[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zip	workspace.dependencies	patch	9.0.0 → 9.0.1

---

Release Notes

zip-rs/zip2 (zip)

v9.0.1

Compare Source

🐛 Bug Fixes

• set_permissions was still following symlinks in non-streaming extraction (#​1038)
• two arithmetic overflows in the implode decoder (#​1028)
• reject an empty archive whose central directory offset is past the EOCD (#​1025)
• don't panic when two entries extract to the same path (#​1023)
• fail reads that exceed the declared uncompressed size (#​1022)
• shrink decoder skipped LZW code 8191 (#​1029)
• write only the sentinel-marked values in a central ZIP64 field (#​1027)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

GNU testsuite comparison:

Skipping an intermittent issue tests/misc/usage_vs_getopt (passes in this run but fails in the 'main' branch)

[codspeed]

Merging this PR will regress 2 benchmarks

⚠️ 120 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• cksum_multiple_files
• cksum_default
• cksum_crc32b
• b64_decode_ignore_garbage_synthetic
• cksum_raw_output
• cksum_crc
• factor_64bit_semiprime
• wc_bytes_synthetic[500]
• cat_default[10000000]
• b64_decode_synthetic
• …and 110 more

ℹ️ 1 benchmark has no flame graph

The flamegraph could not be generated because too much time was spent in runtime internals, making the visualization not useful for performance analysis.

• sort_dictionary_order[500000]

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 5 improved benchmarks
❌ 2 regressed benchmarks
✅ 394 untouched benchmarks
⏩ 54 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
❌	Simulation	expand_many_lines[100000]	106.2 ms	115.9 ms	-8.36%
❌	Simulation	expand_custom_tabstops[50000]	29.6 ms	31.6 ms	-6.36%
⚡	Simulation	unexpand_large_file[10]	280.9 ms	105.3 ms	×2.7
⚡	Simulation	unexpand_many_lines[100000]	134.4 ms	50.6 ms	×2.7
⚡	Simulation	three_39_bit_primes	924.5 ms	465.8 ms	+98.47%
⚡	Simulation	five_38_bit_primes	1.9 s	1.6 s	+14.94%
⚡	Simulation	thirteen_39_bit_primes	9.2 s	8.9 s	+4.3%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing renovate/zip-9.x-lockfile (248bbff) with main (7df8692)²}

Footnotes

1. 54 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (83d4759) during the generation of this report, so 7df8692 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