micahkepe opened PR #15003 from micahkepe:mkepe/fix-upgrade-zstd-for-cargo-deny to bytecodealliance:main:
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
This change was not discussed otherwhere as far as I know.
This is a small PR to bump the
zstddependency inwasmtime-internal-cachefrom 0.13.0 to 0.14.3. This resolves the following Rust security vulnerability: https://rustsec.org/advisories/RUSTSEC-2026-0391.html
micahkepe requested wasmtime-core-reviewers for a review on PR #15003.
micahkepe removed the review request for wasmtime-core-reviewers from PR #15003.
micahkepe requested alexcrichton for a review on PR #15003.
micahkepe requested wasmtime-default-reviewers for a review on PR #15003.
micahkepe requested pchickey for a review on PR #15003.
micahkepe removed the review request for wasmtime-default-reviewers from PR #15003.
micahkepe edited PR #15003:
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
This change was not discussed elsewhere as far as I know.
This is a small PR to bump the
zstddependency inwasmtime-internal-cachefrom 0.13.0 to 0.14.3. This resolves the following Rust security vulnerability: https://rustsec.org/advisories/RUSTSEC-2026-0391.html
pchickey updated PR #15003.
:thumbs_up: pchickey submitted PR review.
pchickey has enabled auto merge for PR #15003.
pchickey added PR #15003 chore: bump zstd from 0.13.0 to 0.14.3 to the merge queue.
pchickey commented on PR #15003:
Closes https://github.com/bytecodealliance/wasmtime/issues/15004
pchickey deleted a comment on PR #15003:
Closes https://github.com/bytecodealliance/wasmtime/issues/15004
pchickey edited PR #15003:
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
This change was not discussed elsewhere as far as I know.
This is a small PR to bump the
zstddependency inwasmtime-internal-cachefrom 0.13.0 to 0.14.3. This resolves the following Rust security vulnerability: https://rustsec.org/advisories/RUSTSEC-2026-0391.htmlCloses https://github.com/bytecodealliance/wasmtime/issues/15004
pchickey edited PR #15003:
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
This change was not discussed elsewhere as far as I know.
This is a small PR to bump the
zstddependency inwasmtime-internal-cachefrom 0.13.0 to 0.14.3. This resolves the following Rust security vulnerability: https://rustsec.org/advisories/RUSTSEC-2026-0391.htmlCloses https://github.com/bytecodealliance/wasmtime/issues/15004
Closes https://github.com/bytecodealliance/wasmtime/issues/15006
pchickey edited PR #15003:
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
This change was not discussed elsewhere as far as I know.
This is a small PR to bump the
zstddependency inwasmtime-internal-cachefrom 0.13.0 to 0.14.3. This resolves the following Rust security vulnerability: https://rustsec.org/advisories/RUSTSEC-2026-0391.htmlCloses https://github.com/bytecodealliance/wasmtime/issues/15004
Closes https://github.com/bytecodealliance/wasmtime/issues/15006
Closes https://github.com/bytecodealliance/wasmtime/issues/15005
Closes https://github.com/bytecodealliance/wasmtime/issues/15008
Closes https://github.com/bytecodealliance/wasmtime/issues/15010
Closes https://github.com/bytecodealliance/wasmtime/issues/15011
Closes https://github.com/bytecodealliance/wasmtime/issues/15013
Closes https://github.com/bytecodealliance/wasmtime/issues/15012
Closes https://github.com/bytecodealliance/wasmtime/issues/15014
Closes https://github.com/bytecodealliance/wasmtime/issues/15015
Closes https://github.com/bytecodealliance/wasmtime/issues/15017
Closes https://github.com/bytecodealliance/wasmtime/issues/15016
Closes https://github.com/bytecodealliance/wasmtime/issues/15018
Closes https://github.com/bytecodealliance/wasmtime/issues/15019
:check: pchickey merged PR #15003.
pchickey removed PR #15003 chore: bump zstd from 0.13.0 to 0.14.3 from the merge queue.
Last updated: Oct 31 2026 at 23:03 UTC