [
+ "zlib-rs",
+]
+
 [[package]]
 name = "linux-raw-sys"
 version = "0.4.15"
@@ -4799,7 +4809,7 @@ version = "0.7.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "af1844ef2428cc3e1cb900be36181049ef3d3193c63e43026cfe202983b27a56"
 dependencies = [
- "proc-macro-crate 1.3.1",
+ "proc-macro-crate 3.3.0",
  "proc-macro2",
  "quote",
  "syn 2.0.106",
@@ -10031,22 +10041,25 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "2.4.2"
+version = "5.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fabe6324e908f85a1c52063ce7aa26b68dcb7eb6dbc83a2d148403c9bc3eba50"
+checksum = "2f852905151ac8d4d06fdca66520a661c09730a74c6d4e2b0f27b436b382e532"
 dependencies = [
  "arbitrary",
  "crc32fast",
- "crossbeam-utils",
- "displaydoc",
  "flate2",
  "indexmap 2.9.0",
  "memchr",
- "thiserror 2.0.16",
  "time",
  "zopfli",
 ]
 
+[[package]]
+name = "zlib-rs"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f06ae92f42f5e5c42443fd094f245eb656abf56dd7cce9b8b263236565e00f2"
+
 [[package]]
 name = "zopfli"
 version = "0.8.2"
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 11c115782..6a6fde4a1 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -208,7 +208,7 @@ windows-implement = "0.60.0"
 windows-service = "0.8.0"
 winreg = "0.52.0"
 zbus = "5.11.0"
-zip = { version = "2", default-features = false }
+zip = { version = "5", default-features = false }
 
 [workspace.lints.clippy]
 dbg_macro = "warn"