From 3da7f099deec4ac0deab95fadf928cfbb843e496 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 2 Nov 2026 13:32:33 +0000
Subject: [PATCH] chore(deps): update rust crate zip to v9 [security]

---
 Cargo.lock | 46 +++++++++++++++++++++++++++++++++++++++++-----
 Cargo.toml |  2 +-
 2 files changed, 42 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index f7026e6d9..1fa54c87b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3900,7 +3900,7 @@ version = "1.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c0aeb26bf5e836cc1c341c8106051b573f1766dfa05aa87f0b98be5e51b02303"
 dependencies = [
- "nix",
+ "nix 0.29.0",
  "winapi",
 ]
 
@@ -4154,7 +4154,7 @@ dependencies = [
  "walkdir",
  "webbrowser",
  "windows-sys 0.61.2",
- "zip",
+ "zip 9.2.2",
 ]
 
 [[package]]
@@ -4224,7 +4224,7 @@ dependencies = [
  "uuid",
  "vfs",
  "windows-sys 0.61.2",
- "zip",
+ "zip 8.6.0",
 ]
 
 [[package]]
@@ -4331,7 +4331,7 @@ dependencies = [
  "unicode-casefold",
  "unicode-normalization",
  "url",
- "zip",
+ "zip 8.6.0",
 ]
 
 [[package]]
@@ -4657,6 +4657,18 @@ dependencies = [
  "memoffset",
 ]
 
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.13.1",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "nohash-hasher"
 version = "0.2.0"
@@ -7276,7 +7288,7 @@ dependencies = [
  "libc",
  "log",
  "memmem",
- "nix",
+ "nix 0.29.0",
  "num-derive",
  "num-traits",
  "ordered-float",
@@ -7938,6 +7950,12 @@ version = "0.12.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e28f89b80c87b8fb0cf04ab448d5dd0dd0ade2f8891bae878de66a75a28600e"
 
+[[package]]
+name = "typed-path"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ce898823d8cd0f028662d2f349694b1af0a5cc9be83f1d213a00d3147445e1e"
+
 [[package]]
 name = "typenum"
 version = "1.20.1"
@@ -9603,6 +9621,24 @@ dependencies = [
  "zstd",
 ]
 
+[[package]]
+name = "zip"
+version = "9.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e408c6cc4699dd017d53dc080cd51c2cea2b5354af57a1479bd265ed42911487"
+dependencies = [
+ "crc32fast",
+ "flate2",
+ "getrandom 0.4.3",
+ "indexmap",
+ "libc",
+ "memchr",
+ "nix 0.31.3",
+ "typed-path 0.13.0",
+ "windows-sys 0.61.2",
+ "zopfli",
+]
+
 [[package]]
 name = "zlib-rs"
 version = "0.6.7"
diff --git a/Cargo.toml b/Cargo.toml
index 2c85ecc82..1abc9f509 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -95,7 +95,7 @@ toml = "1.0.0"
 tempfile = "3"
 semver = "1"
 uuid = { version = "1", features = ["v4"] }
-zip = { version = "8.6", default-features = false, features = ["deflate"] }
+zip = { version = "9.0", default-features = false, features = ["deflate"] }
 ed25519-dalek = "3"
 unicode-casefold = "=0.2.0"
 unicode-normalization = "=0.1.25"