[dependabot]

Bumps the cargo group with 3 updates: encoding_rs, ureq and zip.

Updates encoding_rs from 0.8.42 to 0.8.44

Commits

• 8e8556a Increment the version number to 0.8.44
• 084bb9b Update release notes
• 7f91341 Make convert_latin1_to_utf8_partial not write trailing garbage
• 4a7b515 Increment the version number to 0.8.43
• c9e3a85 Add defense-in-depth guard to convert_latin1_to_str_partial
• 73ddf13 Fix wrong function name in doc
• aaa3056 Relocate a misplaced doc remark
• bdb16cc Make it possible to enable serde without alloc
• 7723c91 Update release notes
• 8d4637c Fix an overflow on 32-bit targets
• Additional commits viewable in compare view

Updates ureq from 3.5.0 to 3.5.1

Changelog

Sourced from ureq's changelog.

3.5.1

• Bump ureq-proto to 0.7.1 (fixes to connection reuse and transfer encoding) #1224
• Send only cookie names and values in request Cookie headers #1222
• Preserve readable responses after macOS rejects timeout changes on closed sockets #1220

Commits

• 33ca9d3 3.5.1
• d1b194c Bump ureq-proto to 0.7.1
• 81d1b40 Bump ureq-proto to 0.7.0
• 0cbee9a docs: clarify body read limit defaults (#1223)
• f92baae Send only cookie names and values in the Cookie header
• f60896d Preserve readable responses after macOS timeout setter failures
• See full diff in compare view

Updates zip from 9.1.3 to 9.4.1

Release notes

Sourced from zip's releases.

v9.4.1

🐛 Bug Fixes

• Add a OwnedZipFileEntry for #177 (#1270)

🚜 Refactor

• Use boxed slices instead of Vec when growability isn't needed (#1271)

v9.4.0

🚀 Features

• Implement ZipIterable::files_with_reader (#1267)

v9.3.0

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)

... (truncated)

Changelog

Sourced from zip's changelog.

9.4.1 - 2026-11-06

🐛 Bug Fixes

• Add a OwnedZipFileEntry for #177 (#1270)

🚜 Refactor

• Use boxed slices instead of Vec when growability isn't needed (#1271)

9.4.0 - 2026-11-05

🚀 Features

• Implement ZipIterable::files_with_reader (#1267)

9.3.0 - 2026-11-03

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

... (truncated)

Commits

• 96e8cce chore: release v9.4.1 (#1272)
• f1b82f2 docs(example): Fix bug in memory-tracking example where reallocations were co...
• 2308d6d refactor: Use boxed slices instead of Vec when growability isn't needed (#1271)
• b3ad5df fix: Add a OwnedZipFileEntry for #177 (#1270)
• 196b805 chore(deps): update lzma-rust2 from 0.24 to 0.25 (#1268)
• f347dd4 chore: release v9.4.0 (#1269)
• e9b7dcd feat: Implement ZipIterable::files_with_reader (#1267)
• 47765a9 docs(security): Clarify that some "vulnerabilities" are necessary for legitim...
• 53cfe46 ci(deps): bump useblacksmith/checkout from 1.8.1 to 1.8.2 (#1260)
• b66f6b1 ci(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#1262)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 959741e8-97f8-4baf-8888-6ba0bcf3f242

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts