Skip to content
This repository was archived by the owner on Jul 14, 2025. It is now read-only.

Security release

Choose a tag to compare

View all tags
@technosophos technosophos released this 20 Sep 22:29
· 80 commits to main since this release
v0.4.0
9abecad
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

This release updates to Wasmtime 0.3 and updates other Wasmtime-dependent dependencies.

Wasmtime 0.3 released a security patch (CVE 2021-39218). Wagi depends on Wasmtime, and is thus impacted by the issue. This release updates to the recently patched Wasmtime, and also updates additional dependencies.

All uses should update to Wagi 0.4.0.

shasum wagi-v0.4.0-*
91767bc21d6f9c9b5d8a9bd109b106775975c414  wagi-v0.4.0-linux-amd64.tar.gz
10bbcd1f7f1d369d2b3cf9b387cb71f84e9a9912  wagi-v0.4.0-macos-amd64.tar.gz
3752a10812585f31ced8e97fea9843d368def602  wagi-v0.4.0-windows-amd64.tar.gz

NOTE

The License for Wagi has been changed from MIT to Apache 2. This reflects our recent position that all code targeted for organizational donation (e.g. to Bytecode Alliance, Linux Foundation, or CNCF) should be licensed under Apache 2.

Changelog

  • Change version to 0.4.0 23efb4b (Radu M)
  • Update wasi-experimental-http-wasmtime crate to latest published version cdf4acc (Radu M)
  • Update wasi-experimental-http crate 1ea8d9d (Radu M)
  • Update Wasmtime to v0.30 db2fcf4 (Radu M)
  • Update license to Apache v2 4800e06 (Radu M)
  • Fetch credentials for priv registry if exists 6050e7e (Nitish Malhotra)
Assets 4
Loading