[dependabot]

Bumps the crates group with 2 updates: log and zip.

Updates log from 0.4.34 to 0.4.35

Release notes

Sourced from log's releases.

v0.4.35

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Changelog

Sourced from log's changelog.

0.4.35 - 2026-10-30

This release doesn't include source changes. It verifies log's new CI/CD processes.

Other

• rework CI/CD to align with Rust project standards

Commits

• a46450b Update CHANGELOG.md
• a715f17 chore: release v0.4.35
• b4e2b12 Merge pull request #747 from rust-lang/chore/release-plz-mgnt
• 6b490b6 run fmt
• 2c7fd52 simplify some crate release tasks for easier automation
• 5bc5545 Merge pull request #745 from marcoienibot/release-plz-disable-semver-check
• 4234b8c Disable release-plz semver check
• 95918ff Merge pull request #744 from Kobzol/trusted-publishing
• e7ed747 Fix Zizmor lints
• e87a3c6 Setup trusted publishing
• Additional commits viewable in compare view

Updates zip from 9.1.2 to 9.2.2

Release notes

Sourced from zip's releases.

v9.2.2

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

v9.1.3

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)

... (truncated)

Changelog

Sourced from zip's changelog.

9.2.2 - 2026-11-01

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

9.1.3 - 2026-10-27

🚀 Features

• (extra_fields) support 0xd935 Android ZIP alignment extra field (#928) (#1198)

🐛 Bug Fixes

• (format) record correct 32-bit EOCD offset in ZIP64 archives (#1205)
• (aes) wipe AES round keys when the cipher is dropped (#1204)
• (fuzz) treat a comment change in a merged sub-writer as non-streamable (#1188)
• (aes) zeroize AesCtrZipKeyStream buffer and counter on drop (#1196)
• (extract) prevent symlink-follow truncation via FILE_FLAG_OPEN_REPARSE_POINT (#1195)
• (write) drop a stale Unicode Path extra field when copying an entry (#1187)
• (write) don't leave a stale tail that completes a fake EOCD in the comment (#1186)
• (write) reject deflate levels below 10 when only zopfli is enabled (#1182)

⚡ Performance

• (read) accelerate extraction with 64 KiB reusable buffer (#1206)

... (truncated)

Commits

• 1b431f6 chore: Release 9.2.2 (#1250)
• 39930cb ci: add security permissions to style_and_docs.yml for SARIF upload (#1249)
• fa01d52 ci: remove job-level concurrency group from release-plz.yml (#1248)
• 1139473 ci: [StepSecurity] Apply security best practices (workflow-level permissions ...
• eedfbfd ci: Remove redundant cache; consolidate style_and_docs into 3 jobs; configure...
• 3dd37e9 ci: Prevent CI Complete from reaching Skipped state, which is considered pass...
• c735d50 Merge commit from fork
• 28414f5 Merge commit from fork
• cfc056c ci: Run unit tests in fuzz packages (#1244)
• 1a1d362 ci: Enable running style_and_docs separately, to clear outdated Clippy scan r...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions