Skip to content

deps(deps): bump revm from 42.0.1 to 43.0.3 - #2716

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-revm-43.0.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-revm-43.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps revm from 42.0.1 to 43.0.3.

Changelog

Sourced from revm's changelog.

Because this is workspace with multi libraries, tags will be simplified, and with this document you can match version of project with git tag.

v120

date: 24.09.2026

Patch release adding opt-in account extension data and updating dependencies.

Highlights:

  • Add the account-ext feature for shared chain-specific account payloads, with journal rollback and Block Access List (BAL) history (#3894)
  • Update BAL code-change handling to use the alloy-eip7928 accessors (#3916)
  • Update the locked rustls dependency to address RUSTSEC-2026-0285 (#3917)

The account-ext feature is disabled by default. See MIGRATION_GUIDE.md for the API and serialization considerations when enabling it.

  • revm-state: 43.0.0 -> 43.0.1 (opt-in account extensions and dependency update)
  • revm-database-interface: 43.0.0 -> 43.0.1 (dependency bump)
  • revm-context-interface: 43.0.1 -> 43.0.2 (opt-in account extension journal entries)
  • revm-context: 43.0.2 -> 43.0.3 (opt-in account extension journaling)
  • revm-database: 43.0.0 -> 43.0.1 (dependency bump)
  • revm-interpreter: 43.0.1 -> 43.0.2 (dependency bump)
  • revm-precompile: 43.0.2 -> 43.0.3 (dependency bump)
  • revm-handler: 43.0.2 -> 43.0.3 (dependency bump)
  • revm-inspector: 43.0.2 -> 43.0.3 (dependency bump)
  • revm-statetest-types: 43.0.1 -> 43.0.2 (dependency bump)
  • revm: 43.0.2 -> 43.0.3 (opt-in account-ext feature and dependency bumps)
  • revme: 43.0.2 -> 43.0.3 (dependency bumps)

revm-primitives and revm-bytecode remain at 43.0.0. revm-ee-tests remains at 43.0.0 and is excluded from release-plz releases.

v119

date: 09.09.2026

Patch release reverting the EIP-8037 system-call gas-reservoir change from v118.

Highlights:

  • Restore the pre-v118 system-call gas-tracking behavior (#3903)

See MIGRATION_GUIDE.md for the reverted handler API and gas-accounting behavior.

  • revm-handler: 43.0.1 -> 43.0.2 (⚠ API breaking changes)
  • revm-inspector: 43.0.1 -> 43.0.2 (✓ API compatible changes)
  • revm: 43.0.1 -> 43.0.2 (✓ dependency bump)
  • revme: 43.0.1 -> 43.0.2 (✓ dependency bump)

v118

date: 08.09.2026

Small patch release fixing EIP-8037 state-gas accounting and aligning the revme gas-limit default with EIP-7825.

Highlights:

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
revm [>= 28.a, < 29]

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file rust labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 28, 2026 12:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dependabot rust labels Sep 28, 2026

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Thanks for the dependency bump. I found one blocking consistency issue in the dependency graph introduced by this update.

Blocking

  • revm is upgraded to 43.0.3, but revm-state remains pinned as a direct dependency at 42.0.0 in this workspace. The lockfile confirms both revm-state 42.0.0 and revm-state 43.0.1 are now present simultaneously, which can cause type/API incompatibilities when values cross crate boundaries (same crate name, different major API line).

Please align direct revm-* crates to the same release line (or remove the direct revm-state dependency if not strictly needed) before merge.

@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 13

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • revm-bytecode 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-inspector 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-primitives 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-interpreter 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context-interface 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-handler 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-state 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm-precompile 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database-interface 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • alloy-eip7928 0.4.11 — Codex initialization unavailable or blocked; requires manual review.

@dependabot
dependabot Bot force-pushed the dependabot-cargo-revm-43.0.3 branch from 4b64fe3 to 10eb23d Compare September 29, 2026 17:14

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Thanks for the bump — there is still one blocking dependency-graph inconsistency introduced by this update.

Blocking

  • revm was upgraded to 43.0.3 in Cargo.toml, but the workspace still keeps a direct dependency on revm-state = "42.0.0". In Cargo.lock, stratus now depends on revm 43.0.3 and revm-state 42.0.0 simultaneously, while revm 43.0.3 itself uses revm-state 43.0.1. This leaves two revm-state major lines in the same build and can cause type/API incompatibilities if state types cross crate boundaries.

Please align revm-state with the upgraded revm line (or remove the direct revm-state dependency if not required directly).

@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 13

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • revm-bytecode 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-inspector 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-primitives 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-interpreter 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context-interface 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-handler 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-state 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm-precompile 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database-interface 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • alloy-eip7928 0.4.11 — Codex initialization unavailable or blocked; requires manual review.

@dependabot
dependabot Bot force-pushed the dependabot-cargo-revm-43.0.3 branch from 10eb23d to 94d4f23 Compare October 19, 2026 18:37

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Thanks for the dependency bump. I still see one blocking dependency-graph inconsistency in the current diff.

Blocking

  • revm is upgraded to 43.0.3 in Cargo.toml, but revm-state remains a direct dependency on 42.0.0. The lockfile shows stratus depending on revm 43.0.3 and revm-state 42.0.0 simultaneously, while revm 43.0.3 itself pulls revm-state 43.0.1.
  • This leaves two revm-state lines in the same build, which can break type compatibility if revm-state types cross crate boundaries.

Please align/remove the direct revm-state pin so the revm* stack is on one coherent version line.

@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 13

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • revm-bytecode 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-inspector 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-primitives 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-interpreter 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context-interface 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-handler 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-state 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm-precompile 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database-interface 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • alloy-eip7928 0.4.11 — Codex initialization unavailable or blocked; requires manual review.

Bumps [revm](https://github.com/bluealloy/revm) from 42.0.1 to 43.0.3.
- [Release notes](https://github.com/bluealloy/revm/releases)
- [Changelog](https://github.com/bluealloy/revm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bluealloy/revm/commits)

---
updated-dependencies:
- dependency-name: revm
  dependency-version: 43.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-cargo-revm-43.0.3 branch from 94d4f23 to 6f9b3ed Compare October 27, 2026 14:09
@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 13

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • revm-bytecode 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-inspector 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-primitives 43.0.0 — Codex initialization unavailable or blocked; requires manual review.
  • revm-interpreter 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-context-interface 43.0.2 — Codex initialization unavailable or blocked; requires manual review.
  • revm-handler 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-state 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • revm-precompile 43.0.3 — Codex initialization unavailable or blocked; requires manual review.
  • revm-database-interface 43.0.1 — Codex initialization unavailable or blocked; requires manual review.
  • alloy-eip7928 0.4.11 — Codex initialization unavailable or blocked; requires manual review.

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Blocking: This bump leaves the revm dependency graph split across incompatible release lines. Please align the direct revm-state and revm-inspectors dependencies with revm 43 before merging.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants