phylum-dev / cli

Command line interface for the Phylum API
https://phylum.io
GNU General Public License v3.0
99 stars 10 forks source link

Bump zip from 1.1.4 to 2.1.0 #1430

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps zip from 1.1.4 to 2.1.0.

Release notes

Sourced from zip's releases.

v2.1.0

🚀 Features

  • Support mutual conversion between DateTime and MS-DOS pair

🐛 Bug Fixes

  • version-needed-to-extract was incorrect in central header, and version-made-by could be lower than that (#100)
  • version-needed-to-extract was incorrect in central header, and version-made-by could be lower than that (#100)

⚙️ Miscellaneous Tasks

  • Another tweak to ensure version_needed is applied
  • Tweaks to make version_needed and version_made_by work with recently-merged changes

v2.0.0

🚀 Features

  • Add fmt::Display for DateTime
  • Implement more traits for DateTime

🚜 Refactor

  • Change type of last_modified_time to Option<DateTime>
  • [breaking] Rename from_msdos to from_msdos_unchecked, make it unsafe, and add try_from_msdos (#145)

⚙️ Miscellaneous Tasks

  • Continue to accept archives with invalid DateTime, and use now_utc() as default only when writing, not reading

v1.3.1

🚜 Refactor

  • Make deflate enable both default implementations
  • Merge the hidden deflate-flate2 flag into the public one
  • Rename _deflate-non-zopfli to _deflate-flate2
  • Reject encrypted and using_data_descriptor files slightly faster in read_zipfile_from_stream
  • Convert impl TryInto<NaiveDateTime> for DateTime to impl TryFrom<DateTime> for NaiveDateTime (#136)

⚡ Performance

  • Change default compression implementation to flate2/zlib-ng

⚙️ Miscellaneous Tasks

  • chore(#132): Attribution for some copied test data
  • chore(#133): chmod -x src/result.rs

v1.3.0

🚀 Features

  • Add is_symlink method

🐛 Bug Fixes

  • Extract symlinks into symlinks on Unix and Windows, and fix a bug that affected making directories writable on MacOS

🚜 Refactor

  • Eliminate deprecation warning when --all-features implicitly enables the deprecated feature
  • Check if archive contains a symlink's target, without borrowing both at the same time
  • Eliminate a clone that's no longer necessary

... (truncated)

Changelog

Sourced from zip's changelog.

2.1.0 - 2024-05-25

🚀 Features

  • Support mutual conversion between DateTime and MS-DOS pair

🐛 Bug Fixes

  • version-needed-to-extract was incorrect in central header, and version-made-by could be lower than that (#100)
  • version-needed-to-extract was incorrect in central header, and version-made-by could be lower than that (#100)

⚙️ Miscellaneous Tasks

  • Another tweak to ensure version_needed is applied
  • Tweaks to make version_needed and version_made_by work with recently-merged changes

2.0.0 - 2024-05-24

🚀 Features

  • Add fmt::Display for DateTime
  • Implement more traits for DateTime

🚜 Refactor

  • Change type of last_modified_time to Option<DateTime>
  • [breaking] Rename from_msdos to from_msdos_unchecked, make it unsafe, and add try_from_msdos (#145)

⚙️ Miscellaneous Tasks

  • Continue to accept archives with invalid DateTime, and use now_utc() as default only when writing, not reading

1.3.1 - 2024-05-21

🚜 Refactor

  • Make deflate enable both default implementations
  • Merge the hidden deflate-flate2 flag into the public one
  • Rename _deflate-non-zopfli to _deflate-flate2
  • Reject encrypted and using_data_descriptor files slightly faster in read_zipfile_from_stream
  • Convert impl TryInto<NaiveDateTime> for DateTime to impl TryFrom<DateTime> for NaiveDateTime (#136)

⚡ Performance

  • Change default compression implementation to flate2/zlib-ng

⚙️ Miscellaneous Tasks

  • chore(#132): Attribution for some copied test data
  • chore(#133): chmod -x src/result.rs

1.3.0 - 2024-05-17

🚀 Features

  • Add is_symlink method

🐛 Bug Fixes

  • Extract symlinks into symlinks on Unix and Windows, and fix a bug that affected making directories writable on MacOS

... (truncated)

Commits
  • 6d4e460 Merge pull request #154 from zip-rs/release-plz-2024-05-25T05-11-15Z
  • 78aca55 chore: release
  • 699d10d style: cargo fmt --all
  • e6b2290 chore: Another tweak to ensure version_needed is applied
  • 92012b9 chore: Tweaks to make version_needed and version_made_by work with recent...
  • cda4712 fix: version-needed-to-extract was incorrect in central header, and version-m...
  • b057d0d Merge pull request #93 from cosmicexplorer/bulk-parsing
  • a28b16e Apply suggestions from code review
  • df70f6a Fix unmatched bracket due to bad merge
  • 6b19c87 Merge branch 'master' into bulk-parsing
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)