From f0dfdff6814db1a9e15da906223dabef236f4c70 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 22:15:50 +0000
Subject: [PATCH] deps: Bump zip from 2.4.2 to 8.6.0

Bumps [zip](https://github.com/zip-rs/zip2) from 2.4.2 to 8.6.0.
- [Release notes](https://github.com/zip-rs/zip2/releases)
- [Changelog](https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zip-rs/zip2/compare/v2.4.2...v8.6.0)

---
updated-dependencies:
- dependency-name: zip
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 2 +-
 Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 22e7115..c88987f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -726,7 +726,7 @@ dependencies = [
  "serde",
  "serde_json",
  "thiserror",
- "zip 2.4.2",
+ "zip 8.6.0",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index a5fa5c9..e682616 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -42,7 +42,7 @@ docx-rs = { version = "0.4.20", optional = true }
 [dev-dependencies]
 # `.docx` output is a zip container; the tests re-open the produced bytes and
 # assert on the OOXML parts inside.
-zip = { version = "2", default-features = false, features = ["deflate"] }
+zip = { version = "8", default-features = false, features = ["deflate"] }
 # The spec types are a JSON wire contract; the tests assert they round-trip and
 # that unknown keys are rejected.
 serde_json = "1"