[dependabot]

Bumps the cargo-minor-patch group with 2 updates in the / directory: similar and zip.

Updates similar from 3.2.0 to 3.2.1

Changelog

Sourced from similar's changelog.

3.2.1

• Improved real-world diffing performance substantially without changing the produced diffs. On a corpus of real source file revisions, line diffs run about 4x faster with Algorithm::Myers, 5x faster with Algorithm::Histogram, and 2.5x faster with Algorithm::Patience; word diffs run about 2x faster. This comes from a faster line tokenizer, a SipHash-1-3 content hash that consumes whole words (randomly keyed with std), cheaper integer-keyed lookup tables, hashing only the changed middle of Myers line diffs, flat occurrence tables in Histogram, and a gap buffer in the compaction pass that was quadratic on diffs with many ops. Allocation counts and peak memory dropped as well; in particular one sided and heavily unbalanced inputs no longer build index structures proportional to the larger side for Algorithm::Hunt, Algorithm::Histogram, and Algorithm::Patience.
• Fixed Algorithm::Histogram overflowing the stack on inputs with many scattered changes. Pending ranges are now tracked on the heap, so stack usage no longer grows with the number of anchors. #105
• Fixed TextMerge::labels writing carriage returns and newlines verbatim into conflict markers, which let a label add lines to the output that looked like merged content. Line terminators in labels are now replaced with spaces. #101

Commits

• 71d4831 chore(release): prepare 3.2.1
• b61e6c3 test(histogram): skip small stack tests on WASI
• a4ee936 fix(histogram): track pending ranges on the heap
• 96993d9 docs: add runnable example output gallery (#104)
• 1c64280 docs(changelog): describe diff performance and memory improvements
• a3da6ec perf(compact): use a gap buffer for large operation lists
• ce3a403 perf(histogram): reuse indexes and bound unbalanced input allocations
• 2bcae2f perf(myers): skip unchanged hashing and unused split bookkeeping
• 5a5aa8d perf(text): accelerate line and word tokenization
• 80bc240 perf(hash): accelerate content hashing and integer lookups
• Additional commits viewable in compare view

Updates zip from 9.0.5 to 9.1.1

Release notes

Sourced from zip's releases.

v9.1.1

🐛 Bug Fixes

• store the raw count instead of a bool (#1174)
• preserve extra fields in raw_copy_file_touch (#1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

v9.1.0

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
• Add borrowing inner method to reader wrappers (#1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
• add file_names_raw iterator (#1082)

🐛 Bug Fixes

• raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
• (write) prevent seek panic on streaming writer with comment (#1151)
• Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
• apply unix permissions at creation (#1104)
• raw_copy_file should work with any extra fields (#1120)
• (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
• don't enable typed-path's default std feature (#1112)
• ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
• resolve decoded CP437 member names (#1080) (#1085)
• Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

• Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

• (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

• Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)
• target lzma-rust2 v0.23 (#1096)

Bench

• add Criterion benchmarks (#754)
• add deflate_many_small_files bench for #633 (#964)

Changelog

Sourced from zip's changelog.

9.1.1 - 2026-10-25

🐛 Bug Fixes

• store the raw count instead of a bool (#1174)
• preserve extra fields in raw_copy_file_touch (#1172)
• (write) flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• (write) reject duplicate names in merge_archive, blank stale footers, and add opt-in extra-field validation (#1159)

9.1.0 - 2026-10-24

🚀 Features

• (read) enforce header consistency on extract_with_options and expose duplicate name detection (#1109)
• Add borrowing inner method to reader wrappers (#1050)
• add with_size_limit to ExtractOptions to limit total declared uncompressed size (#1019)
• add file_names_raw iterator (#1082)

🐛 Bug Fixes

• raw_copy_file keeps an entry's name bytes and UTF-8 flag as stored (#1124)
• (write) prevent seek panic on streaming writer with comment (#1151)
• Accept bounded central directory digital signature record when enforcing header consistency in ZipStreamReader (#1134)
• apply unix permissions at creation (#1104)
• raw_copy_file should work with any extra fields (#1120)
• (read) avoid full-file forward scans and redundant allocations in central directory (#1142)
• don't enable typed-path's default std feature (#1112)
• ZIP64 size fields were being deep-copied incorrectly (via Copilot gpt-6-luna) (#1107)
• resolve decoded CP437 member names (#1080) (#1085)
• Debug assertion doesn't account for length of archive comment (#1097)

