[dependabot]

Bumps the cargo group with 2 updates: crc32fast and zip.

Updates crc32fast from 1.5.2 to 1.5.4

Commits

• 118796a Release 1.5.4
• 3400e3b aarch64: merge the 3-way streams with precomputed shift tables (#76)
• b9e3b49 aarch64: read words without align_to (#74)
• 6b9d674 baseline: fold 8- and 4-byte tails with the slicing tables (#72)
• 7bfe6b1 Bounds-check the x86 SIMD loads (#73)
• c963d3d Deny unsafe code outside the SIMD backends (#75)
• 9ecaae9 Mark the x86 feature detection #[inline] (#71)
• d28c588 Load the final partial block without a stack copy (#70)
• c438f1c Inline the Hasher constructor and update path (#69)
• d2363ea Release 1.5.3
• Additional commits viewable in compare view

Updates zip from 9.0.5 to 9.3.0

Release notes

Sourced from zip's releases.

v9.3.0

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

... (truncated)

Changelog

Sourced from zip's changelog.

9.3.0 - 2026-11-03

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

9.1.3 - 2026-10-27

🚀 Features

... (truncated)

Commits

• dcd8d15 chore: release v9.3.0 (#1259)
• 1191ea5 feat(write): implement TryFrom<ZipFileBuilder> for PreparedZipFile (#1258)
• d1f1ed9 chore: release v9.2.3 (#1257)
• 2063fdf refactor: Replace std:: with core:: where possible (#1253)
• eb5373b Merge commit from fork
• f69f96a fix(ci): resolve typos false-positive, fix upath smuggling test, and add Turk...
• e3825a1 Merge commit from fork
• efcf8d0 test: condition tempfile use on cfg(not(miri)) (#1254)
• f73f311 Merge commit from fork
• eac649a chore(deps): update lzma-rust2 requirement from ^0.23.0 to ^0.24.0 (#1252)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml