ci: address cargo-audit for ruint (#2335)

Updated `ruint` from revm dependencies to 1.17.1
Updated `aws-sdk-s3` to address cargo audit warnings.

The guest library `ruint` patch cannot be updated until a future
release, so we add an ignore for now.

Author: jonathanpwang

.cargo/audit.toml

@@ -1,4 +1,11 @@
 [advisories]
+  ignore = [
   # an older version of tracing-subscriber 0.2.25 is used in ark-bn254 but it is an optional dependency that is not included in the crate graph even with all features enabled
   # unfortunately cargo audit includes optional dependencies from Cargo.lock even if they are not in the crate graph
-  ignore = ["RUSTSEC-2025-0055"]
+  "RUSTSEC-2025-0055",
+  # all host ruint dependencies have been updated to >=1.17.1.
+  # the guest library ruint patch is currently pinned to 1.14 and will be updated in a future release.
+  # - the advisory concerns undefined behavior (UB) which may trigger memory corruption in a previously marked safe function `reciprocal_mg10`. The upstream fix is to change the safe function to `unsafe`.
+  # - the advisory does not affect correctness of existing code.
+  "RUSTSEC-2025-0137"
+  ]

.github/workflows/extension-tests.cuda.yml

@@ -18,7 +18,7 @@ on:
       machine_type:
         description: "Runner machine type (e.g. test-gpu-nvidia/cpu=8+32)"
         required: false
-        default: test-gpu-nvidia/family=g6+g5+g6e
+        default: test-gpu-nvidia/family=g6+g6e
 
 concurrency:
   group: ${{ github.workflow_ref }}-extension-tests-cuda-${{ github.event.pull_request.number || github.sha }}
@@ -37,7 +37,7 @@ jobs:
           - "rv32im native"
           - "keccak256 sha256 bigint algebra ecc pairing"
     runs-on:
-      - runs-on=${{ github.run_id }}-extension-tests-cuda-${{ github.run_attempt }}-${{ strategy.job-index }}/runner=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.machine_type || 'test-gpu-nvidia/family=g6+g5+g6e' }}
+      - runs-on=${{ github.run_id }}-extension-tests-cuda-${{ github.run_attempt }}-${{ strategy.job-index }}/runner=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.machine_type || 'test-gpu-nvidia/family=g6+g6e' }}
 
     steps:
       - uses: runs-on/action@v2