Wasmtime GitHub notifications bot (Oct 30 2026 at 05:32): Wasmtime GitHub notifications bot (Oct 30 2026 at 05:32):ChihweiLHBird opened PR #15084 from ChihweiLHBird:update-webpki-root-certs to bytecodealliance:main:
This updates two root certificate crates in
Cargo.lock:
webpki-root-certs1.0.4 → 1.0.11, to fix RUSTSEC-2026-0383. PR #14900 closed the advisory issue #14893, but it updated onlywebpki-roots. The only user isureqin theort-sysbuild script, and that script trusts the OS root store. So this part only clears the advisory.webpki-roots1.0.10 → 1.0.11. This removes two more emSign roots: "emSign ECC Root CA - C3" and "emSign Root CA - C1".wasi-http(default-send-request) andwasi-tls(rustls) use this list at run time.After this change, both crates have the same 118 roots.
A maintainer needs to add
cargo vetentries for both new versions.cargo check --lockedpasses forwasmtime-wasi-nn(onnx-download),wasmtime-wasi-http, andwasmtime-wasi-tls. Feel free to push to my branch if needed.
Wasmtime GitHub notifications bot (Oct 30 2026 at 05:32):ChihweiLHBird removed the review request for wasmtime-default-reviewers from PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 05:32):ChihweiLHBird requested fitzgen for a review on PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 05:32):ChihweiLHBird requested wasmtime-default-reviewers for a review on PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 05:33):ChihweiLHBird edited PR #15084:
This updates two root certificate crates in
Cargo.lock:
webpki-root-certs1.0.4 → 1.0.11, to fix RUSTSEC-2026-0383. PR #14900 closed the advisory issue #14893, but it updated onlywebpki-roots. The only user isureqin theort-sysbuild script, and that script trusts the OS root store. So this part only clears the advisory.webpki-roots1.0.10 → 1.0.11. This removes two more emSign roots: "emSign ECC Root CA - C3" and "emSign Root CA - C1".wasi-http(default-send-request) andwasi-tls(rustls) use this list at run time.A maintainer needs to add
cargo vetentries for both new versions.cargo check --lockedpasses forwasmtime-wasi-nn(onnx-download),wasmtime-wasi-http, andwasmtime-wasi-tls. Feel free to push to my branch if needed.
Wasmtime GitHub notifications bot (Oct 30 2026 at 14:26)::thumbs_up: alexcrichton submitted PR review.
Wasmtime GitHub notifications bot (Oct 30 2026 at 14:27):alexcrichton updated PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 14:28):alexcrichton has enabled auto merge for PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 14:39):alexcrichton added PR #15084 Update webpki-root-certs and webpki-roots to 1.0.11 to the merge queue.
Wasmtime GitHub notifications bot (Oct 30 2026 at 15:02)::check: alexcrichton merged PR #15084.
Wasmtime GitHub notifications bot (Oct 30 2026 at 15:02):alexcrichton removed PR #15084 Update webpki-root-certs and webpki-roots to 1.0.11 from the merge queue.
Last updated: Oct 31 2026 at 23:03 UTC