I think we should be good to go with updating rust-zip to the latest upstream pretty soon, the main blocker is we need to get rust-liblzma availble on all release architectures.
reverse dependency analysis below. elan - bug report filed with patch gnome-authenticator - bug report filed with patch python-maturin - bug report filed with patch rust-aes - false positive in search rust-coreutils - no changes needed rust-czkawka-core - fix uploaded to unstable rust-gix-archive - fix uploaded to unstable rust-grcov - fix prepared but not uploaded rust-python-pkginfo - fix uploaded to unstable rust-tealdeer - fix uploaded to unstable sccache - bug report filed with patch.

