Skip to content

fix: exempt 7 new wasmtime + atty advisories (test-only deps)#730

Closed
noahgift wants to merge 1 commit intomainfrom
fix/audit-advisories-2026-04-12
Closed

fix: exempt 7 new wasmtime + atty advisories (test-only deps)#730
noahgift wants to merge 1 commit intomainfrom
fix/audit-advisories-2026-04-12

Conversation

@noahgift
Copy link
Copy Markdown
Contributor

Summary

  • 5 new wasmtime advisories published 2026-04-11 (0088, 0089, 0092, 0095, 0096)
  • Plus 0087 and atty RUSTSEC-2021-0145
  • All test-only dep chain, not production path
  • Updated both .cargo/audit.toml and deny.toml

Test plan

  • CI security job should pass with these exemptions
  • FALSIFY-AUDIT-001 contract verifies correct ignore count

🤖 Generated with Claude Code

5 new wasmtime advisories published 2026-04-11 (0088, 0089, 0092,
0095, 0096) plus the original 0087 and atty 2021-0145.

All are in test-only dep chain: wasmtime 27.0.0 via aprender-test-lib,
atty 0.2.14 via aprender-test-cli. Not in production inference/training
path. Upgrade to wasmtime >=43 tracked but requires API migration.

Updated both .cargo/audit.toml (for cargo audit) and deny.toml
(for cargo deny) to stay in sync.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@noahgift
Copy link
Copy Markdown
Contributor Author

Superseded by #731 (wasmtime 27→43 upgrade eliminates all wasmtime advisories) and #732 (Rule 8 CI gate completeness).

@noahgift noahgift closed this Apr 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant