[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zip	workspace.dependencies	minor	9.0.5 → 9.1.0

---

Release Notes

zip-rs/zip2 (zip)

v9.1.0

Compare Source

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#​1109)
• Add borrowing inner method to reader wrappers (#​1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#​1019)
• add file_names_raw iterator (#​1082)

🐛 Bug Fixes

• raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#​1124)
• (write) prevent seek panic on streaming writer with comment (#​1151)
• Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#​1134)
• apply unix permissions at creation (#​1104)
• raw_copy_file should work with any extra fields (#​1120)
• (read) avoid full-file forward scans and redundant allocations in central directory (#​1142)
• don't enable typed-path's default std feature (#​1112)
• ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#​1107)
• resolve decoded CP437 member names (#​1080) (#​1085)
• Debug assertion doesn't account for length of archive comment (#​1097)

🚜 Refactor

• Lazy instantiation for all decompressors (#​1046) (#​1047)

⚡ Performance

• (write) reuse the DEFLATE compressor across entries (#​1119)

⚙️ Miscellaneous Tasks

• Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#​1138)
• target lzma-rust2 v0.23 (#​1096)

Bench

• add Criterion benchmarks (#​754)
• add deflate_many_small_files bench for #​633 (#​964)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed]

Merging this PR will not alter performance

1 warning

⚠️ 5 benchmarks are dominated by system calls

System calls cannot be simulated consistently and are left out of the measure. The reported value understates the real cost. Switch to the Walltime instrument to measure them.

Learn more about system calls

See affected benchmarks

✅ 7 untouched benchmarks

---

_{Comparing renovate/zip-9.x-lockfile (934790c) with main (b453849)}