1
{
2
  "$schema": "deps.schema.json",
3
  "repositories": [
4
    {
5
      "name": "ada-url",
6
      "type": "bazel_dep"
7
    },
8
    // BoringSSL is more likely to break than other dependencies, because our downstream build uses
9
    // a custom-built version of BoringSSL in FIPS mode.
10
    {
11
      "name": "boringssl",
12
      "type": "github_release",
13
      "use_bazel_dep": true,
14
      "owner": "google",
15
      "repo": "boringssl",
16
      "repo_name": "ssl",
17
      "freeze_version": "0.20251002.0",
18
      "patches": [
19
        "//:patches/boringssl/0001-Expose-libdecrepit-so-NodeJS-can-use-it-for-ncrypto.patch"
20
      ]
21
    },
22
    {
23
      "name": "brotli",
24
      "type": "bazel_dep"
25
    },
26
    {
27
      "name": "zstd",
28
      "type": "bazel_dep"
29
    },
30
    {
31
      "name": "tcmalloc",
32
      "type": "bazel_dep"
33
    },
34
    {
35
      "name": "capnp-cpp",
36
      "type": "github_tarball",
37
      "owner": "capnproto",
38
      "repo": "capnproto",
39
      "branch": "v2",
40
      "extra_strip_prefix": "/c++"
41
    },
42
    // We want to avoid version skew with v8, so we use identical versions.
43
    {
44
      "name": "dragonbox",
45
      "type": "github_tarball",
46
      "build_file_content": "cc_library(name = 'dragonbox', hdrs = glob(['include/dragonbox/*.h']), visibility = ['//visibility:public'], include_prefix = 'third_party/dragonbox/src')",
47
      "owner": "jk-jeon",
48
      "repo": "dragonbox",
49
      "freeze_commit": "beeeef91cf6fef89a4d4ba5e95d47ca64ccb3a44"
50
    },
51
    // We want to avoid version skew with v8, so we use identical versions.
52
    {
53
      "name": "fast_float",
54
      "type": "github_tarball",
55
      "use_bazel_dep": true,
56
      "owner": "fastfloat",
57
      "repo": "fast_float",
58
      "branch": "main",
59
      "freeze_commit": "cb1d42aaa1e14b09e1452cfdef373d051b8c02a4",
60
      "build_file_content": "cc_library(name = 'fast_float', hdrs = glob(['include/fast_float/*.h']), visibility = ['//visibility:public'], include_prefix = 'third_party/fast_float/src')",
61
      "use_module_bazel_from_bcr": "8.0.2"
62
    },
63
    // We want to avoid version skew with v8, so we use identical versions.
64
    {
65
      "name": "fp16",
66
      "type": "github_tarball",
67
      "use_bazel_dep": true,
68
      "owner": "Maratyszcza",
69
      "repo": "FP16",
70
      "freeze_commit": "3d2de1816307bac63c16a297e8c4dc501b4076df",
71
      "build_file_content": "exports_files(glob(['**']))",
72
      "use_module_bazel_from_bcr": "0.0.0-20210320-0a92994"
73
    },
74
    // We want to avoid version skew with v8, so we use identical versions.
75
    {
76
      "name": "highway",
77
      "type": "github_tarball",
78
      "use_bazel_dep": true,
79
      "owner": "google",
80
      "repo": "highway",
81
      "freeze_commit": "84379d1c73de9681b54fbe1c035a23c7bd5d272d",
82
      "use_module_bazel_from_bcr": "1.3.0"
83
    },
84
    {
85
      "name": "nbytes",
86
      "type": "github_release",
87
      "owner": "nodejs",
88
      "repo": "nbytes",
89
      "build_file": "//:build/BUILD.nbytes"
90
    },
91
    {
92
      "name": "ncrypto",
93
      "type": "github_release",
94
      "owner": "nodejs",
95
      "repo": "ncrypto"
96
    },
97
    {
98
      "name": "perfetto",
99
      "type": "github_release",
100
      "use_bazel_dep": true,
101
      "owner": "google",
102
      "repo": "perfetto",
103
      "patches": [
104
        "//:patches/perfetto/0001-Don-t-attempt-to-use-rules_android.patch",
105
        "//:patches/perfetto/0002-disable-info-level-logging.patch"
106
      ]
107
    },
108
    {
109
      "name": "simdutf",
110
      "type": "github_release",
111
      "owner": "simdutf",
112
      "repo": "simdutf",
113
      "build_file": "//:build/BUILD.simdutf",
114
      "file_regex": "singleheader.zip"
115
    },
116
    // In theory this should match the version specified in V8 DEPS, but in practice we should get
117
    // the latest commit – zlib is very stable and its API has not changed in a long time, but we
118
    // want to pick up any bug fixes, security patches and performance improvements more quickly
119
    // than we would through V8 updates.
120
    {
121
      "name": "zlib",
122
      "type": "git_clone",
123
      "use_bazel_dep": true,
124
      "url": "https://chromium.googlesource.com/chromium/src/third_party/zlib.git",
125
      "branch": "main",
126
      "build_file": "//:build/BUILD.zlib",
127
      "patches": ["//:patches/zlib/0001-Add-dummy-MODULE.bazel.patch"]
128
    },
129
    {
130
      "name": "workerd-cxx",
131
      "type": "github_tarball",
132
      "owner": "cloudflare",
133
      "repo": "workerd-cxx",
134
      "branch": "master"
135
    }
136
  ]
137
}