Update dependency hermetic_cc_toolchain to v4.2.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hermetic_cc_toolchain	bazel_dep	minor	4.1.0 → 4.2.0

---

Release Notes

uber/hermetic_cc_toolchain (hermetic_cc_toolchain)

v4.2.0

WORKSPACE boilerplate

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

HERMETIC_CC_TOOLCHAIN_VERSION = "v4.2.0"

http_archive(
    name = "hermetic_cc_toolchain",
    sha256 = "b0822696a8660a15da53dee54b71e523934411d13bcc1e464b82046045ad4ee6",
    urls = [
        "https://mirror.bazel.build/github.com/uber/hermetic_cc_toolchain/releases/download/{0}/hermetic_cc_toolchain-{0}.tar.gz".format(HERMETIC_CC_TOOLCHAIN_VERSION),
        "https://github.com/uber/hermetic_cc_toolchain/releases/download/{0}/hermetic_cc_toolchain-{0}.tar.gz".format(HERMETIC_CC_TOOLCHAIN_VERSION),
    ],
)

load("@​hermetic_cc_toolchain//toolchain:defs.bzl", zig_toolchains = "toolchains")

# Plain zig_toolchains() will pick reasonable defaults. See

# toolchain/defs.bzl:toolchains on how to change the Zig SDK version and
# download URL.
zig_toolchains()

What's Changed

• Add extra_{exec,target}_compatible_with extensions by @​ddunl in #​240
• Adding SONAME to share libraries by @​linzhp in #​250
• Resolve per-user zig cache directory at runtime by @​ctcjab in #​254
• Upgrade Zig to 0.14.0, add glibc 2.39-2.41 by @​zpon in #​256

New Contributors

• @​ddunl made their first contribution in #​240
• @​AlexTereshenkov made their first contribution in #​221
• @​ctcjab made their first contribution in #​254
• @​zpon made their first contribution in #​256

Full Changelog: uber/hermetic_cc_toolchain@v4.1.0...v4.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in af784bb...62e1001 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
C & C++		Jul 25, 2026 7:34p.m.	Review ↗
Docker		Jul 25, 2026 7:34p.m.	Review ↗
Python		Jul 25, 2026 7:34p.m.	Review ↗
Secrets		Jul 25, 2026 7:34p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.