Update dependency net.lingala.zip4j:zip4j to v2.11.3 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
net.lingala.zip4j:zip4j	2.11.1 -> 2.11.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2023-22899

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3.

---

Release Notes

srikanth-lingala/zip4j (net.lingala.zip4j:zip4j)

v2.11.3

Compare Source

Security fixes:

#​485 Fix CVE-2023-22899

v2.11.2

Compare Source

Improvements:

Use SecureRandom instead of Random to implement a cryptographically strong random number

Bug fixes:

Fix null check
Append file separator to path check only if required
Fix endOfCentralDirectory location calculation when setting comment
Use Path comparison over String comparison for Path traversal vulnerability
Set lastModifiedFileTime for all entries and not just directories
Use charset when generating AES vendor id info

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[cr-gpt]

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information