alexcrichton opened PR #12586 from alexcrichton:update-cargo-audit to bytecodealliance:main:
- Use a pinned version of
cargo audit- Update the
rustsec/audit-checkdependency- Use a cache when installing
cargo auditto speed up the jobI noticed that the audit runs currently execute
cargo generate-lockfilewhich means it's not actually auditing our dependencies but an updated version of our dependencies. Local testing shows that I think this'll resolve things, although we'll figure that out on the next run.<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
alexcrichton requested wasmtime-default-reviewers for a review on PR #12586.
alexcrichton requested rvolosatovs for a review on PR #12586.
rvolosatovs submitted PR review.
rvolosatovs added PR #12586 Update the cargo audit cron CI job to the merge queue.
rvolosatovs merged PR #12586.
rvolosatovs removed PR #12586 Update the cargo audit cron CI job from the merge queue.
Last updated: Feb 24 2026 at 04:36 UTC