Skip to content

chore: temporarily ignore wasmtime advisory - #7575

Merged
LesnyRumcajs merged 1 commit into
mainfrom
ignore-wasmtime-temporarily
Sep 1, 2026
Merged

chore: temporarily ignore wasmtime advisory#7575
LesnyRumcajs merged 1 commit into
mainfrom
ignore-wasmtime-temporarily

Conversation

@LesnyRumcajs

@LesnyRumcajs LesnyRumcajs commented Sep 1, 2026

Copy link
Copy Markdown
Member

Summary of changes

Changes introduced in this pull request:

Reference issue to close (if applicable)

Closes #7571

Other information and links

Change checklist

  • I have performed a self-review of my own code,
  • I have made corresponding changes to the documentation. All new code adheres to the team's documentation standards,
  • I have added tests that prove my fix is effective or that my feature works (if possible),
  • I have made sure the CHANGELOG is up-to-date. All user-facing changes should be reflected in this document.

Outside contributions

  • This pull request is based on an issue that a maintainer has accepted (see Before Opening a Pull Request).
  • I have read and agree to the CONTRIBUTING document.
  • I have read and agree to the AI Policy document. I understand that failure to comply with the guidelines will lead to rejection of the pull request.

Summary by CodeRabbit

  • Chores
    • Added a temporary security advisory exception for the pending Wasmtime dependency update.

@LesnyRumcajs
LesnyRumcajs requested a review from a team as a code owner September 1, 2026 09:06
@LesnyRumcajs
LesnyRumcajs requested review from EclesioMeloJunior and sudo-shashank and removed request for a team September 1, 2026 09:06
@coderabbitai

coderabbitai Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Essentials

Run ID: 7348fce4-64a0-475c-be9e-c4e4ef88dfd0

📥 Commits

Reviewing files that changed from the base of the PR and between 54da45b and e2a1f76.

📒 Files selected for processing (1)
  • deny.toml
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

  • filecoin-project/lotus (manual)

Included review availability: 4 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.


Walkthrough

The advisory configuration now ignores RUSTSEC-2026-0269 for Wasmtime.

Changes

Advisory configuration

Layer / File(s) Summary
Ignore Wasmtime advisory
deny.toml
Adds RUSTSEC-2026-0269 to the ignored advisory list for Wasmtime.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to e2a1f

This change temporarily suppresses a wasmtime advisory without changing supported filesystem behavior; no actionable merge-blocking risk remains beyond normal checks and review.

Suggested reviewers: eclesiomelojunior, sudo-shashank, akaladarshi

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies the main change: temporarily ignoring the Wasmtime advisory.
Linked Issues check ✅ Passed The change adds RUSTSEC-2026-0269 to deny.toml, which directly addresses issue #7571 by preventing the reported cargo deny check advisories failure. The temporary scope matches the PR objective.
Out of Scope Changes check ✅ Passed The PR changes only deny.toml and adds the advisory to the ignored list. This change is directly related to issue #7571 and contains no unrelated code changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch ignore-wasmtime-temporarily
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch ignore-wasmtime-temporarily

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.85%. Comparing base (54da45b) to head (e2a1f76).
✅ All tests successful. No failed tests found.

Additional details and impacted files

see 7 files with indirect coverage changes


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 54da45b...e2a1f76. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@LesnyRumcajs
LesnyRumcajs added this pull request to the merge queue Sep 1, 2026
Merged via the queue into main with commit 6bba885 Sep 1, 2026
37 checks passed
@LesnyRumcajs
LesnyRumcajs deleted the ignore-wasmtime-temporarily branch September 1, 2026 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[automated] cargo deny check advisories failure @ 1/9/26 00:03

2 participants