wash-cli: 0.39.0 -> 1.0.0-beta.10 #457188
Merged
+22
−38
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
niklaskorz
added
the
1.severity: security
15 tasks
nixpkgs-ci
bot
added
10.rebuild-linux: 1-10
|
Linux build failing because of some tests, checking which need to be skipped here in addition Edit: fixed, only one other test that tried to download things from the internet |
niklaskorz
force-pushed
the
wash-1.0.0-beta
branch
from
a0365c8 to
9c9af80
Compare
|
bengsparks
approved these changes
Nov 1, 2025
nixpkgs-ci
bot
added
the
12.approvals: 1
LeSuisse
approved these changes
Nov 1, 2025
There was a problem hiding this comment.
Looking good.
nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 457188
Commit: 9c9af80c0ea8e66687645abf16fc47ad25e9f09f
x86_64-linux
✅ 1 package built:
- wash-cli
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
https://github.com/wasmCloud/wash/releases/tag/wash-v1.0.0-beta.10
wash-cli was renamed to just wash upstream (although the binary name already was
washbefore), but I kept the package name unchanged for now.I'm not sure to what degree the previous version of wash-cli is affected by CVE-2025-62518 (tracking issue #455265), but it contained the vulnerable tokio-tar dependency in its lockfile while the new version does not. Seeing that wash appears to act as a package manager to some degree, I'm going with "better be safe than sorry" and add the security label to this PR.
Things done
passthru.tests.nixpkgs-reviewon this PR. See nixpkgs-review usage../result/bin/.Add a 👍 reaction to pull requests you find important.