diff --git a/.bazelrc b/.bazelrc
index 318aecd53..5a0373356 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -1,3 +1,6 @@
+# Disable Bzlmod
+common --noenable_bzlmod
+
 # Pass CC, CXX and PATH from the environment.
 build --action_env=CC
 build --action_env=CXX
@@ -7,40 +10,55 @@ build --action_env=PATH
 build:clang --action_env=BAZEL_COMPILER=clang
 build:clang --action_env=CC=clang
 build:clang --action_env=CXX=clang++
+build:clang --copt -Wno-pragma-once-outside-header --cxxopt -Wno-pragma-once-outside-header
+
+# Common flags for Clang sanitizers.
+build:clang-xsan --config=clang
+build:clang-xsan --copt -O1
+build:clang-xsan --copt -fno-omit-frame-pointer
+build:clang-xsan --copt -fno-optimize-sibling-calls
+build:clang-xsan --copt -fno-sanitize-recover=all
+build:clang-xsan --linkopt -fsanitize-link-c++-runtime
+build:clang-xsan --linkopt -fuse-ld=lld
+build:clang-xsan --linkopt -rtlib=compiler-rt
+build:clang-xsan --linkopt --unwindlib=libgcc
 
 # Use Clang compiler with Address and Undefined Behavior Sanitizers.
-build:clang-asan --config=clang
+build:clang-asan --config=clang-xsan
 build:clang-asan --copt -DADDRESS_SANITIZER=1
 build:clang-asan --copt -DUNDEFINED_SANITIZER=1
-build:clang-asan --copt -O1
-build:clang-asan --copt -fno-omit-frame-pointer
-build:clang-asan --copt -fno-optimize-sibling-calls
 build:clang-asan --copt -fsanitize=address,undefined
 build:clang-asan --copt -fsanitize-address-use-after-scope
 build:clang-asan --linkopt -fsanitize=address,undefined
 build:clang-asan --linkopt -fsanitize-address-use-after-scope
-build:clang-asan --linkopt -fsanitize-link-c++-runtime
-build:clang-asan --linkopt -fuse-ld=lld
 build:clang-asan --test_env=ASAN_OPTIONS=check_initialization_order=1:detect_stack_use_after_return=1:strict_init_order=1:strict_string_checks=1
-build:clang-asan --test_env=UBSAN_OPTIONS=halt_on_error=1:print_stacktrace=1
+build:clang-asan --test_env=UBSAN_OPTIONS=print_stacktrace=1
 build:clang-asan --test_env=ASAN_SYMBOLIZER_PATH
 
 # Use Clang compiler with Address and Undefined Behavior Sanitizers (strict version).
 build:clang-asan-strict --config=clang-asan
-build:clang-asan-strict --copt -fsanitize=integer
-build:clang-asan-strict --linkopt -fsanitize=integer
+build:clang-asan-strict --copt -fsanitize=integer,local-bounds,nullability
+build:clang-asan-strict --linkopt -fsanitize=integer,local-bounds,nullability
+
+# Use Honggfuzz with Address and Undefined Behavior Sanitizers (strict version).
+build:clang-asan-honggfuzz --config=clang-asan-strict
+build:clang-asan-honggfuzz --@rules_fuzzing//fuzzing:cc_engine=@rules_fuzzing//fuzzing/engines:honggfuzz
+build:clang-asan-honggfuzz --@rules_fuzzing//fuzzing:cc_engine_instrumentation=honggfuzz
+
+# Use LibFuzzer with Address and Undefined Behavior Sanitizers (strict version).
+build:clang-asan-libfuzzer --config=clang-asan-strict
+build:clang-asan-libfuzzer --@rules_fuzzing//fuzzing:cc_engine=@rules_fuzzing//fuzzing/engines:libfuzzer
+build:clang-asan-libfuzzer --@rules_fuzzing//fuzzing:cc_engine_instrumentation=libfuzzer
 
 # Use Clang compiler with Thread Sanitizer.
-build:clang-tsan --config=clang
+build:clang-tsan --config=clang-xsan
 build:clang-tsan --copt -DTHREAD_SANITIZER=1
-build:clang-tsan --copt -O1
-build:clang-tsan --copt -fno-omit-frame-pointer
-build:clang-tsan --copt -fno-optimize-sibling-calls
 build:clang-tsan --copt -fsanitize=thread
 build:clang-tsan --linkopt -fsanitize=thread
-build:clang-tsan --linkopt -fuse-ld=lld
+build:clang-tsan --test_env=TSAN_OPTIONS=suppressions=bazel/tsan_suppressions.txt
 
 # Use Clang-Tidy tool.
+build:clang-tidy --config=clang
 build:clang-tidy --aspects @bazel_clang_tidy//clang_tidy:clang_tidy.bzl%clang_tidy_aspect
 build:clang-tidy --@bazel_clang_tidy//:clang_tidy_config=@proxy_wasm_cpp_host//:clang_tidy_config
 build:clang-tidy --output_groups=report
@@ -50,24 +68,23 @@ build:gcc --action_env=BAZEL_COMPILER=gcc
 build:gcc --action_env=CC=gcc
 build:gcc --action_env=CXX=g++
 
-# Use Zig C/C++ compiler.
-build:zig-cc --incompatible_enable_cc_toolchain_resolution
-build:zig-cc --extra_toolchains @zig_sdk//:aarch64-linux-gnu.2.28_toolchain
-build:zig-cc --extra_toolchains @zig_sdk//:x86_64-linux-gnu.2.28_toolchain
-build:zig-cc --host_copt=-fno-sanitize=undefined
+build:hermetic-llvm --incompatible_enable_cc_toolchain_resolution
+build:hermetic-llvm --action_env BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
+build:hermetic-llvm --extra_toolchains @emsdk//emscripten_toolchain:cc-toolchain-wasm
 
-# Use Zig C/C++ compiler (cross-compile to Linux/aarch64).
-build:zig-cc-linux-aarch64 --config=zig-cc
-build:zig-cc-linux-aarch64 --platforms @zig_sdk//:linux_aarch64_platform
-build:zig-cc-linux-aarch64 --run_under=qemu-aarch64-static
-build:zig-cc-linux-aarch64 --test_env=QEMU_LD_PREFIX=/usr/aarch64-linux-gnu/
+build:hermetic-llvm-macos --config=hermetic-llvm
+# Below flags mitigate https://github.com/bazel-contrib/toolchains_llvm/pull/229.
+build:hermetic-llvm-macos --features=-libtool
+build:hermetic-llvm-macos --features=-supports_dynamic_linker
 
 build --enable_platform_specific_config
 
-# Use C++17.
-build:linux --cxxopt=-std=c++17
-build:macos --cxxopt=-std=c++17
-build:windows --cxxopt="/std:c++17"
+# Use C++20.
+build:linux --cxxopt=-std=c++20 --host_cxxopt=-std=c++20
+build:macos --cxxopt=-std=c++20 --host_cxxopt=-std=c++20
+build:windows --cxxopt="/std:c++20" --host_cxxopt="/std:c++20"
+
 
-# Enable runfiles on Windows (enabled by default on other platforms).
+# Enable symlinks and runfiles on Windows (enabled by default on other platforms).
+startup --windows_enable_symlinks
 build:windows --enable_runfiles
diff --git a/.bazelversion b/.bazelversion
index 0062ac971..f22d756da 100644
--- a/.bazelversion
+++ b/.bazelversion
@@ -1 +1 @@
-5.0.0
+6.5.0
diff --git a/.clang-tidy b/.clang-tidy
index ceab9ad4a..df9f5c944 100644
--- a/.clang-tidy
+++ b/.clang-tidy
@@ -1,17 +1,28 @@
 Checks:            clang-*,
+                   -clang-analyzer-core.CallAndMessage,
                    -clang-analyzer-optin.portability.UnixAPI,
                    -clang-analyzer-unix.Malloc,
                    -clang-diagnostic-pragma-once-outside-header,
+                   -clang-diagnostic-builtin-macro-redefined,
                    cppcoreguidelines-pro-type-member-init,
                    cppcoreguidelines-pro-type-static-cast-downcast,
                    misc-*,
                    -misc-non-private-member-variables-in-classes,
+                   -misc-use-anonymous-namespace,
+                   -misc-const-correctness,
+                   -misc-include-cleaner,
+                   -misc-unused-parameters,
                    modernize-*,
                    -modernize-avoid-c-arrays,
                    -modernize-use-trailing-return-type,
+                   -modernize-return-braced-init-list,
+                   -modernize-use-default-member-init,
+                   -modernize-type-traits,
+                   -modernize-use-emplace,
                    llvm-include-order,
                    performance-*,
                    -performance-no-int-to-ptr,
+                   -performance-avoid-endl,
                    portability-*,
                    readability-*,
                    -readability-convert-member-functions-to-static,
@@ -19,5 +30,9 @@ Checks:            clang-*,
                    -readability-magic-numbers,
                    -readability-make-member-function-const,
                    -readability-simplify-boolean-expr,
+                   -readability-identifier-length,
+                   -readability-container-data-pointer,
+                   -readability-redundant-casting,
+                   -readability-avoid-return-with-void-value,
 
 WarningsAsErrors:  '*'
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 2b78c0362..8f61d3582 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -18,25 +18,32 @@ on:
 
   pull_request:
     branches:
-    - master
+    - main
     - 'envoy-release/**'
     - 'istio-release/**'
 
   push:
     branches:
-    - master
+    - main
     - 'envoy-release/**'
     - 'istio-release/**'
 
   schedule:
     - cron: '0 0 * * *'
 
+  workflow_dispatch:
+
+concurrency:
+
+  group: ${{ github.head_ref || github.run_id }}-${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
 
   addlicense:
     name: verify licenses
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04-16core
 
     steps:
     - uses: actions/checkout@v2
@@ -51,12 +58,12 @@ jobs:
         echo "$(go env GOPATH)/bin" >> "$GITHUB_PATH"
 
     - name: Format (addlicense)
-      run: addlicense -check .
+      run: addlicense -ignore "bazel/cargo/*/remote/**" -check .
 
   buildifier:
     name: check format with buildifier
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04-16core
 
     steps:
     - uses: actions/checkout@v2
@@ -73,96 +80,85 @@ jobs:
     - name: Format (buildifier)
       run: find . -name "WORKSPACE" -o -name "*BUILD*" -o -name "*.bzl" | xargs -n1 buildifier -mode=check
 
-  cargo_raze:
-    name: check format with cargo-raze
+  rules_rust:
+    name: check format with rules_rust
 
     runs-on: ubuntu-latest
 
     steps:
     - uses: actions/checkout@v2
 
-    - name: Install dependencies
-      run: cargo install cargo-raze --version 0.14.1
+    - name: Format (bazel query)
+      run: |
+        bazel query 'deps(//bazel/cargo/...)'
 
-    - name: Format (cargo raze)
-      working-directory: bazel/cargo
+    - name: Format (rules_rust)
       run: |
-        cd wasmsign && cargo raze && cd ..
-        cd wasmtime && cargo raze && cd ..
-        # Ignore manual changes in "errno" and "rustix" crates until fixed in cargo-raze.
-        # See: https://github.com/google/cargo-raze/issues/451
-        git diff --exit-code -- ':!wasmtime/remote/BUILD.errno-0.2.8.bazel' ':!wasmtime/remote/BUILD.rustix-0.33.4.bazel'
+        bazel run //bazel/cargo/wasmsign:crates_vendor
+        bazel run //bazel/cargo/wasmtime:crates_vendor
+        git diff --exit-code
 
   clang_format:
     name: check format with clang-format
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04-16core
 
     steps:
     - uses: actions/checkout@v2
 
     - name: Install dependencies (Linux)
-      run: sudo apt update -y && sudo apt install -y clang-format-12
+      run: sudo apt update -y && sudo apt install -y clang-format-18
 
     - name: Format (clang-format)
       run: |
-        find . -name "*.h" -o -name "*.cc" -o -name "*.proto" | grep -v ".pb." | xargs -n1 clang-format-12 -i
+        find . -name "*.h" -o -name "*.cc" -o -name "*.proto" | grep -v ".pb." | xargs -n1 clang-format-18 -i
         git diff --exit-code
 
   clang_tidy:
     name: check format with clang-tidy
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04-16core
 
     steps:
     - uses: actions/checkout@v2
 
     - name: Install dependencies (Linux)
-      run: sudo apt update -y && sudo apt install -y clang-tidy-12
-
-    - name: Bazel cache
-      uses: PiotrSikora/cache@v2.1.7-with-skip-cache
+      run: sudo apt update -y && sudo apt install -y clang-tidy-18 lld-18 && sudo ln -sf /usr/bin/lld-18 /usr/bin/lld
+
+    - name: set cache name
+      id: vars
+      # The cache tag consists of the following parts:
+      # * clang-tidy- prefix
+      # * matrix.name, which separates the cache for each build type.
+      # * hash of WORKSPACE, .bazelrc, and .bazelversion, which is
+      #   purely to differentiate caches for substantial changes in bazel.
+      # * github.sha, which is the commit hash of the commit used to generate
+      #   the cache entry.
+      run: echo "CACHE_TAG=clang-tidy-${{ matrix.name }}-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion') }}" >> "$GITHUB_OUTPUT"
+
+    - name: bazel cache
+      uses: actions/cache/restore@v3
       with:
-        path: |
-          ~/.cache/bazel
-        key: clang_tidy-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion', 'bazel/dependencies.bzl', 'bazel/repositories.bzl', 'bazel/cargo/wasmsign/crates.bzl') }}
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
+        restore-keys: |
+          ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
+          ${{ steps.vars.outputs.CACHE_TAG }}-
+          clang-tidy-${{ matrix.name }}-
+          clang-tidy-
 
     - name: Bazel build
       run: >
         bazel build
         --config clang-tidy
         --define engine=multi
+        --disk_cache /tmp/bazel/cache
         --copt=-DPROXY_WASM_VERIFY_WITH_ED25519_PUBKEY=\"$(xxd -p -c 256 test/test_data/signature_key1.pub | cut -b9-)\"
         //...
 
-    - name: Skip Bazel cache update
-      if: ${{ github.ref != 'refs/heads/master' }}
-      run: echo "CACHE_SKIP_SAVE=true" >> $GITHUB_ENV
-
-    - name: Cleanup Bazel cache
-      if: ${{ github.ref == 'refs/heads/master' }}
-      run: |
-        export OUTPUT=$(${{ matrix.run_under }} bazel info output_base)
-        echo "===== BEFORE ====="
-        du -s ${OUTPUT}/external/* $(dirname ${OUTPUT})/* | sort -rn | head -20
-        # BoringSSL's test data (90 MiB).
-        rm -rf ${OUTPUT}/external/boringssl/crypto_test_data.cc
-        rm -rf ${OUTPUT}/external/boringssl/src/crypto/*/test/
-        rm -rf ${OUTPUT}/external/boringssl/src/third_party/wycheproof_testvectors/
-        # LLVM's tests (500 MiB).
-        rm -rf ${OUTPUT}/external/llvm*/test/
-        # V8's tests (100 MiB).
-        if [ -d "${OUTPUT}/external/v8/test/torque" ]; then
-          mv ${OUTPUT}/external/v8/test/torque ${OUTPUT}/external/v8/test_torque
-          rm -rf ${OUTPUT}/external/v8/test/*
-          mv ${OUTPUT}/external/v8/test_torque ${OUTPUT}/external/v8/test/torque
-        fi
-        # Unnecessary CMake tools (65 MiB).
-        rm -rf ${OUTPUT}/external/cmake-*/bin/{ccmake,cmake-gui,cpack,ctest}
-        # Distfiles for Rust toolchains (350 MiB).
-        rm -rf ${OUTPUT}/external/rust_*/*.tar.gz
-        # Bazel's repository cache (650-800 MiB) and install base (155 MiB).
-        rm -rf ${OUTPUT}/../cache
-        rm -rf ${OUTPUT}/../install
-        echo "===== AFTER ====="
-        du -s ${OUTPUT}/external/* $(dirname ${OUTPUT})/* | sort -rn | head -20
+    - name: save bazel cache
+      uses: actions/cache/save@v3
+      if: always()
+      with:
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a9bf70566..cc6ddbc5f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,35 +18,56 @@ on:
 
   pull_request:
     branches:
-    - master
+    - main
     - 'envoy-release/**'
     - 'istio-release/**'
 
   push:
     branches:
-    - master
+    - main
     - 'envoy-release/**'
     - 'istio-release/**'
 
   schedule:
     - cron: '0 0 * * *'
 
+  workflow_dispatch:
+
+concurrency:
+
+  group: ${{ github.head_ref || github.run_id }}-${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
 
   test_data:
     name: build test data
 
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04-16core
 
     steps:
     - uses: actions/checkout@v2
 
-    - name: Bazel cache
-      uses: PiotrSikora/cache@v2.1.7-with-skip-cache
+    - name: set cache name
+      id: vars
+      # The cache tag consists of the following parts:
+      # * test-deps-bazel-cache- prefix
+      # * hash of WORKSPACE, .bazelrc, and .bazelversion, which is
+      #   purely to differentiate caches for substantial changes in bazel.
+      # * github.sha, which is the commit hash of the commit used to generate
+      #   the cache entry.
+      run: echo "CACHE_TAG=test-deps-bazel-cache-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion') }}" >> "$GITHUB_OUTPUT"
+
+    - name: bazel cache
+      uses: actions/cache/restore@v3
       with:
-        path: |
-          ~/.cache/bazel
-        key: test_data-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion', 'bazel/dependencies.bzl', 'bazel/repositories.bzl', 'bazel/cargo/wasmsign/crates.bzl') }}
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
+        restore-keys: |
+          ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
+          ${{ steps.vars.outputs.CACHE_TAG }}-
+          test-deps-bazel-cache-${{ matrix.name }}-
+          test-deps-bazel-cache-
 
     - name: Bazel build
       run: >
@@ -54,30 +75,45 @@ jobs:
         --verbose_failures
         --test_output=errors
         --config=clang
+        --disk_cache /tmp/bazel/cache
         -c opt
         $(bazel query 'kind(was.*_rust_binary, //test/test_data/...)')
+        $(bazel query 'kind(_optimized_wasm_cc_binary, //test/test_data/...)')
+
+    # Currently, in Github Action, "Bazel build step" creates `wasm_canary_check.wasm` directory as a temporal directory.
+    # Since the name of this directory has "*.wasm" pattern, the step "Mangle build rules to use existing test data" fails.
+    # So, here, we clear out the directories in test_data.
+    - name: Clean up test data
+      shell: bash
+      run: |
+        # Remove temporal directories
+        for i in $(find bazel-bin/test/test_data/ -mindepth 1 -maxdepth 1 -type d); do \
+          rm -rf $i; \
+        done
 
     - name: Upload test data
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: test_data
         path: bazel-bin/test/test_data/*.wasm
         if-no-files-found: error
         retention-days: 3
 
-    - name: Skip Bazel cache update
-      if: ${{ github.ref != 'refs/heads/master' }}
-      run: echo "CACHE_SKIP_SAVE=true" >> $GITHUB_ENV
+    - name: remove unaccessed files from cache
+      shell: bash
+      run: >
+        find /tmp/bazel/cache
+        -type f
+        -name '*'
+        -amin +360
+        -exec rm {} \;
 
-    - name: Cleanup Bazel cache
-      if: ${{ github.ref == 'refs/heads/master' }}
-      run: |
-        export OUTPUT=$(bazel info output_base)
-        # Distfiles for Rust toolchains (350 MiB).
-        rm -rf ${OUTPUT}/external/rust_*/*.tar.gz
-        # Bazel's repository cache (650-800 MiB) and install base (155 MiB).
-        rm -rf $(bazel info repository_cache)
-        rm -rf $(bazel info install_base)
+    - name: save bazel cache
+      uses: actions/cache/save@v3
+      if: always()
+      with:
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
 
   build:
     name: ${{ matrix.action }} with ${{ matrix.name }}
@@ -92,131 +128,156 @@ jobs:
         include:
         - name: 'NullVM on Linux/x86_64'
           engine: 'null'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
           flags: --config=gcc
         - name: 'NullVM on Linux/x86_64 with ASan'
           engine: 'null'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
-          flags: --config=clang-asan-strict --define=crypto=system
+          flags: --config=clang-asan --define=crypto=system
         - name: 'NullVM on Linux/x86_64 with TSan'
           engine: 'null'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
           flags: --config=clang-tsan
         - name: 'NullVM on Windows/x86_64'
           engine: 'null'
-          os: windows-2019
+          os: windows-2022
           arch: x86_64
           action: test
+          targets: -//test/fuzz/...
         - name: 'V8 on Linux/x86_64'
           engine: 'v8'
           repo: 'v8'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
-          flags: --config=clang --define=crypto=system
+          flags: --config=hermetic-llvm --define=crypto=system
           cache: true
         - name: 'V8 on Linux/x86_64 with ASan'
           engine: 'v8'
           repo: 'v8'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
-          flags: --config=clang-asan
+          flags: --config=hermetic-llvm --config=clang-asan
           cache: true
         - name: 'V8 on Linux/x86_64 with TSan'
           engine: 'v8'
           repo: 'v8'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
-          flags: --config=clang-tsan
+          flags: --config=hermetic-llvm --config=clang-tsan
+          cache: true
+        - name: 'V8 on Linux/x86_64 with GCC'
+          engine: 'v8'
+          repo: 'v8'
+          os: ubuntu-24.04-16core
+          arch: x86_64
+          action: test
+          flags: --config=gcc
           cache: true
         - name: 'V8 on Linux/aarch64'
           engine: 'v8'
           repo: 'v8'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-arm
           arch: aarch64
           action: test
-          flags: --config=zig-cc-linux-aarch64 --@v8//bazel/config:v8_target_cpu=arm64
-          deps: qemu-user-static libc6-arm64-cross
+          targets: -//test/fuzz/...
+          flags: --config=hermetic-llvm --@v8//bazel/config:v8_target_cpu=arm64
           cache: true
         - name: 'V8 on macOS/x86_64'
           engine: 'v8'
           repo: 'v8'
-          os: macos-11
+          os: macos-13
           arch: x86_64
           action: test
+          flags: --config=hermetic-llvm-macos
           cache: true
-        - name: 'WAMR on Linux/x86_64'
-          engine: 'wamr'
+        - name: 'WAMR interp on Linux/x86_64'
+          engine: 'wamr-interp'
+          repo: 'com_github_bytecodealliance_wasm_micro_runtime'
+          os: ubuntu-24.04-16core
+          arch: x86_64
+          action: test
+          flags: --config=clang
+        - name: 'WAMR interp on macOS/x86_64'
+          engine: 'wamr-interp'
+          repo: 'com_github_bytecodealliance_wasm_micro_runtime'
+          os: macos-13
+          arch: x86_64
+          action: test
+        - name: 'WAMR jit on Linux/x86_64'
+          engine: 'wamr-jit'
           repo: 'com_github_bytecodealliance_wasm_micro_runtime'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
           flags: --config=clang
-        - name: 'WAMR on macOS/x86_64'
-          engine: 'wamr'
+          deps: lld-18
+          cache: true
+        - name: 'WAMR jit on macOS/x86_64'
+          engine: 'wamr-jit'
           repo: 'com_github_bytecodealliance_wasm_micro_runtime'
-          os: macos-11
+          os: macos-13
+          arch: x86_64
+          action: test
+          cache: true
+        - name: 'WasmEdge on Linux/x86_64'
+          engine: 'wasmedge'
+          repo: 'com_github_wasmedge_wasmedge'
+          os: ubuntu-24.04-16core
+          arch: x86_64
+          action: test
+          flags: --config=clang
+        - name: 'WasmEdge on macOS/x86_64'
+          engine: 'wasmedge'
+          repo: 'com_github_wasmedge_wasmedge'
+          os: macos-13
           arch: x86_64
           action: test
         - name: 'Wasmtime on Linux/x86_64'
           engine: 'wasmtime'
           repo: 'com_github_bytecodealliance_wasmtime'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
           flags: --config=clang -c opt
         - name: 'Wasmtime on Linux/x86_64 with ASan'
           engine: 'wasmtime'
           repo: 'com_github_bytecodealliance_wasmtime'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: x86_64
           action: test
-          flags: --config=clang-asan-strict --define=crypto=system
+          flags: --config=clang-asan --define=crypto=system
         - name: 'Wasmtime on Linux/aarch64'
           engine: 'wasmtime'
           repo: 'com_github_bytecodealliance_wasmtime'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-arm
           arch: aarch64
           action: build
-          flags: --config=zig-cc-linux-aarch64
-          deps: qemu-user-static libc6-arm64-cross
+          flags: --config=hermetic-llvm
         - name: 'Wasmtime on Linux/s390x'
           engine: 'wasmtime'
           repo: 'com_github_bytecodealliance_wasmtime'
-          os: ubuntu-20.04
+          os: ubuntu-24.04-16core
           arch: s390x
           action: test
-          flags: --config=clang
-          run_under: docker run --rm --env HOME=$HOME --env USER=$(id -un) --volume "$HOME:$HOME" --workdir $(pwd) --user $(id -u):$(id -g) --platform linux/s390x piotrsikora/build-tools:bazel-5.0.0-clang-13-gcc-11
+          flags: --config=clang --test_timeout=1800
+          # s390x build-tools image built from bazel/external/Dockerfile.bazel
+          run_under: docker run --rm --env HOME=$HOME --env USER=$(id -un) --volume "$HOME:$HOME" --workdir $(pwd) --user $(id -u):$(id -g) --platform linux/s390x ghcr.io/proxy-wasm/build-tools:ubuntu-22.04-bazel-6.5.0
           cache: true
         - name: 'Wasmtime on macOS/x86_64'
           engine: 'wasmtime'
           repo: 'com_github_bytecodealliance_wasmtime'
-          os: macos-11
-          arch: x86_64
-          action: test
-        - name: 'Wasmtime on Windows/x86_64'
-          engine: 'wasmtime'
-          repo: 'com_github_bytecodealliance_wasmtime'
-          os: windows-2019
+          os: macos-13
           arch: x86_64
           action: test
-        - name: 'WAVM on Linux/x86_64'
-          engine: 'wavm'
-          repo: 'com_github_wavm_wavm'
-          os: ubuntu-20.04
-          arch: x86_64
-          action: test
-          flags: --config=clang
-          cache: true
 
     steps:
     - uses: actions/checkout@v2
@@ -225,28 +286,43 @@ jobs:
       if: ${{ matrix.deps != '' && startsWith(matrix.os, 'ubuntu') }}
       run: sudo apt update -y && sudo apt install -y ${{ matrix.deps }}
 
+    # Needed for s390x test which runs on a GHCR Docker Ubuntu image.
+    - name: Login to GitHub Container Registry
+      if: startsWith(matrix.run_under, 'docker')
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
     - name: Activate Docker/QEMU
       if: startsWith(matrix.run_under, 'docker')
       run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
 
-    - name: Set cache key
-      if: ${{ matrix.cache }}
-      run: echo "::set-output name=uniq::$(bazel query --output build //external:${{ matrix.repo }} | grep -E 'sha256|commit' | cut -d\" -f2)-$(echo ${{ matrix.flags }} | sha256sum)"
-      id: cache-key
+    - name: set cache name
+      id: vars
+      # The cache tag consists of the following parts:
+      # * bazel-cache- prefix
+      # * matrix.name, which separates the cache for each build type.
+      # * hash of WORKSPACE, .bazelrc, and .bazelversion, which is
+      #   purely to differentiate caches for substantial changes in bazel.
+      # * github.sha, which is the commit hash of the commit used to generate
+      #   the cache entry.
+      run: echo "CACHE_TAG=bazel-cache-${{ matrix.name }}-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion') }}" >> "$GITHUB_OUTPUT"
 
-    - name: Bazel cache
-      if: ${{ matrix.cache }}
-      uses: PiotrSikora/cache@v2.1.7-with-skip-cache
+    - name: bazel cache
+      uses: actions/cache/restore@v3
       with:
-        path: |
-          ~/.cache/bazel
-          /private/var/tmp/_bazel_runner/
-        key: ${{ matrix.arch }}-${{ matrix.os }}-${{ matrix.engine }}-${{ steps.cache-key.outputs.uniq }}-${{ hashFiles('WORKSPACE', '.bazelrc', '.bazelversion', 'bazel/dependencies.bzl', 'bazel/repositories.bzl') }}
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
         restore-keys: |
-          ${{ matrix.arch }}-${{ matrix.os }}-${{ matrix.engine }}-${{ steps.cache-key.outputs.uniq }}-
+          ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
+          ${{ steps.vars.outputs.CACHE_TAG }}-
+          bazel-cache-${{ matrix.name }}-
+          bazel-cache-
 
     - name: Download test data
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4
       with:
         name: test_data
         path: test/test_data/
@@ -261,14 +337,16 @@ jobs:
         done
 
     - name: Bazel build/test
+      shell: bash
       run: >
         ${{ matrix.run_under }}
         bazel ${{ matrix.action }}
         --verbose_failures
         --test_output=errors
         --define engine=${{ matrix.engine }}
+        --disk_cache /tmp/bazel/cache
         ${{ matrix.flags }}
-        //test/...
+        -- //test/... ${{ matrix.targets }}
 
     - name: Bazel build/test (signed Wasm module)
       if: ${{ matrix.engine != 'null' && !startsWith(matrix.os, 'windows') }}
@@ -278,38 +356,24 @@ jobs:
         --verbose_failures
         --test_output=errors
         --define engine=${{ matrix.engine }}
+        --disk_cache /tmp/bazel/cache
         ${{ matrix.flags }}
         --per_file_copt=src/signature_util.cc,test/signature_util_test.cc@-DPROXY_WASM_VERIFY_WITH_ED25519_PUBKEY=\"$(xxd -p -c 256 test/test_data/signature_key1.pub | cut -b9-)\"
         //test:signature_util_test
 
-    - name: Skip Bazel cache update
-      if: ${{ matrix.cache && github.ref != 'refs/heads/master' }}
-      run: echo "CACHE_SKIP_SAVE=true" >> $GITHUB_ENV
+    - name: remove unaccessed files from cache
+      shell: bash
+      run: >
+        find /tmp/bazel/cache
+        -type f
+        -name '*'
+        -amin +360
+        -exec rm {} \;
+
+    - name: save bazel cache
+      uses: actions/cache/save@v3
+      if: always()
+      with:
+        path: /tmp/bazel/cache
+        key: ${{ steps.vars.outputs.CACHE_TAG }}-${{ github.sha }}
 
-    - name: Cleanup Bazel cache
-      if: ${{ matrix.cache && github.ref == 'refs/heads/master' }}
-      run: |
-        export OUTPUT=$(${{ matrix.run_under }} bazel info output_base)
-        echo "===== BEFORE ====="
-        du -s ${OUTPUT}/external/* $(dirname ${OUTPUT})/* | sort -rn | head -20
-        # BoringSSL's test data (90 MiB).
-        rm -rf ${OUTPUT}/external/boringssl/crypto_test_data.cc
-        rm -rf ${OUTPUT}/external/boringssl/src/crypto/*/test/
-        rm -rf ${OUTPUT}/external/boringssl/src/third_party/wycheproof_testvectors/
-        # LLVM's tests (500 MiB).
-        rm -rf ${OUTPUT}/external/llvm*/test/
-        # V8's tests (100 MiB).
-        if [ -d "${OUTPUT}/external/v8/test/torque" ]; then
-          mv ${OUTPUT}/external/v8/test/torque ${OUTPUT}/external/v8/test_torque
-          rm -rf ${OUTPUT}/external/v8/test/*
-          mv ${OUTPUT}/external/v8/test_torque ${OUTPUT}/external/v8/test/torque
-        fi
-        # Unnecessary CMake tools (65 MiB).
-        rm -rf ${OUTPUT}/external/cmake-*/bin/{ccmake,cmake-gui,cpack,ctest}
-        # Distfiles for Rust toolchains (350 MiB).
-        rm -rf ${OUTPUT}/external/rust_*/*.tar.gz
-        # Bazel's repository cache (650-800 MiB) and install base (155 MiB).
-        rm -rf ${OUTPUT}/../cache
-        rm -rf ${OUTPUT}/../install
-        echo "===== AFTER ====="
-        du -s ${OUTPUT}/external/* $(dirname ${OUTPUT})/* | sort -rn | head -20
diff --git a/.gitignore b/.gitignore
index a6ef824c1..54c8a3b00 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,4 @@
 /bazel-*
+/external
+/compile_commands.json
+/.cache/
diff --git a/BUILD b/BUILD
index 5095d8cc4..6db5fd903 100644
--- a/BUILD
+++ b/BUILD
@@ -1,12 +1,26 @@
-load("@rules_cc//cc:defs.bzl", "cc_library")
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load(
     "@proxy_wasm_cpp_host//bazel:select.bzl",
     "proxy_wasm_select_engine_null",
     "proxy_wasm_select_engine_v8",
     "proxy_wasm_select_engine_wamr",
+    "proxy_wasm_select_engine_wasmedge",
     "proxy_wasm_select_engine_wasmtime",
-    "proxy_wasm_select_engine_wavm",
 )
+load("@rules_cc//cc:defs.bzl", "cc_library")
 
 licenses(["notice"])  # Apache 2
 
@@ -22,6 +36,8 @@ filegroup(
 cc_library(
     name = "wasm_vm_headers",
     hdrs = [
+        "include/proxy-wasm/limits.h",
+        "include/proxy-wasm/sdk.h",
         "include/proxy-wasm/wasm_vm.h",
         "include/proxy-wasm/word.h",
     ],
@@ -50,6 +66,9 @@ cc_library(
         "src/bytecode_util.cc",
         "src/context.cc",
         "src/exports.cc",
+        "src/hash.cc",
+        "src/hash.h",
+        "src/pairs_util.cc",
         "src/shared_data.cc",
         "src/shared_data.h",
         "src/shared_queue.cc",
@@ -57,9 +76,11 @@ cc_library(
         "src/signature_util.cc",
         "src/vm_id_handle.cc",
         "src/wasm.cc",
+        "src/wasm.h",
     ],
     hdrs = [
         "include/proxy-wasm/bytecode_util.h",
+        "include/proxy-wasm/pairs_util.h",
         "include/proxy-wasm/signature_util.h",
     ],
     linkopts = select({
@@ -134,6 +155,33 @@ cc_library(
     ],
 )
 
+cc_library(
+    name = "wasmedge_lib",
+    srcs = [
+        "src/common/types.h",
+        "src/wasmedge/types.h",
+        "src/wasmedge/wasmedge.cc",
+    ],
+    hdrs = ["include/proxy-wasm/wasmedge.h"],
+    defines = [
+        "PROXY_WASM_HAS_RUNTIME_WASMEDGE",
+        "PROXY_WASM_HOST_ENGINE_WASMEDGE",
+    ],
+    linkopts = select({
+        "@platforms//os:macos": [
+            "-ldl",
+        ],
+        "//conditions:default": [
+            "-lrt",
+            "-ldl",
+        ],
+    }),
+    deps = [
+        ":wasm_vm_headers",
+        "//external:wasmedge",
+    ],
+)
+
 cc_library(
     name = "wasmtime_lib",
     srcs = [
@@ -232,34 +280,6 @@ cc_library(
     ],
 )
 
-cc_library(
-    name = "wavm_lib",
-    srcs = [
-        "src/wavm/wavm.cc",
-    ],
-    hdrs = ["include/proxy-wasm/wavm.h"],
-    copts = [
-        "-DWAVM_API=",
-        "-Wno-non-virtual-dtor",
-        "-Wno-old-style-cast",
-    ],
-    defines = [
-        "PROXY_WASM_HAS_RUNTIME_WAVM",
-        "PROXY_WASM_HOST_ENGINE_WAVM",
-    ],
-    linkopts = select({
-        "@platforms//os:macos": [],
-        "@platforms//os:windows": [],
-        "//conditions:default": [
-            "-ldl",
-        ],
-    }),
-    deps = [
-        ":wasm_vm_headers",
-        "//external:wavm",
-    ],
-)
-
 cc_library(
     name = "lib",
     deps = [
@@ -270,10 +290,10 @@ cc_library(
         [":v8_lib"],
     ) + proxy_wasm_select_engine_wamr(
         [":wamr_lib"],
+    ) + proxy_wasm_select_engine_wasmedge(
+        [":wasmedge_lib"],
     ) + proxy_wasm_select_engine_wasmtime(
         [":wasmtime_lib"],
         [":prefixed_wasmtime_lib"],
-    ) + proxy_wasm_select_engine_wavm(
-        [":wavm_lib"],
     ),
 )
diff --git a/CODEOWNERS b/CODEOWNERS
index 2bbe6fa17..e4190bb47 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1 +1 @@
-* @PiotrSikora @mathetake
+* @PiotrSikora @martijneken @mpwarres @leonm1
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 654a07164..d3f60f57a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -26,3 +26,7 @@ information on using pull requests.
 
 This project follows [Google's Open Source Community
 Guidelines](https://opensource.google/conduct/).
+
+## Development
+
+See the [Development Guidelines](DEVELOPMENT.md).
diff --git a/DEVELOPMENT.md b/DEVELOPMENT.md
new file mode 100644
index 000000000..791fe23a1
--- /dev/null
+++ b/DEVELOPMENT.md
@@ -0,0 +1,11 @@
+# Development guidelines
+
+## Generate compilation database
+
+[JSON Compilation Database](https://clang.llvm.org/docs/JSONCompilationDatabase.html) files can be used by [clangd](https://clangd.llvm.org/) or similar tools to add source code cross-references and code completion functionality to editors.
+
+The following command can be used to generate the `compile_commands.json` file:
+
+```
+BAZEL_BUILD_OPTION_LIST="--define=engine=multi" ./tools/gen_compilation_database.py --include_all //test/... //:lib
+```
diff --git a/README.md b/README.md
index 8cb5694ee..bd198e723 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,5 @@
 # WebAssembly for Proxies (C++ host implementation)
+
+## How to Contribute
+
+See [CONTRIBUTING](CONTRIBUTING.md).
diff --git a/WORKSPACE b/WORKSPACE
index 77ecd3a0b..dad42c2f8 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -7,3 +7,23 @@ proxy_wasm_cpp_host_repositories()
 load("@proxy_wasm_cpp_host//bazel:dependencies.bzl", "proxy_wasm_cpp_host_dependencies")
 
