From 06fe38d5a2fdaf1fe1ab2185176a26772d986f2e Mon Sep 17 00:00:00 2001 From: itowlson Date: Fri, 23 Oct 2026 09:13:14 +1300 Subject: [PATCH 1/2] Upgrade webpki dependencies Signed-off-by: itowlson (cherry picked from commit e7ff893c39026b5e8a227860b773ccc42cb306cb) --- Cargo.lock | 26 +++++++++++++------------- examples/spin-timer/Cargo.lock | 28 ++++++++++++++-------------- 2 files changed, 27 insertions(+), 27 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 16398abc46..3af254ea30 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4505,7 +4505,7 @@ dependencies = [ "tokio", "tokio-rustls 0.26.4", "tower-service", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -7801,7 +7801,7 @@ dependencies = [ "wasm-bindgen-futures", "wasm-streams 0.4.2", "web-sys", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -7977,7 +7977,7 @@ dependencies = [ "log", "rustls-native-certs 0.8.4", "rustls-pemfile", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "thiserror 2.0.20", "tokio", "tokio-rustls 0.26.4", @@ -8154,7 +8154,7 @@ dependencies = [ "once_cell", "ring", "rustls-pki-types", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "subtle", "zeroize", ] @@ -8217,7 +8217,7 @@ dependencies = [ "rustls 0.23.46", "rustls-native-certs 0.8.4", "rustls-platform-verifier-android", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "security-framework 3.7.0", "security-framework-sys", "webpki-root-certs", @@ -8253,9 +8253,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.14" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0527518605e68109d875e248ea259b6758801cf165e4b2c2733ae3b51f12535a" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types", @@ -12440,7 +12440,7 @@ dependencies = [ "wasmtime", "wasmtime-wasi", "wasmtime-wasi-io", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -12595,9 +12595,9 @@ dependencies = [ [[package]] name = "webpki-root-certs" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b" +checksum = "58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb" dependencies = [ "rustls-pki-types", ] @@ -12608,14 +12608,14 @@ version = "0.26.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9" dependencies = [ - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] name = "webpki-roots" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ] diff --git a/examples/spin-timer/Cargo.lock b/examples/spin-timer/Cargo.lock index 7dd9a23258..9e71c0ee9e 100644 --- a/examples/spin-timer/Cargo.lock +++ b/examples/spin-timer/Cargo.lock @@ -2419,7 +2419,7 @@ dependencies = [ "tokio", "tokio-rustls 0.26.4", "tower-service", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -4232,7 +4232,7 @@ dependencies = [ "wasm-bindgen-futures", "wasm-streams", "web-sys", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -4290,7 +4290,7 @@ dependencies = [ "log", "rustls-native-certs 0.8.4", "rustls-pemfile", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "thiserror 2.0.20", "tokio", "tokio-rustls 0.26.4", @@ -4445,7 +4445,7 @@ dependencies = [ "once_cell", "ring", "rustls-pki-types", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "subtle", "zeroize", ] @@ -4508,7 +4508,7 @@ dependencies = [ "rustls 0.23.46", "rustls-native-certs 0.8.4", "rustls-platform-verifier-android", - "rustls-webpki 0.103.14", + "rustls-webpki 0.103.16", "security-framework 3.7.0", "security-framework-sys", "webpki-root-certs", @@ -4544,9 +4544,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.14" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0527518605e68109d875e248ea259b6758801cf165e4b2c2733ae3b51f12535a" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types", @@ -5843,7 +5843,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" dependencies = [ "fastrand 2.5.0", - "getrandom 0.4.3", + "getrandom 0.3.4", "once_cell", "rustix", "windows-sys 0.61.2", @@ -7182,7 +7182,7 @@ dependencies = [ "wasmtime", "wasmtime-wasi", "wasmtime-wasi-io", - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] @@ -7251,9 +7251,9 @@ dependencies = [ [[package]] name = "webpki-root-certs" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b" +checksum = "58ec80e73fd8baf57bf0d9615554c75348bda990d6d5bbeab964dd068319fecb" dependencies = [ "rustls-pki-types", ] @@ -7264,14 +7264,14 @@ version = "0.26.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9" dependencies = [ - "webpki-roots 1.0.9", + "webpki-roots 1.0.10", ] [[package]] name = "webpki-roots" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ] From c68eb7412bc362b8e6e65bc2dc52e9aad9995f6b Mon Sep 17 00:00:00 2001 From: itowlson Date: Fri, 23 Oct 2026 10:35:19 +1300 Subject: [PATCH 2/2] Bump version to 4.2.5 Signed-off-by: itowlson --- Cargo.lock | 132 ++++++++++++++++++++++++++--------------------------- Cargo.toml | 2 +- 2 files changed, 67 insertions(+), 67 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 3af254ea30..c50f66fc89 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1810,7 +1810,7 @@ dependencies = [ [[package]] name = "conformance" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "conformance-tests", @@ -7988,7 +7988,7 @@ dependencies = [ [[package]] name = "runtime-tests" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "env_logger", @@ -8919,7 +8919,7 @@ dependencies = [ [[package]] name = "spin-app" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "serde", @@ -8932,7 +8932,7 @@ dependencies = [ [[package]] name = "spin-build" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "serde", @@ -8951,7 +8951,7 @@ dependencies = [ [[package]] name = "spin-capabilities" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "wac-graph", @@ -8962,7 +8962,7 @@ dependencies = [ [[package]] name = "spin-cli" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9051,7 +9051,7 @@ dependencies = [ [[package]] name = "spin-common" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "clap", @@ -9064,7 +9064,7 @@ dependencies = [ [[package]] name = "spin-componentize" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9090,7 +9090,7 @@ dependencies = [ [[package]] name = "spin-compose" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9109,7 +9109,7 @@ dependencies = [ [[package]] name = "spin-connection-semaphore" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "spin-telemetry", @@ -9120,7 +9120,7 @@ dependencies = [ [[package]] name = "spin-core" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9138,7 +9138,7 @@ dependencies = [ [[package]] name = "spin-dependency-wit" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "indexmap 2.14.0", @@ -9154,7 +9154,7 @@ dependencies = [ [[package]] name = "spin-doctor" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9176,7 +9176,7 @@ dependencies = [ [[package]] name = "spin-environments" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9216,7 +9216,7 @@ dependencies = [ [[package]] name = "spin-expressions" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9229,7 +9229,7 @@ dependencies = [ [[package]] name = "spin-factor-key-value" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "serde", @@ -9254,7 +9254,7 @@ dependencies = [ [[package]] name = "spin-factor-llm" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9275,7 +9275,7 @@ dependencies = [ [[package]] name = "spin-factor-otel" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "indexmap 2.14.0", @@ -9294,7 +9294,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-http" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "bytes", @@ -9332,7 +9332,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-mqtt" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "rumqttc", @@ -9351,7 +9351,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-mysql" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "futures", @@ -9375,7 +9375,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-networking" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9410,7 +9410,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-pg" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "bytes", @@ -9447,7 +9447,7 @@ dependencies = [ [[package]] name = "spin-factor-outbound-redis" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "opentelemetry-semantic-conventions", @@ -9467,7 +9467,7 @@ dependencies = [ [[package]] name = "spin-factor-sqlite" -version = "4.2.4" +version = "4.2.5" dependencies = [ "async-trait", "opentelemetry-semantic-conventions", @@ -9486,7 +9486,7 @@ dependencies = [ [[package]] name = "spin-factor-variables" -version = "4.2.4" +version = "4.2.5" dependencies = [ "spin-core", "spin-expressions", @@ -9501,7 +9501,7 @@ dependencies = [ [[package]] name = "spin-factor-wasi" -version = "4.2.4" +version = "4.2.5" dependencies = [ "async-trait", "bytes", @@ -9519,7 +9519,7 @@ dependencies = [ [[package]] name = "spin-factors" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "serde", @@ -9532,7 +9532,7 @@ dependencies = [ [[package]] name = "spin-factors-derive" -version = "4.2.4" +version = "4.2.5" dependencies = [ "expander", "proc-macro2", @@ -9542,7 +9542,7 @@ dependencies = [ [[package]] name = "spin-factors-executor" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "spin-app", @@ -9558,7 +9558,7 @@ dependencies = [ [[package]] name = "spin-factors-test" -version = "4.2.4" +version = "4.2.5" dependencies = [ "spin-app", "spin-factors", @@ -9570,7 +9570,7 @@ dependencies = [ [[package]] name = "spin-http" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "http 1.5.0", @@ -9593,7 +9593,7 @@ dependencies = [ [[package]] name = "spin-http-routes" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "indexmap 2.14.0", @@ -9605,7 +9605,7 @@ dependencies = [ [[package]] name = "spin-key-value-aws" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-once-cell", @@ -9620,7 +9620,7 @@ dependencies = [ [[package]] name = "spin-key-value-azure" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9636,7 +9636,7 @@ dependencies = [ [[package]] name = "spin-key-value-redis" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "redis", @@ -9649,7 +9649,7 @@ dependencies = [ [[package]] name = "spin-key-value-spin" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "rusqlite", @@ -9663,7 +9663,7 @@ dependencies = [ [[package]] name = "spin-llm-local" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "candle-core", @@ -9683,7 +9683,7 @@ dependencies = [ [[package]] name = "spin-llm-remote-http" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "futures", @@ -9697,7 +9697,7 @@ dependencies = [ [[package]] name = "spin-loader" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "dirs 6.0.0", @@ -9726,7 +9726,7 @@ dependencies = [ [[package]] name = "spin-locked-app" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9739,7 +9739,7 @@ dependencies = [ [[package]] name = "spin-manifest" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "glob", @@ -9760,7 +9760,7 @@ dependencies = [ [[package]] name = "spin-oci" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "astral-tokio-tar", @@ -9796,7 +9796,7 @@ dependencies = [ [[package]] name = "spin-outbound-networking-config" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "futures-util", @@ -9811,7 +9811,7 @@ dependencies = [ [[package]] name = "spin-plugins" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "chrono", @@ -9835,11 +9835,11 @@ dependencies = [ [[package]] name = "spin-resource-table" -version = "4.2.4" +version = "4.2.5" [[package]] name = "spin-runtime-config" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "serde", @@ -9877,7 +9877,7 @@ dependencies = [ [[package]] name = "spin-runtime-factors" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "clap", @@ -9905,7 +9905,7 @@ dependencies = [ [[package]] name = "spin-serde" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "base64 0.22.1", @@ -9918,7 +9918,7 @@ dependencies = [ [[package]] name = "spin-sqlite" -version = "4.2.4" +version = "4.2.5" dependencies = [ "serde", "spin-factor-sqlite", @@ -9930,7 +9930,7 @@ dependencies = [ [[package]] name = "spin-sqlite-inproc" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9944,7 +9944,7 @@ dependencies = [ [[package]] name = "spin-sqlite-libsql" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -9956,7 +9956,7 @@ dependencies = [ [[package]] name = "spin-telemetry" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "http 0.2.12", @@ -9975,7 +9975,7 @@ dependencies = [ [[package]] name = "spin-templates" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "bytes", @@ -10008,14 +10008,14 @@ dependencies = [ [[package]] name = "spin-tls" -version = "4.2.4" +version = "4.2.5" dependencies = [ "rustls 0.23.46", ] [[package]] name = "spin-trigger" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "clap", @@ -10045,7 +10045,7 @@ dependencies = [ [[package]] name = "spin-trigger-http" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "clap", @@ -10086,7 +10086,7 @@ dependencies = [ [[package]] name = "spin-trigger-redis" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "futures", @@ -10103,7 +10103,7 @@ dependencies = [ [[package]] name = "spin-variables-azure" -version = "4.2.4" +version = "4.2.5" dependencies = [ "azure_core 0.20.0", "azure_identity 0.20.0", @@ -10117,7 +10117,7 @@ dependencies = [ [[package]] name = "spin-variables-env" -version = "4.2.4" +version = "4.2.5" dependencies = [ "dotenvy", "serde", @@ -10130,7 +10130,7 @@ dependencies = [ [[package]] name = "spin-variables-static" -version = "4.2.4" +version = "4.2.5" dependencies = [ "serde", "serde_json", @@ -10143,7 +10143,7 @@ dependencies = [ [[package]] name = "spin-variables-vault" -version = "4.2.4" +version = "4.2.5" dependencies = [ "serde", "spin-expressions", @@ -10154,7 +10154,7 @@ dependencies = [ [[package]] name = "spin-wasi-async" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "spin-core", @@ -10163,7 +10163,7 @@ dependencies = [ [[package]] name = "spin-world" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "async-trait", @@ -10479,7 +10479,7 @@ dependencies = [ [[package]] name = "terminal" -version = "4.2.4" +version = "4.2.5" dependencies = [ "termcolor", ] @@ -11266,7 +11266,7 @@ dependencies = [ [[package]] name = "ui-testing" -version = "4.2.4" +version = "4.2.5" dependencies = [ "anyhow", "dirs 6.0.0", diff --git a/Cargo.toml b/Cargo.toml index e26023061a..1bec232c03 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -6,7 +6,7 @@ edition = { workspace = true } license = { workspace = true } [workspace.package] -version = "4.2.4" +version = "4.2.5" authors = ["Spin Framework Contributors"] edition = "2024" license = "Apache-2.0 WITH LLVM-exception"