Upgrade rubyzip to version 1.2.3

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ rubyzip (< 1.0 → <= 1.2.3) · Repo · Changelog

Release Notes

1.2.3

• Allow tilde in zip entry names #391 (fixes regression in 1.2.2 from #376)
• Support frozen string literals in more files #390
• Require pathname explicitly #388 (fixes regression in 1.2.2 from #376)

Tooling / Documentation:

• CI updates #392, #394
  • Bump supported ruby versions and add 2.6
  • JRuby failures are no longer ignored (reverts #375 / part of #371)
• Add changelog entry that was missing for last release #387
• Comment cleanup #385

Since the GitHub release information for 1.2.2 is missing, I will also include it here:

1.2.2

NB: This release drops support for extracting symlinks, because there was no clear way to support this securely. See #376 (comment) for details.

• Fix CVE-2018-1000544 #376 / #371
• Fix NoMethodError: undefined method `glob' #363
• Fix handling of stored files (i.e. files not using compression) with general purpose bit 3 set #358
• Fix close on StringIO-backed zip file #353
• Add Zip.force_entry_names_encoding option #340
• Update rubocop, apply auto-fixes, and fix regressions caused by said auto-fixes #332, #355
• Save temporary files to temporary directory (rather than current directory) #325

Tooling / Documentation:

• Turn off all terminal output in all tests #361
• Several CI updates #346, #347, #350, #352
• Several README improvements #345, #326, #321

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 22 commits:

• Fix link typo in changelog
• Merge pull request #393 from rubyzip/v1-2-3
• Merge pull request #391 from jdleesmiller/fix-expand-path
• Add #394 to changelog
• Merge pull request #394 from olleolleolle/patch-1
• CI: update to latest MRI, drop a setting
• Bump version to 1.2.3
• Allow tilde in zip entry names
• Merge pull request #392 from rubyzip/update-ci
• Update ruby dependencies
• Enable parallel build support for coveralls
• Stop allowing jruby failures
• Merge pull request #375 from vipulnsward/allow-jruby-failure-on-crc
• Merge pull request #385 from mihyaeru21/remove-commas
• Merge pull request #390 from taichi-ishitani/master
• Merge pull request #388 from d235j/pathname-require
• Merge pull request #387 from aspiers/add-1.2.2-changelog
• fixed CI error
• fixed errors caused by frozen-string-literal
• require pathname where it is used
• Add Changelog for 1.2.2 (#378)
• remove some strange commas

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu]

Closed in favor of #66.