Release v1.8.7 · foundry-rs/foundry

v1.8.7 is a patch release on top of v1.8.6 that fixes two compile cache regressions introduced in v1.8.4 and picks up dependency security fixes.

Fixes

With dynamic test linking enabled (the default), widening a build after a narrower one, for example forge build --skip script followed by forge build, no longer recompiles every cached source. Only the newly included files are compiled, while tests, scripts, and the sources that depend on them are still invalidated when the build context changes (#17841, foundry-rs/foundry-core#277) by @mablr. Fixes #17836.
The compile cache is no longer discarded when the project directory moves or is checked out at a different path, because cached remappings are now stored relative to the project root (foundry-rs/foundry-core#274, foundry-rs/foundry-core#279, foundry-rs/foundry-core#288) by @ninglinLiu, @mablr. Fixes #17829.

Update foundry-core to e47676d, which also includes block explorer, wallet, and fork cache fixes such as honoring explorer API keys from the environment, accepting ETH_PASSWORD without --keystore, and resolving mixed 0.8 pragmas with Solar.

Update tokio to 1.53.3, fixing RUSTSEC-2026-0386 (#17775).
Update ctutils to 0.4.5, fixing RUSTSEC-2026-0385 (#17767).
Update zstd to 0.14.3, zstd-safe to 8.2.0 and zstd-sys to 2.1.2, fixing RUSTSEC-2026-0391, RUSTSEC-2026-0398, RUSTSEC-2026-0403 and RUSTSEC-2026-0410 (#17838).

Contributors (3)

chore: bump version to 1.8.7 (#17723) by @stevencartavia
chore: remove stale RustSec ignores (#17767) by @mablr
chore(deps): bump tokio to 1.53.3 (#17775) by @figtracer
fix(deps): ignore crypto-bigint advisory (#17797) by @stevencartavia
chore(deps): bump zstd for RUSTSEC advisories (#17838) by @mablr
fix(compile): reuse sources on DTL expansion (#17841) by @mablr
chore(cheatcodes): allow Solidity markup in spec docs (#17863) by @stevencartavia
chore(deps): bump foundry-core to e47676d (#17902) by @figtracer
chore: release 1.8.7 (#17924) by @figtracer