Bump rubyzip from 2.3.2 to 3.3.0

[dependabot]

Bumps rubyzip from 2.3.2 to 3.3.0.

Release notes

Sourced from rubyzip's releases.

v3.3.0

Version 3.3.0

The 3.3.x line ensures that Zip::InputStream behaves more like standard Ruby IO classes.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.2

Version 3.2.2

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.1

Version 3.2.1

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.0

Version 3.2.0

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.1.0

Version 3.1.0

This version adds AES decryption.

... (truncated)

Changelog

Sourced from rubyzip's changelog.

3.3.0 (2026-05-02)

• Refactor InputStream and AbstractInputStream. #661

Tooling/internal:

• Update Actions to use checkout@v5.
• Add Ruby4.0 to the CI matrix. #659

3.2.2 (2025-11-02)

• Fix reading EOCDs when header signatures are in an Entry payload. #656

Tooling/internal:

• Stop using macos-13 runners in GitHub Actions.
• Update YJIT GitHub Actions runners.

3.2.1 (2025-10-24)

• Fix Entry#gather_fileinfo_from_srcpath error messages. #654

Tooling/internal:

• Add some simple benchmarks for reading the cdir.

3.2.0 (2025-10-14)

• Add option to suppress extra fields. #653 (fixes #34, #398 and #648)

Tooling/internal:

• Entry: clean up reading and writing the Central Directory headers.
• Improve Zip64 tests for OutputStream.
• Extra fields: use symbols as indices as opposed to strings.
• Ensure that Unknown extra field has a superclass.

3.1.1 (2025-09-26)

• Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

• Improve the DecryptedIo class with various updates and optimizations.
• Remove the NullDecrypter class.
• Properly convert the test suite to use minitest.
• Move all test helper code into separate files.
• Updates to the Actions CI, including new OS versions.
• Update rubocop versions and fix resultant cop failures. #646

... (truncated)

Commits

• 1e7982e Update copyright year in LICENSE.md.
• cc366ba Update version number and Changelog for release.
• c67d99f Document InputStream fully.
• 4ac8d35 Test AbstractInputStream#read fully.
• 19635d4 Tidy up AbstractInputStreamTest test data.
• 6d7231a Update usage of InputStream#read in other tests.
• 8f823b8 Refactor AbstractInputStream#readlines.
• 52a91b5 Refactor AbstractInputStream#each_line.
• ceecacd Fix how AbstractInputStream#gets updates lineno.
• 6dea2c6 Stop using a 'global' io in the AbstractInputStream tests.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)