search

bytecodealliance / lucet

Lucet, the Sandboxing WebAssembly Compiler.
Apache License 2.0
4.06k stars 164 forks source link

bump wasmtime #631

Closed iximeow closed 3 years ago

iximeow commented 3 years ago

this pulls in an updated wasmtime to fix our dependence on rand_core that recently had a RUSTSEC advisory. it also updates raw-cpuid to 9.0.0 to fix a few soundness issues: these were in functions we don't use (as_string/processor_brand_string and cpuid_count), but cargo audit is a hammer that strikes all nails.

awortman-fastly commented 3 years ago

cut corners warning: a full cargo update includes bumping criterion from 0.3.3 to 0.3.4. this includes deprecation warnings for the various Lucet benchmarks, but i'm pretty uncertain how to rewrite them to the BenchmarkGroup API.