|
1 | 1 | { |
2 | 2 | "$schema": "deps.schema.json", |
3 | 3 | "repositories": [ |
4 | | - // bazel_deps from deps.MODULE.bazel |
5 | 4 | { |
6 | 5 | "name": "ada-url", |
7 | 6 | "type": "bazel_dep" |
8 | 7 | }, |
| 8 | + // BoringSSL may subtly break backwards compatibility and behave differently than the latest FIPS |
| 9 | + // version, often by rejecting key values that it considers invalid/unsafe even though they are still |
| 10 | + // accepted by BoringSSL. Update with caution and only after confirming this is compatible with the |
| 11 | + // downstream build. |
| 12 | + { |
| 13 | + "name": "boringssl", |
| 14 | + "type": "github_release", |
| 15 | + "use_bazel_dep": true, |
| 16 | + "owner": "google", |
| 17 | + "repo": "boringssl", |
| 18 | + "repo_name": "ssl", |
| 19 | + "freeze_version": "0.20251002.0", |
| 20 | + "patches": [ |
| 21 | + "//:patches/boringssl/0001-Expose-libdecrepit-so-NodeJS-can-use-it-for-ncrypto.patch" |
| 22 | + ] |
| 23 | + }, |
9 | 24 | { |
10 | 25 | "name": "brotli", |
11 | 26 | "type": "bazel_dep" |
|
22 | 37 | "branch": "v2", |
23 | 38 | "extra_strip_prefix": "/c++" |
24 | 39 | }, |
| 40 | + // We want to avoid version skew with v8, so we use identical versions. |
| 41 | + { |
| 42 | + "name": "dragonbox", |
| 43 | + "type": "github_tarball", |
| 44 | + "build_file_content": "cc_library(name = 'dragonbox', hdrs = glob(['include/dragonbox/*.h']), visibility = ['//visibility:public'], include_prefix = 'third_party/dragonbox/src')", |
| 45 | + "owner": "jk-jeon", |
| 46 | + "repo": "dragonbox", |
| 47 | + "freeze_commit": "6c7c925b571d54486b9ffae8d9d18a822801cbda" |
| 48 | + }, |
| 49 | + // We want to avoid version skew with v8, so we use identical versions. |
| 50 | + { |
| 51 | + "name": "fast_float", |
| 52 | + "type": "github_tarball", |
| 53 | + "use_bazel_dep": true, |
| 54 | + "owner": "fastfloat", |
| 55 | + "repo": "fast_float", |
| 56 | + "branch": "main", |
| 57 | + "freeze_commit": "cb1d42aaa1e14b09e1452cfdef373d051b8c02a4", |
| 58 | + "build_file_content": "cc_library(name = 'fast_float', hdrs = glob(['include/fast_float/*.h']), visibility = ['//visibility:public'], include_prefix = 'third_party/fast_float/src')", |
| 59 | + "use_module_bazel_from_bcr": "8.0.2" |
| 60 | + }, |
| 61 | + // We want to avoid version skew with v8, so we use identical versions. |
| 62 | + { |
| 63 | + "name": "fp16", |
| 64 | + "type": "github_tarball", |
| 65 | + "use_bazel_dep": true, |
| 66 | + "owner": "Maratyszcza", |
| 67 | + "repo": "FP16", |
| 68 | + "freeze_commit": "b3720617faf1a4581ed7e6787cc51722ec7751f0", |
| 69 | + "build_file_content": "exports_files(glob(['**']))", |
| 70 | + "use_module_bazel_from_bcr": "0.0.0-20210320-0a92994" |
| 71 | + }, |
| 72 | + // We want to avoid version skew with v8, so we use identical versions. |
| 73 | + { |
| 74 | + "name": "highway", |
| 75 | + "type": "github_tarball", |
| 76 | + "use_bazel_dep": true, |
| 77 | + "owner": "google", |
| 78 | + "repo": "highway", |
| 79 | + "freeze_commit": "00fe003dac355b979f36157f9407c7c46448958e", |
| 80 | + "use_module_bazel_from_bcr": "1.3.0" |
| 81 | + }, |
25 | 82 | { |
26 | 83 | "name": "nbytes", |
27 | 84 | "type": "github_release", |
|
37 | 94 | "branch": "main" |
38 | 95 | }, |
39 | 96 | { |
40 | | - "name": "dragonbox", |
41 | | - "type": "github_tarball", |
42 | | - "build_file_content": "cc_library(name = \"dragonbox\", hdrs = glob([\"include/dragonbox/*.h\"]), visibility = [\"//visibility:public\"], include_prefix = \"third_party/dragonbox/src\")", |
43 | | - "owner": "jk-jeon", |
44 | | - "repo": "dragonbox", |
45 | | - "freeze_commit": "6c7c925b571d54486b9ffae8d9d18a822801cbda" |
| 97 | + "name": "perfetto", |
| 98 | + "type": "github_release", |
| 99 | + "use_bazel_dep": true, |
| 100 | + "owner": "google", |
| 101 | + "repo": "perfetto", |
| 102 | + "freeze_version": "v53.0", |
| 103 | + "patches": [ |
| 104 | + "//:patches/perfetto/0001-Don-t-attempt-to-use-rules_android.patch", |
| 105 | + "//:patches/perfetto/0002-disable-info-level-logging.patch" |
| 106 | + ] |
46 | 107 | }, |
47 | 108 | { |
48 | 109 | "name": "simdutf", |
|
52 | 113 | "build_file": "//:build/BUILD.simdutf", |
53 | 114 | "file_regex": "singleheader.zip" |
54 | 115 | }, |
55 | | - //wpt |
56 | 116 | // TODO: wpt was temporarily removed from shared_deps.jsonc because it would require |
57 | 117 | // workerd to be fully converted to bzlmod before the internal repo can load it. |
58 | 118 | { |
|
63 | 123 | "file_regex": "wpt-.*.tar.gz", |
64 | 124 | "build_file": "@workerd//:build/BUILD.wpt", |
65 | 125 | "freeze_version": "wpt-c1ad85a22" |
| 126 | + }, |
| 127 | + // This should match the version specified in V8 DEPS, but in practice it is generally acceptable |
| 128 | + // for it to be behind – zlib is very stable and its API has not changed in a long time, most |
| 129 | + // changes to the Chromium fork affect ancillary tools and not the zlib library itself. |
| 130 | + { |
| 131 | + "name": "zlib", |
| 132 | + "type": "git_clone", |
| 133 | + "use_bazel_dep": true, |
| 134 | + "url": "https://chromium.googlesource.com/chromium/src/third_party/zlib.git", |
| 135 | + "branch": "main", |
| 136 | + "freeze_commit": "85f05b0835f934e52772efc308baa80cdd491838", |
| 137 | + "build_file": "//:build/BUILD.zlib", |
| 138 | + "patches": ["//:patches/zlib/0001-Add-dummy-MODULE.bazel.patch"] |
66 | 139 | } |
67 | 140 | ] |
68 | 141 | } |
0 commit comments