chore(deps): update rust crates (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
junction	workspace.dependencies	major	1.4.1 → 2.0.0
serial_test	workspace.dependencies	major	3.2.0 → 4.0.0
zip	workspace.dependencies	major	7.2 → 9.0

---

Release Notes

tesuji/junction (junction)

v2.1.0

Compare Source

Change MSRV from 1.71 to 1.85

This is the same rust version on current debian stable (trixie). Bumping MSRV allows us using edition 2024.

v2.0.0

Compare Source

Changed

• junction::get_target now doesn't check whether the junction's destination directory exists.
  See #​34 for more information.

palfrey/serial_test (serial_test)

v4.0.1

Compare Source

As per v4.0.0, but with the root MSRV correctly set to 1.93.1

v4.0.0

Compare Source

What's Changed

• MSRV is now 1.93.1
• refactor(derive)!: bump syn to v3 by @​AudaciousAxiom in #​159

New Contributors

• @​AudaciousAxiom made their first contribution in #​159

Full Changelog: palfrey/serial_test@v3.5.0...v4.0.0

zip-rs/zip2 (zip)

v9.0.1

Compare Source

🐛 Bug Fixes

• set_permissions was still following symlinks in non-streaming extraction (#​1038)
• two arithmetic overflows in the implode decoder (#​1028)
• reject an empty archive whose central directory offset is past the EOCD (#​1025)
• don't panic when two entries extract to the same path (#​1023)
• fail reads that exceed the declared uncompressed size (#​1022)
• shrink decoder skipped LZW code 8191 (#​1029)
• write only the sentinel-marked values in a central ZIP64 field (#​1027)

v9.0.0

Compare Source

🚀 Features

• add ZipFileBuilder for parallelizing compression (#​911)
• add method by_index_with_data_descriptor (#​994)
• add len, is_empty and entry to ZipArchiveMetadata (#​1015)
• read data descriptor from binary (#​990)
• add comment and test for ZipStreamReader and symlinks (#​985)
• (write) add ZipWriter::hide_file for in-place entry deletion (#​924)
• add compression (#​948)
• add test to in place modification (#​945)
• move CustomExtraField to own file (#​941)
• add a test on enum size (#​939)
• use ZipFileEntry instead of ZipStreamFileMetadata (#​935)
• add ZipFileEntry with no Reader (#​933)
• change aes_mode to aes_settings() in ZipFileData (#​925)
• cleanup and harmonize extra fields (#​923)
• Rewrite zip64 extra (#​913)

🐛 Bug Fixes

• reading an empty AES entry again at EOF returns Ok(0) (#​1024)
• reject ZIP64 sizes that overflow u64 when computing data end offsets (#​1036)
• apply central directory metadata in ZipStreamReader, only to written entries (#​1030)
• consume the whole extended timestamp field in the central header (#​1016)
• parse the central header of the extended timestamp (#​1002)
• don't pre-allocate the declared size in the legacy decoders (#​991)
• Symlink with very large declared size could lead to out-of-memory panic (#​984)
• copy extra fields in raw_copy_file (#​955) (#​982)
• add unix_mode when copy_raw_file (#​981)
• rewrite documentation of add_symlink_from_path (#​979)
• ignore a ZIP64 extra field that no sentinel asked for (#​962)
• do not set data descriptor if directory (#​973)
• expose flags function for easier access (#​972)
• preserve unix permission in raw_copy_file (#​956)
• clippy warning on nightly (#​960)
• remove extra alloc used to copy (#​938)
• lazy allocation on error case (#​937)
• fix data alignment (#​929)

🚜 Refactor

• move extract to own file (#​1009)
• cleanup permissions related code (#​961)
• remove feature gate (#​949)
• create ZipFileFlags to wrap flags (#​947)
• remove unused trait (#​946)
• access crate::format with zip::unstable::format (#​944)
• harmonize functions to format/functions.rs (#​943)
• rewrite make_reader() function (#​936)
• simplify initialize_local_block (#​934)
• move write options to write/options.rs (#​931)
• move spec to format (#​932)
• move Magic to format (#​930)
• [breaking] Remove ZipFileData::extra_data_start field that is never read (#​926)

⚙️ Miscellaneous Tasks

• Fix high-level symlink extraction logic, disable some tests in miri, and fix some typos (#​1035)

Fix

• some permissions tests can only run on Unix (#​1000)

v8.6.0

Compare Source

🚀 Features

• add compression not supported as enum error (#​774)

🐛 Bug Fixes

• allow for [u8] as filename (#​775)

🚜 Refactor

• mark ZipFlags as non-exhaustive and add test for HasZipMetadata (#​777)
• use and simplify is_dir (#​776)

v8.5.1

Compare Source

🚜 Refactor

• change magic finder to stack buffer (#​763)
• simplify extra field parsing (#​764)

v8.5.0

Compare Source

🐛 Bug Fixes

• remove zip64 comment and add zip64 extensible data sector (#​747)

🚜 Refactor

• remove useless magic in struct (#​730)
• change extra_field from Arc<Vec> to Arc<[u8]> (#​741)

⚙️ Miscellaneous Tasks

• cleanup README (#​758)

v8.4.0

Compare Source

🚀 Features

• add a check for building benches (#​748)

🚜 Refactor

• split part of read.rs for code readability (#​744)
• remove unused allow (#​745)

⚡ Performance

• skip BufReader for Stored files in make_reader (#​739)

⚙️ Miscellaneous Tasks

• move pull request template to correct folder (#​749)

v8.3.1

Compare Source

🚜 Refactor

• use AexEncryption::new (#​736)
• update tests to add big endian miri check (#​735)

⚙️ Miscellaneous Tasks

• cleanup repository files (#​743)

v8.3.0

Compare Source

🚀 Features

• add must_use (#​727)
• improve and fix extended timestamp extra field parsing (#​713)
• add crc32 ignore option (#​710)
• path related code in single file (#​712)

🐛 Bug Fixes

• Malformed ZIP64 file output (#​715) (#​717)

🚜 Refactor

• refactor some imports (#​734)
• move code to distinct file (datetime, FixedSizeBlock) (#​733)
• move stream code to src/read/stream.rs (#​731)
• remove zip64 extra field update (#​732)
• improve part of the code with clippy help (#​725)
• simplify code for unicode extra field and improve error message (#​724)
• reorganize code (#​714)

Deps

• avoid pulling in zeroize_derive (#​720)

v8.2.0

Compare Source

🚀 Features

• allow custom salt (#​680)
• Support compressing bzip2 when feature bzip2-rs is enabled, since bzip2/bzip2-sys now supports it (#​685)
• enforce clippy in CI (#​674)

🐛 Bug Fixes

• zip64 central header (issue 617) (#​629)
• allow aes password as bytes (#​686)
• handle extra field padding (#​682)

🚜 Refactor

• Simplify 2 type conversions in src/write.rs (#​687)

⚡ Performance

• AI tweaks for string type conversions in src/types.rs (#​670)

v8.1.0

Compare Source

🚀 Features

• (writer) Allow getting underlying writer of ZipWriter (#​464)
• add system to FileOption, so byte-for-byte identical archives can be created across platforms (#​660)

🐛 Bug Fixes

• Bugs in extra-data length calculation in src/write.rs (#​662)

v8.0.0

Compare Source

🚀 Features

• document zip flags as enum (#​639)
• Migrate to Rust 2024 (#​650)
• [breaking] Remove deprecated methods of DateTime (#​597)

v7.4.0

Compare Source

🚀 Features

• Increase MSRV to 1.88 and update dependencies (#​626)

v7.3.0

Compare Source

🚀 Features

• cleanup the benchmarks and Cargo.toml (#​606)
• Add support for per-file comments (#​543)

🐛 Bug Fixes

• Document feature unreserved and make the mapping of extra fields public (#​616)
• Return an error if abort_file() fails when exceeding non-large-file limit (#​598)

⚙️ Miscellaneous Tasks

• Bump version to 7.3.0 (semver checks fail if it's still 7.3.0-pre1)

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
error: failed to load manifest for workspace member `/tmp/renovate/repos/github/voidzero-dev/vite-plus/packages/cli/binding`
referenced by workspace at `/tmp/renovate/repos/github/voidzero-dev/vite-plus/Cargo.toml`

Caused by:
  failed to load manifest for dependency `rolldown_binding`

Caused by:
  failed to read `/tmp/renovate/repos/github/voidzero-dev/vite-plus/rolldown/crates/rolldown_binding/Cargo.toml`

Caused by:
  No such file or directory (os error 2)

[netlify]

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	26f3e13
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a9e128d384dbe00071cf9a6

[github-actions]

CLI artifact sizes (7f07ce0)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact	Format	Base	PR	Change
packages/cli/dist	Directory total	2.08 MiB	2.08 MiB	0 B (0.00%)
packages/core/dist	Directory total	3.99 MiB	3.99 MiB	0 B (0.00%)
Combined package dist	Directory total	6.07 MiB	6.07 MiB	0 B (0.00%)
vp (Linux x64)	Binary	11.37 MiB	11.38 MiB	+16.00 KiB (+0.14%)
vp (Linux x64)	gzip -9	4.91 MiB	4.91 MiB	+6.04 KiB (+0.12%)
NAPI (Linux x64)	Binary	32.73 MiB	32.73 MiB	0 B (0.00%)
NAPI (Linux x64)	gzip -9	13.00 MiB	13.00 MiB	0 B (0.00%)
vp (macOS ARM64)	Binary	8.46 MiB	8.47 MiB	+16.19 KiB (+0.19%)
vp (macOS ARM64)	gzip -9	4.28 MiB	4.29 MiB	+5.45 KiB (+0.12%)
NAPI (macOS ARM64)	Binary	40.20 MiB	40.20 MiB	0 B (0.00%)
NAPI (macOS ARM64)	gzip -9	17.28 MiB	17.28 MiB	0 B (0.00%)
vp (Windows x64)	Binary	9.24 MiB	9.25 MiB	+16.50 KiB (+0.17%)
vp (Windows x64)	gzip -9	4.03 MiB	4.03 MiB	+8.09 KiB (+0.20%)
NAPI (Windows x64)	Binary	27.61 MiB	27.61 MiB	0 B (0.00%)
NAPI (Windows x64)	gzip -9	11.09 MiB	11.09 MiB	+3 B (+0.00%)
Trampoline (Windows x64)	Binary	13.50 KiB	13.50 KiB	0 B (0.00%)
Trampoline (Windows x64)	gzip -9	7.08 KiB	7.08 KiB	+1 B (+0.01%)
Installer (Windows x64)	Binary	4.56 MiB	4.57 MiB	+13.50 KiB (+0.29%)
Installer (Windows x64)	gzip -9	2.13 MiB	2.14 MiB	+4.20 KiB (+0.19%)

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-major-rust-crates-viteplus-dev.voidzero-docs.workers.dev (commit 7f07ce0)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://3b1db98a-viteplus-dev.voidzero-docs.workers.dev	7f07ce0	2026-10-11T20:39:06.808Z	Visit the dashboard ↗
Build: In progress 🔵 View logs ↗		2070a3c	2026-10-11T20:37:06.977Z	View logs ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://36bd8294-viteplus-dev.voidzero-docs.workers.dev	4f13a40	2026-10-04T21:04:53.834Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://2eeba18a-viteplus-dev.voidzero-docs.workers.dev	1d94c5b	2026-10-04T21:03:46.812Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://fbf7b079-viteplus-dev.voidzero-docs.workers.dev	27f8c01	2026-09-27T19:01:13.992Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://c5fe8aec-viteplus-dev.voidzero-docs.workers.dev	7082dc4	2026-09-27T19:00:07.524Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://f93b93c1-viteplus-dev.voidzero-docs.workers.dev	43cb368	2026-09-21T01:50:49.691Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://6a1aeb19-viteplus-dev.voidzero-docs.workers.dev	f80d45a	2026-09-21T01:49:17.070Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://b226a82b-viteplus-dev.voidzero-docs.workers.dev	df1d1ae	2026-09-20T16:36:53.116Z	Visit the dashboard ↗
Build: In progress 🔵 View logs ↗		7c81aae	2026-09-20T16:34:21.544Z	View logs ↗

View all previews: View all previews ↗

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​junction@​1.4.2 ⏵ 2.1.0
	cargo/​serial_test@​3.5.0 ⏵ 4.0.1
	cargo/​zip@​7.2.0 ⏵ 9.0.1	+1		+6

View full report