fix(deps): update rust crate calamine to 0.33.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
calamine	dependencies	minor	0.32.0 → 0.33.0

---

Release Notes

tafia/calamine (calamine)

v0.33.0

Compare Source

Added

• Added support for reading data from Pivot Tables, which involves reading data
  from the internal Pivot Cache. PR #​559.

Changed

• Update dependencies for release 0.33.0:

  • zip: 4.2.0 -> 7.0.
  • atoi_simd: 0.16 -> 0.17

Fixed

• Fixed potential memory exhaustion issue in ODS files that could be triggered
  via repeated empty rows/columns.

  The fix adds limits to prevent memory exhaustion from malicious ODS files that
  declare billions of repeated cells via table:number-rows-repeated and
  table:number-columns-repeated attributes.

  The change adds the following protection layers:

  • Add cap for columns per row at MAX_COLUMNS (16,384).
  • Add cap for total row repeats at MAX_ROWS (1,048,576).
  • Add cap for total cells at MAX_CELLS (100 million) in get_range().

  These limits match XLSX's existing row/column limits and prevent a 7KB
  malicious file from attempting to allocate memory for 17+ billion cells.

  When MAX_CELLS is exceeded, return OdsError::CellLimitExceeded instead
  of silently returning an empty range. This ensures callers are properly
  informed of truncation rather than receiving silent data loss.

  Issue #​594, PR #​596.

• Fixed an issue where XLSX files with tables that had the internal insertRow
  attribute set returned a Dimensions object where the end row was less than
  the start row. This caused an assert/panic when trying to create a Range
  object to return the table range. Issue #​589.

• Fixed an issue with XLSX files where worksheet tables used the unusual, but
  valid, absolute reference system like "/xl/tables/table1.xml" instead of the
  common Excel generated relative system "../tables/table1.xml". Issue #​587.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.