From bdcd0a052b7014150df674e9d6def02ad7de830f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 20:38:14 +0000
Subject: [PATCH] Bump zip from 2.6.1 to 3.0.0

Bumps [zip](https://github.com/zip-rs/zip2) from 2.6.1 to 3.0.0.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zip-rs/zip2/compare/v2.6.1...v3.0.0)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock     | 23 ++++++++++++++++++-----
 cli/Cargo.toml |  2 +-
 2 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 731cb5968..fc93c7ca1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2512,6 +2512,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
 dependencies = [
  "crc32fast",
+ "libz-rs-sys",
  "miniz_oxide 0.8.8",
 ]
 
@@ -3766,6 +3767,15 @@ dependencies = [
  "vcpkg",
 ]
 
+[[package]]
+name = "libz-rs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6489ca9bd760fe9642d7644e827b0c9add07df89857b0416ee15c1cc1a3b8c5a"
+dependencies = [
+ "zlib-rs",
+]
+
 [[package]]
 name = "libz-sys"
 version = "1.1.22"
@@ -8277,21 +8287,24 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "2.4.2"
+version = "3.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fabe6324e908f85a1c52063ce7aa26b68dcb7eb6dbc83a2d148403c9bc3eba50"
+checksum = "12598812502ed0105f607f941c386f43d441e00148fce9dec3ca5ffb0bde9308"
 dependencies = [
  "arbitrary",
  "crc32fast",
- "crossbeam-utils",
- "displaydoc",
  "flate2",
  "indexmap",
  "memchr",
- "thiserror 2.0.12",
  "zopfli",
 ]
 
+[[package]]
+name = "zlib-rs"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "868b928d7949e09af2f6086dfc1e01936064cc7a819253bce650d4e2a2d63ba8"
+
 [[package]]
 name = "zopfli"
 version = "0.8.2"
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 24fbb70fd..f9da4d12f 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -79,7 +79,7 @@ uuid = { version = "1.4.1", features = ["v4"] }
 vuln-reach = { git = "https://github.com/phylum-dev/vuln-reach", optional = true }
 vulnreach_types = { path = "../vulnreach_types", optional = true }
 walkdir = "2.3.2"
-zip = { version = "2.3.0", default-features = false, features = ["deflate"] }
+zip = { version = "3.0.0", default-features = false, features = ["deflate"] }
 
 [target.'cfg(unix)'.dependencies]
 birdcage = { version = "0.8.1" }