chore: polkadotstable-2409-5

.cargo-deny.toml

@@ -9,20 +9,19 @@ no-default-features = true
 [advisories]
 ignore = [
   { id = "RUSTSEC-2020-0168", reason = "`mach` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
-  { id = "RUSTSEC-2021-0139", reason = "`ansi_term` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2022-0061", reason = "`parity-wasm` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2022-0080", reason = "`parity-util-mem` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
-  { id = "RUSTSEC-2023-0091", reason = "`wasmtime` has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
+  { id = "RUSTSEC-2023-0091", reason = "`wasmtime` 8.0.1 has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0336", reason = "`rustls` vulnerability. Re-verify upon next polkadot-sdk updates." },
-  { id = "RUSTSEC-2024-0344", reason = "`curve25519-dalek` vulnerability. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0384", reason = "`instant` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0388", reason = "`derivative` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0421", reason = "`idna` has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2024-0436", reason = "`paste` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
-  { id = "RUSTSEC-2024-0438", reason = "`wasmtime` has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
+  { id = "RUSTSEC-2024-0438", reason = "`wasmtime` 8.0.1 has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2025-0009", reason = "`ring` has a security vulnerability but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
   { id = "RUSTSEC-2025-0010", reason = "`ring` 0.16.20 is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
+  { id = "RUSTSEC-2025-0017", reason = "`trust-dns` is unmaintained (renamed) but a Substrate dependency. Re-verify upon next polkadot-sdk updates." },
 ]
 yanked = "deny"
 
@@ -37,14 +36,16 @@ allow = [
   "BSD-2-Clause",
   "BSD-3-Clause",
   "CC0-1.0",
+  "CDLA-Permissive-2.0",
   "GPL-3.0 WITH Classpath-exception-2.0",
   "GPL-3.0",
   "ISC",
   "MIT",
+  "MIT-0",
   "MPL-2.0",
   "OpenSSL",
   "SSPL-1.0",
-  "Unicode-DFS-2016",
+  "Unicode-3.0",
   "Zlib",
 ]
 private = { ignore = false }
@@ -56,6 +57,9 @@ license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
 name          = "ring"
 
 [sources]
-allow-git        = ["https://github.com/paritytech/polkadot-sdk"]
-unknown-git      = "deny"
+allow-git = [
+  "https://github.com/paritytech/polkadot-sdk",
+  "https://github.com/polytope-labs/hyperbridge",
+]
+unknown-git = "deny"
 unknown-registry = "deny"

.github/workflows/check-code.yml

@@ -35,7 +35,7 @@ jobs:
     name: Run Clippy checks
     runs-on: ubuntu-latest
     container:
-      image: paritytech/ci-unified:bullseye-1.74.0
+      image: paritytech/ci-unified:bullseye-1.81.0
     env:
       # Configured by the Docker image. We can't change this unless the image does it.
       CARGO_HOME: /usr/local/cargo
@@ -76,11 +76,11 @@ jobs:
     name: Check formatting
     runs-on: ubuntu-latest
     container:
-      image: paritytech/ci-unified:bullseye-1.74.0
+      image: paritytech/ci-unified:bullseye-1.81.0
     env:
       # Configured by the Docker image. We can't change this unless the image does it.
       CARGO_HOME: /usr/local/cargo
-      # Latest nightly version matching the base rustc version (1.74.0).
+      # Latest nightly version matching the base rustc version (1.18.0).
       RUSTUP_NIGHTLY_VERSION: nightly-2023-10-02
     needs: get-commit-head
     if: ${{ !contains(needs.get-commit-head.outputs.headCommitMsg, 'ci-skip-rust') }}
@@ -232,14 +232,14 @@ jobs:
             -v "${HOME}/.cargo/registry/cache:${{ env.CARGO_HOME }}/registry/cache" \
             -v "${HOME}/.cargo/git/db:${{ env.CARGO_HOME }}/git/db" \
             -w /workspace \
-            paritytech/ci-unified:bullseye-1.74.0 \
+            paritytech/ci-unified:bullseye-1.81.0 \
             bash -c "cargo test --all-targets --locked ${{ matrix.features }}"
 
   cargo-doc:
     name: Check Rustdoc
     runs-on: ubuntu-latest
     container:
-      image: paritytech/ci-unified:bullseye-1.74.0
+      image: paritytech/ci-unified:bullseye-1.81.0
     env:
       # Configured by the Docker image. We can't change this unless the image does it.
       CARGO_HOME: /usr/local/cargo
@@ -276,7 +276,7 @@ jobs:
     name: Run try-runtime
     runs-on: ubuntu-latest
     container:
-      image: paritytech/ci-unified:bullseye-1.74.0
+      image: paritytech/ci-unified:bullseye-1.81.0
     env:
       # Configured by the Docker image. We can't change this unless the image does it.
       CARGO_HOME: /usr/local/cargo
@@ -368,7 +368,7 @@ jobs:
             -v "${HOME}/.cargo/registry/cache:${{ env.CARGO_HOME }}/registry/cache" \
             -v "${HOME}/.cargo/git/db:${{ env.CARGO_HOME }}/git/db" \
             -w /workspace \
-            paritytech/ci-unified:bullseye-1.74.0 \
+            paritytech/ci-unified:bullseye-1.81.0 \
             bash -c "bash -x scripts/run_benches_for_runtime.sh ${{ matrix.runtime }} dev"
 
   trigger-gitlab:

.github/workflows/publish-rustdocs.yml

@@ -55,7 +55,7 @@ jobs:
             -v "${HOME}/.cargo:/root/.cargo" \
             -e RUSTDOCFLAGS='-D warnings' \
             -w /workspace \
-            paritytech/ci-unified:bullseye-1.74.0 \
+            paritytech/ci-unified:bullseye-1.81.0 \
             bash -c "
               cargo doc --all-features --no-deps --locked && \
               mv $DOCS_TARGET/help.html $DOCS_TARGET/index.html && \

.gitlab-ci.yml

@@ -38,7 +38,7 @@ build-production-wasm:
 
 build-try-state-wasm:
   image:
-    name: paritytech/ci-unified:bullseye-1.74.0
+    name: paritytech/ci-unified:bullseye-1.81.0
   stage: build
   parallel:
     matrix: