chore(deps): bump the minor-and-patch group with 2 updates (#560)

Bumps the minor-and-patch group with 2 updates: [flate2](https://github.com/rust-lang/flate2-rs) and [napi](https://github.com/napi-rs/napi-rs).


Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `napi` from 3.12.1 to 3.12.2
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](napi-rs/napi-rs@napi-v3.12.1...napi-v3.12.2)

---
updated-dependencies:
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: napi
  dependency-version: 3.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

Cargo.lock

@@ -214,8 +214,8 @@ mod tests {
         assert!(formatter.was_called());
     }
 
-    // Human formatter with quiet=true must suppress output — SpyFormatter mirrors
-    // HumanFormatter behavior.
+    // Human formatter with quiet=true must suppress output — SpyFormatter
+    // mirrors HumanFormatter behavior.
     #[test]
     fn human_formatter_suppresses_when_quiet() {
         let tmp = tempfile::tempdir().unwrap();

crates/exarch-cli/src/commands/create.rs

@@ -993,7 +993,8 @@ mod tests {
         if !target.join("payload.txt").exists() {
             // DAC permission checks don't apply to root, so the restriction
             // above did nothing and cleanup genuinely succeeded — same
-            // root-skip reasoning as `parent_without_read_permission_is_rejected`
+            // root-skip reasoning as
+            // `parent_without_read_permission_is_rejected`
             // in `atomic_swap.rs`.
             eprintln!(
                 "skipping: permission-restricted removal unexpectedly succeeded (running as \

crates/exarch-cli/src/commands/extract.rs

@@ -401,8 +401,9 @@ mod tests {
         );
     }
 
-    // Regression tests for issue #204: PartialExtraction wrapping HardlinkEscape /
-    // SymlinkEscape must not repeat the inner error text more than once.
+    // Regression tests for issue #204: PartialExtraction wrapping
+    // HardlinkEscape / SymlinkEscape must not repeat the inner error text
+    // more than once.
 
     #[test]
     fn test_partial_hardlink_escape_inner_text_appears_once() {
@@ -434,8 +435,8 @@ mod tests {
         );
     }
 
-    // Regression tests for issue #295: four explicit arms must produce actionable
-    // messages.
+    // Regression tests for issue #295: four explicit arms must produce
+    // actionable messages.
 
     #[test]
     fn test_output_exists_contains_path_and_hint() {

crates/exarch-cli/src/error.rs

@@ -427,8 +427,8 @@ mod tests {
 
     #[test]
     fn test_format_error_downcasts_extraction_error() {
-        // Verify that format_error correctly resolves the kind from an anyhow chain
-        // containing an ArchiveError.
+        // Verify that format_error correctly resolves the kind from an anyhow
+        // chain containing an ArchiveError.
         let extraction_err = ArchiveError::ZipBomb {
             compressed: 100,
             uncompressed: 100_000,
@@ -447,8 +447,8 @@ mod tests {
 
     #[test]
     fn test_format_error_unknown_error_uses_generic_kind() {
-        // A plain anyhow error with no ArchiveError in chain should use "Error" as
-        // kind
+        // A plain anyhow error with no ArchiveError in chain should use "Error"
+        // as kind
         let anyhow_err = anyhow::anyhow!("something went wrong");
 
         let kind = anyhow_err
@@ -459,8 +459,8 @@ mod tests {
         assert_eq!(kind, "Error");
     }
 
-    // Regression tests for issue #192: JSON error message must not duplicate text
-    // that ArchiveError::Display already emits.
+    // Regression tests for issue #192: JSON error message must not duplicate
+    // text that ArchiveError::Display already emits.
 
     #[test]
     fn test_json_message_quota_exceeded_no_duplication() {

crates/exarch-cli/src/output/json.rs

@@ -930,8 +930,8 @@ mod tests {
         let parent = tempfile::TempDir::new().unwrap();
         let output_dir = parent.path().join("extracted");
         std::fs::create_dir_all(&output_dir).unwrap();
-        // Create a file in output_dir so it's non-empty (rename over non-empty dir
-        // fails on most OSes)
+        // Create a file in output_dir so it's non-empty (rename over non-empty
+        // dir fails on most OSes)
         std::fs::write(output_dir.join("existing.txt"), b"old content").unwrap();
 
         let archive_dir = tempfile::TempDir::new().unwrap();
@@ -951,7 +951,8 @@ mod tests {
             &options,
         );
 
