Skip to content

chore(deps): Bump xxhash from 3.7.1 to 3.8.0#1259

Merged
oss-auto-merger[bot] merged 1 commit into
mainfrom
dependabot/uv/xxhash-3.8.0
Jul 9, 2026
Merged

chore(deps): Bump xxhash from 3.7.1 to 3.8.0#1259
oss-auto-merger[bot] merged 1 commit into
mainfrom
dependabot/uv/xxhash-3.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps xxhash from 3.7.1 to 3.8.0.

Release notes

Sourced from xxhash's releases.

v3.8.0

  • Speed up module-level one-shot digest(), intdigest(), and hexdigest() functions by switching them to METH_FASTCALL.
  • Keep one-shot argument handling consistent with hash constructors, including positional and keyword input/seed arguments, duplicate argument errors, and oversized seed wrapping.
  • Fix error handling in the xxh3_128 integer digest path so allocation failures are reported cleanly.
  • Fix Python 3.8 builds by adding a PyModule_AddType compatibility fallback with correct reference counting.
  • Correct type stubs for xxh64_digest(), xxh64_hexdigest(), and xxh64_intdigest(), they were incorrectly aliased to xxh3_64 functions.

Full list of changes: ifduyue/python-xxhash@v3.7.1...v3.8.0

v3.7.2

  • Register the "benchmark" pytest mark to avoid PytestUnknownMarkWarning
  • Update C extension docstrings and remove stale comments

Full list of changes: ifduyue/python-xxhash@v3.7.1...v3.7.2

Changelog

Sourced from xxhash's changelog.

v3.8.0 2026-06-27


- Speed up module-level one-shot ``digest()``, ``intdigest()``, and
  ``hexdigest()`` functions by switching them to ``METH_FASTCALL``.
- Keep one-shot argument handling consistent with hash constructors, including
  positional and keyword ``input``/``seed`` arguments, duplicate argument
  errors, and oversized seed wrapping.
- Fix error handling in the ``xxh3_128`` integer digest path so allocation
  failures are reported cleanly.
- Fix Python 3.8 builds by adding a ``PyModule_AddType`` compatibility
  fallback with correct reference counting.
- Correct type stubs for ``xxh64_digest()``, ``xxh64_hexdigest()``, and
  ``xxh64_intdigest()``, they were incorrectly aliased to xxh3_64 functions.

v3.7.2 2026-07-06

  • Register the "benchmark" pytest mark to avoid PytestUnknownMarkWarning
  • Update C extension docstrings and remove stale comments
Commits
  • 48c60f2 chore: release v3.8.0
  • c7f2397 fix: restore PyLong_FromUnsignedLong/LongLong over Py_BuildValue
  • aea7a72 test: fix positional seed tests in test_fastcall.py
  • e084433 fix: correct docstring typos in xxh3_64 copy() documentation
  • 414b254 fix(pyi): xxh64_digest/hexdigest/intdigest are functions
  • 9af9913 fix: add PyModule_AddType fallback for Python 3.8 compatibility
  • 1ecd5b4 perf: mark _get_buffer_or_str and _parse_fastcall_args as inline
  • 2b6f712 fix: detect duplicate seed, expand fastcall tests
  • 5d59623 fix: add NULL checks in xxh3_128_intdigest 128-bit math
  • 8fe3bf4 refactor: consolidate fastcall arg parsing into _parse_fastcall_args
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [xxhash](https://github.com/ifduyue/python-xxhash) from 3.7.1 to 3.8.0.
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v3.7.1...v3.8.0)

---
updated-dependencies:
- dependency-name: xxhash
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies dealing with project dependencies python:uv Pull requests that update python:uv code labels Jul 9, 2026
@oss-auto-merger oss-auto-merger Bot enabled auto-merge (squash) July 9, 2026 21:23
@oss-auto-merger oss-auto-merger Bot merged commit eec4346 into main Jul 9, 2026
17 of 21 checks passed
@oss-auto-merger oss-auto-merger Bot deleted the dependabot/uv/xxhash-3.8.0 branch July 9, 2026 21:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies dealing with project dependencies python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants