Skip to content

chore(deps): bump zip from 8.5.1 to 9.1.2 - #3444

Open
dependabot[bot] wants to merge 28 commits into
mainfrom
dependabot/cargo/zip-9.1.2
Open

chore(deps): bump zip from 8.5.1 to 9.1.2#3444
dependabot[bot] wants to merge 28 commits into
mainfrom
dependabot/cargo/zip-9.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps zip from 8.5.1 to 9.1.2.

Release notes

Sourced from zip's releases.

v9.1.1

🐛 Bug Fixes

  • store the raw count instead of a bool (#1174)
  • preserve extra fields in raw_copy_file_touch (#1172)
  • (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
  • (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

v9.1.0

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

🐛 Bug Fixes

  • raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • (write) prevent seek panic on streaming writer with comment (#1151)
  • Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
  • apply unix permissions at creation (#1104)
  • raw_copy_file should work with any extra fields (#1120)
  • (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
  • don't enable typed-path's default std feature (#1112)
  • ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
  • resolve decoded CP437 member names (#1080) (#1085)
  • Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

  • Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

  • (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

  • Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)
  • target lzma-rust2 v0.23 (#1096)

Bench

  • add Criterion benchmarks (#754)
  • add deflate_many_small_files bench for #633 (#964)

v9.0.5

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from zip's changelog.

9.1.2 - 2026-10-26

🐛 Bug Fixes

  • preserve the file kind (normal/directory/symlink) in raw_copy_file_touch (#1179)
  • (write) reject a Unicode Path extra field that would rename the entry (#1177)
  • (extract) prevent following symbolic links during file creation (#1116)

9.1.1 - 2026-10-25

🐛 Bug Fixes

  • store the raw count instead of a bool (#1174)
  • preserve extra fields in raw_copy_file_touch (#1172)
  • (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
  • (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

9.1.0 - 2026-10-24

🚀 Features

  • (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
  • Add borrowing inner method to reader wrappers (#1050)
  • add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
  • add file_names_raw iterator (#1082)

🐛 Bug Fixes

  • raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
  • (write) prevent seek panic on streaming writer with comment (#1151)
  • Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
  • apply unix permissions at creation (#1104)
  • raw_copy_file should work with any extra fields (#1120)
  • (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
  • don't enable typed-path's default std feature (#1112)
  • ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
  • resolve decoded CP437 member names (#1080) (#1085)
  • Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

  • Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

  • (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

  • Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)

... (truncated)

Commits
  • 662ae13 chore: release v9.1.2 (#1176)
  • e221cd0 fix: preserve the file kind (normal/directory/symlink) in raw_copy_file_touch...
  • 525d81e fix(write): reject a Unicode Path extra field that would rename the entry (#1...
  • dcc28ed ci(fuzz): Fixes for fallback when Rust nightly is updated mid-run (#1178)
  • 68e7e84 fix(extract): prevent following symbolic links during file creation (#1116)
  • b7201ce chore: release v9.1.1 (#1173)
  • 67b3e52 fix: store the raw count instead of a bool (#1174)
  • 9d710d3 ci: Share cargo-afl build across workflows (#1167)
  • d6c0278 fix: preserve extra fields in raw_copy_file_touch (#1172)
  • c3232c4 test: cover unreserved validation for prepared files (#1169)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Nov 1, 2026
zmerp and others added 28 commits November 8, 2026 17:49
@zmerp
refactoring: initialize C++ settings from Rust
d664476
@zmerp
refactor(server_openvr): C++ style and naming fixes
9ee2fe7
@cbusillo @zmerp
ci: pin macos check to macos 26 (#3310)
0e6a57e
@zmerp
fix: alvr_get_time_ns() + small refactoring
4cf276b
@zmerp
fix(server_openvr): handle null pIndices in GetNextSwapTextureSetIndex (
277ad8e 
#3315)
@zmerp
feat(server_openvr): upgrade openvr SDK from v1.16.8 to v2.15.6 (#3317)
662f46d
@zmerp
feat(sockets, server_core): unified socket abstraction (#3321)
634c177
@boldtkeegs @zmerp
Update egui to 0.35.0 (#3332)
04ee7a9
besauce @zmerp
Fix double free of AMF components on encoder shutdown (#3334)
47e0373 
m_amfComponents holds AMFComponentPtr smart pointers which Release automatically. Manually calling Release() plus delete caused heap corruption (0xc0000374 double free in ucrtbase!free_base) on every stream shutdown with AMD GPUs.

Co-authored-by: besauce <youcansendmethatshit@proton.me>
besauce @zmerp
Fix steam.exe crash on driver unload (0xc0000005) - fixes #3205 (#3333)
45f0741 
* fix steam.exe crash from threads outliving dll unload

* convert rust callbacks to direct exports, rename InitializeRuntime

---------

Co-authored-by: besauce <youcansendmethatshit@proton.me>
@zmerp
fix(session): remove needless references in build.rs format args (#3356)
92bd645
@zmerp
ci: pin the Rust toolchain to 1.97.1 (#3372)
c91b688
@zmerp
reap spawned SteamVR children (#3363)
1e8e7f9
@zmerp
fix(server_core): bind the web server to localhost by default (#3364)
548216e
@zmerp
feat(packets): parse index segments in settings paths (#3387)
c48672c
@JellyfishKnight @zmerp
feat(foveation): support runtime per-eye centers (#3385)
cf6e40b 
* feat(foveation): support runtime per-eye centers

* refactor(foveation): separate center data and alignment

* refactor(foveation): negotiate server-aligned parameters

Compute aligned FFR parameters once during server negotiation and share them with the encoder and client. Remove duplicate alignment and legacy compatibility conversions, and bump the protocol to dev13.

* style(foveation): fix Linux center parameter indentation

* feat(packets): parse index segments in settings paths

* refactor(foveation): use indexed presets and relocate shared parameters
@JellyfishKnight @zmerp
fix(ci): install cargo-msrv with locked dependencies (#3392)
8863253 
* fix(ci): lock cargo-msrv installation dependencies

* fix(ci): use released cargo-msrv instead of pinned git revision
@JellyfishKnight @zmerp
feat(foveation): synchronize encoder-aligned centers per frame (#3388)
2bcb3ed 
* feat(foveation): synchronize encoder-aligned centers per frame

* refactor(foveation): address per-frame centers review

* refactor(foveation): pass center arrays directly in C API

* refactor(foveation): clarify center shift names in C API

* fix(ci): lock cargo-msrv installation dependencies

* fix(ci): use released cargo-msrv instead of pinned git revision
@JellyfishKnight @zmerp
fix(android): batch startup permission requests (#3400)
e95770f 
* fix(android): explicitly batch startup permission requests

* fix(android): request startup permissions in client core
@dime-online @zmerp
fix(audio): correct 5.1 to stereo downmix channel map (#3403)
127741d 
The 6-channel (5.1) input layout listed only 5 channels and started
with FrontRight, so when capturing from a 5.1 output device:

- the front-left sample was mixed into the right ear only
- the front-right sample was mixed to both ears as center
- the center sample was treated as LFE and dropped entirely
- the LFE sample was mixed into the left ear
- the last surround sample was never read

Add the missing FrontLeft entry and use the standard
FL FR C LFE SL SR order, matching the 7.1 layout already used for
8-channel input. Fixes mangled/flipped audio and missing dialogue when
the Windows output device is configured for 5.1 (e.g. #2909).

Co-authored-by: dime-online <dime-online@users.noreply.github.com>
@RichardShashalevich @zmerp
fix(server_openvr): use AV1 bitrate properties instead of HEVC on AMF (…
911c888 
…#3401)
@zmerp
ci: auto-fix formatting with pre-commit.ci lite and drop MSRV (#3409)
4f2f2fc
@1TheBlueWii1 @zmerp
fix(props): ViveTracker Emulation icon address and FirmwareForceUpdat…
ab2cee1 
…eRequiredBool value (#3417)

* fix(props): Correct icon address for ViveTracker emulation

* fix(props): Set FirmwareForceUpdateRequiredBool to false instead of  device_serial for ViveTracker emulation
@zmerp
chore(contributing): Update AI policy (#3442)
4bc0c56 
* chore(contributing): Update AI policy

* Update the policy to make it more strict
@zmerp
Switch default branch to main
4b62003
@zmerp
Fix compilation
f9ddc84
@Ryan6-VRC @zmerp
fix(server_openvr): extend wait for slow activating tracked devices (#…
a93b172 
…3448)
@dependabot
chore(deps): bump zip from 8.5.1 to 9.1.2
81b8d3a 
Bumps [zip](https://github.com/zip-rs/zip2) from 8.5.1 to 9.1.2.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](zip-rs/zip2@v8.5.1...v9.1.2)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 9.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from master to main November 8, 2026 16:56
@dependabot
dependabot Bot force-pushed the dependabot/cargo/zip-9.1.2 branch from da7c704 to 81b8d3a Compare November 8, 2026 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

9 participants

@zmerp @cbusillo @boldtkeegs @besauce @JellyfishKnight @dime-online @RichardShashalevich @1TheBlueWii1 @Ryan6-VRC