chore(deps): update dependency ziparchive/ziparchive to v2.6.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ZipArchive/ZipArchive	minor	2.4.3 -> 2.6.0

---

Release Notes

ZipArchive/ZipArchive (ZipArchive/ZipArchive)

v2.6.0

Compare Source

• Add visionOS support (#​703)
• Upgrade minizip to 3.0.10 (#​702)
• Fix zip creation for file permissions and unicode symlinks (#​716)
• withContentsOfDirectory: should return error when parameter isn't a directory (#​718)
• withFilesAtPaths: should not write a file when parameter is a directory (#​718)
• Skip directories in isPasswordValidForArchiveAtPath (#​462)
• Silence unused rand() warning (#​712)

v2.5.5

Compare Source

• Bump minizip to 3.0.9
• Add a privacy manifest file per iOS 17+ requirements to document file API usage (thanks @​lakshmankreditbee)

v2.5.4

Compare Source

• Fixes #​662 - CVE-2022-36943. (Thank you @​imihaly)

v2.5.3

Compare Source

• mz_compat updated to minizip 3.0.7
• Fixes Mac Catalyst build with bumped OS minimum requirements (Thank you @​steventroughtonsmith!) #​654

Reminder (This message will be dropped after this version):

Version 2.5.0+ Updates Minimum OS Versions.

A key dependency of this project is the zlib library. zlib before version 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches according to CVE-2018-25032.

zlib 1.2.12 is included in macOS 10.15+ (with latest security patches), iOS 15.5+, tvOS 15.4+, watchOS 8.4+. As such, these OS versions will be the new minimums as of version 2.5.0 of ZipArchive.

If you need support for previous versions of ZipArchive for earlier OS support, you can target an earlier version but know you will be using an unmaintained version of this library.

v2.5.2

Compare Source

• mz_compat updated to minizip 3.0.6 by @​jhudsonWA in https://github.com/ZipArchive/ZipArchive/pull/647

Builds on 2.5.1:

Bumps the version of minizip used to 3.0.6 which includes fixes for two buffer overflow issues [fixed in 3.0.5+] (Thank you LB who reached out via email)

Reminder:

Version 2.5.0+ Updates Minimum OS Versions

A key dependency of this project is the zlib library. zlib before version 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches according to CVE-2018-25032.

zlib 1.2.12 is included in macOS 10.15+ (with latest security patches), iOS 15.5+, tvOS 15.4+, watchOS 8.4+. As such, these OS versions will be the new minimums as of version 2.5.0 of ZipArchive.

If you need support for previous versions of ZipArchive for earlier OS support you can target an earlier version but know you will be using an unmaintained version of this library.

v2.5.1

Compare Source

Bumps the version of minizip used to 3.0.6 which includes fixes for two buffer overflow issues [fixed in 3.0.5+] (Thank you LB who reached out via email)

Reminder:

Version 2.5.0+ Updates Minimum OS Versions

A key dependency of this project is the zlib library. zlib before version 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches according to CVE-2018-25032.

zlib 1.2.12 is included in macOS 10.15+ (with latest security patches), iOS 15.5+, tvOS 15.4+, watchOS 8.4+. As such, these OS versions will be the new minimums as of version 2.5.0 of ZipArchive.

If you need support for previous versions of ZipArchive for earlier OS support you can target an earlier version but know you will be using an unmaintained version of this library.

We will not support versions of ZipArchive that use dependencies with known vulnerabilities.

v2.5.0

Compare Source

Version 2.5.0+ Updates Minimum OS Versions

A key dependency of this project is the zlib library. zlib before version 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches according to CVE-2018-25032.

zlib 1.2.12 is included in macOS 10.15+ (with latest security patches), iOS 15.5+, tvOS 15.4+, watchOS 8.4+. As such, these OS versions will be the new minimums as of version 2.5.0 of ZipArchive.

If you need support for previous versions of ZipArchive for earlier OS support you can target an earlier version but know you will be using an unmaintained version of this library.

We will not support versions of ZipArchive that use dependencies with known vulnerabilities.

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud