Update zip requirement from 0.6.3 to 1.2.3

[dependabot[bot]]

Updates the requirements on zip to permit the latest version.

Release notes

Sourced from zip's releases.

v1.2.3

🐛 Bug Fixes

• Remove a window when an extracted directory might be unexpectedly listable and/or cdable by non-owners
• Extract directory contents on Unix even if the directory doesn't have write permission (zip-rs/zip-old#423)

⚙️ Miscellaneous Tasks

• More conditionally-unused imports

Changelog

Sourced from zip's changelog.

1.2.3 - 2024-05-10

🐛 Bug Fixes

• Remove a window when an extracted directory might be unexpectedly listable and/or cdable by non-owners
• Extract directory contents on Unix even if the directory doesn't have write permission (zip-rs/zip-old#423)

⚙️ Miscellaneous Tasks

• More conditionally-unused imports

1.2.2 - 2024-05-09

🐛 Bug Fixes

• Failed to clear "writing_raw" before finishing a symlink, leading to dropped extra fields

⚡ Performance

• Use boxed slice for archive comment, since it can't be concatenated
• Optimize for the fact that false signatures can't overlap with real ones

1.2.1 - 2024-05-06

🐛 Bug Fixes

• Prevent panic when trying to read a file with an unsupported compression method
• Prevent panic after reading an invalid LZMA file
• Make Stored the default compression method if Deflated isn't available, so that zip files are readable by as much software as possible
• version_needed was wrong when e.g. cfg(bzip2) but current file wasn't bzip2 (#100)
• file paths shouldn't start with slashes (#102)

🚜 Refactor

• Overhaul impl Arbitrary for FileOptions
• Remove unused atomic module

1.2.0 - 2024-05-06

🚀 Features

• Add method decompressed_size() so non-recursive ZIP bombs can be detected

🚜 Refactor

• Make ZipWriter::finish() consume the ZipWriter

⚙️ Miscellaneous Tasks

• Use panic! rather than abort to ensure the fuzz harness can process the failure
• Update fuzz_write to use replace_with
• Remove a drop that can no longer be explicit
• Add #![allow(unexpected_cfgs)] in nightly

1.1.4 - 2024-05-04

🐛 Bug Fixes

• Build was failing with bzip2 enabled
• use is_dir in more places where Windows paths might be handled incorrectly

... (truncated)

Commits

• adb40b8 Merge pull request #118 from zip-rs/release-plz-2024-05-10T23-54-42Z
• 3d7852a chore: release
• a385aaf doc: Important correction: consuming package has to target Unix, e.g. this ...
• 4a5d28e doc: Important correction: contents might not have been extracted at all
• ba4c693 doc: Important clarification: "any user" -> "any non-root user"
• c28614a doc: Document the guarantee provided by 137672cb29a264412211cc20b78f540308a221d3
• 137672c fix: Remove a window when an extracted directory might be unexpectedly listab...
• c0691ec Improve copyright warning
• 123fb7b doc: Improve copyright warning
• 2198653 Add issue templates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #134.