• 9a84f2f Release aes v0.9.4 (#604)
• b99ebe6 aes: remove references to old aes_backend cfgs (#597)
• a7136b4 aes: add #[inline] attributes (#598)
• 2449027 aes: shrink AES round keys for AES fixslice backend (#594)
• 99c6b37 Tweak Cargo.toml files (#592)
• 0eb02c0 aes: test x86 backends with Miri (#591)
• See full diff in compare view

• See full diff in compare view

Sourced from zip's releases.

v9.3.0

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

v9.2.3

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

v9.2.2

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.1

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

v9.2.0

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

Sourced from zip's changelog.

9.3.0 - 2026-11-03

🚀 Features

• (write) implement TryFrom for PreparedZipFile (#1258)

9.2.3 - 2026-11-03

🐛 Bug Fixes

• (ci) resolve typos false-positive, fix upath smuggling test, and add Turkish tests (#1256)

🚜 Refactor

• Replace std:: with core:: where possible (#1253)

9.2.2 - 2026-11-01

🚜 Refactor

• Eliminate the use of SwitchWriterFunction (a Box<dyn FnOnce<_>>) (#1235)

⚙️ Miscellaneous Tasks

• Fix build error (can't convert getrandom::Error to io::Error without getrandom/std) (#1240)

9.2.0 - 2026-10-31

🚀 Features

• (write) add parallel compression and batch appending for ZipWriter with Rayon (#1225)
• add index_for_name_raw (#1210)
• (extract) multi-threaded parallel extraction engine and safe extent pre-allocation (#1207)
• (read) add index-free iterable ZIP reader (#1218)

🐛 Bug Fixes

• by_name().get_metadata() and by_index().get_metadata() now succeed even when compression method is unsupported (#1228)
• (read) keep ZipIterable::len at the central directory entry count (#1221)
• (fuzz) count reopens in copy bases when tracking comment shrink (#1222)

⚡ Performance

• (read) eliminate redundant pre-scan I/O and atomic contention in par_extract (#1227)
• (read) eliminate redundant clone and heap allocations in safe_prepare_path (#1224)

• dcd8d15 chore: release v9.3.0 (#1259)
• 1191ea5 feat(write): implement TryFrom<ZipFileBuilder> for PreparedZipFile (#1258)
• d1f1ed9 chore: release v9.2.3 (#1257)
• 2063fdf refactor: Replace std:: with core:: where possible (#1253)
• eb5373b Merge commit from fork
• f69f96a fix(ci): resolve typos false-positive, fix upath smuggling test, and add Turk...
• e3825a1 Merge commit from fork
• efcf8d0 test: condition tempfile use on cfg(not(miri)) (#1254)
• f73f311 Merge commit from fork
• eac649a chore(deps): update lzma-rust2 requirement from ^0.23.0 to ^0.24.0 (#1252)
• Additional commits viewable in compare view

Sourced from flate2's releases.

v1.1.11

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

Sourced from flate2's changelog.

1.1.11 - 2026-11-06

Fixed

• fixup! Complete sync flushes across output buffer boundaries (#581)
• Separate gzip header reads from compressed data
• Defer gzip input errors without losing read progress
• Preserve gzip header progress on input read errors (#571)

Other

• Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• Merge pull request #577 from rust-lang/fix-loop
• Setup trusted publishing for the flate2 crate
• Complete sync flushes across output buffer boundaries (#581)
• Fix "can by extended" typos in deflate and zlib write docs
• Merge pull request #579 from NUAAwqy/docs/fix-double-space
• Fix double space in read module doc comment
• Add missing preposition in README description
• Cover decoder retries across the output buffer boundary
• Drain output before refilling the buffer
• Clarify partial-write buffering behavior
• Avoid shifting buffered output on partial writes
• Merge pull request #567 from ndossche/more-asserts
• Merge pull request #566 from HDauven/reject-incomplete-write-decoder-streams
• Fix encoder writes hanging after try_finish (#576)
• Avoid panicking when dropping unfinished compressors
• Merge pull request #565 from HDauven/zlib-rs-uninit-output
• still allow resetting incomplete write decoders
• Assert return result of reset calls
• Reject incomplete streams in write decoders
• Merge pull request #573 from NUAAwqy/taiyi/fix-gzip-read-error-header
• review
• Reject incomplete streams when finishing write-side decoders
• Preserve window size and gzip mode across Decompress::reset
• preserve runtime detection in backend examples (#570)
• Make miniz_oxide dictionary clearing explicit on reset
• Harden miniz_oxide decompressor reset
• Deduplicate zlib-rs flush conversions
• Use native zlib-rs uninitialized output

• cd06529 chore: release v1.1.11
• 6ff4098 Merge pull request #582 from rust-lang/fix-lacking-buffer-drain
• 5f68913 Merge pull request #574 from Sharadhi-v98/decompress-reset-window-bits
• 5582d95 fixup! Complete sync flushes across output buffer boundaries (#581)
• d05c7c4 Merge pull request #577 from rust-lang/fix-loop
• 5c7ee7a Merge pull request #583 from Kobzol/trusted-publishing
• cc527c6 Setup trusted publishing for the flate2 crate
• 54f49cd Merge pull request #580 from NUAAwqy/fix/can-by-extended-typo
• 491df15 Complete sync flushes across output buffer boundaries (#581)
• a7a1161 Fix "can by extended" typos in deflate and zlib write docs
• Additional commits viewable in compare view

Sourced from cc's releases.

cc-v1.11.0

Added

• add reproducible CodeView and source path remapping (#2071)

Fixed

• pass .cc sources to cl.exe as one -Tp<path> argument (#2063)
• pass -march=x86-64 to GCC on x86_64 Linux (#2061)

Sourced from cc's changelog.

1.11.0 - 2026-10-30

Added

• add reproducible CodeView and source path remapping (#2071)

Fixed

• pass .cc sources to cl.exe as one -Tp<path> argument (#2063)
• pass -march=x86-64 to GCC on x86_64 Linux (#2061)

• 67e9f6d ci(deps): update rusqlite requirement from 0.40.0 to 0.41.0 (#2080)
• fe52971 chore(cc): release v1.11.0 (#2076)
• 5d0a1b8 feat: add reproducible CodeView and source path remapping (#2071)
• af613d8 ci(deps): bump release-plz/action from 0.5.144 to 0.5.145 (#2074)
• d0e825d ci(deps): bump tombi-toml/setup-tombi from 1.9.0 to 1.9.1 (#2073)
• 029c2cf ci(deps): bump tombi-toml/setup-tombi from 1.8.10 to 1.9.0 (#2070)
• 0b21008 ci(deps): bump tombi-toml/setup-tombi from 1.8.9 to 1.8.10 (#2068)
• dc72b32 ci(deps): bump release-plz/action from 0.5.143 to 0.5.144 (#2067)
• fb3d26f ci(deps): bump Swatinem/rust-cache from 2.9.2 to 2.9.3 (#2066)
• fe1d3cb fix: pass .cc sources to cl.exe as one -Tp\<path> argument (#2063)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• [@dependabot](/dependabot) rebase will rebase this PR
• [@dependabot](/dependabot) recreate will recreate this PR, overwriting any edits that have been made to it
• [@dependabot](/dependabot) show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• [@dependabot](/dependabot) ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• [@dependabot](/dependabot) ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• [@dependabot](/dependabot) ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• [@dependabot](/dependabot) unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• [@dependabot](/dependabot) unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions