Skip to content

Bump rubyzip from 2.4.1 to 3.0.0 #160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 29, 2025

Bumps rubyzip from 2.4.1 to 3.0.0.

Changelog

Sourced from rubyzip's changelog.

3.0.0 (2025-07-28)

  • Fix de facto regression for input streams.
  • Fix File#write_buffer to always return the given io.
  • Add Entry#absolute_time? and DOSTime#absolute_time? methods.
  • Use explicit named parameters for File methods.
  • Ensure that entries can be extracted safely without path traversal. #540
  • Enable Zip64 by default.
  • Rename GPFBit3Error to StreamingError.
  • Ensure that Entry.ftype is correct via InputStream. #533
  • Add Entry#zip64? as a better way detect Zip64 entries.
  • Implement Zip::FileSystem::ZipFsFile#symlink?.
  • Remove File::add_buffer from the API.
  • Fix OutputStream#put_next_entry to preserve StreamableStreams. #503
  • Ensure File.open_buffer doesn't rewrite unchanged data.
  • Add CentralDirectory#count_entries and File::count_entries.
  • Fix reading unknown extra fields. #505
  • Fix reading zip files with max length file comment. #508
  • Fix reading zip64 files with max length file comment. #509
  • Don't silently alter zip files opened with Zip::sort_entries. #329
  • Use named parameters for optional arguments in the public API.
  • Raise an error if entry names exceed 65,535 characters. #247
  • Remove the ZipXError v1 legacy classes.
  • Raise an error on reading a split archive with InputStream. #349
  • Ensure InputStream raises GPFBit3Error for OSX Archive files. #493
  • Improve documentation and error messages for InputStream. #196
  • Fix zip file-level comment is not read from zip64 files. #492
  • Fix Zip::OutputStream.write_buffer doesn't work with Tempfiles. #265
  • Reinstate normalising pathname separators to /. #487
  • Fix restore options consistency. #486
  • View and/or preserve original date created, date modified? (Windows). #336
  • Fix frozen string literal error. #475
  • Set the default Entry time to the file's mtime on Windows. #465
  • Ensure that Entry#time= sets times as DOSTime objects. #481
  • Replace and deprecate Zip::DOSTime#dos_equals. #464
  • Fix loading extra fields. #459
  • Set compression level on a per-zipfile basis. #448
  • Fix input stream partial read error. #462
  • Fix zlib deflate buffer growth. #447

Tooling/internal:

  • No longer test setting $\ in tests.
  • Add a test to ensure correct version number format.
  • Update the README with new Ruby version compatability information.
  • Fix various issues with JRuby tests.
  • Update gem dependency versions.
  • Add Ruby 3.4 to the CI.
  • Fix mispelled variable names in the crypto classes.
  • Only use the Zip64 CDIR end locator if needed.

... (truncated)

Commits
  • f1d0f48 Update version number, README and Changelog for release.
  • 1d5e27d Remove research notice from the README.
  • 7add81c No longer test setting $\ in tests.
  • 1f3f84c Update version number and Changelog for RC2.
  • deca4d5 Fix de facto regression for input streams.
  • 98881e2 Add a test to ensure correct version number format.
  • 43d845c Update version number, README and Changelog for RC1.
  • 3f909b2 Fix CI against JRuby, JRuby-head, and Windows
  • f7c6b79 Update some dev dependency gems and relax version matching.
  • 8ed6662 Fix JRuby CI tests
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.4.1 to 3.0.0.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md)
- [Commits](rubyzip/rubyzip@v2.4.1...v3.0.0)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants