Skip to content

chore(deps): bump blake3 from 1.8.4 to 1.8.7 - #1799

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/blake3-1.8.7
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/blake3-1.8.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps blake3 from 1.8.4 to 1.8.7.

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

  • Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

  • update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @​nabijaczleweli.

1.8.5

version 1.8.5

Changes since 1.8.4:

  • Forcibly disable LTO when compiling C intrinsics from the Rust build. This fixes a build break on Arch Linux ARM: BLAKE3-team/BLAKE3#550
Commits
  • f3149ec version 1.8.7
  • b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
  • 483a220 fix warnings related to not using MAX constants
  • ba02549 Codex: remove arrayref
  • 77b257e version 1.8.6
  • 83b1746 use seek instead of metadata to establish mmap length (#570)
  • 9eac279 use vswhere to find Visual Studio in CI
  • fc3d0e9 Fix path to Visual Studio toolchain in CI
  • 8aa5145 a few more colons
  • 6bb9773 use cargo:: build script syntax
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 4, 2026
@dependabot
dependabot Bot requested a review from broomva as a code owner October 4, 2026 04:45
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 4, 2026
@coderabbitai

coderabbitai Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: dda86a46-79f9-4c5b-8be2-7fcfbf301cc7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@broomva

broomva commented Oct 4, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [blake3](https://github.com/BLAKE3-team/BLAKE3) from 1.8.4 to 1.8.7.
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.4...1.8.7)

---
updated-dependencies:
- dependency-name: blake3
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/blake3-1.8.7 branch from dc1058c to 800ae6b Compare October 4, 2026 14:37
@dependabot @github

dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1808.

@dependabot dependabot Bot closed this Oct 4, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/blake3-1.8.7 branch October 4, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant