Skip to content

deps: update Wasmtime to 45.0.3#46044

Merged
nezdolik merged 1 commit into
envoyproxy:mainfrom
nezdolik:bump-wasm
Jul 10, 2026
Merged

deps: update Wasmtime to 45.0.3#46044
nezdolik merged 1 commit into
envoyproxy:mainfrom
nezdolik:bump-wasm

Conversation

@nezdolik

@nezdolik nezdolik commented Jul 8, 2026

Copy link
Copy Markdown
Member

Update Wasmtime to 44.0.3 to pick up the CVE-2026-54786 fix.

The proxy-wasm-host generated Wasmtime prefix patch was tied to the older Wasmtime source layout and no longer applies to 44.0.3. Run the same prefixing transform as repository patch commands instead so new C API symbols added by Wasmtime are handled with the rest of the C API.

Commit Message:
Additional Description:
Risk Level:
Testing:
Docs Changes:
Release Notes:
Platform Specific Features:
[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]

@repokitteh-read-only repokitteh-read-only Bot added the deps Approval required for changes to Envoy's external dependencies label Jul 8, 2026
@repokitteh-read-only

Copy link
Copy Markdown

CC @envoyproxy/dependency-shepherds: Your approval is needed for changes made to (bazel/.*repos.*\.bzl)|(bazel/dependency_imports\.bzl)|(api/bazel/.*\.bzl)|(.*/requirements\.txt)|(.*\.patch).
envoyproxy/dependency-shepherds assignee is @agrawroh

🐱

Caused by: #46044 was opened by nezdolik.

see: more, trace.

Comment thread bazel/repositories.bzl Outdated
patches = [
"@proxy_wasm_cpp_host//:bazel/external/prefixed_wasmtime.patch",
patch_cmds = [
"find ./crates/c-api -type f -exec sed -i.bak " +

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ideally should be fixed upstream. Wasmtime 44.0.3 added C API content such as the wasm_tagtype_* declarations, shifting and changing doc-wasm.h, so Bazel could no longer apply the patch cleanly.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please also open an issue upstream?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

agrawroh
agrawroh previously approved these changes Jul 9, 2026
@repokitteh-read-only repokitteh-read-only Bot removed the deps Approval required for changes to Envoy's external dependencies label Jul 9, 2026
Update Wasmtime to 45.0.2 to pick up the CVE-2026-54786 fix.

Align proxy-wasm-cpp-host with its Wasmtime 45.0.2 update so Envoy uses the matching upstream build configuration and generated C API prefix patch.

Signed-off-by: Kateryna Nezdolii <kateryna.nezdolii@gmail.com>
@repokitteh-read-only repokitteh-read-only Bot added the deps Approval required for changes to Envoy's external dependencies label Jul 10, 2026
@nezdolik nezdolik changed the title deps: update Wasmtime to 44.0.3 deps: update Wasmtime to 45.0.3 Jul 10, 2026
@nezdolik

Copy link
Copy Markdown
Member Author

cc @leonm1

@agrawroh

Copy link
Copy Markdown
Member

/retest

@repokitteh-read-only repokitteh-read-only Bot removed the deps Approval required for changes to Envoy's external dependencies label Jul 10, 2026
@nezdolik nezdolik merged commit 2e97f79 into envoyproxy:main Jul 10, 2026
29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants