From bccd4da0f96b9aeaac8a648d5d6a77436a6ed751 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 13:23:51 +0000
Subject: [PATCH] chore(deps): bump zip from 7.2.0 to 8.6.0

Bumps [zip](https://github.com/zip-rs/zip2) from 7.2.0 to 8.6.0.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zip-rs/zip2/compare/v7.2.0...v8.6.0)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 18 ++++++++++++++++--
 Cargo.toml |  2 +-
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index ce02dc6..25ac754 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -228,7 +228,7 @@ dependencies = [
  "uuid",
  "walkdir",
  "wiremock",
- "zip",
+ "zip 8.6.0",
  "zstd",
 ]
 
@@ -2040,7 +2040,7 @@ dependencies = [
  "symbolic-ppdb",
  "thiserror 2.0.20",
  "wasmparser 0.243.0",
- "zip",
+ "zip 7.2.0",
  "zstd",
 ]
 
@@ -3067,6 +3067,20 @@ name = "zip"
 version = "7.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c42e33efc22a0650c311c2ef19115ce232583abbe80850bc8b66509ebef02de0"
+dependencies = [
+ "crc32fast",
+ "flate2",
+ "indexmap",
+ "memchr",
+ "typed-path",
+ "zopfli",
+]
+
+[[package]]
+name = "zip"
+version = "8.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b"
 dependencies = [
  "crc32fast",
  "flate2",
diff --git a/Cargo.toml b/Cargo.toml
index 0ad4311..d59ab28 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -91,7 +91,7 @@ plist = "1"
 
 # Compression — zstd is the wire format (level 9–11 typical); zip writes archives with Z_STANDARD entries
 zstd = { version = "0.13", features = ["zstdmt"] }
-zip = { version = "7", default-features = false, features = ["zstd", "deflate"] }
+zip = { version = "8", default-features = false, features = ["zstd", "deflate"] }
 
 # gzip — `.xcactivitylog` build logs are gzip of an SLF0 token stream. Already
 # in the dependency tree via `zip`/`reqwest`, so this direct dep adds no new