Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps rubyzip from 2.4.1 to 3.1.1.

Release notes

Sourced from rubyzip's releases.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.1.0

Version 3.1.0

This version adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.2

Version 3.0.2

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.1

Version 3.0.1

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.0

Version 3.0.0

⚠️ There are breaking changes to the API in this release! ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.0.0.

Changelog

Sourced from rubyzip's changelog.

3.1.1 (2025-09-26)

  • Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

  • Improve the DecryptedIo class with various updates and optimizations.
  • Remove the NullDecrypter class.
  • Properly convert the test suite to use minitest.
  • Move all test helper code into separate files.
  • Updates to the Actions CI, including new OS versions.
  • Update rubocop versions and fix resultant cop failures. #646

3.1.0 (2025-09-06)

Tooling/internal:

  • Add various useful zip specification documents to the repo for ease of finding them in the future. These are not included in the gem release.

3.0.2 (2025-08-21)

  • Fix InputStream#sysread to handle frozen string literals. #643
  • Ensure that we don't flush too often when deflating. #322
  • Stop print causing Zlib errors. #642
  • Ensure that print and printf return nil.

3.0.1 (2025-08-08)

  • Restore Zip::File's Enumerable status. #641
  • Escape filename pattern when matching in Entry#name_safe?. #639
  • Eagerly require gem version. #637
  • Fix direct require of Entry by requiring constants. #636

3.0.0 (2025-07-28)

  • Fix de facto regression for input streams.
  • Fix File#write_buffer to always return the given io.
  • Add Entry#absolute_time? and DOSTime#absolute_time? methods.
  • Use explicit named parameters for File methods.
  • Ensure that entries can be extracted safely without path traversal. #540
  • Enable Zip64 by default.
  • Rename GPFBit3Error to StreamingError.
  • Ensure that Entry.ftype is correct via InputStream. #533
  • Add Entry#zip64? as a better way detect Zip64 entries.
  • Implement Zip::FileSystem::ZipFsFile#symlink?.
  • Remove File::add_buffer from the API.
  • Fix OutputStream#put_next_entry to preserve StreamableStreams. #503
  • Ensure File.open_buffer doesn't rewrite unchanged data.

... (truncated)

Commits
  • f87340d Update version number and Changelog for release.
  • 813d96d Add a Rubocop badge to the README.
  • 61c25b0 Reduce the number of YJIT test runs in CI.
  • 69dcb8e Allow Windows CI builds to fail.
  • da44b2c Update OS versions in the Actions CI.
  • fd78455 Use require_relative when pulling in test_helper.
  • 78848c5 Only require test helpers where they are needed.
  • e55f7c9 Move all test helper code into separate files.
  • 5f1fcb2 Remove unnecessary perms from gentestfiles.rb.
  • ceabd03 Remove unnecessary requires from test_helper.rb.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.4.1 to 3.1.1.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v2.4.1...v3.1.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants