fix windows build and update dependencies

Author: Parzival-3141

build.zig

@@ -419,24 +419,27 @@ pub fn build(b: *std.Build) !void {
 
     const test_step = b.step("test", "Run core unit tests (requires python)");
     {
-        // Fix the test fixture file permissions. This is necessary because Zig does
-        // not respect the execute permission on arbitrary files it extracts from dependencies.
-        // Since we need those files to have the execute permission set for tests to
-        // run successfully, we need to patch them before we bake them into the
-        // test executable. While modifying the global cache is hacky, it wont break
-        // hashes for the same reason above.
-        for ([_]std.Build.LazyPath{
-            libgit_root.path(b, "tests/resources/filemodes/exec_on"),
-            libgit_root.path(b, "tests/resources/filemodes/exec_off2on_staged"),
-            libgit_root.path(b, "tests/resources/filemodes/exec_off2on_workdir"),
-            libgit_root.path(b, "tests/resources/filemodes/exec_on_untracked"),
-        }) |lazy| {
-            const path = lazy.getPath2(b, null);
-            const file = try std.fs.cwd().openFile(path, .{
-                .mode = .read_write,
-            });
-            defer file.close();
-            try file.setPermissions(.{ .inner = .{ .mode = 0o755 } });
+        if (@import("builtin").os.tag != .windows) {
+
+            // Fix the test fixture file permissions. This is necessary because Zig does
+            // not respect the execute permission on arbitrary files it extracts from dependencies.
+            // Since we need those files to have the execute permission set for tests to
+            // run successfully, we need to patch them before we bake them into the
+            // test executable. While modifying the global cache is hacky, it wont break
+            // hashes for the same reason above. -blurrycat 3/31/25
+            for ([_]std.Build.LazyPath{
+                libgit_root.path(b, "tests/resources/filemodes/exec_on"),
+                libgit_root.path(b, "tests/resources/filemodes/exec_off2on_staged"),
+                libgit_root.path(b, "tests/resources/filemodes/exec_off2on_workdir"),
+                libgit_root.path(b, "tests/resources/filemodes/exec_on_untracked"),
+            }) |lazy| {
+                const path = lazy.getPath2(b, null);
+                const file = try std.fs.cwd().openFile(path, .{
+                    .mode = .read_write,
+                });
+                defer file.close();
+                file.setPermissions(.{ .inner = .{ .mode = 0o755 } });
+            }
         }
 
         const gen_cmd = b.addSystemCommand(&.{"python3"});

build.zig.zon

@@ -9,13 +9,12 @@
             .hash = "N-V-__8AAJbmLwHHxHDWkz0i6WIR6FpNe6tXSLzaPuWtvBBg",
         },
         .openssl = .{
-            .url = "https://github.com/allyourcodebase/openssl/archive/refs/tags/3.3.1-1.tar.gz",
-            .hash = "openssl-3.3.1-1-AAAAACi3ZAB8QM76OP6Q5CMN-6Llx2s34e42YCUSytj_",
+            .url = "git+https://github.com/allyourcodebase/openssl.git#f348124c5382bcc377f1b3277357cbf2ed2fb8db",
+            .hash = "openssl-3.3.1-2-TC9C3Se3ZACF5WO_CjoD7Bt_X94oCsAAbbwhOp1rTZBe",
             .lazy = true,
         },
         .mbedtls = .{
-            // @Temporary waiting for patch to be upstreamed (https://github.com/allyourcodebase/mbedtls/pull/2)
-            .url = "git+https://github.com/Parzival-3141/mbedtls#b9ec01cbaf29e19f8fc3b40e541bd86a6878027f",
+            .url = "git+https://github.com/allyourcodebase/mbedtls#7d862fe61ff2eac37ee54e1e017fc287bed1cd7a",
             .hash = "mbedtls-3.6.2-E4NURzYUAABWLBwHJWx_ppb_j2kDSoGfCfR2rI2zs9dz",
             .lazy = true,
         },