Repository navigation
chore: bump wasmtime to 49.0.4 - #836
Merged
Merged
Conversation
cargo-deny rejects 49.0.3 for two new Wasmtime advisories, RUSTSEC-2026-0378 and RUSTSEC-2026-0379; 49.0.4 is the patched release they name. No code changes. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Twxau844tMTwyHpQJEbmBo
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The manifest and lockfile updates are consistent, with no blocking issues identified.
No open issues 🎉
What changed in this PR
Updates the sync plugin’s Wasmtime dependencies to address the reported security advisories and restore dependency checks.
Changes:
- Bumps
wasmtimeandwasmtime-wasito 49.0.4. - Updates related lockfile packages and checksums without application code changes.
| File | Description |
|---|---|
| Cargo.toml | Raises both Wasmtime dependency versions to 49.0.4. |
| Cargo.lock | Aligns Wasmtime, Cranelift, Pulley, and Wiggle packages. |
Review effort: Balanced
raymondk
added a commit
that referenced
this pull request
Oct 20, 2026
* fix(cycles): --json and --quiet imply --yes in icp cycles buy A machine-readable run has nobody to ask. Before, `icp cycles buy --json` or `-q` without `--yes` printed the quote and prompted on a terminal, and refused to create the order without one; now both behave as `--yes --json` and `--yes -q` already did: no quote on stderr, no prompt, no refusal, just the stdout data. A plain human run still prompts, and still refuses off a terminal unless `--yes` is given. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Twxau844tMTwyHpQJEbmBo * chore: bump wasmtime to 49.0.4 (#836) cargo-deny rejects 49.0.3 for two new Wasmtime advisories, RUSTSEC-2026-0378 and RUSTSEC-2026-0379; 49.0.4 is the patched release they name. No code changes. Claude-Session: https://claude.ai/code/session_01Twxau844tMTwyHpQJEbmBo Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Bumps
wasmtimeandwasmtime-wasifrom 49.0.3 to 49.0.4. Thedependencies:requiredcheck fails on every PR since today because cargo-deny rejects 49.0.3 for two new Wasmtime advisories (RUSTSEC-2026-0378 and RUSTSEC-2026-0379); 49.0.4 is the patched release they name.main's own weekly run last passed on 2026-10-19, before the advisories were published.No code changes. The lockfile also moves the Wasmtime family's internal crates (cranelift 0.136.4, pulley 49.0.4, wiggle 49.0.4) to the versions 49.0.4 pins.
Test plan
cargo deny check advisories bans licenses sourcespasses locally (the exact command CI runs)cargo build --bin icpcargo test -p icp-sync-plugin(the only wasmtime user)dependencies:requiredgoes green in CI🤖 Generated with Claude Code
https://claude.ai/code/session_01Twxau844tMTwyHpQJEbmBo