Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump rubyzip from 2.3.2 to 2.4.1 #4161

Merged
merged 1 commit into from
Jan 6, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2025

Bumps rubyzip from 2.3.2 to 2.4.1.

Changelog

Sourced from rubyzip's changelog.

3.0.0 (Next)

  • Fix File#write_buffer to always return the given io.
  • Add Entry#absolute_time? and DOSTime#absolute_time? methods.
  • Use explicit named parameters for File methods.
  • Ensure that entries can be extracted safely without path traversal. #540
  • Enable Zip64 by default.
  • Rename GPFBit3Error to StreamingError.
  • Ensure that Entry.ftype is correct via InputStream. #533
  • Add Entry#zip64? as a better way detect Zip64 entries.
  • Implement Zip::FileSystem::ZipFsFile#symlink?.
  • Remove File::add_buffer from the API.
  • Fix OutputStream#put_next_entry to preserve StreamableStreams. #503
  • Ensure File.open_buffer doesn't rewrite unchanged data.
  • Add CentralDirectory#count_entries and File::count_entries.
  • Fix reading unknown extra fields. #505
  • Fix reading zip files with max length file comment. #508
  • Fix reading zip64 files with max length file comment. #509
  • Don't silently alter zip files opened with Zip::sort_entries. #329
  • Use named parameters for optional arguments in the public API.
  • Raise an error if entry names exceed 65,535 characters. #247
  • Remove the ZipXError v1 legacy classes.
  • Raise an error on reading a split archive with InputStream. #349
  • Ensure InputStream raises GPFBit3Error for OSX Archive files. #493
  • Improve documentation and error messages for InputStream. #196
  • Fix zip file-level comment is not read from zip64 files. #492
  • Fix Zip::OutputStream.write_buffer doesn't work with Tempfiles. #265
  • Reinstate normalising pathname separators to /. #487
  • Fix restore options consistency. #486
  • View and/or preserve original date created, date modified? (Windows). #336
  • Fix frozen string literal error. #475
  • Set the default Entry time to the file's mtime on Windows. #465
  • Ensure that Entry#time= sets times as DOSTime objects. #481
  • Replace and deprecate Zip::DOSTime#dos_equals. #464
  • Fix loading extra fields. #459
  • Set compression level on a per-zipfile basis. #448
  • Fix input stream partial read error. #462
  • Fix zlib deflate buffer growth. #447

Tooling/internal:

  • Only use the Zip64 CDIR end locator if needed.
  • Prevent unnecessary Zip64 data being stored.
  • Abstract marking various things as 'dirty' into Dirtyable for reuse.
  • Properly test File#mkdir.
  • Remove unused private method File#directory?.
  • Expose the EntrySet more cleanly through CentralDirectory.
  • Zip::File no longer subclasses Zip::CentralDirectory.
  • Configure Coveralls to not report a failure on minor decreases of test coverage. #491
  • Extract the file splitting code out into its own module.

... (truncated)

Commits
  • 6c4b7a9 Move to version 2.4.1 due to clash with 2.4.
  • 3b4c2bf Opt-in for MFA requirement explicitly on 2.4
  • e3eb624 Make sure version number is 2.4.0.
  • c09352b Bump version and Changelog for release.
  • 71bb069 Update actions with latest rubies.
  • bb06f99 Update actions dependencies.
  • 3d95a82 Update earliest Ruby version for MacOS builds in CI.
  • 56954b0 Suppress "literal string will be frozen in the future" warning
  • 6ff40f7 Fix setting and restoring RUBYZIP_V3_API_WARN in tests.
  • e05dc9b Improve version 3 API messages.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.3.2 to 2.4.1.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md)
- [Commits](rubyzip/rubyzip@v2.3.2...v2.4.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 6, 2025
@sethboyles sethboyles merged commit 552bea8 into main Jan 6, 2025
8 checks passed
@dependabot dependabot bot deleted the dependabot/bundler/rubyzip-2.4.1 branch January 6, 2025 18:30
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Jan 6, 2025
Dependency updates in cloud_controller_ng:

- build(deps-dev): bump parallel_tests from 4.7.2 to 4.8.0
    PR: cloudfoundry/cloud_controller_ng#4162
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump rubyzip from 2.3.2 to 2.4.1
    PR: cloudfoundry/cloud_controller_ng#4161
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant