Skip to content

chore(deps): bump rawzip from 0.4.4 to 0.5.1 - #105

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rawzip-0.5.1
Open

chore(deps): bump rawzip from 0.4.4 to 0.5.1#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rawzip-0.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps rawzip from 0.4.4 to 0.5.1.

Changelog

Sourced from rawzip's changelog.

v0.5.1 - July 13th, 2026

Additional zip file edge cases are now covered:

  • Detect Zip64 end of central directory records even when the classic record omits Zip64 sentinel values
  • Yield trailing nameless entries in the central directory reader
  • Presence of central directory digital signature record is a successful iteration termination
  • Align reader rejection of partial central directory entries with slice iteration

v0.5.0 - July 11th, 2026

Oh boy, look how big the changelog is. Surely, this library has lost its way.

The good news is that the breaking changes are minimal or esoteric and rawzip is still the same low-level, lean, BYO-dependencies that you know and love. The goal for 0.5 has been a focus on correctness and exposing the foundation to be built ontop of for years to come. This includes exposing primitives to allow reading and writing encrypted, both ZipCrypto and WinZip AES (again, without dependencies).

The most visible change will be the deprecation of the enum:

CompressionMethod::Deflate

in favor of associated constants:

CompressionMethod::DEFLATE

The reason is to prevent breaking changes in the future by properly modeling unknown compression methods that may be defined in future spec revisions. PR (#132)(nickbabcock/rawzip#132)

Breaking Changes

  • Fix incorrect compression methods:
    • 10: Terse -> DclImplode (PKWARE DCL Imploding, old IBM TERSE)
    • 16: add Cmpsc (IBM z/OS CMPSC Compression)
    • 18: Lz77 -> Terse (IBM TERSE new)
    • 19: add Lz77 (IBM LZ77 z Architecture)
  • CompressionMethod is a newtype over u16 instead of an enum
  • Remove ReaderAt type parameter on ZipVerifier
  • ZipReader::claim_verifier borrows self and is infallible
  • Remove accidentally exposed (and unused) StackVecIter
  • Remove redundant getters on ZipVerification
  • Remove ZipSliceArchive::as_bytes as get_ref is strictly better
  • Undeprecate ZipSliceArchive::into_reader as into_reader_archive, now constrained to T: ReaderAt
  • Rename ZipSliceArchive::into_zip_archive to into_cursor_archive
  • Remove MissingZip64EndOfCentralDirectory error kind as it is no longer possible to trigger
  • Relocate ZipSliceEntry::{file_path,extra_fields} behind lifetime accurate ZipSliceEntry::local_header
  • Seal TimeZoneMarker trait
  • Remove deprecated ZipFileBuilder::create
  • Change ErrorKind::BufferTooSmall to carry the required buffer capacity
  • ZipEntryWriter::finish now returns a WrittenZipEntry instead of only compressed byte count.

... (truncated)

Commits
  • 571e479 chore: Release rawzip version 0.5.1
  • 60892de Update changelog for v0.5.1
  • 0bb1ee1 Merge pull request #197 from nickbabcock/bench
  • ea4968f Remove copy overhead from benchmarks
  • 27a1e68 Merge pull request #196 from nickbabcock/signature
  • 1ba4833 Allow parsing of central directory digital signature
  • 52928cd Merge pull request #195 from nickbabcock/locator-harden
  • e0673db Harden zip64 detection against false positives
  • 779fd81 Merge pull request #192 from nickbabcock/eocd-undercount-fixture
  • b6300b9 Add regression for incorrect counts in EOCD
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rawzip](https://github.com/nickbabcock/rawzip) from 0.4.4 to 0.5.1.
- [Changelog](https://github.com/nickbabcock/rawzip/blob/master/CHANGELOG.md)
- [Commits](nickbabcock/rawzip@v0.4.4...v0.5.1)

---
updated-dependencies:
- dependency-name: rawzip
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants