Update rubyzip requirement from ~> 2.3 to ~> 3.5

[dependabot]

Updates the requirements on rubyzip to permit the latest version.

Release notes

Sourced from rubyzip's releases.

v3.5.0

Version 3.5.0

The 3.5.x line adds the ability to set a Decrypter per-Entry as opposed to only per-InputStream. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.5.0 (2026-08-18)

• Fix the link to Ruby doc in README to the latest version. #670
• Support passing decrypter to encrypted entry via get_input_stream. #667

3.4.1 (2026-06-27)

• Fixed DecryptedIo to only perform integrity once. #665

3.4.0 (2026-06-14)

• Prevent entries from being extracted outside specified directory. #664. Thanks to @​connorshea for additional reporting on this.
• Use SecureRandom in place of insecure Random.
• Stop reading the central directory on first error.
• Add a check on number of declared entries in a zip file. Thanks to @​connorshea for reporting this.
• Add note to README re reporting security issues privately.
• Add lib/rubyzip.rb for Bundler auto-require. #660

Tooling/internal:

• Replace the test Excel spreadsheet fixture.
• Use assert_silent shorthand when expecting no output from a test.
• Clean up CentralDirectory instance variables.
• Add Ruby 4.0 to the Windows CI and update CI matrix in the README.
• List ZIP docs that we store here and link to online versions. #657

3.3.1 (2026-05-30)

• Reinstate default param for InputStream#sysread. #663

3.3.0 (2026-05-02)

• Refactor InputStream and AbstractInputStream. #661

Tooling/internal:

• Update Actions to use checkout@v5.
• Add Ruby4.0 to the CI matrix. #659

3.2.2 (2025-11-02)

• Fix reading EOCDs when header signatures are in an Entry payload. #656

Tooling/internal:

• Stop using macos-13 runners in GitHub Actions.
• Update YJIT GitHub Actions runners.

3.2.1 (2025-10-24)

... (truncated)

Commits

• 5f3165c Update Changelog for release.
• ac389c8 Fix the link to Ruby doc in README to the latest version.
• 4209b02 Clarify README instructions for storing non-English filenames as UTF-8 for co...
• c5b4023 Document per-Entry decryption in the README.
• 7f9214f Bump version minor number due to new feature.
• 69ee96b Support passing decrypter to encrypted entry via get_input_stream
• 6bdcd9f Update version number and Changelog for release.
• e6d2ac6 Updated testing to check for integrity edge case.
• 1f2df64 Fixed decrypted_io to only perform integrity once.
• 93f9e6f Update version number and Changelog for release.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)