Fix Dependabot: ring (rust)

[akoszowski]

Summary

Addresses RUSTSEC-2025-0009 (ring 0.17.8 → 0.17.14, patched floor ≥0.17.12).

Dependency chain

• call_guest depended on a path ring checkout (../../../ring) that is not vendored in this repo.
• Transitive ring 0.17.8 was also pulled via rustls, rustls-webpki, and quinn-proto.
• rust/guest_wrapper/risc0_call_guest patched ring to the same external path.

Fix

• Use crates.io ring 0.17.12 in call_guest (resolves to 0.17.14 in the lockfile).
• Remove the [patch.crates-io] override in risc0_call_guest.
• Update Cargo.lock and rust/guest_wrapper/risc0_call_guest/Cargo.lock.

Notes

• No patched release exists on the 0.17.x line below 0.17.12; this bump stays on the same major.
• Merge other Dependabot lockfile PRs one at a time after this if they touch Cargo.lock.

  

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e3079a66-c37c-4bf9-9122-c4c5d27ec017

📥 Commits

Reviewing files that changed from the base of the PR and between a98611b and ca301ca.

⛔ Files ignored due to path filters (2)

• Cargo.lock is excluded by !**/*.lock
• rust/guest_wrapper/risc0_call_guest/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• rust/guest/Cargo.toml
• rust/guest_wrapper/risc0_call_guest/Cargo.toml

💤 Files with no reviewable changes (1)

• rust/guest_wrapper/risc0_call_guest/Cargo.toml

---

📝 Walkthrough

Walkthrough

Updated the guest manifest to use the published ring crate at version 0.17.12 with the alloc feature. Removed the guest wrapper’s local [patch.crates-io] override for ring.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: fixing the ring dependency for Dependabot in Rust.
Description check	✅ Passed	The description is directly related to the dependency update and security fix described in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}