-        // Should fail with OutputExists or Io (platform dependent rename semantics)
+        // Should fail with OutputExists or Io (platform dependent rename
+        // semantics)
         assert!(result.is_err());
         // Output dir must still have old content (not corrupted)
         assert!(output_dir.join("existing.txt").exists());
@@ -1349,7 +1350,8 @@ mod tests {
             )
             .unwrap();
 
-        // The hardlink copies the file content — bytes should be reported twice.
+        // The hardlink copies the file content — bytes should be reported
+        // twice.
         let expected = (content.len() as u64) * 2;
         assert_eq!(
             progress.total, expected,

crates/exarch-core/src/api.rs

@@ -960,7 +960,8 @@ mod tests {
     fn test_config_default_security_flags() {
         let config = SecurityConfig::default();
 
-        // All security-sensitive flags should be false by default (deny-by-default)
+        // All security-sensitive flags should be false by default
+        // (deny-by-default)
         assert!(
             !config.allowed.symlinks,
             "symlinks should be denied by default"

crates/exarch-core/src/config.rs

@@ -940,7 +940,8 @@ mod tests {
             create_tar_internal_with_progress(encoder, &[source_dir.path()], &config, &mut noop);
 
         // Either the internal write or encoder.finish() must surface an error.
-        // We call finish() only if internal succeeded, mirroring the real code path.
+        // We call finish() only if internal succeeded, mirroring the real code
+        // path.
         let is_err = match result {
             Err(_) => true,
             Ok((_, enc)) => enc.finish().is_err(),

crates/exarch-core/src/creation/tar.rs

@@ -227,26 +227,29 @@ pub fn collect_entries<P: AsRef<Path>, State>(
     for source in sources {
         let path = source.as_ref();
 
-        // `symlink_metadata` (lstat) is required here instead of `exists`/`metadata`
-        // (stat) so that a dangling symlink (target missing) is still treated as a
-        // present source; it is later classified as EntryType::Symlink below. The
-        // result is reused in the single-file branch to avoid a second lstat.
+        // `symlink_metadata` (lstat) is required here instead of
+        // `exists`/`metadata` (stat) so that a dangling symlink (target
+        // missing) is still treated as a present source; it is later
+        // classified as EntryType::Symlink below. The result is reused
+        // in the single-file branch to avoid a second lstat.
         let Ok(metadata) = path.symlink_metadata() else {
             return Err(ArchiveError::SourceNotFound {
                 path: path.to_path_buf(),
             });
         };
 
-        // `metadata.is_dir()` (from the lstat above) is required here instead of
-        // `path.is_dir()` (stat, follows symlinks), so that a symlink pointing at a
-        // directory is not routed into `FilteredWalker`/`WalkDir` by default —
-        // `WalkDir` always dereferences its root regardless of `follow_links(false)`
-        // and would produce an empty relative path for the root entry. Such a symlink
-        // is instead classified as `EntryType::Symlink` in the branch below,
-        // consistent with the symlink-to-file case. When `follow_symlinks` is
-        // explicitly enabled, though, the symlink must still be walked as a directory
-        // (via `path.is_dir()`, stat) to preserve the pre-existing dereferencing
-        // behavior for that config — otherwise the single-entry branch would try to
+        // `metadata.is_dir()` (from the lstat above) is required here instead
+        // of `path.is_dir()` (stat, follows symlinks), so that a
+        // symlink pointing at a directory is not routed into
+        // `FilteredWalker`/`WalkDir` by default — `WalkDir` always
+        // dereferences its root regardless of `follow_links(false)` and
+        // would produce an empty relative path for the root entry. Such a
+        // symlink is instead classified as `EntryType::Symlink` in the
+        // branch below, consistent with the symlink-to-file case. When
+        // `follow_symlinks` is explicitly enabled, though, the symlink
+        // must still be walked as a directory (via `path.is_dir()`,
+        // stat) to preserve the pre-existing dereferencing behavior for
+        // that config — otherwise the single-entry branch would try to
         // open the symlink as a regular file and fail with an I/O error.
         if metadata.is_dir() || (config.follow_symlinks && path.is_dir()) {
             let walker = FilteredWalker::new(path, config);
@@ -255,11 +258,13 @@ pub fn collect_entries<P: AsRef<Path>, State>(
             }
         } else {
             // For single files, we need to create a FilteredEntry manually.
-            // `symlink_metadata` (lstat) is required here instead of `metadata` (stat)
-            // so that a symlink passed directly as a top-level source is classified as
-            // EntryType::Symlink rather than silently dereferenced into its target.
-            // `metadata.is_dir()` can no longer be true here (that case is routed to
-            // the walk branch above), so only `File` and `Symlink` remain.
+            // `symlink_metadata` (lstat) is required here instead of `metadata`
+            // (stat) so that a symlink passed directly as a
+            // top-level source is classified as EntryType::Symlink
+            // rather than silently dereferenced into its target.
+            // `metadata.is_dir()` can no longer be true here (that case is
+            // routed to the walk branch above), so only `File` and
+            // `Symlink` remain.
             let size = if metadata.is_file() {
                 metadata.len()
             } else {
@@ -336,7 +341,8 @@ mod tests {
         let walker = FilteredWalker::new(root, &config);
         let entries: Vec<_> = walker.walk().collect::<Result<Vec<_>>>().unwrap();
 
-        // Should find exactly: root dir, file1, file2, subdir, file3 = 5 entries
+        // Should find exactly: root dir, file1, file2, subdir, file3 = 5
+        // entries
         assert_eq!(entries.len(), 5, "expected exactly 5 entries");
 
         let paths: Vec<_> = entries
@@ -657,8 +663,8 @@ mod tests {
 
         let entries = collect_entries(&sources, &config).unwrap();
 
-        // Should have: single_file.txt (1) + dir1 entries (2 files + 1 dir = 3) + dir2
-        // entries (1 file + 1 dir = 2) = 6 total
+        // Should have: single_file.txt (1) + dir1 entries (2 files + 1 dir = 3)
+        // + dir2 entries (1 file + 1 dir = 2) = 6 total
         assert!(
             entries.len() >= 5,
             "Expected at least 5 entries (files and dirs), got {}",
@@ -699,8 +705,8 @@ mod tests {
 
         let entries = collect_entries(&sources, &config).unwrap();
 
-        // Should have: 50 files in root + 1 subdir + 1 root dir + 30 files in subdir =
-        // 82
+        // Should have: 50 files in root + 1 subdir + 1 root dir + 30 files in
+        // subdir = 82
         assert!(
             entries.len() >= 80,
             "Expected at least 80 entries, got {}",

crates/exarch-core/src/creation/walker.rs

@@ -158,8 +158,9 @@ fn create_zip_internal_with_progress<W: Write + Seek, P: AsRef<Path>>(
     let start = std::time::Instant::now();
 
     // Configure ZIP file options with compression level. `compression_level`
-    // is guaranteed to be `None` or `Some(1..=9)` by `CreationConfig::validate`,
-    // so `Stored` (level 0) is unreachable through the public API.
+    // is guaranteed to be `None` or `Some(1..=9)` by
+    // `CreationConfig::validate`, so `Stored` (level 0) is unreachable
+    // through the public API.
     let level = config.compression_level.unwrap_or(6);
     let options = SimpleFileOptions::default()
         .compression_method(CompressionMethod::Deflated)
@@ -191,7 +192,8 @@ fn create_zip_internal_with_progress<W: Write + Seek, P: AsRef<Path>>(
             }
             EntryType::Directory => {
                 tracker.on_entry_start(&entry.archive_path);
-                // Skip root directory entry (empty path becomes "/" which is invalid)
+                // Skip root directory entry (empty path becomes "/" which is
+                // invalid)
                 if !entry.archive_path.as_os_str().is_empty() {
                     let dir_path = format!("{}/", normalize_zip_path(&entry.archive_path)?);
                     zip.add_directory(&dir_path, options).map_err(|e| {
@@ -415,8 +417,8 @@ mod tests {
 
         // Should have exactly 3 files: file1.txt, file2.txt, subdir/file3.txt
         assert_eq!(report.files_added, 3);
-        // Should have exactly 1 directory: subdir (root is omitted — empty archive path
-        // is invalid in ZIP)
+        // Should have exactly 1 directory: subdir (root is omitted — empty
+        // archive path is invalid in ZIP)
         assert_eq!(report.directories_added, 1);
         assert!(output.exists());
     }
@@ -787,7 +789,8 @@ mod tests {
 
         let report = create_zip(&output, &[source_dir.path()], &config).unwrap();
 
-        // Both target.txt and the followed link.txt must be written as regular entries.
+        // Both target.txt and the followed link.txt must be written as regular
+        // entries.
         assert_eq!(report.files_added, 2);
         assert_eq!(report.files_skipped, 0);
         assert!(!report.has_warnings());