[36.0.x] Backports for security fixes (bytecodealliance#14178)

* Update cap-std dependencies

* Temporarily disable gating on wasi-nn testing (bytecodealliance#14000)

While bytecodealliance#13892 is in the works this disables gating on wasi-nn test
results. This helps resolve what looks to be ~5-10 spurious failures per
day.

Author: alexcrichton

.github/workflows/main.yml

@@ -1127,7 +1127,7 @@ jobs:
       - test_capi
       - test_debug_dwarf
       - test_fuzzing
-      - test_wasi_nn
+      # - test_wasi_nn
       - test_nightly
       - build
       - rustfmt

Cargo.lock

@@ -311,12 +311,12 @@ regalloc2 = "0.12.2"
 
 # cap-std family:
 target-lexicon = "0.13.0"
-cap-std = "3.4.4"
-cap-rand = { version = "3.4.4", features = ["small_rng"] }
-cap-fs-ext = "3.4.4"
-cap-net-ext = "3.4.4"
-cap-time-ext = "3.4.4"
-cap-tempfile = "3.4.4"
+cap-std = "3.4.6"
+cap-rand = { version = "3.4.6", features = ["small_rng"] }
+cap-fs-ext = "3.4.6"
+cap-net-ext = "3.4.6"
+cap-time-ext = "3.4.6"
+cap-tempfile = "3.4.6"
 fs-set-times = "0.20.1"
 system-interface = { version = "0.27.1", features = ["cap_std_impls"] }
 io-lifetimes = { version = "2.0.3", default-features = false }

Cargo.toml

@@ -4668,31 +4668,37 @@ end = "2025-12-05"
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-12-11"
-end = "2024-07-14"
+end = "2027-08-20"
 
 [[trusted.cap-net-ext]]
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-12-11"
 end = "2024-07-14"
 
+[[trusted.cap-net-ext]]
+criteria = "safe-to-deploy"
+user-id = 6825 # Dan Gohman (sunfishcode)
+start = "2023-04-07"
+end = "2027-08-20"
+
 [[trusted.cap-primitives]]
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-08-07"
-end = "2024-07-14"
+end = "2027-08-20"
 
 [[trusted.cap-rand]]
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-09-24"
-end = "2024-07-14"
+end = "2027-08-20"
 
 [[trusted.cap-std]]
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-06-25"
-end = "2024-07-14"
+end = "2027-08-20"
 
 [[trusted.cap-tempfile]]
 criteria = "safe-to-deploy"
@@ -4704,7 +4710,7 @@ end = "2024-07-14"
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2020-09-21"
-end = "2024-07-14"
+end = "2027-08-20"
 
 [[trusted.cc]]
 criteria = "safe-to-deploy"

supply-chain/audits.toml

@@ -3786,43 +3786,43 @@ user-login = "alexcrichton"
 user-name = "Alex Crichton"
 
 [[publisher.cap-fs-ext]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.cap-net-ext]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.cap-primitives]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.cap-rand]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.cap-std]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.cap-time-ext]]
-version = "3.2.0"
-when = "2024-07-08"
+version = "3.4.6"
+when = "2026-08-20"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"