[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
zip	dev-dependencies	minor	9.0.5 → 9.1.0

---

Release Notes

zip-rs/zip2 (zip)

v9.1.0

Compare Source

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#​1109)
• Add borrowing inner method to reader wrappers (#​1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#​1019)
• add file_names_raw iterator (#​1082)

🐛 Bug Fixes

• raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#​1124)
• (write) prevent seek panic on streaming writer with comment (#​1151)
• Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#​1134)
• apply unix permissions at creation (#​1104)
• raw_copy_file should work with any extra fields (#​1120)
• (read) avoid full-file forward scans and redundant allocations in central directory (#​1142)
• don't enable typed-path's default std feature (#​1112)
• ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#​1107)
• resolve decoded CP437 member names (#​1080) (#​1085)
• Debug assertion doesn't account for length of archive comment (#​1097)

🚜 Refactor

• Lazy instantiation for all decompressors (#​1046) (#​1047)

⚡ Performance

• (write) reuse the DEFLATE compressor across entries (#​1119)

⚙️ Miscellaneous Tasks

• Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#​1138)
• target lzma-rust2 v0.23 (#​1096)

Bench

• add Criterion benchmarks (#​754)
• add deflate_many_small_files bench for #​633 (#​964)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet-interne]

Lockfile-only semver-compatible bump (zip 9.0.5 -> 9.1.0). The new transitive deps getrandom 0.4.3 and windows-sys 0.61.2 were already in the lock, and typed-path 0.12 -> 0.13 has no other dependents, so it doesn't duplicate anything. Build/coverage checks were still running when this was reviewed, so let them finish before merging.