Bump zip from 2.1.3 to 2.1.4

[dependabot]

Bumps zip from 2.1.3 to 2.1.4.

Release notes

Sourced from zip's releases.

v2.1.4

🐛 Bug Fixes

• fix(#215): Upgrade to deflate64 0.1.9
• Panic when reading a file truncated in the middle of an XZ block header
• Some archives with over u16::MAX files were handled incorrectly or slowly (#189)
• Check number of files when deciding whether a CDE is the real one
• Could still select a fake CDE over a real one in some cases
• May have to consider multiple CDEs before filtering for validity
• We now keep searching for a real CDE header after read an invalid one from the file comment
• Always search for data start when opening an archive for append, and reject the header if data appears to start after central directory
• deep_copy_file no longer allows overwriting an existing file, to match the behavior of shallow_copy_file
• File start position was wrong when extra data was present
• Abort file if central extra data is too large
• Overflow panic when central directory extra data is too large
• ZIP64 header was being written twice when copying a file
• ZIP64 header was being written to central header twice
• Start position was incorrect when file had no extra data
• Allow all reserved headers we can create
• Fix a bug where alignment padding interacts with other extra-data fields
• Fix bugs involving alignment padding and Unicode extra fields
• Incorrect header when adding AES-encrypted files
• Parse the extra field and reject it if invalid
• Incorrect behavior following a rare combination of merge_archive, abort_file and deep_copy_file. As well, we now return an error when a file is being copied to itself.
• path_to_string now properly handles the case of an empty path
• Implement Debug for ZipWriter even when it's not implemented for the inner writer's type
• Fix an issue where the central directory could be incorrectly detected
• finish_into_readable() would corrupt the archive if the central directory had moved

🚜 Refactor

• Verify with debug assertions that no FixedSizeBlock expects a multi-byte alignment (#198)
• Use new do_or_abort_file method

⚡ Performance

• Speed up CRC when encrypting small files
• Limit the number of extra fields
• Refactor extra-data validation
• Store extra data in plain vectors until after validation
• Only build one IndexMap after choosing among the possible valid headers
• Simplify validation of empty extra-data fields
• Validate automatic extra-data fields only once, even if several are present
• Remove redundant validate_extra_data() call
• Skip searching for the ZIP32 header if a valid ZIP64 header is present (#189)

⚙️ Miscellaneous Tasks

• Fix a bug introduced by c934c824
• Fix a failing unit test
• Fix build errors on older Rust versions
• Fix build
• Fix another fuzz failure
• Switch to ok_or_abort_file, and inline when that fails borrow checker

... (truncated)

Changelog

Sourced from zip's changelog.

2.1.4 - 2024-07-18

🐛 Bug Fixes

• fix(#215): Upgrade to deflate64 0.1.9
• Panic when reading a file truncated in the middle of an XZ block header
• Some archives with over u16::MAX files were handled incorrectly or slowly (#189)
• Check number of files when deciding whether a CDE is the real one
• Could still select a fake CDE over a real one in some cases
• May have to consider multiple CDEs before filtering for validity
• We now keep searching for a real CDE header after read an invalid one from the file comment
• Always search for data start when opening an archive for append, and reject the header if data appears to start after central directory
• deep_copy_file no longer allows overwriting an existing file, to match the behavior of shallow_copy_file
• File start position was wrong when extra data was present
• Abort file if central extra data is too large
• Overflow panic when central directory extra data is too large
• ZIP64 header was being written twice when copying a file
• ZIP64 header was being written to central header twice
• Start position was incorrect when file had no extra data
• Allow all reserved headers we can create
• Fix a bug where alignment padding interacts with other extra-data fields
• Fix bugs involving alignment padding and Unicode extra fields
• Incorrect header when adding AES-encrypted files
• Parse the extra field and reject it if invalid
• Incorrect behavior following a rare combination of merge_archive, abort_file and deep_copy_file. As well, we now return an error when a file is being copied to itself.
• path_to_string now properly handles the case of an empty path
• Implement Debug for ZipWriter even when it's not implemented for the inner writer's type
• Fix an issue where the central directory could be incorrectly detected
• finish_into_readable() would corrupt the archive if the central directory had moved

🚜 Refactor

• Verify with debug assertions that no FixedSizeBlock expects a multi-byte alignment (#198)
• Use new do_or_abort_file method

⚡ Performance

• Speed up CRC when encrypting small files
• Limit the number of extra fields
• Refactor extra-data validation
• Store extra data in plain vectors until after validation
• Only build one IndexMap after choosing among the possible valid headers
• Simplify validation of empty extra-data fields
• Validate automatic extra-data fields only once, even if several are present
• Remove redundant validate_extra_data() call
• Skip searching for the ZIP32 header if a valid ZIP64 header is present (#189)

⚙️ Miscellaneous Tasks

• Fix a bug introduced by c934c824
• Fix a failing unit test
• Fix build errors on older Rust versions
• Fix build
• Fix another fuzz failure

... (truncated)

Commits

• 9caa3b6 Merge pull request #194 from zip-rs/release-plz-2024-06-15T04-17-17Z
• 8b11361 chore: release
• 55c2c64 ci(fuzz): Set max length closer to current corpus entries' length
• 193bbe1 fix(#215): Upgrade to deflate64 0.1.9
• 4e971d0 Commit unfinished corpus
• c149868 Fix divergence from origin/master
• 81b5fb6 Update fuzz_write corpus to use only smaller entries
• 6106a2b Merge pull request #201 from nichmor/fix/soft-links-should-remain-the-same
• 03dd557 Merge pull request #218 from zip-rs/fuzz-write-no-feat-40m
• e48686a ci(fuzz): Run fuzz_write_with_no_features only 40m times
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)