Pin StringZilla by commit

[kwsantiago]

StringZilla was the only dependency pinned by tag. It now points at the commit tag v4.5.1 resolves to (7ca39645), so a moved or deleted tag cannot break fetching. The archive contents and the zig hash are unchanged: a fresh fetch into empty package caches resolves to the same N-V-__8AAAZ8QgBo... hash, scripts/check-zon-pins.py reports both dependencies pinned by commit, and the suite passes 681/681 on Zig 0.16 and 0.17.

Summary by CodeRabbit

• Chores
  • Updated the project’s build configuration. No user-facing changes are included in this update.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5fe3ea60-a2b8-4ae4-864c-d6291d80945a

📥 Commits

Reviewing files that changed from the base of the PR and between 5accad2 and dc83520.

📒 Files selected for processing (2)

• CHANGELOG.md
• build.zig.zon

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The StringZilla dependency URL now references commit 7ca39645f02e00b8465ea2854b888ab9458be8be instead of tag v4.5.1. The content hash remains unchanged, and the changelog records the update.

Changes

StringZilla Pin

Layer / File(s)	Summary
Pin StringZilla to a commit build.zig.zon, CHANGELOG.md	The dependency URL now points to the specified commit archive. The changelog records the pin change and notes that the hash is unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to dc835

The dependency still targets v4.5.1’s source and keeps its existing content hash; this pin change shows no concrete merge-blocking regression.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: pinning StringZilla by commit instead of by tag.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the pinned code,
Then hops along the changelog road.
The hash stays just the same,
A commit now names the game.
Ears twitch; the update’s done!}

_{Comment @coderabbitai help to get the list of available commands.}