Skip to content

chore(deps): bump rapidhash from 4.4.2 to 4.5.1 - #397

Merged
ptsouchlos merged 1 commit into
mainfrom
dependabot/cargo/rapidhash-4.5.1
Jul 7, 2026
Merged

chore(deps): bump rapidhash from 4.4.2 to 4.5.1#397
ptsouchlos merged 1 commit into
mainfrom
dependabot/cargo/rapidhash-4.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps rapidhash from 4.4.2 to 4.5.1.

Release notes

Sourced from rapidhash's releases.

v4.5.1

What's Changed

Full Changelog: hoxxep/rapidhash@v4.5.0...v4.5.1

v4.5.0

Deprecations

  • The rand feature has been deprecated in favor of getrandom_04 and getrandom_03.
  • The rng feature has been deprecated in favor of the rapidrand crate.

Additions

  • getrandom_04 feature: opt-in seeding of the hasher seeds and secrets from OS/platform entropy via the getrandom crate, without requiring std nor rand crate. This replaces the rand feature and enables true HashDoS resistance on targets with no ambient entropy or ASLR:
    • wasm32-wasip1/wasm32-wasip2: enabling the feature is sufficient; entropy comes from the WASI host.
    • wasm32-unknown-unknown (browser/node): additionally requires getrandom's wasm_js backend, enabled by the top-level binary. Building without the backend is a compile error rather than a silent fallback to deterministic seeding.
    • Embedded/no_std targets with a hardware RNG: register a getrandom custom backend. On targets without atomic pointer support (e.g. thumbv6m-none-eabi), each RandomState draws a fresh random seed per instance, restoring minimal HashDoS resistance where there previously was none.
  • getrandom_03 feature: the same as the getrandom_04 feature, but using getrandom v0.3 to preserve the rapidhash MSRV 1.71.

Fixes

  • RandomState no longer produces duplicate seeds across threads whose stacks are recycled by the OS. Each thread's seed counter is now initialized from a global thread counter mixed with the process-wide random seed, instead of relying on the (frequently re-used) stack address alone.
  • Better randomness handling and documentation for wasm targets, no_std targets, and targets without atomics.

What's Changed

Full Changelog: hoxxep/rapidhash@v4.4.2...v4.5.0

Changelog

Sourced from rapidhash's changelog.

4.5.1 (20260704)

Fixes

  • Fixed an edge case where targets with std but no atomics could see the same seed repeatedly on RandomState on new threads. (hoxxep/rapidhash#102)
  • Fixed struct size tests for Debian packaging. (hoxxep/rapidhash#90)

4.5.0 (20260703)

Deprecations

  • The rand feature has been deprecated in favor of getrandom_04 and getrandom_03.
  • The rng feature has been deprecated in favor of the rapidrand crate.

Additions

  • getrandom_04 feature: opt-in seeding of the hasher seeds and secrets from OS/platform entropy via the getrandom crate, without requiring std nor rand crate. This replaces the rand feature and enables true HashDoS resistance on targets with no ambient entropy or ASLR:
    • wasm32-wasip1/wasm32-wasip2: enabling the feature is sufficient; entropy comes from the WASI host.
    • wasm32-unknown-unknown (browser/node): additionally requires getrandom's wasm_js backend, enabled by the top-level binary. Building without the backend is a compile error rather than a silent fallback to deterministic seeding.
    • Embedded/no_std targets with a hardware RNG: register a getrandom custom backend. On targets without atomic pointer support (e.g. thumbv6m-none-eabi), each RandomState draws a fresh random seed per instance, restoring minimal HashDoS resistance where there previously was none.
  • getrandom_03 feature: the same as the getrandom_04 feature, but using getrandom v0.3 to preserve the rapidhash MSRV 1.71.

Fixes

  • RandomState no longer produces duplicate seeds across threads whose stacks are recycled by the OS. Each thread's seed counter is now initialized from a global thread counter mixed with the process-wide random seed, instead of relying on the (frequently re-used) stack address alone.
  • Better randomness handling and documentation for wasm targets, no_std targets, and targets without atomics.
Commits
  • 7eb3402 Prepare v4.5.1 release
  • 4e78be6 Merge pull request #102 from hoxxep/thread-seeding-fix
  • 8fcaf14 Fix branch for std but no-atomic targets
  • 798dc07 Merge pull request #101 from hoxxep/s390x-size-test-fix
  • ed41656 Struct size tests for a range of targets
  • c82999a Fix size tests for s390x architectures with 8-byte alignment for u128
  • 9fe63fe Merge pull request #100 from hoxxep/deprecate-rng
  • 1755d27 Small cargo clippy cleanup
  • e3db1f9 Simplify rapidrand initialization in tests
  • 57854a9 Prepare the v4.5.0 release
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 5, 2026
@ptsouchlos

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/rapidhash-4.5.1 branch from e55d93c to 8ac6858 Compare July 6, 2026 18:46
@ptsouchlos

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [rapidhash](https://github.com/hoxxep/rapidhash) from 4.4.2 to 4.5.1.
- [Release notes](https://github.com/hoxxep/rapidhash/releases)
- [Changelog](https://github.com/hoxxep/rapidhash/blob/master/CHANGELOG.md)
- [Commits](hoxxep/rapidhash@v4.4.2...v4.5.1)

---
updated-dependencies:
- dependency-name: rapidhash
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rapidhash-4.5.1 branch from 8ac6858 to 4797e8f Compare July 7, 2026 19:41
@ptsouchlos
ptsouchlos merged commit 2b49296 into main Jul 7, 2026
29 checks passed
@ptsouchlos
ptsouchlos deleted the dependabot/cargo/rapidhash-4.5.1 branch July 7, 2026 22:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant