From 4f993ac2067be5f66dc7750d1b9c386933149cf1 Mon Sep 17 00:00:00 2001
From: Gabor Greif <gabor.greif@caffeine.ai>
Date: Thu, 21 May 2026 21:55:37 +0200
Subject: [PATCH 1/2] wasmtime: 44.0.1 -> 45.0.0

---
 pkgs/by-name/wa/wasmtime/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/wa/wasmtime/package.nix b/pkgs/by-name/wa/wasmtime/package.nix
index 00547218c2e9..a8be07cbe92c 100644
--- a/pkgs/by-name/wa/wasmtime/package.nix
+++ b/pkgs/by-name/wa/wasmtime/package.nix
@@ -13,20 +13,20 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wasmtime";
-  version = "44.0.1";
+  version = "45.0.0";
 
   src = fetchFromGitHub {
     owner = "bytecodealliance";
     repo = "wasmtime";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nVE18URbDKIrZr7ImPf2Zx5Ftq/oT2mZU0CMuBh+EYE=";
+    hash = "sha256-oCIMfBGhWZiaNNfH7Pc9DCpbEXs8AU3w8tIE6o/vjLk=";
     fetchSubmodules = true;
   };
 
   # Disable cargo-auditable until https://github.com/rust-secure-code/cargo-auditable/issues/124 is solved.
   auditable = false;
 
-  cargoHash = "sha256-K2Y6atvbvqIuc7Upk4134fZW1y329DlG2gzm8VveyWA=";
+  cargoHash = "sha256-yAPs2o2ayxxh3jk5+T8DiP9uFjBGyPTLzgP/RXPSj2g=";
   cargoBuildFlags = [
     "--package"
     "wasmtime-cli"

From 1497f748130ee3c92a3d091ef4cd771cc7fcd236 Mon Sep 17 00:00:00 2001
From: winston <hey@winston.sh>
Date: Tue, 26 May 2026 21:55:44 +0200
Subject: [PATCH 2/2] python3Packages.wasmtime: 44.0.0 -> 45.0.0

---
 .../python-modules/wasmtime/default.nix       | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/pkgs/development/python-modules/wasmtime/default.nix b/pkgs/development/python-modules/wasmtime/default.nix
index 0d6385e2d5ee..462fb4829f32 100644
--- a/pkgs/development/python-modules/wasmtime/default.nix
+++ b/pkgs/development/python-modules/wasmtime/default.nix
@@ -14,14 +14,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "wasmtime";
-  version = "44.0.0";
+  version = "45.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bytecodealliance";
     repo = "wasmtime-py";
     tag = finalAttrs.version;
-    hash = "sha256-7K0j4jMsRB7/wNIj0pXxFTy0y7aN37wgCD1XKM92Ayw=";
+    hash = "sha256-XlAWPJB34uE+hbEMGZ46Ll6kXP+/lZ2amTKdjslGrP4=";
   };
 
   postPatch = ''
@@ -29,8 +29,9 @@ buildPythonPackage (finalAttrs: {
       --replace-fail "setuptools-git-versioning>=2.0,<3" "setuptools-git-versioning" \
       --replace-fail 'build-backend = "backend"' 'build-backend = "setuptools.build_meta"'
 
-    substituteInPlace ci/cbindgen.py \
-      --replace-fail "'-D__builtin_va_list=int'," "'-D__builtin_va_list=int', '-Dnullptr_t=void*',"
+    # `wasmtime/_{extern,types,value}.py` erroneously report unreachable statements
+    substituteInPlace mypy.ini \
+      --replace-fail "warn_unreachable = True" "warn_unreachable = False"
 
     sed -i '/^backend-path = \[/,/^\]/d' pyproject.toml
 
@@ -62,15 +63,17 @@ buildPythonPackage (finalAttrs: {
     writableTmpDirAsHomeHook
   ];
 
-  disabledTestPaths = [
-    "ci/cbindgen.py"
-  ];
-
   pythonImportsCheck = [ "wasmtime" ];
 
   preCheck = ''
     # cbindgen.py checks bindings against C headers during test collection.
     ln -s ${lib.getDev pkgs.wasmtime}/include wasmtime/include
+
+    # hardening options interfere with pycparser's CC call
+    export NIX_HARDENING_ENABLE=""
+
+    # $out is first in path which causes "import file mismatch"
+    export PYTHONPATH="$PWD:$PYTHONPATH"
   '';
 
   meta = {