chore(deps): bump zip from 7.0.0 to 7.2.0

[dependabot]

Bumps zip from 7.0.0 to 7.2.0.

Release notes

Sourced from zip's releases.

v7.2.0

🚀 Features

• add read_zipfile_from_stream_with_compressed_size (#70)
• Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

• Need to include zip64 extra field in central directory (fix #353) (#360)
• Fails to extract file which might or might not be malformed (#376) (#426)
• (aes) Allow AES encryption while streaming (#463)
• Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

• Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

• Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
• eliminate a String clone per new file added to archive, and other related refactors (#522)

⚙️ Miscellaneous Tasks

• Fix another merge error, this one affecting only builds with flate2 and not zopfli
• Fix more merge issues
• Fix merge
• Fix write_dir build errors on specific feature configs
• Fix clippy warning
• Fix --all-features build error
• Fix merge

v7.1.0

🚀 Features

• display the underlying error in Display impl for ZipError::Display (#483)
• Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

• Return InvalidPassword rather than panic when AES key is the wrong length (#457)
• bench with auto zip64 comment (#505)
• add condition for getrandom dependency (#504)
• (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

• Clean up imports and move types (#461)
• Replace handwritten Ord and PartialOrd for DateTime (#484)

... (truncated)

Changelog

Sourced from zip's changelog.

7.2.0 - 2026-01-20

🚀 Features

• add read_zipfile_from_stream_with_compressed_size (#70)
• Allow choosing bzip2 rust backend (#329)

🐛 Bug Fixes

• Need to include zip64 extra field in central directory (fix #353) (#360)
• Fails to extract file which might or might not be malformed (#376) (#426)
• (aes) Allow AES encryption while streaming (#463)
• Default "platform" field in zip files should be set to the local platform, rather than always "Unix" (#470) (#471)

🚜 Refactor

• Define cfg_if! and cfg_if_expr! internal macros (#438)

⚡ Performance

• Change an assert to debug_assert when encrypting/decrypting AES, and eliminate a fallible operation (#521)
• eliminate a String clone per new file added to archive, and other related refactors (#522)

⚙️ Miscellaneous Tasks

• Fix another merge error, this one affecting only builds with flate2 and not zopfli
• Fix more merge issues
• Fix merge
• Fix write_dir build errors on specific feature configs
• Fix clippy warning
• Fix --all-features build error
• Fix merge

7.1.0 - 2026-01-14

🚀 Features

• display the underlying error in Display impl for ZipError::Display (#483)
• Enable creation of ZipArchive without reparsing (#485)

🐛 Bug Fixes

• Return InvalidPassword rather than panic when AES key is the wrong length (#457)
• bench with auto zip64 comment (#505)
• add condition for getrandom dependency (#504)
• (zipcrypto) Support streaming ZipCrypto encryption, don't store entire file in memory (#462)

🚜 Refactor

• Clean up imports and move types (#461)

... (truncated)

Commits

• 46dc29c chore: release v7.2.0 (#526)
• 8a586c6 test: Move a test that was in wrong folder and was using main() instead of `#...
• cfbb476 docs(examples): Fix remaining log-injection alerts, and simplify writeln to e...
• d905296 ci: Disable trigger on non-master push (#538)
• a3a8696 chore(deps): Increase zstd minimum version to 0.13.3 (#539)
• abd8bc8 ci: Add wasm tests and restore conditional wasm-bindgen dependency (#525)
• c10c339 doc(examples): add delete/update examples (#56)
• 9c1a9c7 docs(examples): Fix code scanning alert no. 228: Uncontrolled data used in pa...
• a12eaaf ci: Combine rename invocations (#533)
• e86d376 fix: Need to include zip64 extra field in central directory (fix #353) (#360)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}