chore(deps): preserve Rust compatibility and update rustls

Author: fengmk2

Cargo.lock

@@ -259,15 +259,15 @@ reqwest = { version = "0.13", default-features = false }
 rolldown-notify = "11.0.0"
 rolldown-notify-debouncer-full = "0.8.0"
 rustc-hash = "2.1.1"
-rustls = { version = "0.23.45", default-features = false, features = ["ring", "std", "tls12"] }
+rustls = { version = "0.23.46", default-features = false, features = ["ring", "std", "tls12"] }
 same-file = "1.0.6"
 saphyr = { version = "0.2.1", default-features = false }
 schemars = "1.0.0"
 self_cell = "1.2.0"
 semver = "1.0.26"
 serde = { version = "1.0.219", features = ["derive"] }
 serde_json = "1.0.140"
-serial_test = "4.0.0"
+serial_test = "3.2.0"
 sha1 = "0.11.0"
 sha2 = "0.11.0"
 shell-escape = "0.1.5"

Cargo.toml

@@ -494,6 +494,44 @@ mod tests {
         AbsolutePathBuf::new(dir.path().join("archive.tar.gz")).unwrap()
     }
 
+    #[tokio::test]
+    async fn extracts_zip_runtime_archives() {
+        use std::io::Write;
+
+        use zip::{CompressionMethod, ZipWriter, write::SimpleFileOptions};
+
+        for compression in [CompressionMethod::Stored, CompressionMethod::Deflated] {
+            let temp = TempDir::new().unwrap();
+            let root = AbsolutePathBuf::new(temp.path().to_path_buf()).unwrap();
+            let archive_path = root.join("node.zip");
+            let target = root.join("extracted");
+            let contents = b"mock node binary";
+            let mut archive = ZipWriter::new(File::create(&archive_path).unwrap());
+            let options = SimpleFileOptions::default().compression_method(compression);
+            archive.add_directory("node-win-x64/", options).unwrap();
+            archive.start_file("node-win-x64/node.exe", options).unwrap();
+            archive.write_all(contents).unwrap();
+            archive.finish().unwrap();
+
+            extract_archive(&archive_path, &target, ArchiveFormat::Zip).await.unwrap();
+
+            assert_eq!(std::fs::read(target.join("node-win-x64/node.exe")).unwrap(), contents);
+        }
+    }
+
+    #[tokio::test]
+    async fn rejects_invalid_zip_runtime_archives() {
+        let temp = TempDir::new().unwrap();
+        let root = AbsolutePathBuf::new(temp.path().to_path_buf()).unwrap();
+        let archive_path = root.join("node.zip");
+        std::fs::write(&archive_path, b"not a ZIP archive").unwrap();
+
+        let result =
+            extract_archive(&archive_path, &root.join("extracted"), ArchiveFormat::Zip).await;
+
+        assert!(matches!(result, Err(Error::ExtractionFailed { .. })));
+    }
+
     async fn read_request(socket: &mut TcpStream) -> String {
         let mut request = Vec::new();
         let mut buffer = [0; 1024];