🚜 Refactor

• Lazy instantiation for all decompressors (#1046) (#1047)

⚡ Performance

• (write) reuse the DEFLATE compressor across entries (#1119)

⚙️ Miscellaneous Tasks

• Fix reference to nonexistent variable on #[cfg(not(any(unix, windows)))] (#1138)
• target lzma-rust2 v0.23 (#1096)

Bench

• add Criterion benchmarks (#754)
• add deflate_many_small_files bench for #633 (#964)

Commits

• b7201ce chore: release v9.1.1 (#1173)
• 67b3e52 fix: store the raw count instead of a bool (#1174)
• 9d710d3 ci: Share cargo-afl build across workflows (#1167)
• d6c0278 fix: preserve extra fields in raw_copy_file_touch (#1172)
• c3232c4 test: cover unreserved validation for prepared files (#1169)
• b49a787 ci(deps): update wasm-pack requirement in /tools/wasm-pack-version (#1171)
• 4b547b5 build: Fix regex for release commits so it now matches e.g. "fix(write):" (#1...
• a7be36a ci: Share nextest build across workflows as we do with wasm-pack (#1165)
• c640d2d test: Use Vec::with_capacity for dense AddressHoleCursor segments, since they...
• 341e267 fix(write): flag a non-ASCII file comment as UTF-8 when writing it (#1160)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Frontend SPA coverage (by module)

Module	Line Rate	Branch Rate	Function Rate	Health
api	89.1% (311 / 349)	82.7%	86.0%	✔
components	74.1% (2234 / 3015)	62.7%	70.5%	➖
components/graph	100.0% (9 / 9)	66.7%	100.0%	✔
components/reports	86.1% (87 / 101)	70.6%	74.1%	✔
components/table	100.0% (7 / 7)	80.0%	100.0%	✔
context	77.8% (56 / 72)	40.0%	69.6%	➖
hooks	72.3% (146 / 202)	71.1%	70.0%	➖
lib	100.0% (18 / 18)	100.0%	100.0%	✔
pages	68.7% (2331 / 3392)	55.5%	61.0%	➖
pages/catalog	34.8% (162 / 465)	24.5%	18.3%	❌
pages/groups	0.0% (0 / 219)	0.0%	0.0%	❌
src (root)	33.3% (8 / 24)	38.1%	60.0%	❌
types	100.0% (0 / 0)	100.0%	100.0%	✔
utils	97.2% (620 / 638)	89.1%	98.8%	✔
Summary	70.4% (5989 / 8511)	59.1%	65.1%	➖

Generated from Vitest @vitest/coverage-v8 (frontend/src).

[github-actions]

Package	Line Rate	Complexity	Health
marreq-cloud.src	71%	0	➖
marreq-core.src.diff	100%	0	✔
marreq-core.src.auth.guards	57%	0	➖
marreq-cloud.src.api	78%	0	✔
marreq-core.src.fairings	90%	0	✔
marreq-core.src.importers	74%	0	➖
marreq-core.src.validation	96%	0	✔
marreq-core.src.api	83%	0	✔
marreq-core.src.helper_functions	95%	0	✔
marreq-core.src.generators	90%	0	✔
marreq-core.src.models	80%	0	✔
marreq-core.src.repository	88%	0	✔
marreq-core.src.services	93%	0	✔
marreq-core.src.repository.cache	100%	0	✔
marreq-core.src.use_case_document	94%	0	✔
marreq-core.src	80%	0	✔
marreq-core.src.reqif	97%	0	✔
marreq-cloud.src.services	91%	0	✔
marreq-core.src.reports	95%	0	✔
marreq-core.src.repository.diesel_repo	5%	0	❌
marreq-core.src.routes	61%	0	➖
marreq-core.src.auth	90%	0	✔
marreq-core.src.services.semantic_search	75%	0	➖
marreq-server.src	57%	0	➖
marreq-core.src.storage	93%	0	✔
marreq-cloud.src.fairings	100%	0	✔
marreq-core.src.auth.rate_limiter	73%	0	➖
marreq-core.src.deployment	84%	0	✔
Summary	81% (45266 / 56209)	0	✔