Skip to content

Update wasm-micro-runtime submodule to latest upstream#488

Open
haitaohuang wants to merge 1 commit intointel:mainfrom
haitaohuang:update-wamr-submodule
Open

Update wasm-micro-runtime submodule to latest upstream#488
haitaohuang wants to merge 1 commit intointel:mainfrom
haitaohuang:update-wamr-submodule

Conversation

@haitaohuang
Copy link
Contributor

Updates external/wasm-micro-runtime from 0e47872f (v2.4.3) to 8d7d93d9. This includes commit 6f62820d which upgrades the go yaml.v3 package.

There is a CVE for its go yaml dependency with old version See upstream commit

@haitaohuang haitaohuang force-pushed the update-wamr-submodule branch from 4ad6648 to c03140f Compare January 27, 2026 16:22
Updates external/wasm-micro-runtime from 0e47872f (v2.4.3) to 8d7d93d9.
This includes commit 6f62820d which upgrades the go yaml.v3 package.

Signed-off-by: Haitao Huang <4699115+haitaohuang@users.noreply.github.com>
@haitaohuang haitaohuang force-pushed the update-wamr-submodule branch from c03140f to e9a8440 Compare January 27, 2026 16:27
@haitaohuang
Copy link
Contributor Author

Any concern to merge?

@bgotowal
Copy link
Contributor

bgotowal commented Mar 5, 2026

Hello @haitaohuang !

Thank you for reporting the problem and submitting the PR!

Currently, it cannot be merged as is though. There's been a major update (1.0.0 -> 2.4.3) done already in c3c44e7. However, it's been reported to cause runtime errors in one of the use cases and thus been temporarily reverted in 55687ee. We commit to fix that issue and get back to you with an update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants