Skip to content

deps(deps): bump revm from 42.0.1 to 43.0.3 - #2756

Open
carneiro-cw wants to merge 1 commit into
mainfrom
deps/revm-43
Open

carneiro-cw wants to merge 1 commit into
mainfrom
deps/revm-43

Conversation

@carneiro-cw

Copy link
Copy Markdown
Contributor

Summary

Upgrades the revm family to the latest releases, on a branch forked from main:

  • revm 42.0.1 -> 43.0.3 — Glamsterdam devnet-8 gas repricing (EIP-8037/8038 constants aligned with execution-specs), fiber-backed asyncdb support (feature-gated, off), Cancun self-destruct finalization in place, MemoryOOG on failed memory resize, fused BLS12-381 multi-miller loop, created-contract code cached by hash in State (#3855).
  • revm-inspectors 0.42.0 -> 0.43.0 — EIP-8037 state-gas tracing (StateGasTracer, result-gas-aware geth trace builders); requires revm ^43.
  • revm-state 42.0.0 -> 43.0.1 — Account serde field-order fix for positional formats, opt-in account-ext feature; kept in lockstep with revm 43.
  • alloy-consensus / alloy-eips / alloy-rpc-types-eth / alloy-rpc-types-trace 2.3.0 -> 2.4.2 — required because revm-inspectors 0.43 dispatches on the EIP-8037 trace fields introduced in alloy 2.4. Held at 2.4.2 rather than 2.5.0 to avoid the alloy-trie 0.9.6 pin bump; 2.5 can be a follow-up.

Code changes

The upgrade compiles against revm 43 with a single source touch: the geth CallFrame literals in src/eth/rpc/server.rs tests gained ..Default::default() for the new executionGasUsed / stateGasUsed / gasRefund / stateGasRefund fields (all Option, skip-serializing — trace output is unchanged).

Supply chain

22 delta audits + 1 full audit (triomphe 0.1.17, new in the lock via revm-state's account-ext feature) recorded in supply-chain/audits.toml; cargo vet passes. Audit highlights:

  • The only new unsafe anywhere sits behind the non-default asyncdb feature (fiber plumbing in revm-database-interface/handler/context; contracts stated and hold; this workspace leaves the feature off).
  • revm 43's default-enabled changes are safe-Rust EVM semantics and gas accounting.

Verification

  • cargo check --workspace --all-targets — clean
  • cargo test --workspace — all suites pass
  • cargo vet — passes
  • pre-commit (gitleaks, fmt, lint-check) — passes

Notes for reviewers

  • EIP-8037/8038 Amsterdam gas constants change expected values for Amsterdam+ hardfork tests; stratus runs pre-Amsterdam forks today, so behavior is unchanged on the currently active chains.
  • revm 43 propagates AccountInfo.code_hash into call frames (known_bytecode) — a behavior that also existed in 42; the Account -> RevmAccountInfo conversion still hardcodes KECCAK_EMPTY and only surfaces through EXTCODEHASH (separate issue, tracked on the revmc branch).

Upgrade the revm family to the latest releases and the alloy crates they
require:

- revm 42.0.1 -> 43.0.3 (Glamsterdam devnet-8 gas repricing, fiber-backed
  asyncdb feature, Cancun self-destruct finalization, memory-resize OOG
  fix, fused BLS12-381 multi-miller loop)
- revm-inspectors 0.42.0 -> 0.43.0 (EIP-8037 state-gas tracing; requires
  revm ^43)
- revm-state 42.0.0 -> 43.0.1 (Account serde field-order fix, account-ext
  feature; revm-state and revm 43 must stay in lockstep)
- alloy-consensus/eips/rpc-types-eth/rpc-types-trace 2.3.0 -> 2.4.2
  (revm-inspectors 0.43 dispatches on the EIP-8037 trace fields introduced
  in alloy 2.4; kept on 2.4.2 to avoid the alloy-trie 0.9.6 pin bump that
  alloy 2.5 drags in)

Source changes: geth CallFrame literals in the rpc server tests gained
..Default::default() for the new executionGasUsed/stateGasUsed/gasRefund/
stateGasRefund Option fields (all skip-serializing, so trace output is
unchanged).

Supply chain: 22 delta audits + 1 full audit (triomphe, new via
revm-state's account-ext feature) recorded in supply-chain/audits.toml.
No new unsafe on any default-enabled path; the asyncdb fiber machinery
in revm-database-interface/handler/context is feature-gated off.
@carneiro-cw
carneiro-cw requested a review from a team as a code owner October 29, 2026 13:18
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-29T13:23:32.115430Z 1faca0a PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions

Copy link
Copy Markdown
Contributor

Failed to generate code suggestions for PR

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

The revm, revm-inspectors, revm-state, and Alloy dependency updates are consistently reflected in the manifest and lockfile. The only application-code changes add defaults to test CallFrame literals for the new optional trace fields; I found no concrete issue in the supplied diff.


Revisão parcial — limite declarado
O diff foi truncado: a revisão cobriu apenas o trecho visto (47995 de 47995 caracteres do diff; 4 arquivos com contexto entregue). Nada fora do trecho visto foi avaliado, e esta revisão não equivale a uma aprovação.
Arquivos truncados:

  • Cargo.lock (patch: 5000 de 9228 caracteres)
  • Cargo.lock (file: 16000 de 193890 caracteres)
  • supply-chain/audits.toml (patch: 5000 de 35503 caracteres)
  • supply-chain/audits.toml (file: 16000 de 150732 caracteres)
  • src/eth/rpc/server.rs (file: 16000 de 79601 caracteres)

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1faca0ab42

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread Cargo.toml Resolved

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant