Skip to content

chore(deps-dev): bump xxhash-addon from 1.5.0 to 2.1.0#1649

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/xxhash-addon-2.1.0
Open

chore(deps-dev): bump xxhash-addon from 1.5.0 to 2.1.0#1649
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/xxhash-addon-2.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Bumps xxhash-addon from 1.5.0 to 2.1.0.

Release notes

Sourced from xxhash-addon's releases.

v2.1.0

Features

  • Ship prebuilt binaries for 8 platform/arch/libc targets -- npm install no longer requires a C compiler on supported platforms (Linux glibc+musl x64/arm64, macOS x64/arm64, Windows x64/arm64)
  • Automatic fallback to source compilation on unsupported platforms

Dependencies

  • Add node-gyp-build as sole runtime dependency for prebuilt binary loading (3 KB, zero transitive dependencies)
  • Remove jest dependency; use plain assert-based tests
  • Upgrade xxHash to v0.8.3

Performance

  • Enable XXH3_STREAM_USE_STACK for ~2x faster XXH3 and XXH128 streaming throughput on Apple Silicon with clang
  • Remove XXH_INLINE_ALL; compile xxhash.c as a separate translation unit (aligning with xxhsum Release build)
  • Enable runtime x86 SIMD dispatch (AVX2/AVX512) via xxh_x86dispatch.c on x86/x64

CI

  • Add workflow_dispatch release workflow: validates, builds prebuilt binaries on 8 targets, verifies, tags, and publishes to npm with provenance attestation
  • Bump actions/checkout and actions/setup-node to v4
  • Drop AppVeyor; GitHub Actions covers Windows builds
  • Remove deprecated windows-2016 runner
  • Streamline CI matrix: build+test on Node.js 20 and 24 across Linux/macOS/Windows
  • Sanitizer job now tests the release-optimized binary (-O3 + XXH3_STREAM_USE_STACK) instead of an unoptimized -O0 build; Clang-only; ASan+UBSan+LSan on Linux, ASan+UBSan on macOS (Apple Clang does not support LSan)
  • Add dedicated benchmark workflow (benchmark.yml) on 7 platform/compiler combos (Linux x86_64/ARM64 GCC+Clang, macOS ARM64 Clang, Windows x86_64/ARM64 MSVC), runs on push to master only
  • Benchmark results published as GitHub Actions Job Summary
  • Auto-update benchmark results table in README on push to master

Improvements

  • Rewrite benchmarks: multi-size sweep (1 KB–16 MB) for both streaming and one-shot APIs, auto-tuned iterations targeting ~1 s per measurement, comparison with crypto.hash() and crypto.createHash() at every buffer size
  • Add sanitizer guard to benchmark.js (exits with error when DEBUG=1 to prevent meaningless results under ASan/UBSan)
  • Headline table now reports streaming throughput at 64 KB chunks (the fs.createReadStream default)
  • Detailed per-size sweep tables included in GitHub Actions Job Summary
  • Rewrite benchmark.js: warmup iterations, 5 measured runs, median/min/max statistics, GB/s throughput, machine-readable JSON output
  • Add benchmark-summary.js to consolidate CI benchmark results into a Markdown table

v2.0.3

Fixes

  • README to ref the correct version of xxHash

v2.0.2

Dependencies

  • Upgrading xxhash to v0.8.2

Fixes

  • Auto-discover Release and Debug builds (#31)

v2.0.1

Fixes

  • Move jest to devDependencies (#30)

v2.0.0

Breaking changes

Changelog

Sourced from xxhash-addon's changelog.

v2.1.0

Features

  • Ship prebuilt binaries for 8 platform/arch/libc targets -- npm install no longer requires a C compiler on supported platforms (Linux glibc+musl x64/arm64, macOS x64/arm64, Windows x64/arm64)
  • Automatic fallback to source compilation on unsupported platforms

Dependencies

  • Add node-gyp-build as sole runtime dependency for prebuilt binary loading (3 KB, zero transitive dependencies)
  • Remove jest dependency; use plain assert-based tests
  • Upgrade xxHash to v0.8.3

Performance

  • Enable XXH3_STREAM_USE_STACK for ~2x faster XXH3 and XXH128 streaming throughput on Apple Silicon with clang
  • Remove XXH_INLINE_ALL; compile xxhash.c as a separate translation unit (aligning with xxhsum Release build)
  • Enable runtime x86 SIMD dispatch (AVX2/AVX512) via xxh_x86dispatch.c on x86/x64

CI

  • Add workflow_dispatch release workflow: validates, builds prebuilt binaries on 8 targets, verifies, tags, and publishes to npm with provenance attestation
  • Bump actions/checkout and actions/setup-node to v4
  • Drop AppVeyor; GitHub Actions covers Windows builds
  • Remove deprecated windows-2016 runner
  • Streamline CI matrix: build+test on Node.js 20 and 24 across Linux/macOS/Windows
  • Sanitizer job now tests the release-optimized binary (-O3 + XXH3_STREAM_USE_STACK) instead of an unoptimized -O0 build; Clang-only; ASan+UBSan+LSan on Linux, ASan+UBSan on macOS (Apple Clang does not support LSan)
  • Add dedicated benchmark workflow (benchmark.yml) on 7 platform/compiler combos (Linux x86_64/ARM64 GCC+Clang, macOS ARM64 Clang, Windows x86_64/ARM64 MSVC), runs on push to master only
  • Benchmark results published as GitHub Actions Job Summary
  • Auto-update benchmark results table in README on push to master

Improvements

  • Rewrite benchmarks: multi-size sweep (1 KB–16 MB) for both streaming and one-shot APIs, auto-tuned iterations targeting ~1 s per measurement, comparison with crypto.hash() and crypto.createHash() at every buffer size
  • Add sanitizer guard to benchmark.js (exits with error when DEBUG=1 to prevent meaningless results under ASan/UBSan)
  • Headline table now reports streaming throughput at 64 KB chunks (the fs.createReadStream default)
  • Detailed per-size sweep tables included in GitHub Actions Job Summary
  • Rewrite benchmark.js: warmup iterations, 5 measured runs, median/min/max statistics, GB/s throughput, machine-readable JSON output
  • Add benchmark-summary.js to consolidate CI benchmark results into a Markdown table

v2.0.3

Fixes

  • README to ref the correct version of xxHash

v2.0.2

Dependencies

  • Upgrading xxhash to v0.8.2

Fixes

  • Auto-discover Release and Debug builds (#31)

v2.0.1

Fixes

  • Move jest to devDependencies (#30)

v2.0.0

Breaking changes

Commits
  • e1b7292 Fix release workflow: artifact assembly and publish needs (#59)
  • a9eaecc Fix musl arm64 prebuild: use docker run instead of container directive (#58)
  • 90744f7 fix(release): install git for prebuild musl jobs (#56)
  • 7cb0bab Ship prebuilt binaries and add release pipeline (#54)
  • 865cc58 Update benchmark results in README (#53)
  • 0732341 Redesign benchmarks: multi-size sweep, one-shot, auto-tuned iterations (#52)
  • 3c4e496 Add macOS Intel (macos-15-intel) to CI and benchmarks (#50)
  • 5c882ff Update benchmark results in README (#49)
  • 521602b Prepare v2.1.0: drop Node version bump, zero dependencies, streamline CI (#48)
  • 95fd6e7 Update README.md
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for xxhash-addon since your current version.

Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.


@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/xxhash-addon-2.1.0 branch from bf5847f to 5dea088 Compare March 30, 2026 19:52
Bumps [xxhash-addon](https://github.com/ktrongnhan/xxhash-addon) from 1.5.0 to 2.1.0.
- [Release notes](https://github.com/ktrongnhan/xxhash-addon/releases)
- [Changelog](https://github.com/ktrongnhan/xxhash-addon/blob/master/CHANGELOG.md)
- [Commits](ktrongnhan/xxhash-addon@v1.5.0...v2.1.0)

---
updated-dependencies:
- dependency-name: xxhash-addon
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/xxhash-addon-2.1.0 branch from 5dea088 to 58420e0 Compare April 7, 2026 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants