From 94380e6f61459654c768df7a349b28f4cdae1849 Mon Sep 17 00:00:00 2001
From: Kateryna Nezdolii <kateryna.nezdolii@gmail.com>
Date: Wed, 8 Jul 2026 13:01:08 +0000
Subject: [PATCH] deps: update Wasmtime to 45.0.2

Update Wasmtime to 45.0.2 to pick up the CVE-2026-54786 fix.

Align proxy-wasm-cpp-host with its Wasmtime 45.0.2 update so Envoy uses the matching upstream build configuration and generated C API prefix patch.

Signed-off-by: Kateryna Nezdolii <kateryna.nezdolii@gmail.com>
---
 bazel/deps.yaml                | 4 ++--
 bazel/repository_locations.bzl | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/bazel/deps.yaml b/bazel/deps.yaml
index e7867e8085481..066a941aca958 100644
--- a/bazel/deps.yaml
+++ b/bazel/deps.yaml
@@ -573,7 +573,7 @@ wasmtime:
   project_name: "wasmtime"
   project_desc: "A standalone runtime for WebAssembly"
   project_url: "https://github.com/bytecodealliance/wasmtime"
-  release_date: "2026-04-09"
+  release_date: "2026-06-15"
   use_category:
   - dataplane_ext
   extensions:
@@ -1233,7 +1233,7 @@ proxy_wasm_cpp_host:
   project_name: "WebAssembly for Proxies (C++ host implementation)"
   project_desc: "WebAssembly for Proxies (C++ host implementation)"
   project_url: "https://github.com/proxy-wasm/proxy-wasm-cpp-host"
-  release_date: "2026-06-22"
+  release_date: "2026-06-23"
   use_category:
   - dataplane_ext
   extensions:
diff --git a/bazel/repository_locations.bzl b/bazel/repository_locations.bzl
index fe20006e639a4..98b7c844eec7e 100644
--- a/bazel/repository_locations.bzl
+++ b/bazel/repository_locations.bzl
@@ -519,8 +519,8 @@ REPOSITORY_LOCATIONS_SPEC = dict(
         urls = ["https://github.com/bytecodealliance/wasm-micro-runtime/archive/{version}.tar.gz"],
     ),
     wasmtime = dict(
-        version = "42.0.2",
-        sha256 = "96b94e150a3877d98cdc2e27bcd65ba89155ad67fa16c48fad6216664cb60d29",
+        version = "45.0.2",
+        sha256 = "a95cf57008b87dbe1cdaba220ea58b75bb0b53369e166fe21e729011bd25e9e8",
         strip_prefix = "wasmtime-{version}",
         urls = ["https://github.com/bytecodealliance/wasmtime/archive/v{version}.tar.gz"],
     ),
@@ -623,8 +623,8 @@ REPOSITORY_LOCATIONS_SPEC = dict(
         urls = ["https://github.com/proxy-wasm/proxy-wasm-cpp-sdk/archive/{version}.tar.gz"],
     ),
     proxy_wasm_cpp_host = dict(
-        version = "09e5f8d6658fdb77f3d5859b27141e79514e371c",
-        sha256 = "366e7598d4931a96fd1c5b0482f87076d863810049aa3a8ce921616592ed3e8c",
+        version = "f2db56af443571e92a31c0b877106d9ea96e19ef",
+        sha256 = "34dac5bcebf0b156e435bf8dd9bdac5be60b95f967c420c680578d73af28c604",
         strip_prefix = "proxy-wasm-cpp-host-{version}",
         urls = ["https://github.com/proxy-wasm/proxy-wasm-cpp-host/archive/{version}.tar.gz"],
     ),