Skip to content

Bump the nuget group with 1 update#61

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/Beepsky/nuget-7e7fba4ab3
Open

Bump the nuget group with 1 update#61
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/Beepsky/nuget-7e7fba4ab3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Updated libsodium from 1.0.21 to 1.0.22.

Release notes

Sourced from libsodium's releases.

1.0.22

Version 1.0.22

This point release includes all the changes from 1.0.21-stable, plus:

  • Post-quantum key encapsulation is now available. ML-KEM768, the
    NIST-standardized lattice-based KEM, is accessible through the
    crypto_kem_mlkem768_*() functions.
  • X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection
    against both classical and quantum adversaries, is available through the
    crypto_kem_*() functions. X-Wing is the recommended KEM for most
    applications.
  • SHA-3 hash functions are now available as crypto_hash_sha3256_*()
    and crypto_hash_sha3512_*(), with both one-shot and streaming APIs.

Version 1.0.21-stable

  • Performance: NEON optimizations for Argon2 on ARM platforms.
  • Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when
    available on ARM platforms.
  • Performance: WebAssembly SIMD implementations of Argon2 have been added.
  • Emscripten: LTO is now disabled. With Emscripten 4, LTO produced
    WebAssembly modules with functions that ran significantly slower than
    without it.
  • Emscripten: a new option allows compilation with SIMD support.
  • Emscripten: native ESM module generation is now supported.
  • JavaScript sumo builds now allow up to 80 MiB memory usage, so that
    crypto_pwhash with the interactive settings can be used in pure
    JavaScript, not just WebAssembly.
  • XOF state alignment has been relaxed.
  • crypto_core_keccak1600_state has been added.
  • Export missing crypto_ipcrypt_nd_keygen() helper function.
  • crypto_auth_hmacsha256_init and crypto_auth_hmacsha512_init now
    accept NULL key pointers (with a zero key length), for consistency with
    other _init functions.
  • apple-xcframework: headers are now in a Clibsodium subdirectory
    to prevent module.modulemap collisions with other xcframeworks.
  • Fixed compilation with GCC on aarch64 and gcc 4.x.
  • On aarch64, aes256-gcm is now enabled even when not using clang,
    including MSVC.
  • Added compatibility with Visual Studio 2026 when toolsets do not
    define PlatformToolsetVersion.
  • Libsodium can be directly used as a dependency in a Zig project.
  • Performance of MSVC builds has been improved.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps libsodium from 1.0.21 to 1.0.22

---
updated-dependencies:
- dependency-name: libsodium
  dependency-version: 1.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Apr 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants