Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Bumps blake3 from 1.8.2 to 1.8.3.

Release notes

Sourced from blake3's releases.

1.8.3

version 1.8.3

Changes since 1.8.2:

  • Add Hash::as_slice.
  • Update to the 2024 Edition and bump the MSRV to 1.85.
  • Fix a set of Miri failures in the intrinsics implementations. We were computing (though not dereferencing) an out-of-bounds pointer using add rather than wrapping_add. I'm not aware of any observable consequences of this bug. See BLAKE3-team/BLAKE3#507.
  • CPU feature detection on x86/x86-64 no longer requires the std Cargo feature in the blake3 crate.
  • Build fixes in the C implementation for macOS and Cygwin, and various improvements to the CMake build.
Commits
  • 8b829b6 version 1.8.3
  • 7d6e242 update to the 2024 edition
  • 0b64ce2 bump constant_time_eq version to 0.4.2
  • 890050c Fix Cygwin build by skipping blake3_xof_many_avx512
  • 308b95d Add Hash::as_slice() for convenient serialization to bytes
  • eae9bf3 Revert "pin generic-array to the un-deprecated version"
  • 185f1db pin generic-array to the un-deprecated version
  • c54ee7e add a warning to the --check doc
  • 2f341f1 update ccache reference to official release notes URL
  • 8bec2fb chore: make some documents clearer (#528)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [blake3](https://github.com/BLAKE3-team/BLAKE3) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.2...1.8.3)

---
updated-dependencies:
- dependency-name: blake3
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the kind/dependencies For PRs that update dependencies or related components label Jan 9, 2026
Copy link

@dependabot-pr-auto-approver dependabot-pr-auto-approver bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved by dependabot auto-approve workflow

@dependabot-pr-auto-approver dependabot-pr-auto-approver bot merged commit d8f5652 into main Jan 10, 2026
57 checks passed
@dependabot-pr-auto-approver dependabot-pr-auto-approver bot deleted the dependabot/cargo/blake3-1.8.3 branch January 10, 2026 04:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/dependencies For PRs that update dependencies or related components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant