[dependabot]

Bumps the cargo-minor-and-patch group with 2 updates in the / directory: zip and tokio.

Updates zip from 9.0.5 to 9.2.0

Release notes

Sourced from zip's releases.

v9.2.0

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

v9.1.3

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#1206)
• (aes) encrypt AES-CTR counter blocks in batches (#1203)
• (read) eliminate double allocation by populating IndexMap directly (#1200)
• (read) preallocate files vector in read_central_header (#1199)

v9.1.1

🐛 Bug Fixes

• store the raw count instead of a bool (#1174)
• preserve extra fields in raw_copy_file_touch (#1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

... (truncated)

Changelog

Sourced from zip's changelog.

9.2.0 - 2026-10-31

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

9.1.3 - 2026-10-27

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#1206)
• (aes) encrypt AES-CTR counter blocks in batches (#1203)
• (read) eliminate double allocation by populating IndexMap directly (#1200)
• (read) preallocate files vector in read_central_header (#1199)

9.1.2 - 2026-10-26

🐛 Bug Fixes

• preserve the file kind (normal/directory/symlink) in raw_copy_file_touch (#1179)
• (write) reject a Unicode Path extra field that would rename the entry (#1177)

... (truncated)

Commits

• 4100a7d chore: release v9.2.0 (#1220)
• 286425c perf(read): eliminate redundant pre-scan I/O and atomic contention in par_ext...
• ee69493 test: Create bigfile.bin in tempdir rather than working directory (#1229)
• f5da0bc Merge commit from fork
• acd3587 fix: by_name().get_metadata() and by_index().get_metadata() now succeed even ...
• 5760a3a feat(write): add parallel compression and batch appending for ZipWriter with ...
• ae0eabc perf(read): eliminate redundant clone and heap allocations in safe_prepare_pa...
• c98a9ec fix(read): keep ZipIterable::len at the central directory entry count (#1221)
• cc5f5bc Merge commit from fork
• 5138b4c feat: add index_for_name_raw (#1210)
• Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

• time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

• fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
• net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
• runtime: add Builder::max_io_events_per_busy_tick (#8410)
• runtime: stabilize tokio::runtime::worker_index() (#8431)
• sync: add SemaphorePermit::semaphore() (#8482)
• sync: add blocking_acquire methods to Semaphore (#8269)
• sync: add watch::Receiver::is_closed (#8481)
• wasm: support JSPI for Emscripten target (#8285, #8627)
• wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

• fs: reject zero in File::set_max_buf_size (#8449)
• io: make copy_buf cooperative (#8459)
• io: panic when BufReader or BufStream is created with zero capacity (#8494)
• io: panic when in-memory pipe is created with zero capacity (#8397)
• io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
• io: support vectored writes in Sink (#8663)
• net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
• net: start accepted sockets as readable and writable (#8435)
• net: support UCred on Fuchsia (#8257)
• process: use mio::unix::pipe for Unix child stdio (#8603)
• runtime: cache-pad the shared injection queue and idle state (#8622)
• runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
• runtime: make enable_io available whenever rt is enabled (#8387)
• runtime: move block_in_place setup into a non-generic function (#8315)
• runtime: move the multi-thread inject queue to its own mutex (#8382)
• runtime: panic when max_io_events_per_tick is zero (#8476)
• runtime: suggest .await in nested block_on panic message (#8501)
• sync: avoid atomic reader count in broadcast slots (#8357)
• sync: use acquire/release orderings in Notify (#8325)
• time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

• b53b200 chore: prepare Tokio v1.54.1 (#8693)
• 5ed619b time: revert "remove the runtime handle from timers" (#8692)
• 66d34e4 chore: prepare Tokio v1.54.0 (#8667)
• 0d322ce io: support vectored writes in sink (#8663)
• 4167c56 codec: expose I/O sources from codec errors (#8665)
• cdd9dae fs: propagate iouring stress test failures (#8644)
• 52ac781 ci: run the emscripten JSPI tests as an auto-initialized ES module (#8640)
• 4890d02 stream: implement FusedStream for JoinSetStream (#8629)
• a6bd8e1 wasm: check Emscripten version when using JSPI (#8627)
• 9dd749d Merge 'tokio-1.53.3' into 'master' (#8641)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b9ef0162-fe74-49ee-8d0a-b8c56777b62c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.