Merge pull request #2449 from oasisprotocol/peternose/trivial/unpin-contract-sdk

peternose · web-flow · commit b559f59cab8a · 2026-03-30T16:17:44.000+02:00
examples/contract-sdk: Bump oasis-contract-sdk to 0.4.2
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -1,4 +1,5 @@
 [advisories]
 ignore = [
 	"RUSTSEC-2023-0071", # Does not affect our current use of the library.
+	"RUSTSEC-2026-0049", # Vulnerable crate is only used in rofl-oracle-sgx example.
 ]
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/examples/contract-sdk/c10l-hello-world/Cargo.toml b/examples/contract-sdk/c10l-hello-world/Cargo.toml
@@ -9,8 +9,8 @@ crate-type = ["cdylib"]
 
 [dependencies]
 cbor = { version = "0.5.1", package = "oasis-cbor" }
-oasis-contract-sdk = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.1" }
-oasis-contract-sdk-storage = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.1" }
+oasis-contract-sdk = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.2" }
+oasis-contract-sdk-storage = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.2" }
 
 # Third party.
 thiserror = "1.0.30"
diff --git a/examples/contract-sdk/hello-world/Cargo.toml b/examples/contract-sdk/hello-world/Cargo.toml
@@ -9,8 +9,8 @@ crate-type = ["cdylib"]
 
 [dependencies]
 cbor = { version = "0.5.1", package = "oasis-cbor" }
-oasis-contract-sdk = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.1" }
-oasis-contract-sdk-storage = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.1" }
+oasis-contract-sdk = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.2" }
+oasis-contract-sdk-storage = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "contract-sdk/v0.4.2" }
 
 # Third party.
 thiserror = "1.0.30"

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,5 @@`
`1`	`1`	`[advisories]`
`2`	`2`	`ignore = [`
`3`	`3`	`"RUSTSEC-2023-0071", # Does not affect our current use of the library.`
	`4`	`+ "RUSTSEC-2026-0049", # Vulnerable crate is only used in rofl-oracle-sgx example.`
`4`	`5`	`]`