diff --git a/rust-zip2.spec b/rust-zip2.spec
index 714b53f..aa8b399 100644
--- a/rust-zip2.spec
+++ b/rust-zip2.spec
@@ -1,4 +1,4 @@
-# Generated by rust2rpm 27
+# Generated by rust2rpm 28
 %bcond check 1
 %global debug_package %{nil}
 
@@ -30,6 +30,10 @@ Patch:          zip-fix-metadata-auto.diff
 #   feature is counter to upstream guidance,”
 #   https://github.com/zip-rs/zip2/issues/336.
 # * patch out the nt-time features; rust-nt-time not yet packaged
+# * allow bzip2 0.6; see
+#   https://github.com/zip-rs/zip2/commit/c8278990c40ddfbeb4a23877c1221792535d21b3,
+#   released upstream in 4.3.0
+# * Update constant_time_eq from 0.3 to 0.4. Downstream-only for MSRV reasons.
 Patch:          zip-fix-metadata.diff
 # * Downstream-only: patch out tests that would need omitted test files to
 #   compile
diff --git a/rust2rpm.toml b/rust2rpm.toml
index 4b5018a..9745f5e 100644
--- a/rust2rpm.toml
+++ b/rust2rpm.toml
@@ -9,6 +9,12 @@ cargo-toml-patch-comments = [
     https://github.com/zip-rs/zip2/issues/336.\
     """,
     "patch out the nt-time features; rust-nt-time not yet packaged",
+    """\
+    allow bzip2 0.6; see \
+    https://github.com/zip-rs/zip2/commit/c8278990c40ddfbeb4a23877c1221792535d21b3, \
+    released upstream in 4.3.0\
+    """,
+    "Update constant_time_eq from 0.3 to 0.4. Downstream-only for MSRV reasons.",
 ]
 doc-files.exclude = ["pull_request_template.md"]
 exclude-crate-files = [
diff --git a/zip-fix-metadata-auto.diff b/zip-fix-metadata-auto.diff
index d80db08..403fe4a 100644
--- a/zip-fix-metadata-auto.diff
+++ b/zip-fix-metadata-auto.diff
@@ -1,5 +1,5 @@
 --- zip-2.4.2/Cargo.toml	1970-01-01T00:00:01+00:00
-+++ zip-2.4.2/Cargo.toml	2025-05-19T21:37:14.924593+00:00
++++ zip-2.4.2/Cargo.toml	2026-01-09T22:17:36.639224+00:00
 @@ -251,6 +251,3 @@
  [target.'cfg(any(all(target_arch = "arm", target_pointer_width = "32"), target_arch = "mips", target_arch = "powerpc"))'.dependencies.crossbeam-utils]
  version = "0.8.21"
diff --git a/zip-fix-metadata.diff b/zip-fix-metadata.diff
index 5f64a9c..81072db 100644
--- a/zip-fix-metadata.diff
+++ b/zip-fix-metadata.diff
@@ -1,5 +1,5 @@
 --- zip-2.4.2/Cargo.toml	1970-01-01T00:00:01+00:00
-+++ zip-2.4.2/Cargo.toml	2025-05-19T21:37:14.925705+00:00
++++ zip-2.4.2/Cargo.toml	2026-01-09T22:17:36.640416+00:00
 @@ -98,7 +98,6 @@
      "_deflate-any",
  ]
@@ -8,6 +8,24 @@
  unreserved = []
  xz = ["dep:xz2"]
  
+@@ -126,7 +125,7 @@
+ optional = true
+ 
+ [dependencies.bzip2]
+-version = "0.5.0"
++version = ">=0.5.0, <0.7.0"
+ optional = true
+ 
+ [dependencies.chrono]
+@@ -134,7 +133,7 @@
+ optional = true
+ 
+ [dependencies.constant_time_eq]
+-version = "0.3"
++version = "0.4"
+ optional = true
+ 
+ [dependencies.crc32fast]
 @@ -156,7 +155,6 @@
  [dependencies.getrandom]
  version = "0.3.1"