Use SHA-256 when checking dependency integrity in `src/configuration` by jviotti · Pull Request #622 · sourcemeta/blaze

jviotti · 2026-02-09T17:58:00Z

Signed-off-by: Juan Cruz Viotti jv@jviotti.com

Signed-off-by: Juan Cruz Viotti <jv@jviotti.com>

augmentcode · 2026-02-09T18:02:21Z

🤖 Augment PR Summary

Summary: Migrates dependency integrity verification in Blaze configuration lockfiles from MD5 to SHA-256.

Changes:

Replace Core md5 linkage with crypto in CMake/package config.
Hash fetched/written schemas with sourcemeta::core::sha256 in fetch.cc.
Update lockfile hashing/serialization to emit/expect hashAlgorithm: "sha256".
Adjust Configuration::Lock::Entry::HashAlgorithm default to SHA256.
Refresh configuration fetch/lock tests with new SHA-256 digests.

Technical Notes: This changes the lockfile hash values and accepted hashAlgorithm string, so existing lockfiles may need regeneration.

_{🤖 Was this summary useful? React with 👍 or 👎}

augmentcode

Review completed. 1 suggestions posted.

Comment augment review to trigger a new review at any time.

src/configuration/lock.cc

cubic-dev-ai

1 issue found across 10 files

Prompt for AI agents (all issues)


Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name="test/configuration/configuration_lock_test.cc">

<violation number="1" location="test/configuration/configuration_lock_test.cc:37">
P3: These expected hashes are MD5-length (32 hex) but the algorithm is now sha256. Update the test hashes (and lock.emplace inputs) to 64‑hex sha256 digests or keep the algorithm as md5 so the lock data is consistent.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

test/configuration/configuration_lock_test.cc

github-actions

Benchmark (linux/llvm)

Details

Benchmark suite	Current: `9097a47`	Previous: `df64914`	Ratio
`E2E_Compiler_adaptivecard`	`60047735.81817992` ns/iter	`62542648.55555095` ns/iter	`0.96`
`E2E_Compiler_ansible_meta`	`23955279.827585574` ns/iter	`27146004.307693463` ns/iter	`0.88`
`E2E_Compiler_aws_cdk`	`428505.37622549036` ns/iter	`464515.588548596` ns/iter	`0.92`
`E2E_Compiler_babelrc`	`2288107.849673254` ns/iter	`2548316.1386864097` ns/iter	`0.90`
`E2E_Compiler_clang_format`	`15510131.35555574` ns/iter	`17366990.700000428` ns/iter	`0.89`
`E2E_Compiler_cmake_presets`	`23774321.034483723` ns/iter	`25497834.03571431` ns/iter	`0.93`
`E2E_Compiler_code_climate`	`2317904.9172186307` ns/iter	`2543161.7818181124` ns/iter	`0.91`
`E2E_Compiler_cql2`	`12224695.649122126` ns/iter	`12942569.870370302` ns/iter	`0.94`
`E2E_Compiler_cspell`	`20916626.181817167` ns/iter	`22751748.354839068` ns/iter	`0.92`
`E2E_Compiler_cypress`	`3604425.3298969455` ns/iter	`4011397.9943186` ns/iter	`0.90`
`E2E_Compiler_deno`	`6445440.779816532` ns/iter	`7362773.852631969` ns/iter	`0.88`
`E2E_Compiler_dependabot`	`3377687.9038460203` ns/iter	`3746661.4491980076` ns/iter	`0.90`
`E2E_Compiler_draft_04`	`2452485.273684153` ns/iter	`2650379.6856060675` ns/iter	`0.93`
`E2E_Compiler_fabric_mod`	`4205201.2035929` ns/iter	`4608902.888158558` ns/iter	`0.91`
`E2E_Compiler_geojson`	`20439464.057143856` ns/iter	`20966099.06060497` ns/iter	`0.97`
`E2E_Compiler_gitpod_configuration`	`4281155.490797576` ns/iter	`4736901.189189082` ns/iter	`0.90`
`E2E_Compiler_helm_chart_lock`	`695096.1220238038` ns/iter	`774632.2352941397` ns/iter	`0.90`
`E2E_Compiler_importmap`	`352103.84038266836` ns/iter	`379548.69268292864` ns/iter	`0.93`
`E2E_Compiler_jasmine`	`1281381.502742259` ns/iter	`1395474.4701194218` ns/iter	`0.92`
`E2E_Compiler_jshintrc`	`3718092.491978683` ns/iter	`4251822.897590117` ns/iter	`0.87`
`E2E_Compiler_jsconfig`	`18121633.74358988` ns/iter	`20679837.294116676` ns/iter	`0.88`
`E2E_Compiler_krakend`	`132897841.79999061` ns/iter	`154401145.39999285` ns/iter	`0.86`
`E2E_Compiler_lazygit`	`28673093.375000272` ns/iter	`31799422.181817055` ns/iter	`0.90`
`E2E_Compiler_lerna`	`1477599.382663844` ns/iter	`1618656.0300231543` ns/iter	`0.91`
`E2E_Compiler_nest_cli`	`6375735.954545483` ns/iter	`7075959.131313282` ns/iter	`0.90`
`E2E_Compiler_omc`	`146393400.799991` ns/iter	`159751159.49999008` ns/iter	`0.92`
`E2E_Compiler_omnisharp`	`5625827.672000014` ns/iter	`6401268.245454875` ns/iter	`0.88`
`E2E_Compiler_openapi`	`21754162.031250246` ns/iter	`24127381.206896864` ns/iter	`0.90`
`E2E_Compiler_pre_commit_hooks`	`4583834.720779049` ns/iter	`5137256.722627749` ns/iter	`0.89`
`E2E_Compiler_pulumi`	`3565212.0765304547` ns/iter	`3901604.2513961685` ns/iter	`0.91`
`E2E_Compiler_semantic_release`	`1479216.2147369038` ns/iter	`1589882.9433106487` ns/iter	`0.93`
`E2E_Compiler_stale`	`1436526.7971311414` ns/iter	`1569171.0223714425` ns/iter	`0.92`
`E2E_Compiler_stylecop`	`4964688.395833466` ns/iter	`5697190.073171101` ns/iter	`0.87`
`E2E_Compiler_tmuxinator`	`1772777.8299492486` ns/iter	`1934023.072021899` ns/iter	`0.92`
`E2E_Compiler_ui5`	`44860690.866668545` ns/iter	`47769957.60000015` ns/iter	`0.94`
`E2E_Compiler_ui5_manifest`	`292902373.4999987` ns/iter	`332636992.00000477` ns/iter	`0.88`
`E2E_Compiler_unreal_engine_uproject`	`3983066.397727245` ns/iter	`4415477.443038077` ns/iter	`0.90`
`E2E_Compiler_vercel`	`11375863.29508249` ns/iter	`12473224.32142945` ns/iter	`0.91`
`E2E_Compiler_yamllint`	`411769.8145968054` ns/iter	`444522.5409206898` ns/iter	`0.93`
`E2E_Evaluator_adaptivecard`	`34340.112029888725` ns/iter	`36395.083854944765` ns/iter	`0.94`
`E2E_Evaluator_ansible_meta`	`285866.3024590285` ns/iter	`313307.6195602976` ns/iter	`0.91`
`E2E_Evaluator_aws_cdk`	`65014.69501302498` ns/iter	`76860.31497604946` ns/iter	`0.85`
`E2E_Evaluator_babelrc`	`136188.0108632432` ns/iter	`156491.47333183908` ns/iter	`0.87`
`E2E_Evaluator_cerebrum_criminal_case`	`1670464.238875853` ns/iter	`1645815.5641026627` ns/iter	`1.01`
`E2E_Evaluator_clang_format`	`127676.41457194813` ns/iter	`137055.836277979` ns/iter	`0.93`
`E2E_Evaluator_cmake_presets`	`5850310.500000074` ns/iter	`5844478.38461614` ns/iter	`1.00`
`E2E_Evaluator_code_climate`	`291397.7550515343` ns/iter	`283646.193200002` ns/iter	`1.03`
`E2E_Evaluator_cql2`	`280762.6145410326` ns/iter	`305755.2225506587` ns/iter	`0.92`
`E2E_Evaluator_cspell`	`663745.4404194284` ns/iter	`744720.68119023` ns/iter	`0.89`
`E2E_Evaluator_cypress`	`212893.60523115555` ns/iter	`233427.794283807` ns/iter	`0.91`
`E2E_Evaluator_deno`	`393628.11354693817` ns/iter	`406607.13853315334` ns/iter	`0.97`
`E2E_Evaluator_dependabot`	`556546.674959881` ns/iter	`575724.7931316294` ns/iter	`0.97`
`E2E_Evaluator_draft_04`	`8936472.499999732` ns/iter	`9646893.768114712` ns/iter	`0.93`
`E2E_Evaluator_fabric_mod`	`860958.5006180574` ns/iter	`907410.5064434155` ns/iter	`0.95`
`E2E_Evaluator_geojson`	`28507116.999999005` ns/iter	`31361723.59090882` ns/iter	`0.91`
`E2E_Evaluator_gitpod_configuration`	`298993.1482272478` ns/iter	`312897.63188535324` ns/iter	`0.96`
`E2E_Evaluator_helm_chart_lock`	`463662.6955658679` ns/iter	`447729.73618087836` ns/iter	`1.04`
`E2E_Evaluator_importmap`	`60920.77654614063` ns/iter	`69822.12158321819` ns/iter	`0.87`
`E2E_Evaluator_jasmine`	`139962.35268301712` ns/iter	`162481.6631871789` ns/iter	`0.86`
`E2E_Evaluator_jshintrc`	`1236699.6872791285` ns/iter	`1312750.4067165065` ns/iter	`0.94`
`E2E_Evaluator_jsconfig`	`474959.59241703653` ns/iter	`526725.4208552573` ns/iter	`0.90`
`E2E_Evaluator_krakend`	`243602.7273046091` ns/iter	`259973.0603802009` ns/iter	`0.94`
`E2E_Evaluator_lazygit`	`164033.27689761654` ns/iter	`185533.1359570434` ns/iter	`0.88`
`E2E_Evaluator_lerna`	`191258.05133746687` ns/iter	`211401.91330346` ns/iter	`0.90`
`E2E_Evaluator_nest_cli`	`242689.9982782453` ns/iter	`250310.65764159738` ns/iter	`0.97`
`E2E_Evaluator_omc`	`26720.17673693027` ns/iter	`28081.403143274336` ns/iter	`0.95`
`E2E_Evaluator_omnisharp`	`647786.2168224305` ns/iter	`708963.3783783205` ns/iter	`0.91`
`E2E_Evaluator_openapi`	`16937322.170732144` ns/iter	`17174507.4523826` ns/iter	`0.99`
`E2E_Evaluator_pre_commit_hooks`	`590103.6539440044` ns/iter	`609765.2510860881` ns/iter	`0.97`
`E2E_Evaluator_pulumi`	`892010.32866239` ns/iter	`860313.9889163765` ns/iter	`1.04`
`E2E_Evaluator_semantic_release`	`128399.38293176478` ns/iter	`142425.67664306724` ns/iter	`0.90`
`E2E_Evaluator_stale`	`184918.06795347104` ns/iter	`204708.00638050048` ns/iter	`0.90`
`E2E_Evaluator_stylecop`	`348916.1619859648` ns/iter	`373375.0875796292` ns/iter	`0.93`
`E2E_Evaluator_tmuxinator`	`118886.2899641` ns/iter	`140000.8153386336` ns/iter	`0.85`
`E2E_Evaluator_ui5`	`664513.6615969575` ns/iter	`713906.0010309109` ns/iter	`0.93`
`E2E_Evaluator_ui5_manifest`	`3348371.066985483` ns/iter	`3563757.208954978` ns/iter	`0.94`
`E2E_Evaluator_unreal_engine_uproject`	`524476.5282874762` ns/iter	`531082.3212121043` ns/iter	`0.99`
`E2E_Evaluator_vercel`	`394178.6126126096` ns/iter	`388776.946957005` ns/iter	`1.01`
`E2E_Evaluator_yamllint`	`14572.616748209031` ns/iter	`17862.863834281976` ns/iter	`0.82`
`Micro_Draft4_Meta_1_No_Callback`	`244.75921414144398` ns/iter	`249.68540967745665` ns/iter	`0.98`
`Micro_Draft4_Required_Properties`	`1132.6673774543822` ns/iter	`1157.285572698813` ns/iter	`0.98`
`Micro_Draft4_Many_Optional_Properties_Minimal_Match`	`29.891424519771984` ns/iter	`31.255864814974554` ns/iter	`0.96`
`Micro_Draft4_Few_Optional_Properties_Minimal_Match`	`17.09947754109745` ns/iter	`20.255788804496884` ns/iter	`0.84`
`Micro_Draft4_Items_Schema`	`534.6583702685591` ns/iter	`635.2298389250643` ns/iter	`0.84`
`Micro_Draft4_Nested_Object`	`2.623936675340662` ns/iter	`3.1101185509603857` ns/iter	`0.84`
`Micro_Draft4_Properties_Triad_Optional`	`379.2759606311632` ns/iter	`387.90099909326074` ns/iter	`0.98`
`Micro_Draft4_Properties_Triad_Closed`	`314.1736977651071` ns/iter	`321.4587603680361` ns/iter	`0.98`
`Micro_Draft4_Properties_Triad_Required`	`419.82375722572004` ns/iter	`441.48011737925293` ns/iter	`0.95`
`Micro_Draft4_Properties_Closed`	`77.98108513781722` ns/iter	`80.7705036634032` ns/iter	`0.97`
`Micro_Draft4_Non_Recursive_Ref`	`20.75804537588013` ns/iter	`31.396207664794044` ns/iter	`0.66`
`Micro_Draft4_Pattern_Properties_True`	`219.6482477841337` ns/iter	`267.0911352928104` ns/iter	`0.82`
`Micro_Draft4_Ref_To_Single_Property`	`17.052960179754578` ns/iter	`20.228881576001005` ns/iter	`0.84`
`Micro_Draft4_Additional_Properties_Type`	`38.07110767788276` ns/iter	`59.353758030515316` ns/iter	`0.64`
`Micro_Draft4_Nested_Oneof`	`72.84938607626663` ns/iter	`90.43898704650485` ns/iter	`0.81`
`Micro_Draft4_Short_Enum`	`14.462695427343576` ns/iter	`15.267954623977566` ns/iter	`0.95`
`Micro_Draft4_Long_Enum`	`14.057722903677629` ns/iter	`18.719520649162007` ns/iter	`0.75`
`Micro_Draft4_Long_Enum_Short_Strings`	`14.45214174682425` ns/iter	`15.274391466214327` ns/iter	`0.95`
`Micro_Draft4_Type_Object`	`7.103203129185125` ns/iter	`9.02796535120192` ns/iter	`0.79`
`Micro_Draft4_Ref_Single_100`	`2237572.228295903` ns/iter	`2464062.6912279213` ns/iter	`0.91`
`Micro_Draft4_Compile_Ref_Many_Nested`	`1677801.8177456742` ns/iter	`1825563.132812569` ns/iter	`0.92`
`Micro_Draft4_Compile_Wrap`	`2236856.8722043573` ns/iter	`2421848.2482759664` ns/iter	`0.92`
`Micro_Draft6_Property_Names`	`138.0123460710389` ns/iter	`125.30535029088489` ns/iter	`1.10`
`Micro_Draft6_Compile_FHIR`	`20139521625.000042` ns/iter
`Micro_Draft7_If_Then_Else`	`35.19485067316068` ns/iter	`40.482768621386924` ns/iter	`0.87`
`Micro_2019_09_Unevaluated_Properties`	`45.53777257584785` ns/iter	`57.892872544605424` ns/iter	`0.79`
`Micro_2019_09_Compile_Wrap`	`267995286.33334073` ns/iter	`298072859.49999595` ns/iter	`0.90`
`Micro_2019_09_KrakenD_Linter_Check`	`1424552139.0000136` ns/iter	`1244117134.9998968` ns/iter	`1.15`
`Micro_2019_09_KrakenD_Linter_Apply`	`12381846658.999962` ns/iter	`10878430950.999928` ns/iter	`1.14`
`Micro_2020_12_Dynamic_Ref`	`392.26714417009555` ns/iter	`365.8261541694028` ns/iter	`1.07`
`Micro_2020_12_Dynamic_Ref_Single`	`7.038026727040246` ns/iter	`9.016366089698026` ns/iter	`0.78`
`Micro_2020_12_Simple_Output_Mask`	`118983.78217822248` ns/iter	`139676.7702429063` ns/iter	`0.85`
`Micro_2020_12_Simple_Output_Annotations`	`162088.95608735748` ns/iter	`170689.27693784793` ns/iter	`0.95`
`Micro_2020_12_Compile_NonCircular_Shared_Refs`	`999356.5600000564` ns/iter	`1087670.6112852783` ns/iter	`0.92`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Benchmark (linux/gcc)

Details

Benchmark suite	Current: `9097a47`	Previous: `df64914`	Ratio
`Micro_2020_12_Dynamic_Ref`	`451.0065285304067` ns/iter	`447.8069050582184` ns/iter	`1.01`
`Micro_2020_12_Dynamic_Ref_Single`	`9.255155451201892` ns/iter	`9.216592515036073` ns/iter	`1.00`
`Micro_2020_12_Simple_Output_Mask`	`138706.7482014356` ns/iter	`138501.53510511215` ns/iter	`1.00`
`Micro_2020_12_Simple_Output_Annotations`	`175779.55507833848` ns/iter	`173771.82650780448` ns/iter	`1.01`
`Micro_2020_12_Compile_NonCircular_Shared_Refs`	`1251946.1612902633` ns/iter	`1253826.6402876214` ns/iter	`1.00`
`Micro_2019_09_Unevaluated_Properties`	`46.76389357828081` ns/iter	`46.15700251413641` ns/iter	`1.01`
`Micro_2019_09_Compile_Wrap`	`333273427.999984` ns/iter	`338791690.4999884` ns/iter	`0.98`
`Micro_2019_09_KrakenD_Linter_Check`	`1305356451.0000796` ns/iter	`1275842254.000054` ns/iter	`1.02`
`Micro_2019_09_KrakenD_Linter_Apply`	`11214201750.000029` ns/iter	`11500632221.999922` ns/iter	`0.98`
`Micro_Draft7_If_Then_Else`	`45.920298228111896` ns/iter	`44.992609839979494` ns/iter	`1.02`
`Micro_Draft6_Property_Names`	`161.34757800536866` ns/iter	`156.15999738838624` ns/iter	`1.03`
`Micro_Draft6_Compile_FHIR`	`14094976519.000055` ns/iter
`Micro_Draft4_Meta_1_No_Callback`	`221.15702878130926` ns/iter	`218.86776490204366` ns/iter	`1.01`
`Micro_Draft4_Required_Properties`	`792.3836439126687` ns/iter	`766.4342373308275` ns/iter	`1.03`
`Micro_Draft4_Many_Optional_Properties_Minimal_Match`	`27.41026906786042` ns/iter	`27.0179603071181` ns/iter	`1.01`
`Micro_Draft4_Few_Optional_Properties_Minimal_Match`	`16.937401485240493` ns/iter	`16.621909053791317` ns/iter	`1.02`
`Micro_Draft4_Items_Schema`	`534.0494768465467` ns/iter	`549.0089683827948` ns/iter	`0.97`
`Micro_Draft4_Nested_Object`	`3.2909716564646376` ns/iter	`3.24120884286121` ns/iter	`1.02`
`Micro_Draft4_Properties_Triad_Optional`	`559.9177155652754` ns/iter	`452.04458082098097` ns/iter	`1.24`
`Micro_Draft4_Properties_Triad_Closed`	`406.52027416892304` ns/iter	`368.97758488046446` ns/iter	`1.10`
`Micro_Draft4_Properties_Triad_Required`	`516.3662727947543` ns/iter	`489.4559804809907` ns/iter	`1.05`
`Micro_Draft4_Properties_Closed`	`70.27594361506694` ns/iter	`69.74334725820071` ns/iter	`1.01`
`Micro_Draft4_Non_Recursive_Ref`	`14.117232912527598` ns/iter	`14.467790807887411` ns/iter	`0.98`
`Micro_Draft4_Pattern_Properties_True`	`240.14440529854957` ns/iter	`255.83899527526324` ns/iter	`0.94`
`Micro_Draft4_Ref_To_Single_Property`	`16.889242453888524` ns/iter	`16.614612557915756` ns/iter	`1.02`
`Micro_Draft4_Additional_Properties_Type`	`19.14789929697975` ns/iter	`19.082890684734018` ns/iter	`1.00`
`Micro_Draft4_Nested_Oneof`	`111.80568601919528` ns/iter	`111.13507569638745` ns/iter	`1.01`
`Micro_Draft4_Short_Enum`	`17.75828991957457` ns/iter	`17.833764330955002` ns/iter	`1.00`
`Micro_Draft4_Long_Enum`	`18.864699100098555` ns/iter	`19.17541019597708` ns/iter	`0.98`
`Micro_Draft4_Long_Enum_Short_Strings`	`17.730748918744084` ns/iter	`17.85001891194422` ns/iter	`0.99`
`Micro_Draft4_Type_Object`	`9.263366754551752` ns/iter	`9.173114914440312` ns/iter	`1.01`
`Micro_Draft4_Ref_Single_100`	`2633924.8951306506` ns/iter	`2623596.614232108` ns/iter	`1.00`
`Micro_Draft4_Compile_Ref_Many_Nested`	`1945835.105555539` ns/iter	`1951110.7737432271` ns/iter	`1.00`
`Micro_Draft4_Compile_Wrap`	`2656428.851711589` ns/iter	`2698103.176923129` ns/iter	`0.98`
`E2E_Compiler_adaptivecard`	`67309012.2000076` ns/iter	`69338861.69999823` ns/iter	`0.97`
`E2E_Compiler_ansible_meta`	`29988664.91304358` ns/iter	`30334453.173914563` ns/iter	`0.99`
`E2E_Compiler_aws_cdk`	`525230.9343396982` ns/iter	`532137.3205741624` ns/iter	`0.99`
`E2E_Compiler_babelrc`	`2890659.4197531813` ns/iter	`2924017.352696793` ns/iter	`0.99`
`E2E_Compiler_clang_format`	`19707457.8611086` ns/iter	`19763718.833334878` ns/iter	`1.00`
`E2E_Compiler_cmake_presets`	`27326645.71999521` ns/iter	`28241405.039998427` ns/iter	`0.97`
`E2E_Compiler_code_climate`	`2888597.8595042634` ns/iter	`2934039.393305615` ns/iter	`0.98`
`E2E_Compiler_cql2`	`14238900.734690849` ns/iter	`14348330.489794109` ns/iter	`0.99`
`E2E_Compiler_cspell`	`24117306.13793507` ns/iter	`24538274.551724527` ns/iter	`0.98`
`E2E_Compiler_cypress`	`4288743.3619635645` ns/iter	`4343653.409937755` ns/iter	`0.99`
`E2E_Compiler_deno`	`8320596.619046769` ns/iter	`8237328.282352257` ns/iter	`1.01`
`E2E_Compiler_dependabot`	`4258879.269938938` ns/iter	`4318888.493827093` ns/iter	`0.99`
`E2E_Compiler_draft_04`	`3118372.3100436777` ns/iter	`3056830.798245975` ns/iter	`1.02`
`E2E_Compiler_fabric_mod`	`5233734.940298718` ns/iter	`5298477.827067527` ns/iter	`0.99`
`E2E_Compiler_geojson`	`24059250.65517263` ns/iter	`24386745.241380252` ns/iter	`0.99`
`E2E_Compiler_gitpod_configuration`	`5388459.199999628` ns/iter	`5411076.492307879` ns/iter	`1.00`
`E2E_Compiler_helm_chart_lock`	`860713.1093367236` ns/iter	`870542.3533083274` ns/iter	`0.99`
`E2E_Compiler_importmap`	`425274.5296251584` ns/iter	`430849.8365206213` ns/iter	`0.99`
`E2E_Compiler_jasmine`	`1583858.209932635` ns/iter	`1594952.077448967` ns/iter	`0.99`
`E2E_Compiler_jshintrc`	`4797672.219177139` ns/iter	`4809352.896551963` ns/iter	`1.00`
`E2E_Compiler_jsconfig`	`22984843.399998073` ns/iter	`23274994.30000065` ns/iter	`0.99`
`E2E_Compiler_krakend`	`160150578.00001386` ns/iter	`164650086.7499867` ns/iter	`0.97`
`E2E_Compiler_lazygit`	`35519773.45000523` ns/iter	`35780292.7000023` ns/iter	`0.99`
`E2E_Compiler_lerna`	`1844894.448819162` ns/iter	`1848899.5118733593` ns/iter	`1.00`
`E2E_Compiler_nest_cli`	`8033849.954022795` ns/iter	`8094866.183907585` ns/iter	`0.99`
`E2E_Compiler_omc`	`166949398.249983` ns/iter	`176628066.50000107` ns/iter	`0.95`
`E2E_Compiler_omnisharp`	`7246739.680413063` ns/iter	`7302744.406250857` ns/iter	`0.99`
`E2E_Compiler_openapi`	`27158423.0384598` ns/iter	`27942603.03845966` ns/iter	`0.97`
`E2E_Compiler_pre_commit_hooks`	`5807090.355371528` ns/iter	`5840913.308333029` ns/iter	`0.99`
`E2E_Compiler_pulumi`	`4452464.146497385` ns/iter	`4483211.2516132835` ns/iter	`0.99`
`E2E_Compiler_semantic_release`	`1816891.7194803467` ns/iter	`1827579.3963728484` ns/iter	`0.99`
`E2E_Compiler_stale`	`1771511.9012659153` ns/iter	`1788416.5484694412` ns/iter	`0.99`
`E2E_Compiler_stylecop`	`6353834.01818217` ns/iter	`6305325.794643173` ns/iter	`1.01`
`E2E_Compiler_tmuxinator`	`2215608.753943426` ns/iter	`2247148.1474359334` ns/iter	`0.99`
`E2E_Compiler_ui5`	`50410756.57142561` ns/iter	`51316480.35714014` ns/iter	`0.98`
`E2E_Compiler_ui5_manifest`	`336060022.49996436` ns/iter	`348878302.99999225` ns/iter	`0.96`
`E2E_Compiler_unreal_engine_uproject`	`4998916.121428465` ns/iter	`5034408.906474238` ns/iter	`0.99`
`E2E_Compiler_vercel`	`13438286.307689397` ns/iter	`13495890.173076602` ns/iter	`1.00`
`E2E_Compiler_yamllint`	`493299.120848105` ns/iter	`503486.76135548577` ns/iter	`0.98`
`E2E_Evaluator_adaptivecard`	`30472.07720317407` ns/iter	`33854.89818558121` ns/iter	`0.90`
`E2E_Evaluator_ansible_meta`	`290472.1014789958` ns/iter	`297416.51110164257` ns/iter	`0.98`
`E2E_Evaluator_aws_cdk`	`58292.46084235293` ns/iter	`58246.94839402367` ns/iter	`1.00`
`E2E_Evaluator_babelrc`	`134604.4627150913` ns/iter	`132093.69369032243` ns/iter	`1.02`
`E2E_Evaluator_cerebrum_criminal_case`	`1362274.2509881612` ns/iter	`1447343.0224491179` ns/iter	`0.94`
`E2E_Evaluator_clang_format`	`107671.79978957713` ns/iter	`108293.60729717331` ns/iter	`0.99`
`E2E_Evaluator_cmake_presets`	`5167957.132812262` ns/iter	`5561455.84297505` ns/iter	`0.93`
`E2E_Evaluator_code_climate`	`232484.67429516232` ns/iter	`228006.9364820988` ns/iter	`1.02`
`E2E_Evaluator_cql2`	`308484.24186459597` ns/iter	`312566.5972284542` ns/iter	`0.99`
`E2E_Evaluator_cspell`	`641647.1431208518` ns/iter	`630195.5053763484` ns/iter	`1.02`
`E2E_Evaluator_cypress`	`176953.66658185516` ns/iter	`179073.09675784854` ns/iter	`0.99`
`E2E_Evaluator_deno`	`349521.9204602147` ns/iter	`356344.3435739756` ns/iter	`0.98`
`E2E_Evaluator_dependabot`	`502117.20500010415` ns/iter	`493760.281601093` ns/iter	`1.02`
`E2E_Evaluator_draft_04`	`8387211.559522711` ns/iter	`8988870.891890792` ns/iter	`0.93`
`E2E_Evaluator_fabric_mod`	`898809.3672680464` ns/iter	`914209.1495327872` ns/iter	`0.98`
`E2E_Evaluator_geojson`	`26732554.999999333` ns/iter	`26270966.888887413` ns/iter	`1.02`
`E2E_Evaluator_gitpod_configuration`	`273675.9404103913` ns/iter	`278084.69072164956` ns/iter	`0.98`
`E2E_Evaluator_helm_chart_lock`	`338415.9798174138` ns/iter	`338710.38072056195` ns/iter	`1.00`
`E2E_Evaluator_importmap`	`57887.38884734092` ns/iter	`57161.73072516397` ns/iter	`1.01`
`E2E_Evaluator_jasmine`	`138272.34191103288` ns/iter	`139071.815972912` ns/iter	`0.99`
`E2E_Evaluator_jshintrc`	`1003795.6169297944` ns/iter	`1018587.1459853399` ns/iter	`0.99`
`E2E_Evaluator_jsconfig`	`465381.4823216419` ns/iter	`466063.77483444306` ns/iter	`1.00`
`E2E_Evaluator_krakend`	`227560.39854598718` ns/iter	`234792.98330495288` ns/iter	`0.97`
`E2E_Evaluator_lazygit`	`164022.1647412045` ns/iter	`158549.9283869519` ns/iter	`1.03`
`E2E_Evaluator_lerna`	`147859.00931294262` ns/iter	`148621.67319276903` ns/iter	`0.99`
`E2E_Evaluator_nest_cli`	`227363.8131689866` ns/iter	`234222.0400640972` ns/iter	`0.97`
`E2E_Evaluator_omc`	`26845.679091613274` ns/iter	`27196.77348658866` ns/iter	`0.99`
`E2E_Evaluator_omnisharp`	`569112.3934693864` ns/iter	`562915.619313625` ns/iter	`1.01`
`E2E_Evaluator_openapi`	`13477974.018516961` ns/iter	`15199679.20833428` ns/iter	`0.89`
`E2E_Evaluator_pre_commit_hooks`	`529842.7246931863` ns/iter	`532562.1838291796` ns/iter	`0.99`
`E2E_Evaluator_pulumi`	`832409.0012272099` ns/iter	`838902.3500611368` ns/iter	`0.99`
`E2E_Evaluator_semantic_release`	`134926.49554954356` ns/iter	`135203.55867299624` ns/iter	`1.00`
`E2E_Evaluator_stale`	`168596.37205883182` ns/iter	`166488.41156786084` ns/iter	`1.01`
`E2E_Evaluator_stylecop`	`345544.4674876883` ns/iter	`329285.31070251093` ns/iter	`1.05`
`E2E_Evaluator_tmuxinator`	`126735.95730379493` ns/iter	`125110.30420769515` ns/iter	`1.01`
`E2E_Evaluator_ui5`	`639558.1212670726` ns/iter	`645379.5521126818` ns/iter	`0.99`
`E2E_Evaluator_ui5_manifest`	`3110645.0611356376` ns/iter	`3190685.5353984013` ns/iter	`0.97`
`E2E_Evaluator_unreal_engine_uproject`	`509217.7514663351` ns/iter	`500535.09929078293` ns/iter	`1.02`
`E2E_Evaluator_vercel`	`352435.5106911765` ns/iter	`344907.55632076703` ns/iter	`1.02`
`E2E_Evaluator_yamllint`	`12890.665666946079` ns/iter	`12638.851964870835` ns/iter	`1.02`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Benchmark (macos/llvm)

Details

Benchmark suite	Current: `9097a47`	Previous: `df64914`	Ratio
`E2E_Compiler_adaptivecard`	`84840208.39999858` ns/iter	`79432166.6250113` ns/iter	`1.07`
`E2E_Compiler_ansible_meta`	`30402056.818181995` ns/iter	`33311676.136360224` ns/iter	`0.91`
`E2E_Compiler_aws_cdk`	`497625.18559756764` ns/iter	`455225.5063829466` ns/iter	`1.09`
`E2E_Compiler_babelrc`	`4018508.2335329605` ns/iter	`3239522.282608406` ns/iter	`1.24`
`E2E_Compiler_clang_format`	`22641726.171429712` ns/iter	`17699009.615386948` ns/iter	`1.28`
`E2E_Compiler_cmake_presets`	`35313519.64705423` ns/iter	`36972320.21052418` ns/iter	`0.96`
`E2E_Compiler_code_climate`	`2648789.3686437784` ns/iter	`2342438.619230664` ns/iter	`1.13`
`E2E_Compiler_cql2`	`13229718.97872215` ns/iter	`22203857.71698079` ns/iter	`0.60`
`E2E_Compiler_cspell`	`21793263.0857149` ns/iter	`28686939.249998506` ns/iter	`0.76`
`E2E_Compiler_cypress`	`4078150.3687152225` ns/iter	`4699786.057692097` ns/iter	`0.87`
`E2E_Compiler_deno`	`7606040.509259586` ns/iter	`7807259.541666648` ns/iter	`0.97`
`E2E_Compiler_dependabot`	`3664328.797029692` ns/iter	`4255657.534759668` ns/iter	`0.86`
`E2E_Compiler_draft_04`	`2114709.141935765` ns/iter	`2321419.8322784365` ns/iter	`0.91`
`E2E_Compiler_fabric_mod`	`3914107.8680200865` ns/iter	`4502632.612903281` ns/iter	`0.87`
`E2E_Compiler_geojson`	`23691727.67857159` ns/iter	`23967721.71428552` ns/iter	`0.99`
`E2E_Compiler_gitpod_configuration`	`4975205.0898203775` ns/iter	`5393873.975459496` ns/iter	`0.92`
`E2E_Compiler_helm_chart_lock`	`661419.6146341971` ns/iter	`756321.0485960499` ns/iter	`0.87`
`E2E_Compiler_importmap`	`343726.7824513372` ns/iter	`357183.02913970576` ns/iter	`0.96`
`E2E_Compiler_jasmine`	`1163303.197417112` ns/iter	`1611933.4577114505` ns/iter	`0.72`
`E2E_Compiler_jshintrc`	`4146915.893518558` ns/iter	`4575199.72067088` ns/iter	`0.91`
`E2E_Compiler_jsconfig`	`22607890.793104727` ns/iter	`23612708.346154075` ns/iter	`0.96`
`E2E_Compiler_krakend`	`178582531.2500151` ns/iter	`199201616.5999985` ns/iter	`0.90`
`E2E_Compiler_lazygit`	`33776037.05555683` ns/iter	`40178738.44444213` ns/iter	`0.84`
`E2E_Compiler_lerna`	`1699977.1137856883` ns/iter	`1589102.2885771526` ns/iter	`1.07`
`E2E_Compiler_nest_cli`	`7345684.745282683` ns/iter	`6991617.082643989` ns/iter	`1.05`
`E2E_Compiler_omc`	`189083722.3333316` ns/iter	`196667479.2499816` ns/iter	`0.96`
`E2E_Compiler_omnisharp`	`6889451.449541862` ns/iter	`7209990.118644397` ns/iter	`0.96`
`E2E_Compiler_openapi`	`26175169.740739606` ns/iter	`26870708.322579987` ns/iter	`0.97`
`E2E_Compiler_pre_commit_hooks`	`4228612.304635869` ns/iter	`4943598.233576666` ns/iter	`0.86`
`E2E_Compiler_pulumi`	`3528857.900943087` ns/iter	`3889253.324467987` ns/iter	`0.91`
`E2E_Compiler_semantic_release`	`1396214.5209205681` ns/iter	`1891597.9391145203` ns/iter	`0.74`
`E2E_Compiler_stale`	`1367406.098540205` ns/iter	`2068637.1120839694` ns/iter	`0.66`
`E2E_Compiler_stylecop`	`5515575.829999762` ns/iter	`6951513.050504824` ns/iter	`0.79`
`E2E_Compiler_tmuxinator`	`1716414.266075429` ns/iter	`2154698.4440677897` ns/iter	`0.80`
`E2E_Compiler_ui5`	`56184946.428572856` ns/iter	`70440154.20000277` ns/iter	`0.80`
`E2E_Compiler_ui5_manifest`	`308549812.50001854` ns/iter	`479235250.00004476` ns/iter	`0.64`
`E2E_Compiler_unreal_engine_uproject`	`4555437.165775397` ns/iter	`5726731.825502886` ns/iter	`0.80`
`E2E_Compiler_vercel`	`15631360.177778535` ns/iter	`18836811.36111035` ns/iter	`0.83`
`E2E_Compiler_yamllint`	`370941.7894118119` ns/iter	`420978.33333336894` ns/iter	`0.88`
`E2E_Evaluator_adaptivecard`	`27233.969103210296` ns/iter	`40376.0558698418` ns/iter	`0.67`
`E2E_Evaluator_ansible_meta`	`213432.0540835986` ns/iter	`264682.590891065` ns/iter	`0.81`
`E2E_Evaluator_aws_cdk`	`53176.12079999208` ns/iter	`54259.57920000428` ns/iter	`0.98`
`E2E_Evaluator_babelrc`	`113143.92314539207` ns/iter	`128909.95728562426` ns/iter	`0.88`
`E2E_Evaluator_cerebrum_criminal_case`	`1141750.5052083104` ns/iter	`1645486.036842046` ns/iter	`0.69`
`E2E_Evaluator_clang_format`	`105644.5030231506` ns/iter	`124010.2528545305` ns/iter	`0.85`
`E2E_Evaluator_cmake_presets`	`5060465.960784515` ns/iter	`4982748.062016178` ns/iter	`1.02`
`E2E_Evaluator_code_climate`	`191809.84102564107` ns/iter	`240908.44369371954` ns/iter	`0.80`
`E2E_Evaluator_cql2`	`210845.20988487455` ns/iter	`321932.1452476625` ns/iter	`0.65`
`E2E_Evaluator_cspell`	`681927.5242121794` ns/iter	`799518.0054289169` ns/iter	`0.85`
`E2E_Evaluator_cypress`	`175008.3451285651` ns/iter	`261220.29657344669` ns/iter	`0.67`
`E2E_Evaluator_deno`	`296134.69135308557` ns/iter	`418727.46677471965` ns/iter	`0.71`
`E2E_Evaluator_dependabot`	`415025.4617699905` ns/iter	`645528.0409999205` ns/iter	`0.64`
`E2E_Evaluator_draft_04`	`6767430.7228916865` ns/iter	`8475396.739130162` ns/iter	`0.80`
`E2E_Evaluator_fabric_mod`	`749056.8276436351` ns/iter	`990628.4227053196` ns/iter	`0.76`
`E2E_Evaluator_geojson`	`19937943.548385307` ns/iter	`27325760.869564913` ns/iter	`0.73`
`E2E_Evaluator_gitpod_configuration`	`269987.81925129885` ns/iter	`225016.2545862928` ns/iter	`1.20`
`E2E_Evaluator_helm_chart_lock`	`359223.81010794564` ns/iter	`361699.83798605145` ns/iter	`0.99`
`E2E_Evaluator_importmap`	`54429.74160000631` ns/iter	`55518.578601771274` ns/iter	`0.98`
`E2E_Evaluator_jasmine`	`128020.66779374306` ns/iter	`138721.73665209106` ns/iter	`0.92`
`E2E_Evaluator_jshintrc`	`1087505.6764706257` ns/iter	`1255725.2171798926` ns/iter	`0.87`
`E2E_Evaluator_jsconfig`	`390522.6153392505` ns/iter	`467823.7381703921` ns/iter	`0.83`
`E2E_Evaluator_krakend`	`178783.00023239767` ns/iter	`238312.04310666092` ns/iter	`0.75`
`E2E_Evaluator_lazygit`	`187119.27028855553` ns/iter	`183538.54384212164` ns/iter	`1.02`
`E2E_Evaluator_lerna`	`173689.19631093802` ns/iter	`212212.12624584534` ns/iter	`0.82`
`E2E_Evaluator_nest_cli`	`216016.69039259496` ns/iter	`201974.20339487816` ns/iter	`1.07`
`E2E_Evaluator_omc`	`29219.72042687495` ns/iter	`21271.394519270318` ns/iter	`1.37`
`E2E_Evaluator_omnisharp`	`669380.3582089432` ns/iter	`650049.187751873` ns/iter	`1.03`
`E2E_Evaluator_openapi`	`12151278.846153865` ns/iter	`10325401.05357173` ns/iter	`1.18`
`E2E_Evaluator_pre_commit_hooks`	`441558.99419734144` ns/iter	`489398.94970611605` ns/iter	`0.90`
`E2E_Evaluator_pulumi`	`771554.4080628811` ns/iter	`645645.7173507134` ns/iter	`1.20`
`E2E_Evaluator_semantic_release`	`110326.08623658621` ns/iter	`114798.14699213057` ns/iter	`0.96`
`E2E_Evaluator_stale`	`151694.06375908246` ns/iter	`153285.68822742876` ns/iter	`0.99`
`E2E_Evaluator_stylecop`	`328226.3989748389` ns/iter	`316913.5757441005` ns/iter	`1.04`
`E2E_Evaluator_tmuxinator`	`110452.31073103844` ns/iter	`115542.49918255622` ns/iter	`0.96`
`E2E_Evaluator_ui5`	`603137.8627968058` ns/iter	`621573.223548139` ns/iter	`0.97`
`E2E_Evaluator_ui5_manifest`	`3615976.105504719` ns/iter	`3363554.9738218198` ns/iter	`1.08`
`E2E_Evaluator_unreal_engine_uproject`	`522845.19646971615` ns/iter	`494791.3868368418` ns/iter	`1.06`
`E2E_Evaluator_vercel`	`348186.1082949007` ns/iter	`327593.5022026459` ns/iter	`1.06`
`E2E_Evaluator_yamllint`	`16818.34219230956` ns/iter	`16334.972715201911` ns/iter	`1.03`
`Micro_Draft4_Meta_1_No_Callback`	`222.04352343306192` ns/iter	`236.9558354587404` ns/iter	`0.94`
`Micro_Draft4_Required_Properties`	`1010.625891333844` ns/iter	`952.057100428478` ns/iter	`1.06`
`Micro_Draft4_Many_Optional_Properties_Minimal_Match`	`25.74275511547596` ns/iter	`30.383366204536458` ns/iter	`0.85`
`Micro_Draft4_Few_Optional_Properties_Minimal_Match`	`13.564483778094107` ns/iter	`16.39375848777276` ns/iter	`0.83`
`Micro_Draft4_Items_Schema`	`520.0589169999148` ns/iter	`561.9678749999366` ns/iter	`0.93`
`Micro_Draft4_Nested_Object`	`3.2262738773770865` ns/iter	`3.6780328663650734` ns/iter	`0.88`
`Micro_Draft4_Properties_Triad_Optional`	`298.05079720043847` ns/iter	`377.18587786564035` ns/iter	`0.79`
`Micro_Draft4_Properties_Triad_Closed`	`243.34747575882193` ns/iter	`367.1702674317956` ns/iter	`0.66`
`Micro_Draft4_Properties_Triad_Required`	`418.677929878408` ns/iter	`471.16753239979636` ns/iter	`0.89`
`Micro_Draft4_Properties_Closed`	`67.02783271535306` ns/iter	`67.59525778363783` ns/iter	`0.99`
`Micro_Draft4_Non_Recursive_Ref`	`25.42904393525447` ns/iter	`29.439325512800405` ns/iter	`0.86`
`Micro_Draft4_Pattern_Properties_True`	`186.79875845138443` ns/iter	`211.09761196577108` ns/iter	`0.88`
`Micro_Draft4_Ref_To_Single_Property`	`17.614375810892255` ns/iter	`17.90068569277178` ns/iter	`0.98`
`Micro_Draft4_Additional_Properties_Type`	`64.38437618301003` ns/iter	`56.298168076895585` ns/iter	`1.14`
`Micro_Draft4_Nested_Oneof`	`68.99155568224312` ns/iter	`72.08078009250814` ns/iter	`0.96`
`Micro_Draft4_Short_Enum`	`10.927871955873393` ns/iter	`12.006516861978694` ns/iter	`0.91`
`Micro_Draft4_Long_Enum`	`16.553939986889784` ns/iter	`18.990022053900734` ns/iter	`0.87`
`Micro_Draft4_Long_Enum_Short_Strings`	`11.972093020483872` ns/iter	`16.63824566100809` ns/iter	`0.72`
`Micro_Draft4_Type_Object`	`7.6074729048155385` ns/iter	`7.18840214282979` ns/iter	`1.06`
`Micro_Draft4_Ref_Single_100`	`2418517.287234157` ns/iter	`2179598.421926765` ns/iter	`1.11`
`Micro_Draft4_Compile_Ref_Many_Nested`	`1664643.5421992645` ns/iter	`1777068.5099501645` ns/iter	`0.94`
`Micro_Draft4_Compile_Wrap`	`2363040.3531467994` ns/iter	`2689597.864768564` ns/iter	`0.88`
`Micro_Draft6_Property_Names`	`126.83727417998918` ns/iter	`123.4740952598884` ns/iter	`1.03`
`Micro_Draft6_Compile_FHIR`	`16784275957.999966` ns/iter
`Micro_Draft7_If_Then_Else`	`52.37086284754559` ns/iter	`37.106670271963715` ns/iter	`1.41`
`Micro_2019_09_Unevaluated_Properties`	`54.7627474546825` ns/iter	`52.68633075739956` ns/iter	`1.04`
`Micro_2019_09_Compile_Wrap`	`516984667.0000311` ns/iter	`430195458.50000894` ns/iter	`1.20`
`Micro_2019_09_KrakenD_Linter_Check`	`1079716291.9999437` ns/iter	`1180295624.9999852` ns/iter	`0.91`
`Micro_2019_09_KrakenD_Linter_Apply`	`10809200708.000048` ns/iter	`11039756291.99988` ns/iter	`0.98`
`Micro_2020_12_Dynamic_Ref`	`333.35592775437374` ns/iter	`368.22256392692816` ns/iter	`0.91`
`Micro_2020_12_Dynamic_Ref_Single`	`7.92974154182411` ns/iter	`8.233574446334323` ns/iter	`0.96`
`Micro_2020_12_Simple_Output_Mask`	`172914.09603572442` ns/iter	`185754.00826445603` ns/iter	`0.93`
`Micro_2020_12_Simple_Output_Annotations`	`209866.0263600889` ns/iter	`212207.9142218679` ns/iter	`0.99`
`Micro_2020_12_Compile_NonCircular_Shared_Refs`	`1050371.1240310855` ns/iter	`1199920.3057229123` ns/iter	`0.88`

This comment was automatically generated by workflow using github-action-benchmark.

Use SHA-256 when checking dependency integrity in src/configuration

9097a47

Signed-off-by: Juan Cruz Viotti <jv@jviotti.com>

augmentcode bot reviewed Feb 9, 2026

View reviewed changes

src/configuration/lock.cc Show resolved Hide resolved

cubic-dev-ai bot reviewed Feb 9, 2026

View reviewed changes

test/configuration/configuration_lock_test.cc Show resolved Hide resolved

github-actions bot reviewed Feb 9, 2026

View reviewed changes

jviotti merged commit 7019b65 into main Feb 9, 2026
14 checks passed

jviotti deleted the sha-dependencies branch February 9, 2026 18:22

github-actions bot reviewed Feb 9, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Use SHA-256 when checking dependency integrity in `src/configuration`#622

Use SHA-256 when checking dependency integrity in `src/configuration`#622
jviotti merged 1 commit intomainfrom
sha-dependencies

jviotti commented Feb 9, 2026

Uh oh!

augmentcode bot commented Feb 9, 2026

Uh oh!

augmentcode bot left a comment

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

Uh oh!

github-actions bot left a comment

Uh oh!

github-actions bot left a comment

Uh oh!

Uh oh!

github-actions bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

jviotti commented Feb 9, 2026

Uh oh!

augmentcode bot commented Feb 9, 2026

Uh oh!

augmentcode bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Benchmark (linux/llvm)

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Benchmark (linux/gcc)

Uh oh!

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Benchmark (macos/llvm)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant