diff --git a/CHANGELOG.md b/CHANGELOG.md
index 57ee600..29db9dd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- The Nix package fetches StringZilla by commit (`7ca3964`, the commit tag v4.5.1 points to) instead of by tag, so every dependency is pinned by commit. The content hash is unchanged.
+
 ## [0.9.0] - 2026-10-06
 
 Serves NIP-17 / NIP-59 gift wraps only to their authenticated recipients, limits what the spider stores from upstream relays, and lets the NixOS module keep config values out of the Nix store. Clients reading gift wraps must now authenticate with NIP-42.
diff --git a/nix/deps.nix b/nix/deps.nix
index f585b4d..97d9255 100644
--- a/nix/deps.nix
+++ b/nix/deps.nix
@@ -36,7 +36,7 @@ linkFarm "zig-packages" [
   {
     name = "N-V-__8AAAZ8QgBoM0e_aCVlmr4bXY3hGnNSWSWNhluMsCs5";
     path = fetchzip {
-      url = "https://codeload.github.com/ashvardanian/StringZilla/tar.gz/refs/tags/v4.5.1";
+      url = "https://codeload.github.com/ashvardanian/StringZilla/tar.gz/7ca39645f02e00b8465ea2854b888ab9458be8be";
       hash = "sha256-0T8hQ+P6gZnIX52jkRcpF1Ofxy45+B7K/feEQr5Phf0=";
       extension = "tar.gz";
     };