[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zip	dependencies	patch	9.1.0 → 9.1.3

---

Release Notes

zip-rs/zip2 (zip)

v9.1.3

Compare Source

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#​928) (#​1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#​1205)
• (aes) wipe AES round keys when the cipher is dropped (#​1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#​1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#​1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#​1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#​1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#​1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#​1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#​1206)
• (aes) encrypt AES-CTR counter blocks in batches (#​1203)
• (read) eliminate double allocation by populating IndexMap directly (#​1200)
• (read) preallocate files vector in read_central_header (#​1199)

v9.1.2

Compare Source

🐛 Bug Fixes

• preserve the file kind (normal/directory/symlink) in raw_copy_file_touch (#​1179)
• (write) reject a Unicode Path extra field that would rename the entry (#​1177)
• (extract) prevent following symbolic links during file creation (#​1116)

v9.1.1

Compare Source

🐛 Bug Fixes

• store the raw count instead of a bool (#​1174)
• preserve extra fields in raw_copy_file_touch (#​1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#​1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#​1159)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.