[dependabot]

Bumps chasm from 2.2.0 to 2.3.0.
Updates io.github.charlietap.chasm:chasm-jvm from 2.2.0 to 2.3.0

Release notes

Sourced from io.github.charlietap.chasm:chasm-jvm's releases.

2.3.0

Whats Changed

Store limits

Chasm can now cap how much memory a guest can use, so untrusted modules can't take down the host process. Limits are set on the store:

val store = store(
    StoreConfig(
        limits = StoreLimits(
            gcHeapBytes = 64L * 1024 * 1024,
            memoryPages = 1024,
            tableElements = 100_000,
            trapOnGrowFailure = true,
        ),
    ),
)

All limits are off by default. See https://github.com/CharlieTap/chasm/blob/HEAD/docs/limits.md for how each one behaves.

GC settings now live on the store

val store = store(StoreConfig(gcStrategy = GCStrategy.TRADITIONAL, gcThreshold = GCThreshold.MB(8)))

RuntimeConfig.gcStrategy and RuntimeConfig.gcThreshold are deprecated but still respected. See https://github.com/CharlieTap/chasm/blob/HEAD/docs/gc.md for more.

Fixes

• table.grow returns -1 instead of throwing when the platform can't allocate the larger table.
• Calling an exported host function that exhausts the GC heap returns an error instead of throwing.

Commits

• 79e96f6 build: prepare for release 2.3.0
• f9d2207 runtime: return -1 when table growth cannot allocate
• 5a2a692 docs: document store limits
• 4d60d5e runtime: bound guest memory with store limits
• 340b76a config: move GC strategy and threshold onto StoreConfig
• 68cdb64 runtime: centralise memory and table growth on instances
• 982ab8b build: bump development version
• 9ba24b8 tools/compiler-baseline: record exact compiler output
• d251d1b repo: clean up unreferenced code
• See full diff in compare view

Updates io.github.charlietap.chasm:chasm from 2.2.0 to 2.3.0

Release notes

Sourced from io.github.charlietap.chasm:chasm's releases.

2.3.0

Whats Changed

Store limits

Chasm can now cap how much memory a guest can use, so untrusted modules can't take down the host process. Limits are set on the store:

val store = store(
    StoreConfig(
        limits = StoreLimits(
            gcHeapBytes = 64L * 1024 * 1024,
            memoryPages = 1024,
            tableElements = 100_000,
            trapOnGrowFailure = true,
        ),
    ),
)

All limits are off by default. See https://github.com/CharlieTap/chasm/blob/HEAD/docs/limits.md for how each one behaves.

GC settings now live on the store

val store = store(StoreConfig(gcStrategy = GCStrategy.TRADITIONAL, gcThreshold = GCThreshold.MB(8)))

RuntimeConfig.gcStrategy and RuntimeConfig.gcThreshold are deprecated but still respected. See https://github.com/CharlieTap/chasm/blob/HEAD/docs/gc.md for more.

Fixes

• table.grow returns -1 instead of throwing when the platform can't allocate the larger table.
• Calling an exported host function that exhausts the GC heap returns an error instead of throwing.

Commits

• 79e96f6 build: prepare for release 2.3.0
• f9d2207 runtime: return -1 when table growth cannot allocate
• 5a2a692 docs: document store limits
• 4d60d5e runtime: bound guest memory with store limits
• 340b76a config: move GC strategy and threshold onto StoreConfig
• 68cdb64 runtime: centralise memory and table growth on instances
• 982ab8b build: bump development version
• 9ba24b8 tools/compiler-baseline: record exact compiler output
• d251d1b repo: clean up unreferenced code
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)