From c3c8dfd4daaf8ed54f98dcb1c41490426c81cade Mon Sep 17 00:00:00 2001 From: Shekhar Mudarapu Date: Fri, 31 Jul 2026 16:32:16 -0400 Subject: [PATCH 1/2] fix(deps): bump event-listener to 5.4.2 (RUSTSEC-2026-0221) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `event-listener` 5.4.1 allows `!Send` tags to cross thread boundaries via `StackSlot` (RUSTSEC-2026-0221, published 2026-07-13). It reaches the runtime-manager transitively through async-broadcast, so this is a lockfile-only change: no manifest edit, no API surface touched. Turned up when the vuln gate went red on an unrelated PR — the advisory database picked it up between this morning's runs and this afternoon's, so it now fails on master too. This clears RUSTSEC-2026-0221 only. `cargo audit` still reports RUSTSEC-2026-0222 (wasmtime 45.0.3, "Stores can mix up type indices between engines"), which is NOT fixable the same way: every patched line the advisory allows — 46.0.2+ and 47.0.3+ — pulls cranelift crates requiring Rust 1.94, while the repo pins 1.93 in rust-toolchain.toml, two CI workflows, and the service Dockerfiles. That is a cross-cutting toolchain decision and gets its own change rather than riding along here. Verified: cargo audit no longer reports 0221, release build clean. --- services/runtime-manager/Cargo.lock | 14 ++------------ 1 file changed, 2 insertions(+), 12 deletions(-) diff --git a/services/runtime-manager/Cargo.lock b/services/runtime-manager/Cargo.lock index 75e36355..ad6ee5fa 100644 --- a/services/runtime-manager/Cargo.lock +++ b/services/runtime-manager/Cargo.lock @@ -463,15 +463,6 @@ dependencies = [ "thiserror 2.0.18", ] -[[package]] -name = "concurrent-queue" -version = "2.5.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973" -dependencies = [ - "crossbeam-utils", -] - [[package]] name = "core-foundation" version = "0.9.4" @@ -930,11 +921,10 @@ dependencies = [ [[package]] name = "event-listener" -version = "5.4.1" +version = "5.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab" +checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2" dependencies = [ - "concurrent-queue", "parking", "pin-project-lite", ] From 627e3ab7900ae4ebc4ff25ada5fa7420821d111e Mon Sep 17 00:00:00 2001 From: Shekhar Mudarapu Date: Fri, 31 Jul 2026 17:03:09 -0400 Subject: [PATCH 2/2] chore(deps): bump Rust to 1.94 and wasmtime to 46.0.2 (RUSTSEC-2026-0222) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit wasmtime 45.0.3 lets Stores mix up type indices between engines (RUSTSEC-2026-0222). Every patched line the advisory allows — 46.0.2+ and 47.0.3+ — pulls cranelift crates requiring Rust 1.94, so the fix is not a dependency bump on its own; the toolchain has to move with it. That is why this lands as one change rather than two: neither half compiles without the other. Toolchain 1.93 -> 1.94.1 in every place it is pinned: rust-toolchain.toml, the two CI workflow pins (sdlc-lint, runtime-exec-e2e), and the four service Dockerfiles. `rust:1.94-slim` was confirmed to exist before relying on it — a missing tag would have broken every container build while the local builds stayed green. wasmtime 45.0.2 -> 46.0.2 (with wasmtime-wasi, which is release-synced). Chose the 46 line over 47 because it is the smaller step that clears the advisory, and it needed no source changes at all. The one thing the new toolchain broke is a tightened `clippy::result_large_err` on the exec server's interceptor closure, over tonic's 176-byte `Status`. Both halves of that signature are tonic's: `Interceptor` requires exactly `FnMut(Request<()>) -> Result, Status>`, so the error cannot be boxed without failing to implement the trait. Allowed with that reason, matching the identical allow already on `validate_first_frame` in the same file. Verified on 1.94.1 across all five Rust services: clippy --all-targets -D warnings clean rustfmt --check clean cargo audit clean — 0221 and 0222 both gone tests: gateway 31, model-router 38, surface-gateway 63, harness 155, runtime-manager 350 Includes the event-listener 5.4.2 bump (RUSTSEC-2026-0221) from the branch this is based on, so the vuln gate can actually reach green here. --- .github/workflows/runtime-exec-e2e.yml | 2 +- .github/workflows/sdlc-lint.yml | 2 +- rust-toolchain.toml | 4 +- services/gateway/Dockerfile | 2 +- services/harness/src/exec.rs | 6 + services/model-router/Dockerfile | 2 +- services/runtime-manager/Cargo.lock | 252 ++++++++++--------------- services/runtime-manager/Cargo.toml | 4 +- services/runtime-manager/Dockerfile | 2 +- services/surface-gateway/Dockerfile | 2 +- 10 files changed, 114 insertions(+), 164 deletions(-) diff --git a/.github/workflows/runtime-exec-e2e.yml b/.github/workflows/runtime-exec-e2e.yml index bc02eb8c..824b667a 100644 --- a/.github/workflows/runtime-exec-e2e.yml +++ b/.github/workflows/runtime-exec-e2e.yml @@ -44,7 +44,7 @@ jobs: - name: Set up Rust (pinned by rust-toolchain.toml) uses: dtolnay/rust-toolchain@stable with: - toolchain: "1.93" + toolchain: "1.94" - name: Cache cargo uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 diff --git a/.github/workflows/sdlc-lint.yml b/.github/workflows/sdlc-lint.yml index 0770e2af..5d7a9444 100644 --- a/.github/workflows/sdlc-lint.yml +++ b/.github/workflows/sdlc-lint.yml @@ -71,7 +71,7 @@ jobs: uses: dtolnay/rust-toolchain@stable with: # rust-toolchain.toml at repo root pins channel + clippy component - toolchain: "1.93" + toolchain: "1.94" components: clippy, rustfmt # Formatting ran BEFORE clippy: it needs no protoc and no build, so a diff --git a/rust-toolchain.toml b/rust-toolchain.toml index 947d343d..6050528c 100644 --- a/rust-toolchain.toml +++ b/rust-toolchain.toml @@ -1,6 +1,6 @@ # Pin the Rust toolchain for reproducible builds across dev, CI, and the -# Docker images (services/*/Dockerfile use rust:1.93-slim). The codebase uses +# Docker images (services/*/Dockerfile use rust:1.94-slim). The codebase uses # edition 2024, which requires Rust >= 1.85. [toolchain] -channel = "1.93" +channel = "1.94" components = ["rustfmt", "clippy"] diff --git a/services/gateway/Dockerfile b/services/gateway/Dockerfile index d2a45957..69bae4c0 100644 --- a/services/gateway/Dockerfile +++ b/services/gateway/Dockerfile @@ -1,4 +1,4 @@ -FROM rust:1.93-slim AS builder +FROM rust:1.94-slim AS builder # openssl-sys needs the system OpenSSL headers + pkg-config to compile. RUN apt-get update && apt-get install -y --no-install-recommends pkg-config libssl-dev && rm -rf /var/lib/apt/lists/* WORKDIR /app diff --git a/services/harness/src/exec.rs b/services/harness/src/exec.rs index 14f31d0b..5060b59b 100644 --- a/services/harness/src/exec.rs +++ b/services/harness/src/exec.rs @@ -586,6 +586,12 @@ pub async fn run(vm_id: String, manager: ManagerClient) -> Result<()> { .add_service( pb::runtime_harness_server::RuntimeHarnessServer::with_interceptor( svc, + // clippy::result_large_err (tightened in Rust 1.94) flags the + // 176-byte `tonic::Status` here. Both halves of that signature + // are tonic's, not ours: `Interceptor` requires exactly + // `FnMut(Request<()>) -> Result, Status>`, so the + // error cannot be boxed without failing to implement the trait. + #[allow(clippy::result_large_err)] move |req: tonic::Request<()>| check_bearer_token(req, &token_for_interceptor), ), ) diff --git a/services/model-router/Dockerfile b/services/model-router/Dockerfile index 1235d143..634e4713 100644 --- a/services/model-router/Dockerfile +++ b/services/model-router/Dockerfile @@ -1,4 +1,4 @@ -FROM rust:1.93-slim AS builder +FROM rust:1.94-slim AS builder # openssl-sys needs the system OpenSSL headers + pkg-config to compile. RUN apt-get update && apt-get install -y --no-install-recommends pkg-config libssl-dev && rm -rf /var/lib/apt/lists/* WORKDIR /app diff --git a/services/runtime-manager/Cargo.lock b/services/runtime-manager/Cargo.lock index ad6ee5fa..b2374590 100644 --- a/services/runtime-manager/Cargo.lock +++ b/services/runtime-manager/Cargo.lock @@ -518,27 +518,27 @@ dependencies = [ [[package]] name = "cranelift-assembler-x64" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3d521bdbc6098937af83ef4ab6d5c07398126bc71878f7ef4ea9499977978ef5" +checksum = "47ca6361f42d0c945fadc1103501e1c07438e034fd5a86896a3074eff3e860bd" dependencies = [ "cranelift-assembler-x64-meta", ] [[package]] name = "cranelift-assembler-x64-meta" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3dde0b83164d4a497860af4236271178bc640512b067101e0853e4f74eaa4df5" +checksum = "2c1dbc96db7cebf747bd5722d482338a5acff91d6be43b6bec145f9471327ffa" dependencies = [ "cranelift-srcgen", ] [[package]] name = "cranelift-bforest" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0111d110b72b4efad69a372e29e21628652fd0bcab66967e5c8350ab679affd5" +checksum = "353b309eef494e4adb4c6cca76f30ef27daa907534db7d05b5986500f51aa4e1" dependencies = [ "cranelift-entity", "wasmtime-internal-core", @@ -546,9 +546,9 @@ dependencies = [ [[package]] name = "cranelift-bitset" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf01ecc92fc5499789d79c3b817299d5a8ddd828d31dcf0f9cc3cc66f38dbb36" +checksum = "e3cafe127a4c5d9765b1df54052245d2cbaca7238782805bb5ac94986ccdb591" dependencies = [ "serde", "serde_derive", @@ -557,9 +557,9 @@ dependencies = [ [[package]] name = "cranelift-codegen" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6cd2563bead0090c3879a7ff7327f7550c9d59bb5d05ecc8cd7886977aa3125a" +checksum = "3964f31c6dc9d21e926ef884d3eec2f1ca83266a233521da4a737143262ceb84" dependencies = [ "bumpalo", "cranelift-assembler-x64", @@ -574,10 +574,13 @@ dependencies = [ "hashbrown 0.17.0", "libm", "log", + "postcard", "pulley-interpreter", "regalloc2", "rustc-hash", "serde", + "serde_derive", + "sha2", "smallvec", "target-lexicon", "wasmtime-internal-core", @@ -585,9 +588,9 @@ dependencies = [ [[package]] name = "cranelift-codegen-meta" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9640d250d26f9381a73dc7f9862b27928d4809119aec73be0e556612e67b6a99" +checksum = "b2f8b35746603b792e4ae34499a39251f310a06c98d4bc2ca02cf4bd29ce3c84" dependencies = [ "cranelift-assembler-x64-meta", "cranelift-codegen-shared", @@ -598,24 +601,24 @@ dependencies = [ [[package]] name = "cranelift-codegen-shared" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a07f156b90efc94371ddb3536f76e4ab671ad2e093bfa5511e10198cadbb0c47" +checksum = "584bd91987927dfe35e79c5d6dd52a117cb64c4fce26df881d02dcc17bd59a8f" [[package]] name = "cranelift-control" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d75a76fd9dd37dcbc3d2d2e00abe3281a7e88adc035fba3b8114cc69981576ec" +checksum = "af277352af76db01bb42fa4978b672a44406715798edb693cc02e363e12dc505" dependencies = [ "arbitrary", ] [[package]] name = "cranelift-entity" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2eea22522144ba08c7e7ef94bfc25d474ef016c2771974b8ab1986734ac85965" +checksum = "42ad4f0c556d3d57580d07477be9e665f4d2a826971a5ab4642ead20a19df443" dependencies = [ "cranelift-bitset", "serde", @@ -625,11 +628,12 @@ dependencies = [ [[package]] name = "cranelift-frontend" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "efa2826c80dff1d93b19b3cfbcaf9fae44c78d739a98d146dd5bd89c51e14367" +checksum = "29d69a6b7d8412c716e8599c7330dfbd122c1bc145f3bda05a9e237fba20419d" dependencies = [ "cranelift-codegen", + "hashbrown 0.17.0", "log", "smallvec", "target-lexicon", @@ -637,15 +641,15 @@ dependencies = [ [[package]] name = "cranelift-isle" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e238a69b95c5415456f22189494a12db94f313bb72b6ec9cc88ddf2f1056e28e" +checksum = "52fcdcd4a5c7fa8bfea35e72c0979ad5a699c836364870f0a84169d02a085a88" [[package]] name = "cranelift-native" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "eceb0ebd8d6aef6bb287e8d532a164b0db1c0062961211e9c22a91f67521c098" +checksum = "0fee933cf8ec90e58e68163a02bdb0e4d29f2260a7592b3f09cbba52fcd34d12" dependencies = [ "cranelift-codegen", "libc", @@ -654,9 +658,9 @@ dependencies = [ [[package]] name = "cranelift-srcgen" -version = "0.132.3" +version = "0.133.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "004643f39a7bec553de5263d650db30e5b9caec1d5cbe065fd732b7ec9ae40d0" +checksum = "6bd75e1e2719808c80af27ebe168d2220ec10e519e1d5a52bdbed9bd5cac1a32" [[package]] name = "crc32fast" @@ -1469,7 +1473,7 @@ dependencies = [ "libc", "percent-encoding", "pin-project-lite", - "socket2 0.5.10", + "socket2 0.6.3", "system-configuration", "tokio", "tower-service", @@ -2048,12 +2052,9 @@ checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154" [[package]] name = "mach2" -version = "0.4.3" +version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44" -dependencies = [ - "libc", -] +checksum = "dae608c151f68243f2b000364e1f7b186d9c29845f7d2d85bd31b9ad77ad552b" [[package]] name = "matchers" @@ -2594,7 +2595,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "be769465445e8c1474e9c5dac2018218498557af32d9ed057325ec9a41ae81bf" dependencies = [ "heck", - "itertools 0.13.0", + "itertools 0.14.0", "log", "multimap", "once_cell", @@ -2614,7 +2615,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8a56d757972c98b346a9b766e3f02746cde6dd1cd1d1d563472929fdd74bec4d" dependencies = [ "anyhow", - "itertools 0.13.0", + "itertools 0.14.0", "proc-macro2", "quote", "syn", @@ -2631,9 +2632,9 @@ dependencies = [ [[package]] name = "pulley-interpreter" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b04adf8f93264685f2c70a3edb8f828c791e71b22659253319c33f29d1165aef" +checksum = "3683e69168d2e2374cea51a79fce2e9870e7c622366b8bf7af87fb5c2428a2a9" dependencies = [ "cranelift-bitset", "log", @@ -2643,9 +2644,9 @@ dependencies = [ [[package]] name = "pulley-macros" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2c120a6af1a574a42efcd9df2ad27cb78bc04118c5e0c69e90599f17301a1c7a" +checksum = "8ebbd6dada1e3df36ea4a4b8feca2ed230aa92d59e55bf5714eb4286cdd632b0" dependencies = [ "proc-macro2", "quote", @@ -2675,7 +2676,7 @@ dependencies = [ "quinn-udp", "rustc-hash", "rustls", - "socket2 0.5.10", + "socket2 0.6.3", "thiserror 2.0.18", "tokio", "tracing", @@ -2712,7 +2713,7 @@ dependencies = [ "cfg_aliases", "libc", "once_cell", - "socket2 0.5.10", + "socket2 0.6.3", "tracing", "windows-sys 0.52.0", ] @@ -2899,6 +2900,7 @@ dependencies = [ "hashbrown 0.17.0", "log", "rustc-hash", + "serde", "smallvec", ] @@ -4232,9 +4234,9 @@ dependencies = [ [[package]] name = "wasm-compose" -version = "0.248.0" +version = "0.251.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "96ba953e2b9b4b4b52a31cf4e3ee1c1374c872b6e012cf2138d1c37cba00bfd6" +checksum = "b089037d7eb453ed57b560fe7833de0707411c8b9fdc429745ced77e2a1bacb9" dependencies = [ "anyhow", "heck", @@ -4242,8 +4244,8 @@ dependencies = [ "log", "petgraph 0.6.5", "smallvec", - "wasm-encoder 0.248.0", - "wasmparser 0.248.0", + "wasm-encoder 0.251.0", + "wasmparser 0.251.0", "wat", ] @@ -4257,16 +4259,6 @@ dependencies = [ "wasmparser 0.244.0", ] -[[package]] -name = "wasm-encoder" -version = "0.248.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ac92cf547bc18d27ecc521015c08c353b4f18b84ab388bb6d1b6b682c620d9b6" -dependencies = [ - "leb128fmt", - "wasmparser 0.248.0", -] - [[package]] name = "wasm-encoder" version = "0.251.0" @@ -4314,19 +4306,6 @@ dependencies = [ "semver", ] -[[package]] -name = "wasmparser" -version = "0.248.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aa4439c5eee9df71ee0c6efb37f63b1fcb1fec38f85f5142c54e7ed05d33091a" -dependencies = [ - "bitflags", - "hashbrown 0.17.0", - "indexmap 2.14.0", - "semver", - "serde", -] - [[package]] name = "wasmparser" version = "0.251.0" @@ -4334,26 +4313,28 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "437970b35b1a85cfde9c74b2398352d8d653f3bd8e3a3db0c063ea8f5b4b36ff" dependencies = [ "bitflags", + "hashbrown 0.17.0", "indexmap 2.14.0", "semver", + "serde", ] [[package]] name = "wasmprinter" -version = "0.248.0" +version = "0.251.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "30b264a5410b008d4d199a92bf536eae703cbd614482fc1ec53831cf19e1c183" +checksum = "8798c1a699bd25648b6708eefe94d97c6f9891febb94b42cca1f7a4b086ea64e" dependencies = [ "anyhow", "termcolor", - "wasmparser 0.248.0", + "wasmparser 0.251.0", ] [[package]] name = "wasmtime" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8a83ef84ac8bab735c89e27b0268b0586099fbe81281ae45be2b8e4f407b2daa" +checksum = "ed27b4a4a5271d2608406a99c8d1cf8aea1e894fe4ec361d470063bcf342f1d7" dependencies = [ "addr2line", "async-trait", @@ -4384,8 +4365,8 @@ dependencies = [ "target-lexicon", "tempfile", "wasm-compose", - "wasm-encoder 0.248.0", - "wasmparser 0.248.0", + "wasm-encoder 0.251.0", + "wasmparser 0.251.0", "wasmtime-environ", "wasmtime-internal-cache", "wasmtime-internal-component-macro", @@ -4397,16 +4378,16 @@ dependencies = [ "wasmtime-internal-jit-icache-coherence", "wasmtime-internal-unwinder", "wasmtime-internal-versioned-export-macros", - "wasmtime-internal-winch", "wat", "windows-sys 0.61.2", + "wit-parser 0.251.0", ] [[package]] name = "wasmtime-environ" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "439686d3deb38525c86b88bbc90f7ba669f70c8edc7d6b35147c738bbef5ff76" +checksum = "7712f99b0920d4638023405eb9723ef200efd6d39bfc7466c92e926ca5d130f0" dependencies = [ "anyhow", "cpp_demangle", @@ -4426,8 +4407,8 @@ dependencies = [ "sha2", "smallvec", "target-lexicon", - "wasm-encoder 0.248.0", - "wasmparser 0.248.0", + "wasm-encoder 0.251.0", + "wasmparser 0.251.0", "wasmprinter", "wasmtime-internal-component-util", "wasmtime-internal-core", @@ -4435,9 +4416,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-cache" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8f2799e6c35393c2a38999f13e4c80ab5d5d9756082bb554cbd1f60485a18293" +checksum = "bb07d96412d6958817749712969cfd6416cbce11639c3f3431dc659816d84ace" dependencies = [ "base64", "directories-next", @@ -4455,9 +4436,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-component-macro" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "81d2c5850fb8c448792453765d97f6f01096a32708f3c36798e86220763c90c0" +checksum = "f60f3492a55dbd4eb2e4f1f33ed0626d141f5f4cf4c0194168a4c5006f6601b0" dependencies = [ "anyhow", "proc-macro2", @@ -4465,20 +4446,20 @@ dependencies = [ "syn", "wasmtime-internal-component-util", "wasmtime-internal-wit-bindgen", - "wit-parser 0.248.0", + "wit-parser 0.251.0", ] [[package]] name = "wasmtime-internal-component-util" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0ed79c4e9ab416dcc5e46b9d1ec9b7c2e3c730deab525996b0de45a35fc8b2c3" +checksum = "c777c83bb4c3414b23fe84fecd47a46016a0a0b0a39aa786cad0a701fe3cbc7f" [[package]] name = "wasmtime-internal-core" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3073c03f97f871fe6400e68621c863b93ba79296f8e570285231952d23fcc804" +checksum = "ffb54b5de8723a9acf2c0bc531df8e773462796a5f87e8f49a3d5ea5c3b32ef7" dependencies = [ "anyhow", "hashbrown 0.17.0", @@ -4488,9 +4469,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-cranelift" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7a15981261d361f9c93b42929f446b4009840853ceea181ad6e17730f4016a0b" +checksum = "9c60bb70116a88791ccceef605b31010c4888a7305e450f01dc7d4f430ad25f0" dependencies = [ "cfg-if", "cranelift-codegen", @@ -4506,7 +4487,7 @@ dependencies = [ "smallvec", "target-lexicon", "thiserror 2.0.18", - "wasmparser 0.248.0", + "wasmparser 0.251.0", "wasmtime-environ", "wasmtime-internal-core", "wasmtime-internal-unwinder", @@ -4515,9 +4496,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-fiber" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "33aed9d91d54c9f861ba7e3c3130bded8a7a63e01fe58c3a9a36b45d6ee0fb57" +checksum = "24bdf54907e0bad31ad6676d03ed1008fa21489725635136f9c38979c39a98ed" dependencies = [ "cc", "cfg-if", @@ -4530,9 +4511,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-jit-debug" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "944942118aab67e7b4febfe88a65d0af4cfd10af8ed0e79fd6cf39d75359ab7e" +checksum = "ef4edaf07e20511f3ca070a4a0f026c407969f09e536075729872f548ca6f8d4" dependencies = [ "cc", "object", @@ -4542,9 +4523,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-jit-icache-coherence" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "37dee05e8c35759826f6b926cd949c51f771b6a58619d8e60c63c3f3d3e5e59b" +checksum = "f96a6d7eb246d1306b7db8915a169cd8628a9e6b8299d1d1f8ab109801ef0a66" dependencies = [ "cfg-if", "libc", @@ -4554,9 +4535,9 @@ dependencies = [ [[package]] name = "wasmtime-internal-unwinder" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a83f7ebe911a6f1605ff0d3a678472ddb1fcc57c3e2f6bae5dd4d170b625b3ed" +checksum = "39472572ea3eb11b7cc7fe7bd6df0005cef87b580eb06a3378d103ac99d45bc3" dependencies = [ "cfg-if", "cranelift-codegen", @@ -4567,50 +4548,33 @@ dependencies = [ [[package]] name = "wasmtime-internal-versioned-export-macros" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d75980644456dc003238766254b0e5f002704630237ccd0728747991fe2739d7" +checksum = "7bf2eff1c108b01566a7c8870de34821e7bda7d327e86e12a548c026e1e3677d" dependencies = [ "proc-macro2", "quote", "syn", ] -[[package]] -name = "wasmtime-internal-winch" -version = "45.0.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "81af36995b4720b32e3d667541b548a27184a859d09a6ee745eaba095f5a6f6e" -dependencies = [ - "cranelift-codegen", - "gimli", - "log", - "object", - "target-lexicon", - "wasmparser 0.248.0", - "wasmtime-environ", - "wasmtime-internal-cranelift", - "winch-codegen", -] - [[package]] name = "wasmtime-internal-wit-bindgen" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ada06667b7948892703fcc9f0b9b337c2e78c334d74d4fa62e2f75f07fbb3659" +checksum = "d1d9d3ffd05d6e864adc35cff702f56307c454caec3b1d2d89dd6c843219b663" dependencies = [ "anyhow", "bitflags", "heck", "indexmap 2.14.0", - "wit-parser 0.248.0", + "wit-parser 0.251.0", ] [[package]] name = "wasmtime-wasi" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fd8e9db77f7b60f4c5f6f72847f55eb646ed7ed2f68e362559ee07dc543fb408" +checksum = "b88f243a21e600902fd03bd970df7e4671d760d724c9fad202166fd98c842548" dependencies = [ "async-trait", "bitflags", @@ -4620,7 +4584,6 @@ dependencies = [ "cap-std", "cap-time-ext", "cfg-if", - "fs-set-times", "futures", "io-extras", "io-lifetimes", @@ -4638,9 +4601,9 @@ dependencies = [ [[package]] name = "wasmtime-wasi-io" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3805f02be91374a4fd02c0f947daf07bbaa6fbebb5909de5305fa5b0e9568f30" +checksum = "0373c9dc92c9373aa9cee05963ea438bc318bf07bb284bede77a9ce24b39f682" dependencies = [ "async-trait", "bytes", @@ -4702,9 +4665,9 @@ dependencies = [ [[package]] name = "wiggle" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4aca130e25a57e29bbb541441b6e261970a8469580bffebe904d96f0df67e41d" +checksum = "9914a7e8ac8cb37be90753103e2aa96959e9e5d2f549a2d081bcfeb8fa97e08d" dependencies = [ "bitflags", "thiserror 2.0.18", @@ -4716,9 +4679,9 @@ dependencies = [ [[package]] name = "wiggle-generate" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1f0a45b47e893521cad81819f2e0db18a8b05086fd4bfb35369ed8830a8f0148" +checksum = "789b4c6d82c1ae0f5003eb6c5b9d3c9fb80112c4be50ad2690eb7347f0edd852" dependencies = [ "heck", "proc-macro2", @@ -4730,9 +4693,9 @@ dependencies = [ [[package]] name = "wiggle-macro" -version = "45.0.3" +version = "46.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e297e0325cffa6d368386b6e672e9d6c6a7ad34bdb8a5f49319db4decef2a990" +checksum = "c5be72b12200c1270ee5cc9c6c30450e9ba5abdcb5fe8d09d08b516b7bd974d3" dependencies = [ "proc-macro2", "quote", @@ -4771,25 +4734,6 @@ version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" -[[package]] -name = "winch-codegen" -version = "45.0.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d73bc25d27222248f9bafc7e9945f61e74275360c3ea0d34008810d436140a53" -dependencies = [ - "cranelift-assembler-x64", - "cranelift-codegen", - "gimli", - "regalloc2", - "smallvec", - "target-lexicon", - "thiserror 2.0.18", - "wasmparser 0.248.0", - "wasmtime-environ", - "wasmtime-internal-core", - "wasmtime-internal-cranelift", -] - [[package]] name = "windows-core" version = "0.62.2" @@ -5054,9 +4998,9 @@ dependencies = [ [[package]] name = "wit-parser" -version = "0.248.0" +version = "0.251.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "247ad505da2915a082fe13204c5ba8788425aea1de54f43b284818cf82637856" +checksum = "e960732e824fab95099971a09e638979347c94ca48568d3c854c945729196947" dependencies = [ "anyhow", "hashbrown 0.17.0", @@ -5068,7 +5012,7 @@ dependencies = [ "serde_derive", "serde_json", "unicode-xid", - "wasmparser 0.248.0", + "wasmparser 0.251.0", ] [[package]] diff --git a/services/runtime-manager/Cargo.toml b/services/runtime-manager/Cargo.toml index 4262afb6..506a5881 100644 --- a/services/runtime-manager/Cargo.toml +++ b/services/runtime-manager/Cargo.toml @@ -54,8 +54,8 @@ hyperlocal = { version = "0.9.1", features = ["client"] } hyper = { version = "1.10.1", features = ["http1", "client"] } http-body-util = "0.1.3" hyper-util = { version = "0.1.20", features = ["client-legacy", "http1", "tokio"] } -wasmtime = { version = "45.0.2", features = ["wat", "async", "cranelift"] } -wasmtime-wasi = "45.0.2" +wasmtime = { version = "46.0.2", features = ["wat", "async", "cranelift"] } +wasmtime-wasi = "46.0.2" sha2 = "0.10" bytes = "1" base64 = "0.22" diff --git a/services/runtime-manager/Dockerfile b/services/runtime-manager/Dockerfile index 6f05eb1a..c6414b29 100644 --- a/services/runtime-manager/Dockerfile +++ b/services/runtime-manager/Dockerfile @@ -1,4 +1,4 @@ -FROM rust:1.93-slim AS builder +FROM rust:1.94-slim AS builder # openssl-sys needs the system OpenSSL headers + pkg-config; tonic-build/prost # need protoc (protobuf-compiler). libprotobuf-dev ships the well-known # google/protobuf/*.proto files under /usr/include that runtime.proto imports. diff --git a/services/surface-gateway/Dockerfile b/services/surface-gateway/Dockerfile index 78b1e41a..d4bf73c8 100644 --- a/services/surface-gateway/Dockerfile +++ b/services/surface-gateway/Dockerfile @@ -1,4 +1,4 @@ -FROM rust:1.93-slim AS builder +FROM rust:1.94-slim AS builder # openssl-sys needs the system OpenSSL headers + pkg-config to compile. RUN apt-get update && apt-get install -y --no-install-recommends pkg-config libssl-dev && rm -rf /var/lib/apt/lists/* WORKDIR /app