From 9a1156dd62dee3a29b7eddc9910c39aa908d20ec Mon Sep 17 00:00:00 2001
From: Paolo Tranquilli <redsun82@github.com>
Date: Wed, 1 Apr 2026 14:25:23 +0200
Subject: [PATCH] Vendor `PicoSHA2` into LFS
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The upstream repo (`okdshin/PicoSHA2`) is a personal GitHub account,
at risk of suspension — the same scenario that hit `rules_antlr`.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 swift/third_party/load.bzl                               | 9 +++++----
 ...SHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst | 3 +++
 2 files changed, 8 insertions(+), 4 deletions(-)
 create mode 100644 swift/third_party/resources/PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst

diff --git a/swift/third_party/load.bzl b/swift/third_party/load.bzl
index f2ebfa748776..676c5f0ce847 100644
--- a/swift/third_party/load.bzl
+++ b/swift/third_party/load.bzl
@@ -81,12 +81,13 @@ def load_dependencies(module_ctx):
         _load_prebuilt(plat)
         _load_resource_dir(plat)
 
-    _github_archive(
+    # Vendored from okdshin/PicoSHA2 (personal account).
+    # To update (from the internal repo): resources/third_party/vendor.sh -o ql/swift/third_party/resources okdshin/PicoSHA2 <new_commit>
+    lfs_archive(
         name = "picosha2",
+        src = "//swift/third_party/resources:PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst",
+        strip_prefix = "PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2",
         build_file = _build % "picosha2",
-        repository = "okdshin/PicoSHA2",
-        commit = "27fcf6979298949e8a462e16d09a0351c18fcaf2",
-        sha256 = "d6647ca45a8b7bdaf027ecb68d041b22a899a0218b7206dee755c558a2725abb",
     )
 
     _github_archive(
diff --git a/swift/third_party/resources/PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst b/swift/third_party/resources/PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst
new file mode 100644
index 000000000000..d8d7e0732cb0
--- /dev/null
+++ b/swift/third_party/resources/PicoSHA2-27fcf6979298949e8a462e16d09a0351c18fcaf2.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3082b319e6281be54b77b7619a38e5718266fca5e693bc4e23dd76bb17bc6420
+size 8159