Skip to content

chore(deps): bump zip from 9.0.4 to 9.0.5 - #189

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/zip-9.0.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/zip-9.0.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps zip from 9.0.4 to 9.0.5.

Release notes

Sourced from zip's releases.

v9.0.5

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)
Changelog

Sourced from zip's changelog.

9.0.5 - 2026-10-17

🐛 Bug Fixes

  • use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • (write) prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)

⚙️ Miscellaneous Tasks

  • Enable release-plz on backport branches in future (#1079)
Commits
  • 0123ed1 chore: release v9.0.5 (#1093)
  • 00cf82b docs: Repeal policy of yanking versions with known vulnerabilities, add menti...
  • 52165b9 chore: Enable release-plz on backport branches in future (#1079)
  • ca51e64 docs: Remove doc links that break when doc build doesn't enable all features ...
  • 6639687 fix: use mode_t for fchmodat's mode, which is u32 on NetBSD and OpenBSD (#1076)
  • 5e06fa8 fix(write): prevent duplicate 0x9901 AES extra field in raw_copy_file (#1078)
  • b6f9fb8 Merge commit from fork
  • ea2ccfe Merge commit from fork
  • 8068ab4 Merge commit from fork
  • 0b51128 doc: Clarifications to security policy (#1074)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zip](https://github.com/zip-rs/zip2) from 9.0.4 to 9.0.5.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v9.0.4...v9.0.5)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants