Bump rubyzip from 2.4.1 to 3.1.0

[dependabot]

Bumps rubyzip from 2.4.1 to 3.1.0.

Release notes

Sourced from rubyzip's releases.

v3.1.0

Version 3.1.0

This version adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.2

Version 3.0.2

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.1

Version 3.0.1

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.0.0

Version 3.0.0

⚠️ There are breaking changes to the API in this release! ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.0.0.

Changelog

Sourced from rubyzip's changelog.

3.1.0 (2025-09-06)

• Support AES decryption. #579 and #645

Tooling/internal:

• Add various useful zip specification documents to the repo for ease of finding them in the future. These are not included in the gem release.

3.0.2 (2025-08-21)

• Fix InputStream#sysread to handle frozen string literals. #643
• Ensure that we don't flush too often when deflating. #322
• Stop print causing Zlib errors. #642
• Ensure that print and printf return nil.

3.0.1 (2025-08-08)

• Restore Zip::File's Enumerable status. #641
• Escape filename pattern when matching in Entry#name_safe?. #639
• Eagerly require gem version. #637
• Fix direct require of Entry by requiring constants. #636

3.0.0 (2025-07-28)

• Fix de facto regression for input streams.
• Fix File#write_buffer to always return the given io.
• Add Entry#absolute_time? and DOSTime#absolute_time? methods.
• Use explicit named parameters for File methods.
• Ensure that entries can be extracted safely without path traversal. #540
• Enable Zip64 by default.
• Rename GPFBit3Error to StreamingError.
• Ensure that Entry.ftype is correct via InputStream. #533
• Add Entry#zip64? as a better way detect Zip64 entries.
• Implement Zip::FileSystem::ZipFsFile#symlink?.
• Remove File::add_buffer from the API.
• Fix OutputStream#put_next_entry to preserve StreamableStreams. #503
• Ensure File.open_buffer doesn't rewrite unchanged data.
• Add CentralDirectory#count_entries and File::count_entries.
• Fix reading unknown extra fields. #505
• Fix reading zip files with max length file comment. #508
• Fix reading zip64 files with max length file comment. #509
• Don't silently alter zip files opened with Zip::sort_entries. #329
• Use named parameters for optional arguments in the public API.
• Raise an error if entry names exceed 65,535 characters. #247
• Remove the ZipXError v1 legacy classes.
• Raise an error on reading a split archive with InputStream. #349
• Ensure InputStream raises GPFBit3Error for OSX Archive files. #493
• Improve documentation and error messages for InputStream. #196
• Fix zip file-level comment is not read from zip64 files. #492
• Fix Zip::OutputStream.write_buffer doesn't work with Tempfiles. #265

... (truncated)

Commits

• be126f0 Update version number and Changelog for release.
• da57380 Document the Zip::VERSION constant.
• bbb23f5 Add AES reference documentation.
• e4a8a34 Add some documentation for AES decryption.
• 325b312 Implement a couple of sensible copilot review suggestions.
• 6e624e4 Add test data generated by Keka (MacOS).
• 077c53d Add fix for JRuby cipher finalization issue.
• fb6097a Add tests for AES decryption.
• 059da9c Add support for AES decryption.
• 1eecb6b Add documentation about the limits imposed by the zip spec.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #133.