Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Updates the requirements on stringzilla to permit the latest version.

Release notes

Sourced from stringzilla's releases.

v4.2.1: SHA-256 for JS, Swift, Go 🫆

Exposing SHA-256 to GoLang was tricky. Clang worked fine. GCC failed. It turned out that GCC was too shy about inlining my code, resulting in excessive stack space usage... Now, JavaScript, Swift, and GoLang bindings all support incremental SHA-256 procedures 🥳. Thanks to @​MarekKnapek for reducing the stack memory usage of the serial SHA variant!

Moreover, thanks to @​laurenspriem for highlighting the SIGILL when probing ID registers on older Arm CPUs. I've now guarded first mrs probes with signal handlers. Ugly solution, but it may work 😅 I've also improved the capability detection code on Arm-based Windows machines, using the OS-specific <processthreadsapi.h> functionality, so now not only pure NEON, but also NEON+SHA+AES kernels, should be dispatched just fine!

Thanks to @​ashbob999, StringZilla is also getting more stable Windows builds and stringzilla_bare coverage in our CI 🦺

Patch

  • Make: Removed rand/free/malloc stubs when avoiding libc (0148282)
  • Make: Deploy stringzilla_bare for windows (e4ddce8)
  • Make: Added .lib file to uploaded windows archives (2dc6936)
  • Make: Add MSVC bare builds back (5cc5f01)
  • Make: Added stringzilla_bare checks (bbc5cca)
  • Fix: Avoid unused POSIX extensions on macOS (aeb06a5)
  • Make: Deprecate old cross-compilation scripts (2f34c2d)
  • Improve: Drop -pedantic for POSIX extensions (e99d557)
  • Make: Pre-define CMake properties, like -lpthread and pointer size (7722bb1)
  • Improve: serialize_capability for Ice Lake on Clang (58f8cf9)
  • Make: Skip compiler checks for cross-compilation (60988f3)
  • Fix: Unused capabilities in Arm macOS builds (511a09e)
  • Docs: Listing ./scripts and StringWars (5af84dd)
  • Make: Pass -D CMAKE_SYSROOT in cross-compiling CI (a26fc73)
  • Fix: Suppress unused alloc warnings (4868d7f)
  • Make: Reduce CMake nesting (dda024d)
  • Make: Propagate cross-compilation settings (5070321)
  • Improve: Detect NEON+SHA+AES via WinAPI (3b175f8)
  • Fix: Probe mrs for avoid SIGILL on older Arm (d2f8e97)
  • Fix: Isolate & skip SHA-256 tests in Go with GCC (0874b13)
  • Fix: Deprecates sz_checksum (97f9ecf)
  • Make: More aggressive inlining (e8f33c1)
  • Make: Uniform hardware specs logging (f826dfc)
  • Improve: Expose Capabilities to GoLang (5f2cc97)
  • Improve: Branchless serial SHA-256 block processor (fe7efe2)
  • Fix: Missing modulo in SHA #254 (5a513b7)
  • Improve: Smaller stack usage in SHA-256 (#253) (a298be0)
  • Fix: No noescape/nocallback for stateful hashes (f8d321f)
  • Fix: Violating u32/u64 aliasing (7e55e5c)
  • Fix: Missing SSE flags for SHA (403b28b)
  • Improve: io.Writer & hash.Hash64 interface for Go (05f89ca)
  • Improve: Expose sz_dispatch_table_init for Go (5ff7ba1)
  • Fix: Missing Goldmont & Ice SHA dispatch (e29bded)
  • Fix: Supporting unaligned SHA-256 states (c770e48)
  • Fix: Missing C.sz_checksum (652735d)
  • Fix: Hex formatting in Swift on Linux (fc65328)
  • Improve: SHA for Go, JS, Swift (a165322)
Commits
  • cc3314d Release: v4.2.1 [skip ci]
  • 794ffc8 Merge: SHA-256 for JS, Swift, Go 🫆 #252
  • 4558509 Merge: Check stringzilla_bare and MSVC builds #256
  • 0148282 Make: Removed rand/free/malloc stubs when avoiding libc
  • e4ddce8 Make: Deploy stringzilla_bare for windows
  • 2dc6936 Make: Added .lib file to uploaded windows archives
  • 5cc5f01 Make: Add MSVC bare builds back
  • bbc5cca Make: Added stringzilla_bare checks
  • aeb06a5 Fix: Avoid unused POSIX extensions on macOS
  • 2f34c2d Make: Deprecate old cross-compilation scripts
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [stringzilla](https://github.com/ashvardanian/stringzilla) to permit the latest version.
- [Release notes](https://github.com/ashvardanian/stringzilla/releases)
- [Commits](ashvardanian/StringZilla@v3.12.6...v4.2.1)

---
updated-dependencies:
- dependency-name: stringzilla
  dependency-version: 4.2.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 13, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 27, 2025

Superseded by #64.

@dependabot dependabot bot closed this Oct 27, 2025
@dependabot dependabot bot deleted the dependabot/cargo/stringzilla-eq-4.2.1 branch October 27, 2025 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant