From b732e2f010bacb9d5a1272d03c0125a779343a7a Mon Sep 17 00:00:00 2001 From: Hubert Bugaj Date: Sat, 15 Nov 2025 17:05:06 -0300 Subject: [PATCH 1/3] Revert "fix: ignore RUSTSEC-2025-0118 (wasmtime in FVM) (#6247)" This reverts commit e8f322b283636dac1ccbdb77b047e768247c2ec3. --- deny.toml | 1 - 1 file changed, 1 deletion(-) diff --git a/deny.toml b/deny.toml index 5321efee4444..72f4071e926d 100644 --- a/deny.toml +++ b/deny.toml @@ -6,7 +6,6 @@ ignore = [ "RUSTSEC-2022-0061", # parity-wasm is deprecated "RUSTSEC-2024-0436", # paste is unmaintained "RUSTSEC-2025-0046", # wasmtime issue, this needs to be resolved in FVM - "RUSTSEC-2025-0118", # wasmtime issue, this needs to be resolved in FVM ] [licenses] From e23fcecf39b535d589c4af3d713573f23a15b524 Mon Sep 17 00:00:00 2001 From: Hubert Bugaj Date: Sat, 15 Nov 2025 17:07:10 -0300 Subject: [PATCH 2/3] cargo update --- Cargo.lock | 531 +++++++++++++++++++++++++++-------------------------- 1 file changed, 270 insertions(+), 261 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 22d29b9b17b8..eddae06ed66e 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2,22 +2,13 @@ # It is not intended for manual editing. version = 4 -[[package]] -name = "addr2line" -version = "0.24.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1" -dependencies = [ - "gimli 0.31.1", -] - [[package]] name = "addr2line" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b" dependencies = [ - "gimli 0.32.3", + "gimli", ] [[package]] @@ -169,22 +160,22 @@ dependencies = [ [[package]] name = "anstyle-query" -version = "1.1.4" +version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9e231f6134f61b71076a3eab506c379d4f36122f2af15a9ff04415ea4c3339e2" +checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] name = "anstyle-wincon" -version = "3.0.10" +version = "3.0.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3e0633414522a32ffaac8ac6cc8f748e090c5717661fddeea04219e2344f5f2a" +checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -496,9 +487,9 @@ checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8" [[package]] name = "aws-lc-rs" -version = "1.14.1" +version = "1.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "879b6c89592deb404ba4dc0ae6b58ffd1795c78991cbb5b8bc441c48a070440d" +checksum = "5932a7d9d28b0d2ea34c6b3779d35e3dd6f6345317c34e73438c4f1f29144151" dependencies = [ "aws-lc-sys", "untrusted 0.7.1", @@ -507,9 +498,9 @@ dependencies = [ [[package]] name = "aws-lc-sys" -version = "0.32.3" +version = "0.33.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "107a4e9d9cab9963e04e84bb8dee0e25f2a987f9a8bad5ed054abd439caa8f8c" +checksum = "1826f2e4cfc2cd19ee53c42fbf68e2f81ec21108e0b7ecf6a71cf062137360fc" dependencies = [ "bindgen 0.72.1", "cc", @@ -520,9 +511,9 @@ dependencies = [ [[package]] name = "axum" -version = "0.8.6" +version = "0.8.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8a18ed336352031311f4e0b4dd2ff392d4fbb370777c9d18d7fc9d7359f73871" +checksum = "5b098575ebe77cb6d14fc7f32749631a6e44edbef6b796f89b020e99ba20d425" dependencies = [ "axum-core", "bytes", @@ -587,7 +578,7 @@ version = "0.3.76" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bb531853791a215d7c62a30daf0dde835f381ab5de4589cfe7c649d2cbe92bd6" dependencies = [ - "addr2line 0.25.1", + "addr2line", "cfg-if", "libc", "miniz_oxide", @@ -1010,9 +1001,9 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" [[package]] name = "bytes" -version = "1.10.1" +version = "1.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a" +checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3" dependencies = [ "serde", ] @@ -1037,9 +1028,9 @@ dependencies = [ [[package]] name = "cargo_metadata" -version = "0.23.0" +version = "0.23.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "981a6f317983eec002839b90fae7411a85621410ae591a9cab2ecf5cb5744873" +checksum = "ef987d17b0a113becdd19d3d0022d04d7ef41f9efe4f3fb63ac44ba61df3ade9" dependencies = [ "camino", "cargo-platform", @@ -1093,9 +1084,9 @@ dependencies = [ [[package]] name = "cc" -version = "1.2.45" +version = "1.2.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "35900b6c8d709fb1d854671ae27aeaa9eec2f8b01b364e1619a40da3e6fe2afe" +checksum = "b97463e1064cb1b1c1384ad0a0b9c8abd0988e2a91f52606c80ef14aadb63e36" dependencies = [ "find-msvc-tools", "jobserver", @@ -1564,33 +1555,36 @@ dependencies = [ [[package]] name = "cranelift-assembler-x64" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3e4b56ebe316895d3fa37775d0a87b0c889cc933f5c8b253dbcc7c7bcb7fe7e4" +checksum = "90431884c6dd00d473229135f69cb43a2257c12f05ca478f994f4778c0607f28" dependencies = [ "cranelift-assembler-x64-meta", ] [[package]] name = "cranelift-assembler-x64-meta" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "95cabbc01dfbd7dcd6c329ca44f0212910309c221797ac736a67a5bc8857fe1b" +checksum = "7e023ca3e629d01bb1215a0846099dfd9065060c07e4727b2e4d49060c2a6e4b" +dependencies = [ + "cranelift-srcgen", +] [[package]] name = "cranelift-bforest" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "76ffe46df300a45f1dc6f609dc808ce963f0e3a2e971682c479a2d13e3b9b8ef" +checksum = "a61a409e5403fe1b7d4f49fecde2a950790c8dfed897c60da0dfb30af7689011" dependencies = [ "cranelift-entity", ] [[package]] name = "cranelift-bitset" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b265bed7c51e1921fdae6419791d31af77d33662ee56d7b0fa0704dc8d231cab" +checksum = "aaa87718ca965f169ee43a7b5f89e46e06f93229adc62949d23fcfa8d2590d05" dependencies = [ "serde", "serde_derive", @@ -1598,9 +1592,9 @@ dependencies = [ [[package]] name = "cranelift-codegen" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e606230a7e3a6897d603761baee0d19f88d077f17b996bb5089488a29ae96e41" +checksum = "134d091c729077b82b14cfad1ed9df542901175c70eefa453c26a375bd1de1c8" dependencies = [ "bumpalo", "cranelift-assembler-x64", @@ -1611,7 +1605,7 @@ dependencies = [ "cranelift-control", "cranelift-entity", "cranelift-isle", - "gimli 0.31.1", + "gimli", "hashbrown 0.15.5", "log", "pulley-interpreter", @@ -1620,39 +1614,42 @@ dependencies = [ "serde", "smallvec", "target-lexicon", + "wasmtime-internal-math", ] [[package]] name = "cranelift-codegen-meta" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8a63bffafc23bc60969ad528e138788495999d935f0adcfd6543cb151ca8637d" +checksum = "9c1529f8643e11f6c5d3954295f3b3923ab251cd3220d0eb034115345e0c953e" dependencies = [ - "cranelift-assembler-x64", + "cranelift-assembler-x64-meta", "cranelift-codegen-shared", + "cranelift-srcgen", + "heck 0.5.0", "pulley-interpreter", ] [[package]] name = "cranelift-codegen-shared" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "af50281b67324b58e843170a6a5943cf6d387c06f7eeacc9f5696e4ab7ae7d7e" +checksum = "3a17d7ff63eb0ef851174f4c31a073bcc5886664327e00416dc4fd01aa0d00a8" [[package]] name = "cranelift-control" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8c20c1b38d1abfbcebb0032e497e71156c0e3b8dcb3f0a92b9863b7bcaec290c" +checksum = "209b093d693e67630415600597d4d5faea798315422b7648862213b58668fe04" dependencies = [ "arbitrary", ] [[package]] name = "cranelift-entity" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0c2c67d95507c51b4a1ff3f3555fe4bfec36b9e13c1b684ccc602736f5d5f4a2" +checksum = "b48f2b24fc3eec954a1d17e5a9c04957ba24f6202dbaa8df52472ba7624e854a" dependencies = [ "cranelift-bitset", "serde", @@ -1661,9 +1658,9 @@ dependencies = [ [[package]] name = "cranelift-frontend" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4e002691cc69c38b54fc7ec93e5be5b744f627d027031d991cc845d1d512d0ce" +checksum = "ca8aea478d61a71f7f56d19ee2642359c00fc2fa54bc0db0d6c5edd52f1d3efd" dependencies = [ "cranelift-codegen", "log", @@ -1673,21 +1670,27 @@ dependencies = [ [[package]] name = "cranelift-isle" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e93588ed1796cbcb0e2ad160403509e2c5d330d80dd6e0014ac6774c7ebac496" +checksum = "da142f3cc42beaa44bf2558567751816c6adf776f2cfc40ba79ff9e5c232d808" [[package]] name = "cranelift-native" -version = "0.118.0" +version = "0.123.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e5b09bdd6407bf5d89661b80cf926ce731c9e8cc184bf49102267a2369a8358e" +checksum = "be7b57410e388de0828fa9178e8693abe996bf2356a7f55be35719ee5b162755" dependencies = [ "cranelift-codegen", "libc", "target-lexicon", ] +[[package]] +name = "cranelift-srcgen" +version = "0.123.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bd9641751da85481f0e04033228403eca2becd2a3d9aff56f6c8bed8b9147bfc" + [[package]] name = "crc32fast" version = "1.5.0" @@ -1814,9 +1817,9 @@ dependencies = [ [[package]] name = "crypto-common" -version = "0.1.6" +version = "0.1.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3" +checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" dependencies = [ "generic-array 0.14.7", "rand_core 0.6.4", @@ -2017,7 +2020,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8d162beedaa69905488a8da94f5ac3edb4dd4788b732fadb7bd120b2625c1976" dependencies = [ "data-encoding", - "syn 1.0.109", + "syn 2.0.110", ] [[package]] @@ -2638,9 +2641,9 @@ dependencies = [ "frc42_dispatch", "frc42_macros", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2653,9 +2656,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e398382be2372a2bf6842b0d0fb646dc20e254f1d4daf6004453c50a41a66a79" dependencies = [ "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2673,9 +2676,9 @@ dependencies = [ "frc46_token", "fvm_ipld_blockstore", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "lazy_static", "num-derive", "num-traits", @@ -2690,8 +2693,8 @@ checksum = "5a419481fff455b7687f3f075c1cfd4af782602ea357b3c5ca40385ffc47d60e" dependencies = [ "fil_actor_evm_state", "fvm_ipld_encoding", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2704,8 +2707,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f1f6eddf3d7fca57d260d4face2d3b734acde6f957e7f347e9bf33d6e59d9dcd" dependencies = [ "fvm_ipld_encoding", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2722,8 +2725,8 @@ dependencies = [ "frc42_dispatch", "frc42_macros", "fvm_ipld_encoding", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "hex", "hex-literal", "num-derive", @@ -2744,9 +2747,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2768,9 +2771,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "ipld-core", "lazy_static", "multihash-codetable", @@ -2798,9 +2801,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "itertools 0.14.0", "lazy_static", "multihash-codetable", @@ -2825,9 +2828,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "indexmap 2.12.0", "integer-encoding", "num-derive", @@ -2846,9 +2849,9 @@ dependencies = [ "frc42_dispatch", "frc42_macros", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "num-derive", "num-traits", "serde", @@ -2868,9 +2871,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "integer-encoding", "lazy_static", "num-derive", @@ -2886,9 +2889,9 @@ checksum = "ba76b8f9a14e42658566bd3f675fb08e11fdb6d8426d8cc9c2310dd4ef39c11d" dependencies = [ "fil_actors_shared", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "lazy_static", "num-derive", "num-traits", @@ -2905,8 +2908,8 @@ dependencies = [ "fil_actors_shared", "fvm_ipld_blockstore", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 4.7.5", "multihash-codetable", "num-derive", "num-traits", @@ -2926,9 +2929,9 @@ dependencies = [ "frc42_macros", "fvm_ipld_blockstore", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "log", "num-derive", "num-traits", @@ -2950,9 +2953,9 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "integer-encoding", "itertools 0.14.0", "lazy_static", @@ -3055,9 +3058,9 @@ dependencies = [ [[package]] name = "find-msvc-tools" -version = "0.1.4" +version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "52051878f80a721bb68ebfbc930e07b65ba72f2da88968ea5c06fd6ca3d3a127" +checksum = "3a3076410a55c90011c298b04d0cfa770b00fa04e1e3c97d3f6c9de105a03844" [[package]] name = "fixed-hash" @@ -3212,15 +3215,15 @@ dependencies = [ "flume 0.11.1", "fs_extra", "futures", - "fvm 2.11.2", - "fvm 3.13.2", - "fvm 4.7.4", + "fvm 2.11.3", + "fvm 3.13.3", + "fvm 4.7.5", "fvm_actor_utils", "fvm_ipld_blockstore", "fvm_ipld_encoding", - "fvm_shared 2.11.2", - "fvm_shared 3.13.2", - "fvm_shared 4.7.4", + "fvm_shared 2.11.3", + "fvm_shared 3.13.3", + "fvm_shared 4.7.5", "get-size2", "gethostname", "git-version", @@ -3400,7 +3403,7 @@ dependencies = [ "frc42_macros", "fvm_ipld_encoding", "fvm_sdk", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "thiserror 2.0.17", ] @@ -3411,7 +3414,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "af72029ed0fafb01fda2d7f631b55f6916ad06e310a7b4241b933796b34d510c" dependencies = [ "fvm_sdk", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "thiserror 2.0.17", ] @@ -3441,7 +3444,7 @@ dependencies = [ "fvm_ipld_encoding", "fvm_ipld_hamt", "fvm_sdk", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "integer-encoding", "multihash-codetable", "num-traits", @@ -3603,9 +3606,9 @@ dependencies = [ [[package]] name = "fvm" -version = "2.11.2" +version = "2.11.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ad18f2a6e7bccbbf434a15f73f1167b4238d55e9826770b0d37a816dbfd33c79" +checksum = "46ac319707d764f918da586d0e4a9c0cad5c1a62104d71cf681607ae018bb2a9" dependencies = [ "anyhow", "blake2b_simd", @@ -3620,7 +3623,7 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 2.11.2", + "fvm_shared 2.11.3", "lazy_static", "log", "multihash-codetable", @@ -3641,9 +3644,9 @@ dependencies = [ [[package]] name = "fvm" -version = "3.13.2" +version = "3.13.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f2ccb3e0cfb2288242698c7badd3e2d6fc8d665e5920c2ce429490174a36dabd" +checksum = "cc667420f9eb21a12e979416f5cc56244bc08c55d69b3cd93798b393ba524a50" dependencies = [ "anyhow", "blake2b_simd", @@ -3656,7 +3659,7 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 3.13.2", + "fvm_shared 3.13.3", "lazy_static", "log", "minstant", @@ -3678,9 +3681,9 @@ dependencies = [ [[package]] name = "fvm" -version = "4.7.4" +version = "4.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ed594b0fb8be1d1dbd566e19707ed5a7f3ef944bd14316562bc5ff581a1e0f1e" +checksum = "73b57c20e53ec98fa897b3a6ff3ea6e863c58a419ae012968dec273257f1a466" dependencies = [ "ambassador", "anyhow", @@ -3692,7 +3695,7 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_ipld_hamt", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "lazy_static", "log", "minstant", @@ -3743,7 +3746,7 @@ dependencies = [ "fvm_ipld_blockstore", "fvm_ipld_encoding", "fvm_sdk", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "multihash-codetable", "num-traits", "serde", @@ -3829,13 +3832,13 @@ dependencies = [ [[package]] name = "fvm_sdk" -version = "4.7.4" +version = "4.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "07e7a6dfefa6023622b4b2871177fe9738d71be4239bd315aede0597bae16154" +checksum = "e532109bf5bc699cfbe1b7e3bf694bed381c28f8a9243a1549254d43866e1588" dependencies = [ "cid", "fvm_ipld_encoding", - "fvm_shared 4.7.4", + "fvm_shared 4.7.5", "lazy_static", "log", "num-traits", @@ -3844,9 +3847,9 @@ dependencies = [ [[package]] name = "fvm_shared" -version = "2.11.2" +version = "2.11.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bb8fa966ba72c09edf45086642a6455a60b2f11e0507fd240174e52e1d664552" +checksum = "42d57fb77a8ed5cf9baab0afa9b5c0a5944bfa9cb9c9decb5fbaf1756f8136d4" dependencies = [ "anyhow", "blake2b_simd", @@ -3876,9 +3879,9 @@ dependencies = [ [[package]] name = "fvm_shared" -version = "3.13.2" +version = "3.13.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "31281d43c46a37342473ac0eb52d02d725ec9b44706fbce8739dba618eb58324" +checksum = "942e5cb74415dc5938633fd1bf5c614808546bb324668fdcbfc8dffff2fc0e58" dependencies = [ "anyhow", "arbitrary", @@ -3906,9 +3909,9 @@ dependencies = [ [[package]] name = "fvm_shared" -version = "4.7.4" +version = "4.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "96ae4c07a461207b41bd8a79124baaeb191b343b4ea210793069c98a37b179b8" +checksum = "94d3a23bf6d2a96ca280745afea1a79c5b701d5ac07814ec50ea34380762d47a" dependencies = [ "anyhow", "arbitrary", @@ -3954,9 +3957,9 @@ dependencies = [ [[package]] name = "get-size-derive2" -version = "0.7.1" +version = "0.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "46b134aa084df7c3a513a1035c52f623e4b3065dfaf3d905a4f28a2e79b5bb3f" +checksum = "ff47daa61505c85af126e9dd64af6a342a33dc0cccfe1be74ceadc7d352e6efd" dependencies = [ "attribute-derive", "quote", @@ -3965,9 +3968,9 @@ dependencies = [ [[package]] name = "get-size2" -version = "0.7.1" +version = "0.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c0d51c9f2e956a517619ad9e7eaebc7a573f9c49b38152e12eade750f89156f9" +checksum = "ac7bb8710e1f09672102be7ddf39f764d8440ae74a9f4e30aaa4820dcdffa4af" dependencies = [ "get-size-derive2", "hashbrown 0.16.0", @@ -4022,21 +4025,15 @@ dependencies = [ [[package]] name = "gimli" -version = "0.31.1" +version = "0.32.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f" +checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7" dependencies = [ "fallible-iterator", "indexmap 2.12.0", "stable_deref_trait", ] -[[package]] -name = "gimli" -version = "0.32.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7" - [[package]] name = "git-version" version = "0.3.9" @@ -4408,9 +4405,9 @@ checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424" [[package]] name = "hyper" -version = "1.7.0" +version = "1.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "eb3aa54a13a0dfe7fbe3a59e0c76093041720fdc77b110cc0fc260fafb4dc51e" +checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11" dependencies = [ "atomic-waker", "bytes", @@ -4462,9 +4459,9 @@ dependencies = [ [[package]] name = "hyper-util" -version = "0.1.17" +version = "0.1.18" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3c6995591a8f1380fcb4ba966a252a4b29188d51d2b89e3a252f5305be65aea8" +checksum = "52e9a2a24dc5c6821e71a7030e1e14b7b632acac55c40e9d2e082c621261bb56" dependencies = [ "base64 0.22.1", "bytes", @@ -4749,9 +4746,9 @@ dependencies = [ [[package]] name = "indicatif" -version = "0.18.2" +version = "0.18.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ade6dfcba0dfb62ad59e59e7241ec8912af34fd29e0e743e3db992bd278e8b65" +checksum = "9375e112e4b463ec1b1c6c011953545c65a30164fbab5b581df32b3abf0dcb88" dependencies = [ "console 0.16.1", "portable-atomic", @@ -4892,15 +4889,6 @@ dependencies = [ "either", ] -[[package]] -name = "itertools" -version = "0.12.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569" -dependencies = [ - "either", -] - [[package]] name = "itertools" version = "0.13.0" @@ -6478,9 +6466,9 @@ dependencies = [ [[package]] name = "object" -version = "0.36.7" +version = "0.37.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" +checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" dependencies = [ "crc32fast", "hashbrown 0.15.5", @@ -6488,15 +6476,6 @@ dependencies = [ "memchr", ] -[[package]] -name = "object" -version = "0.37.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" -dependencies = [ - "memchr", -] - [[package]] name = "oid-registry" version = "0.8.1" @@ -7236,13 +7215,25 @@ dependencies = [ [[package]] name = "pulley-interpreter" -version = "31.0.0" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0c3325791708ad50580aeacfcce06cb5e462c9ba7a2368e109cb2012b944b70e" +checksum = "0f18b4e1b955bf4d6077dbc9d1d43a3a16f8c8b011a67dbafbd671ab4335c48b" dependencies = [ "cranelift-bitset", "log", - "wasmtime-math", + "pulley-macros", + "wasmtime-internal-math", +] + +[[package]] +name = "pulley-macros" +version = "36.0.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0b4b4aee26ad4085bcde356a00853e11fe1f06f4ae0d27a1cdfac9dd2529fa62" +dependencies = [ + "proc-macro2", + "quote", + "syn 2.0.110", ] [[package]] @@ -7612,9 +7603,9 @@ dependencies = [ [[package]] name = "regalloc2" -version = "0.11.2" +version = "0.12.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dc06e6b318142614e4a48bc725abbf08ff166694835c43c9dae5a9009704639a" +checksum = "5216b1837de2149f8bc8e6d5f88a9326b63b8c836ed58ce4a0a29ec736a59734" dependencies = [ "allocator-api2", "bumpalo", @@ -8330,9 +8321,9 @@ dependencies = [ [[package]] name = "serde_with" -version = "3.15.1" +version = "3.16.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aa66c845eee442168b2c8134fec70ac50dc20e760769c8ba0ad1319ca1959b04" +checksum = "10574371d41b0d9b2cff89418eda27da52bcaff2cc8741db26382a77c29131f1" dependencies = [ "base64 0.22.1", "chrono", @@ -8349,9 +8340,9 @@ dependencies = [ [[package]] name = "serde_with_macros" -version = "3.15.1" +version = "3.16.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b91a903660542fced4e99881aa481bdbaec1634568ee02e0b8bd57c64cb38955" +checksum = "08a72d8216842fdd57820dc78d840bef99248e35fb2554ff923319e60f2d686b" dependencies = [ "darling 0.21.3", "proc-macro2", @@ -8672,12 +8663,6 @@ dependencies = [ "der", ] -[[package]] -name = "sptr" -version = "0.3.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a" - [[package]] name = "stable_deref_trait" version = "1.2.1" @@ -9923,12 +9908,12 @@ dependencies = [ [[package]] name = "wasm-encoder" -version = "0.226.0" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f7d81b727619aec227dce83e7f7420d4e56c79acd044642a356ea045b98d4e13" +checksum = "724fccfd4f3c24b7e589d333fc0429c68042897a7e8a5f8694f31792471841e7" dependencies = [ "leb128fmt", - "wasmparser 0.226.0", + "wasmparser 0.236.1", ] [[package]] @@ -9967,9 +9952,9 @@ dependencies = [ [[package]] name = "wasmparser" -version = "0.226.0" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bc28600dcb2ba68d7e5f1c3ba4195c2bddc918c0243fd702d0b6dbd05689b681" +checksum = "a9b1e81f3eb254cf7404a82cee6926a4a3ccc5aad80cc3d43608a070c67aa1d7" dependencies = [ "bitflags 2.10.0", "hashbrown 0.15.5", @@ -9990,22 +9975,22 @@ dependencies = [ [[package]] name = "wasmprinter" -version = "0.226.0" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "753a0516fa6c01756ee861f36878dfd9875f273aea9409d9ea390a333c5bcdc2" +checksum = "2df225df06a6df15b46e3f73ca066ff92c2e023670969f7d50ce7d5e695abbb1" dependencies = [ "anyhow", "termcolor", - "wasmparser 0.226.0", + "wasmparser 0.236.1", ] [[package]] name = "wasmtime" -version = "31.0.0" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b9fe78033c72da8741e724d763daf1375c93a38bfcea99c873ee4415f6098c3f" +checksum = "2a235dd929114a9ef24170a2bd56260a687edacad33e8a7865b8c1cc663351c5" dependencies = [ - "addr2line 0.24.2", + "addr2line", "anyhow", "bitflags 2.10.0", "bumpalo", @@ -10017,45 +10002,67 @@ dependencies = [ "log", "mach2", "memfd", - "object 0.36.7", + "object 0.37.3", "once_cell", - "paste", "postcard", - "psm", "pulley-interpreter", "rayon", - "rustix 0.38.44", + "rustix 1.1.2", "serde", "serde_derive", "smallvec", - "sptr", "target-lexicon", - "wasmparser 0.226.0", - "wasmtime-asm-macros", - "wasmtime-cranelift", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-fiber", - "wasmtime-jit-icache-coherence", - "wasmtime-math", - "wasmtime-slab", - "wasmtime-versioned-export-macros", - "windows-sys 0.59.0", + "wasmtime-internal-asm-macros", + "wasmtime-internal-cranelift", + "wasmtime-internal-fiber", + "wasmtime-internal-jit-debug", + "wasmtime-internal-jit-icache-coherence", + "wasmtime-internal-math", + "wasmtime-internal-slab", + "wasmtime-internal-unwinder", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", +] + +[[package]] +name = "wasmtime-environ" +version = "36.0.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0c7e455d0dc49fad35574e28c110eb23eeda80cfecbe075051892a067298e943" +dependencies = [ + "anyhow", + "cranelift-bitset", + "cranelift-entity", + "gimli", + "indexmap 2.12.0", + "log", + "object 0.37.3", + "postcard", + "serde", + "serde_derive", + "smallvec", + "target-lexicon", + "wasm-encoder 0.236.1", + "wasmparser 0.236.1", + "wasmprinter 0.236.1", ] [[package]] -name = "wasmtime-asm-macros" -version = "31.0.0" +name = "wasmtime-internal-asm-macros" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "47f3d44ae977d70ccf80938b371d5ec60b6adedf60800b9e8dd1223bb69f4cbc" +checksum = "f8883d844cbbf729046f7580e72c1f8014b1330b0f56b323890cf05842356163" dependencies = [ "cfg-if", ] [[package]] -name = "wasmtime-cranelift" -version = "31.0.0" +name = "wasmtime-internal-cranelift" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "52fc12eb8ea695a30007a4849a5fd56209dd86a15579e92e0c27c27122818505" +checksum = "0ec12999113da589f806085a967a5c3d2ac0ca26585842374bf1199dba365f00" dependencies = [ "anyhow", "cfg-if", @@ -10064,89 +10071,91 @@ dependencies = [ "cranelift-entity", "cranelift-frontend", "cranelift-native", - "gimli 0.31.1", - "itertools 0.12.1", + "gimli", + "itertools 0.14.0", "log", - "object 0.36.7", + "object 0.37.3", "pulley-interpreter", "smallvec", "target-lexicon", - "thiserror 1.0.69", - "wasmparser 0.226.0", + "thiserror 2.0.17", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-versioned-export-macros", + "wasmtime-internal-math", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-environ" -version = "31.0.0" +name = "wasmtime-internal-fiber" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5b6b4bf08e371edf262cccb62de10e214bd4aaafaa069f1cd49c9c1c3a5ae8e4" +checksum = "86fc72924e1256cf1f4bcc70428392eb6c7725b688c505b7e099d2b3961d45e4" dependencies = [ "anyhow", - "cranelift-bitset", - "cranelift-entity", - "gimli 0.31.1", - "indexmap 2.12.0", - "log", - "object 0.36.7", - "postcard", - "serde", - "serde_derive", - "smallvec", - "target-lexicon", - "wasm-encoder 0.226.0", - "wasmparser 0.226.0", - "wasmprinter 0.226.0", + "cc", + "cfg-if", + "libc", + "rustix 1.1.2", + "wasmtime-internal-asm-macros", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", ] [[package]] -name = "wasmtime-fiber" -version = "31.0.0" +name = "wasmtime-internal-jit-debug" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f4c8828d7d8fbe90d087a9edea9223315caf7eb434848896667e5d27889f1173" +checksum = "fc4bd73187d8f1accd19d9f10195d0d87c035e6231009ba98bb6d94fefb0ecf1" dependencies = [ - "anyhow", "cc", - "cfg-if", - "rustix 0.38.44", - "wasmtime-asm-macros", - "wasmtime-versioned-export-macros", - "windows-sys 0.59.0", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-jit-icache-coherence" -version = "31.0.0" +name = "wasmtime-internal-jit-icache-coherence" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a54f6c6c7e9d7eeee32dfcc10db7f29d505ee7dd28d00593ea241d5f70698e64" +checksum = "0340a96a39c5ae8a48bb6794037c9fdec3bb13672dd8d688878e97233869d5ed" dependencies = [ "anyhow", "cfg-if", "libc", - "windows-sys 0.59.0", + "windows-sys 0.60.2", ] [[package]] -name = "wasmtime-math" -version = "31.0.0" +name = "wasmtime-internal-math" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b1108aad2e6965698f9207ea79b80eda2b3dcc57dcb69f4258296d4664ae32cd" +checksum = "02d451d317f911b3aa832a427abd832a0fd28f0f659e15ffbc3f8809e897050f" dependencies = [ "libm", ] [[package]] -name = "wasmtime-slab" -version = "31.0.0" +name = "wasmtime-internal-slab" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "84d6a321317281b721c5530ef733e8596ecc6065035f286ccd155b3fa8e0ab2f" +checksum = "cbd2df91a81105cd5e1db81a35e5f3cf8eae871b72c97bd04a3cb5d9e21e8d77" + +[[package]] +name = "wasmtime-internal-unwinder" +version = "36.0.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d425451d62f8075085ebed056341d94f6fefd1cb94b1a7c7d6eb99b0682e399d" +dependencies = [ + "anyhow", + "cfg-if", + "cranelift-codegen", + "log", + "object 0.37.3", +] [[package]] -name = "wasmtime-versioned-export-macros" -version = "31.0.0" +name = "wasmtime-internal-versioned-export-macros" +version = "36.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5732a5c86efce7bca121a61d8c07875f6b85c1607aa86753b40f7f8bd9d3a780" +checksum = "0445c94839f5f76122f6be138ce7d7d53044a8b48a9305a9522460e836e51e0d" dependencies = [ "proc-macro2", "quote", From 27e2e24eb5e345a72aa196574584cbb6f52019b9 Mon Sep 17 00:00:00 2001 From: Hubert Bugaj Date: Sat, 15 Nov 2025 17:09:49 -0300 Subject: [PATCH 3/3] fix: RUSTSEC-2025-0046 is resolved --- deny.toml | 1 - 1 file changed, 1 deletion(-) diff --git a/deny.toml b/deny.toml index 72f4071e926d..0f619ee0ca1f 100644 --- a/deny.toml +++ b/deny.toml @@ -5,7 +5,6 @@ ignore = [ # https://github.com/filecoin-project/ref-fvm/issues/1843 "RUSTSEC-2022-0061", # parity-wasm is deprecated "RUSTSEC-2024-0436", # paste is unmaintained - "RUSTSEC-2025-0046", # wasmtime issue, this needs to be resolved in FVM ] [licenses]