Bump sevenz-rust2 from 0.20.2 to 0.22.0

[dependabot]

Bumps sevenz-rust2 from 0.20.2 to 0.22.0.

Changelog

Sourced from sevenz-rust2's changelog.

0.22.0 - 2026-08-23

Changed

• Bumped lzma_rust2 to 0.20.
• Expose coder's properties (#131, thanks @​lukr54)
• Let a solid pack be compressed away from the writer (#132, thanks @​lukr54)

0.21.5 - 2026-08-16

Changed

• Bumped lzma_rust2 to 0.19.
• Batch AES-CBC decryption to improve performance.

0.21.4 - 2026-08-01

Fixed

• Fixed an integer overflow when summing attacker-controlled coder stream counts while parsing a block header. Malformed archives panicked in debug builds and bypassed the stream-count bound in release builds. They are now rejected with an error. (#127, thanks @​tyrex-vberthier)

0.21.3 - 2026-07-05

Changed

• Cache most recent AES key derivation to improve performance (#118, thanks @​jdlien)

Fixed

• Hardened the library against malicious or malformed archives that could otherwise cause a panic, an infinite loop, or an unbounded allocation while parsing or decoding.

0.21.2 - 2026-07-01

Fixed

• Decode 7z folders that layer a single-input filter (e.g. Delta) on top of a BCJ2 coder (Method = Delta BCJ2). These folders previously failed to decode with an Unsupported method error because the decoder required the folder's final output coder to be BCJ2 itself. (#117, thanks @​trevorWieland)

0.21.1 - 2026-06-23

Fixed

• Fix security issue were malicious 7z files could write files outside the destination directory. Reported by @​lintowe (#116)

... (truncated)

Commits

• 253cb13 Release v0.22.0
• e10da82 Let a solid block be compressed away from the writer
• a17500f Expose a coder's properties
• 25c8bf8 Bump Swatinem/rust-cache from 2.9.1 to 2.9.2
• e8994ad Release v0.21.5
• 0425a03 perf: batch AES-CBC decryption
• f8c4668 Fix integer overflow in debug mode
• bffd561 Update lzma-rust2 requirement from 0.17 to 0.18
• 505fb83 Update lz4_flex requirement from 0.13 to 0.14
• f3dc394 Update lzma-rust2 requirement from 0.16 to 0.17
• Additional commits viewable in compare view

[dependabot]

Superseded by #168.