From ba98bfadc4c868c9a7e1a226c83af528e1f11b89 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 16 Oct 2026 12:05:30 -0300
Subject: [PATCH] chore(deps): update rust crate zip to v9 (#3698)

* chore(deps): update rust crate zip to v9

* chore(updater): add change file for zip v9

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Lucas Nogueira <lucas@tauri.app>
---
 .changes/updater-zip-9.md  |  6 ++++++
 Cargo.lock                 | 31 +++++++++++++++++++++++++------
 plugins/updater/Cargo.toml |  2 +-
 3 files changed, 32 insertions(+), 7 deletions(-)
 create mode 100644 .changes/updater-zip-9.md

diff --git a/.changes/updater-zip-9.md b/.changes/updater-zip-9.md
new file mode 100644
index 000000000..4f1dae7aa
--- /dev/null
+++ b/.changes/updater-zip-9.md
@@ -0,0 +1,6 @@
+---
+"updater": patch
+"updater-js": patch
+---
+
+Update `zip` to v9. On Windows, the `Error::Extract` variant now wraps `zip` 9's `ZipError`.
diff --git a/Cargo.lock b/Cargo.lock
index 909b6cb63..d3534c631 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1265,9 +1265,9 @@ checksum = "19d374276b40fb8bbdee95aef7c7fa6b5316ec764510eb64b8dd0e2ed0d7e7f5"
 
 [[package]]
 name = "crc32fast"
-version = "1.4.2"
+version = "1.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3"
+checksum = "01a7799fd6b852db0e61728dde9a204c423b44d689dbd432522543614b490e78"
 dependencies = [
  "cfg-if",
 ]
@@ -3874,6 +3874,18 @@ dependencies = [
  "memoffset 0.9.1",
 ]
 
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.9.0",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "nom"
 version = "7.1.3"
@@ -7171,7 +7183,7 @@ dependencies = [
  "tokio",
  "url",
  "windows-sys 0.61.2",
- "zip 4.0.0",
+ "zip 9.0.3",
 ]
 
 [[package]]
@@ -7835,6 +7847,12 @@ dependencies = [
  "thiserror 2.0.12",
 ]
 
+[[package]]
+name = "typed-path"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e28f89b80c87b8fb0cf04ab448d5dd0dd0ade2f8891bae878de66a75a28600e"
+
 [[package]]
 name = "typeid"
 version = "1.0.3"
@@ -9421,14 +9439,15 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "4.0.0"
+version = "9.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "153a6fff49d264c4babdcfa6b4d534747f520e56e8f0f384f3b808c4b64cc1fd"
+checksum = "c2d98561b612a84ae525331a7a094429ef8a5772514ed507ff6db5f54badc971"
 dependencies = [
- "arbitrary",
  "crc32fast",
  "indexmap 2.14.2",
  "memchr",
+ "nix 0.31.3",
+ "typed-path",
 ]
 
 [[package]]
diff --git a/plugins/updater/Cargo.toml b/plugins/updater/Cargo.toml
index ff0b9e608..d45f2e8ad 100644
--- a/plugins/updater/Cargo.toml
+++ b/plugins/updater/Cargo.toml
@@ -60,7 +60,7 @@ infer = "0.22"
 percent-encoding = "2.3"
 
 [target."cfg(target_os = \"windows\")".dependencies]
-zip = { version = "4", default-features = false, optional = true }
+zip = { version = "9", default-features = false, optional = true }
 windows-sys = { version = "0.61.0", features = [
   "Win32_Foundation",
   "Win32_UI_WindowsAndMessaging",