Bump rubyzip from 2.4.1 to 3.3.1

[dependabot]

Bumps rubyzip from 2.4.1 to 3.3.1.

Release notes

Sourced from rubyzip's releases.

v3.3.1

Version 3.3.1

The 3.3.x line ensures that Zip::InputStream behaves more like standard Ruby IO classes.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.3.0

Version 3.3.0

The 3.3.x line ensures that Zip::InputStream behaves more like standard Ruby IO classes.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.2

Version 3.2.2

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.1

Version 3.2.1

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.2.0

Version 3.2.0

The 3.2.x line adds the ability to suppress extra fields when creating new Zip files.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

... (truncated)

Changelog

Sourced from rubyzip's changelog.

3.3.1 (2026-05-30)

• Reinstate default param for InputStream#sysread. #663

3.3.0 (2026-05-02)

• Refactor InputStream and AbstractInputStream. #661

Tooling/internal:

• Update Actions to use checkout@v5.
• Add Ruby4.0 to the CI matrix. #659

3.2.2 (2025-11-02)

• Fix reading EOCDs when header signatures are in an Entry payload. #656

Tooling/internal:

• Stop using macos-13 runners in GitHub Actions.
• Update YJIT GitHub Actions runners.

3.2.1 (2025-10-24)

• Fix Entry#gather_fileinfo_from_srcpath error messages. #654

Tooling/internal:

• Add some simple benchmarks for reading the cdir.

3.2.0 (2025-10-14)

• Add option to suppress extra fields. #653 (fixes #34, #398 and #648)

Tooling/internal:

• Entry: clean up reading and writing the Central Directory headers.
• Improve Zip64 tests for OutputStream.
• Extra fields: use symbols as indices as opposed to strings.
• Ensure that Unknown extra field has a superclass.

3.1.1 (2025-09-26)

• Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

• Improve the DecryptedIo class with various updates and optimizations.
• Remove the NullDecrypter class.

... (truncated)

Commits

• a4a2dbb Update version number and Changelog for release.
• 68f2b95 Reinstate default param for InputStream#sysread.
• 1e7982e Update copyright year in LICENSE.md.
• cc366ba Update version number and Changelog for release.
• c67d99f Document InputStream fully.
• 4ac8d35 Test AbstractInputStream#read fully.
• 19635d4 Tidy up AbstractInputStreamTest test data.
• 6d7231a Update usage of InputStream#read in other tests.
• 8f823b8 Refactor AbstractInputStream#readlines.
• 52a91b5 Refactor AbstractInputStream#each_line.
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.