Update Rust crate zip to v9.0.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zip	workspace.dependencies	patch	9.0.0 → 9.0.1

---

Release Notes

zip-rs/zip2 (zip)

v9.0.1

Compare Source

🐛 Bug Fixes

• set_permissions was still following symlinks in non-streaming extraction (#​1038)
• two arithmetic overflows in the implode decoder (#​1028)
• reject an empty archive whose central directory offset is past the EOCD (#​1025)
• don't panic when two entries extract to the same path (#​1023)
• fail reads that exceed the declared uncompressed size (#​1022)
• shrink decoder skipped LZW code 8191 (#​1029)
• write only the sentinel-marked values in a central ZIP64 field (#​1027)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed]

Merging this PR will not alter performance

⚠️ 4 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• create_archive_10_files
• create_archive_100_files
• create_archive_directory
• extract_archive_20_files

✅ 7 untouched benchmarks

---

_{Comparing renovate/zip-9.x-lockfile (cb0e593) with main (b7c9aaa)}