Bump the bundler group with 2 updates

[dependabot]

Bumps the bundler group with 2 updates: rubocop-performance and rubyzip.

Updates rubocop-performance from 1.26.1 to 1.27.0

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.27.0

Bug fixes

• #532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. (@​koic)

Changes

• #530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. (@​koic)

Changelog

Sourced from rubocop-performance's changelog.

1.27.0 (2026-08-16)

Bug fixes

• #532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. ([@​koic][])

Changes

• #530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. ([@​koic][])

Commits

• c07064d Cut 1.27.0
• 0e7abe8 Update Changelog
• 0d43a61 Suppress RuboCop offenses
• 72eb77d Merge pull request #533 from koic/fix_chain_array_allocation_false_negatives
• 9c60244 Merge pull request #528 from koic/fix_regexp_match_offense_message_for_bang_t...
• c3515cb [Fix #532] Fix false negatives for Performance/ChainArrayAllocation
• dba3d75 Merge pull request #530 from koic/lazy_load_cops
• dd5f992 Load cops lazily
• f1763dd [Fix #510] Clarify Performance/RegexpMatch message for !~
• 9c969a6 Fix JRuby CI failure caused by rbs native extension build
• Additional commits viewable in compare view

Updates rubyzip from 3.5.0 to 3.7.0

Release notes

Sourced from rubyzip's releases.

v3.7.0

Version 3.7.0

The 3.7.x line adds AES encryption; bulk adding and extraction of entries, and; supports setting the encoding of an InputStream. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.6.0

Version 3.6.0

The 3.6.x line lazy-loads OpenSSL only when really needed (for faster start-up times) and clamps internal (DOS-based) dates and times to the allowed range. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.7.0 (2026-09-18)

• Add AES Encryption. #678
• Add methods to Zip::File for bulk adding and extraction of entries. #679
• Support setting the encoding of an InputStream. #668

Tooling/internal:

• Add an AGENTS.md for those using such.
• Attempt to fix transient failures in encryption tests.

3.6.0 (2026-09-01)

• Forward options from OutputStream.open without a block. #674
• Clamp DOS date and time to the range the fields can hold. #671

Tooling/internal:

• Unix owner ids no longer default to 0 (root).
• Legacy Unix owner ids no longer default to 0 (root).
• Handle short reads in copy_stream_n. #675
• Retain required Zip64 offset fields. #676
• Load openssl only when AES encryption is used. #672

Commits

• 77dfc13 Update Changelog for release.
• d2a9664 Document AES encryption in the README.
• 6f57d4d Fix AES encryption errors under JRuby.
• b96b1b4 Add tests for AES encryption.
• 8b5b86b Ensure the correct extraction version number is used with Zip64.
• 326765b Ensure entries have the correct compression method when written.
• a9b2289 Wire AES encryption into OutputStream.
• 4aa008c Fix PassThruCompressor to actually encrypt STORED data.
• bdcef49 Add stub methods to the parent Encrypter class.
• 137f678 Add AESEncrypter class.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions