Skip to content

build(deps): bump rubyzip from 3.1.0 to 3.2.1#975

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rubyzip-3.2.1
Closed

build(deps): bump rubyzip from 3.1.0 to 3.2.1#975
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rubyzip-3.2.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 24, 2025

Bumps rubyzip from 3.1.0 to 3.2.1.

Release notes

Sourced from rubyzip's releases.

v3.2.1

Version 3.2.1

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.0

Version 3.2.0

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.2.1 (2025-10-24)

  • Fix Entry#gather_fileinfo_from_srcpath error messages. #654

Tooling/internal:

  • Add some simple benchmarks for reading the cdir.

3.2.0 (2025-10-14)

Tooling/internal:

  • Entry: clean up reading and writing the Central Directory headers.
  • Improve Zip64 tests for OutputStream.
  • Extra fields: use symbols as indices as opposed to strings.
  • Ensure that Unknown extra field has a superclass.

3.1.1 (2025-09-26)

  • Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

  • Improve the DecryptedIo class with various updates and optimizations.
  • Remove the NullDecrypter class.
  • Properly convert the test suite to use minitest.
  • Move all test helper code into separate files.
  • Updates to the Actions CI, including new OS versions.
  • Update rubocop versions and fix resultant cop failures. #646
Commits
  • 0f1c04c Update version number and Changelog for release.
  • a0f4fa0 Fix Entry#gather_fileinfo_from_srcpath error messages.
  • 59a88d1 Add some simple benchmarks for reading the cdir.
  • 9a7ee0d Update version number and Changelog for release.
  • 1ff464a Allow File to suppress extra fields.
  • cbe3f10 README: document the use of OutputStream.
  • 5b1e18c OutputStream: allow individual extra fields to be suppressed.
  • 208effe Allow OutputStream to locally suppress extra fields.
  • f49ecb6 Entry: clean up reading and writing the CDir headers.
  • 00ebfc5 Test OutputStream behaves as expected with Zip64 support off.
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 3.1.0 to 3.2.1.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v3.1.0...v3.2.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 3.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 24, 2025
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 24, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 24, 2025

Sorry, only users with push access can use that command.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Superseded by #985.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/bundler/rubyzip-3.2.1 branch May 4, 2026 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants