Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Bump rubyzip from 2.4.1 to 3.1.0 #187

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into main from dependabot/bundler/rubyzip-3.1.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps rubyzip from 2.4.1 to 3.1.0.

Release notes

Sourced from rubyzip's releases.

v3.1.0

Version 3.1.0

This version adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.2

Version 3.0.2

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.1

Version 3.0.1

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.0

Version 3.0.0

⚠️ There are breaking changes to the API in this release! ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.0.0.

Changelog

Sourced from rubyzip's changelog.

3.1.0 (2025年09月06日)

Tooling/internal:

  • Add various useful zip specification documents to the repo for ease of finding them in the future. These are not included in the gem release.

3.0.2 (2025年08月21日)

  • Fix InputStream#sysread to handle frozen string literals. #643
  • Ensure that we don't flush too often when deflating. #322
  • Stop print causing Zlib errors. #642
  • Ensure that print and printf return nil.

3.0.1 (2025年08月08日)

  • Restore Zip::File's Enumerable status. #641
  • Escape filename pattern when matching in Entry#name_safe?. #639
  • Eagerly require gem version. #637
  • Fix direct require of Entry by requiring constants. #636

3.0.0 (2025年07月28日)

  • Fix de facto regression for input streams.
  • Fix File#write_buffer to always return the given io.
  • Add Entry#absolute_time? and DOSTime#absolute_time? methods.
  • Use explicit named parameters for File methods.
  • Ensure that entries can be extracted safely without path traversal. #540
  • Enable Zip64 by default.
  • Rename GPFBit3Error to StreamingError.
  • Ensure that Entry.ftype is correct via InputStream. #533
  • Add Entry#zip64? as a better way detect Zip64 entries.
  • Implement Zip::FileSystem::ZipFsFile#symlink?.
  • Remove File::add_buffer from the API.
  • Fix OutputStream#put_next_entry to preserve StreamableStreams. #503
  • Ensure File.open_buffer doesn't rewrite unchanged data.
  • Add CentralDirectory#count_entries and File::count_entries.
  • Fix reading unknown extra fields. #505
  • Fix reading zip files with max length file comment. #508
  • Fix reading zip64 files with max length file comment. #509
  • Don't silently alter zip files opened with Zip::sort_entries. #329
  • Use named parameters for optional arguments in the public API.
  • Raise an error if entry names exceed 65,535 characters. #247
  • Remove the ZipXError v1 legacy classes.
  • Raise an error on reading a split archive with InputStream. #349
  • Ensure InputStream raises GPFBit3Error for OSX Archive files. #493
  • Improve documentation and error messages for InputStream. #196
  • Fix zip file-level comment is not read from zip64 files. #492
  • Fix Zip::OutputStream.write_buffer doesn't work with Tempfiles. #265

... (truncated)

Commits
  • be126f0 Update version number and Changelog for release.
  • da57380 Document the Zip::VERSION constant.
  • bbb23f5 Add AES reference documentation.
  • e4a8a34 Add some documentation for AES decryption.
  • 325b312 Implement a couple of sensible copilot review suggestions.
  • 6e624e4 Add test data generated by Keka (MacOS).
  • 077c53d Add fix for JRuby cipher finalization issue.
  • fb6097a Add tests for AES decryption.
  • 059da9c Add support for AES decryption.
  • 1eecb6b Add documentation about the limits imposed by the zip spec.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.4.1 to 3.1.0.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v2.4.1...v3.1.0)
---
updated-dependencies:
- dependency-name: rubyzip
 dependency-version: 3.1.0
 dependency-type: direct:production
 update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 8, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 29, 2025

Superseded by #191.

@dependabot dependabot bot deleted the dependabot/bundler/rubyzip-3.1.0 branch September 29, 2025 23:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

AltStyle によって変換されたページ (->オリジナル) /