 proxy_wasm_cpp_host_dependencies()
+
+load("@proxy_wasm_cpp_host//bazel:dependencies_python.bzl", "proxy_wasm_cpp_host_dependencies_python")
+
+proxy_wasm_cpp_host_dependencies_python()
+
+load("@proxy_wasm_cpp_host//bazel:dependencies_import.bzl", "proxy_wasm_cpp_host_dependencies_import")
+
+proxy_wasm_cpp_host_dependencies_import()
+
+load("@proxy_wasm_cpp_sdk//bazel:repositories.bzl", "proxy_wasm_cpp_sdk_repositories")
+
+proxy_wasm_cpp_sdk_repositories()
+
+load("@proxy_wasm_cpp_sdk//bazel:dependencies.bzl", "proxy_wasm_cpp_sdk_dependencies")
+
+proxy_wasm_cpp_sdk_dependencies()
+
+load("@proxy_wasm_cpp_sdk//bazel:dependencies_extra.bzl", "proxy_wasm_cpp_sdk_dependencies_extra")
+
+proxy_wasm_cpp_sdk_dependencies_extra()
diff --git a/bazel/BUILD b/bazel/BUILD
index 78cd55313..15f323fa7 100644
--- a/bazel/BUILD
+++ b/bazel/BUILD
@@ -1,5 +1,21 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load("@bazel_skylib//lib:selects.bzl", "selects")
 
+package(default_visibility = ["//visibility:public"])
+
 config_setting(
     name = "engine_null",
     values = {"define": "engine=null"},
@@ -11,18 +27,23 @@ config_setting(
 )
 
 config_setting(
-    name = "engine_wamr",
-    values = {"define": "engine=wamr"},
+    name = "engine_wamr_interp",
+    values = {"define": "engine=wamr-interp"},
 )
 
 config_setting(
-    name = "engine_wasmtime",
-    values = {"define": "engine=wasmtime"},
+    name = "engine_wamr_jit",
+    values = {"define": "engine=wamr-jit"},
+)
+
+config_setting(
+    name = "engine_wasmedge",
+    values = {"define": "engine=wasmedge"},
 )
 
 config_setting(
-    name = "engine_wavm",
-    values = {"define": "engine=wavm"},
+    name = "engine_wasmtime",
+    values = {"define": "engine=wasmtime"},
 )
 
 config_setting(
@@ -47,3 +68,5 @@ selects.config_setting_group(
         ":linux_s390x",
     ],
 )
+
+exports_files(["tsan_suppressions.txt"])
diff --git a/bazel/cargo/wasmsign/BUILD.bazel b/bazel/cargo/wasmsign/BUILD.bazel
index 86c76b90b..ceb559374 100644
--- a/bazel/cargo/wasmsign/BUILD.bazel
+++ b/bazel/cargo/wasmsign/BUILD.bazel
@@ -1,39 +1,36 @@
-"""
-@generated
-cargo-raze generated Bazel file.
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//crate_universe:defs.bzl", "crates_vendor")
 
-package(default_visibility = ["//visibility:public"])
-
-licenses([
-    "notice",  # See individual crates for specific licenses
-])
-
-# Aliased targets
-alias(
-    name = "cargo_bin_wasmsign",
-    actual = "@wasmsign__wasmsign__0_1_2//:cargo_bin_wasmsign",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-alias(
-    name = "wasmsign",
-    actual = "@wasmsign__wasmsign__0_1_2//:wasmsign",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-# Export file for Stardoc support
 exports_files(
     [
-        "crates.bzl",
+        "Cargo.toml",
+        "Cargo.Bazel.lock",
     ],
-    visibility = ["//visibility:public"],
+)
+
+# Run this target to regenerate cargo_lockfile and vendor_path/*.
+# $ bazelisk run bazel/cargo/wasmsign:crates_vendor -- --repin
+crates_vendor(
+    name = "crates_vendor",
+    cargo_lockfile = ":Cargo.Bazel.lock",
+    generate_binaries = True,
+    generate_target_compatible_with = False,
+    manifests = [":Cargo.toml"],
+    mode = "remote",
+    repository_name = "cu",  # shorten generated paths for Windows...
+    tags = ["manual"],
+    vendor_path = "remote",
 )
diff --git a/bazel/cargo/wasmsign/Cargo.raze.lock b/bazel/cargo/wasmsign/Cargo.Bazel.lock
similarity index 74%
rename from bazel/cargo/wasmsign/Cargo.raze.lock
rename to bazel/cargo/wasmsign/Cargo.Bazel.lock
index 83bc73988..b9a45d0b5 100644
--- a/bazel/cargo/wasmsign/Cargo.raze.lock
+++ b/bazel/cargo/wasmsign/Cargo.Bazel.lock
@@ -1,5 +1,7 @@
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
+version = 3
+
 [[package]]
 name = "ansi_term"
 version = "0.12.1"
@@ -11,9 +13,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.53"
+version = "1.0.86"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94a45b455c14666b85fc40a019e8ab9eb75e3a124e05494f5397122bc9eb06e0"
+checksum = "b3d1d046238990b9cf5bcde22a3fb3584ee5cf65fb2765f454ed428c7a0063da"
 
 [[package]]
 name = "atty"
@@ -34,9 +36,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
 
 [[package]]
 name = "byteorder"
-version = "1.4.3"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "14c189c53d098945499cdfa7ecc63567cf3886b3332b312a5b4585d8d3a6a610"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
 name = "cfg-if"
@@ -59,20 +61,27 @@ dependencies = [
  "vec_map",
 ]
 
+[[package]]
+name = "ct-codecs"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3b7eb4404b8195a9abb6356f4ac07d8ba267045c8d6d220ac4dc992e6cc75df"
+
 [[package]]
 name = "ed25519-compact"
-version = "1.0.8"
+version = "1.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "302ea73924517e9952bf08b505536f757e28dca8372cbf8b20723a0e2bab6c01"
+checksum = "e18997d4604542d0736fae2c5ad6de987f0a50530cbcc14a7ce5a685328a252d"
 dependencies = [
+ "ct-codecs",
  "getrandom",
 ]
 
 [[package]]
 name = "getrandom"
-version = "0.2.4"
+version = "0.2.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "418d37c8b1d42553c93648be529cb70f920d3baf8ef469b74b9638df426e0b4c"
+checksum = "c4567c8db10ae91089c99af84c68c38da3ec2f087c3f82960bcdbf3656b6f4d7"
 dependencies = [
  "cfg-if",
  "libc",
@@ -90,15 +99,15 @@ dependencies = [
 
 [[package]]
 name = "hmac-sha512"
-version = "1.1.1"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b2ce076d8070f292037093a825343f6341fe0ce873268c2477e2f49abd57b10"
+checksum = "e4ce1f4656bae589a3fab938f9f09bf58645b7ed01a2c5f8a3c238e01a4ef78a"
 
 [[package]]
 name = "libc"
-version = "0.2.114"
+version = "0.2.155"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b0005d08a8f7b65fb8073cb697aa0b12b631ed251ce73d862ce50eeb52ce3b50"
+checksum = "97b3888a4aecf77e811145cadf6eef5901f4782c53886191b2f693f24761847c"
 
 [[package]]
 name = "parity-wasm"
@@ -108,18 +117,18 @@ checksum = "be5e13c266502aadf83426d87d81a0f5d1ef45b8027f5a471c360abfe4bfae92"
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.36"
+version = "1.0.86"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7342d5883fbccae1cc37a2353b09c87c9b0f3afd73f5fb9bba687a1f733b029"
+checksum = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77"
 dependencies = [
- "unicode-xid",
+ "unicode-ident",
 ]
 
 [[package]]
 name = "quote"
-version = "1.0.15"
+version = "1.0.36"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "864d3e96a899863136fc6e99f3d7cae289dafe43bf2c5ac19b70df7210c0a145"
+checksum = "0fa76aaf39101c457836aec0ce2316dbdc3ab723cdda1c6bd4e6ad4208acaca7"
 dependencies = [
  "proc-macro2",
 ]
@@ -132,13 +141,13 @@ checksum = "8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a"
 
 [[package]]
 name = "syn"
-version = "1.0.86"
+version = "2.0.72"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a65b3f4ffa0092e9887669db0eae07941f023991ab58ea44da8fe8e2d511c6b"
+checksum = "dc4b9b9bf2add8093d3f2c0204471e951b2285580335de42f9d2534f3ae7a8af"
 dependencies = [
  "proc-macro2",
  "quote",
- "unicode-xid",
+ "unicode-ident",
 ]
 
 [[package]]
@@ -152,18 +161,18 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "1.0.30"
+version = "1.0.63"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "854babe52e4df1653706b98fcfc05843010039b406875930a70e4d9644e5c417"
+checksum = "c0342370b38b6a11b6cc11d6a805569958d54cfa061a29969c3b5ce2ea405724"
 dependencies = [
  "thiserror-impl",
 ]
 
 [[package]]
 name = "thiserror-impl"
-version = "1.0.30"
+version = "1.0.63"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa32fd3f627f367fe16f893e2597ae3c05020f8bba2666a4e6ea73d377e5714b"
+checksum = "a4558b58466b9ad7ca0f102865eccc95938dca1a74a856f2b57b6629050da261"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -171,16 +180,16 @@ dependencies = [
 ]
 
 [[package]]
-name = "unicode-width"
-version = "0.1.9"
+name = "unicode-ident"
+version = "1.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ed742d4ea2bd1176e236172c8429aaf54486e7ac098db29ffe6529e0ce50973"
+checksum = "3354b9ac3fae1ff6755cb6db53683adb661634f67557942dea4facebec0fee4b"
 
 [[package]]
-name = "unicode-xid"
-version = "0.2.2"
+name = "unicode-width"
+version = "0.1.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ccb82d61f80a663efe1f787a51b16b5a51e3314d6ac365b08639f52387b33f3"
+checksum = "0336d538f7abc86d282a4189614dfaa90810dfc2c6f6427eaf88e16311dd225d"
 
 [[package]]
 name = "vec_map"
@@ -190,14 +199,14 @@ checksum = "f1bddf1187be692e79c5ffeab891132dfb0f236ed36a43c7ed39f1165ee20191"
 
 [[package]]
 name = "wasi"
-version = "0.10.2+wasi-snapshot-preview1"
+version = "0.11.0+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd6fbd9a79829dd1ad0cc20627bf1ed606756a7f77edff7b66b7064f9cb327c6"
+checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
 [[package]]
 name = "wasmsign"
 version = "0.1.2"
-source = "git+https://github.com/jedisct1/wasmsign#dfbc0aabe81885d59e88e667aa9c1e6a62dfe9cc"
+source = "git+https://github.com/jedisct1/wasmsign#6a6ef1c6f99063a5bd4ef9efc2ee41c5ea8f4f96"
 dependencies = [
  "anyhow",
  "byteorder",
diff --git a/bazel/cargo/wasmsign/Cargo.toml b/bazel/cargo/wasmsign/Cargo.toml
index 0beaa0880..5267cb2d1 100644
--- a/bazel/cargo/wasmsign/Cargo.toml
+++ b/bazel/cargo/wasmsign/Cargo.toml
@@ -1,3 +1,17 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 [package]
 edition = "2018"
 name = "wasmsign-bazel"
@@ -9,12 +23,6 @@ path = "fake_lib.rs"
 [dependencies]
 wasmsign = {git = "https://github.com/jedisct1/wasmsign", revision = "fa4d5598f778390df09be94232972b5b865a56b8"}
 
-[package.metadata.raze]
-rust_rules_workspace_name = "rules_rust"
-gen_workspace_prefix = "wasmsign"
-genmode = "Remote"
-package_aliases_dir = "."
-workspace_path = "//bazel/cargo/wasmsign"
-
-[package.metadata.raze.crates.wasmsign.'*']
-extra_aliased_targets = ["cargo_bin_wasmsign"]
+# Ready to upgrade to wasmsign2:
+# Which generates: //bazel/cargo/wasmsign/remote:wasmsign2-cli__wasmsign2
+#wasmsign2-cli = {git = "https://github.com/wasm-signatures/wasmsign2", revision = "07c60eee7f4c655d5a91404f5a9ffd97316d01f1"}
diff --git a/bazel/cargo/wasmsign/crates.bzl b/bazel/cargo/wasmsign/crates.bzl
deleted file mode 100644
index e23b594e0..000000000
--- a/bazel/cargo/wasmsign/crates.bzl
+++ /dev/null
@@ -1,291 +0,0 @@
-"""
-@generated
-cargo-raze generated Bazel file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-load("@bazel_tools//tools/build_defs/repo:git.bzl", "new_git_repository")  # buildifier: disable=load
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")  # buildifier: disable=load
-load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")  # buildifier: disable=load
-
-def wasmsign_fetch_remote_crates():
-    """This function defines a collection of repos and should be called in a WORKSPACE file"""
-    maybe(
-        http_archive,
-        name = "wasmsign__ansi_term__0_12_1",
-        url = "https://crates.io/api/v1/crates/ansi_term/0.12.1/download",
-        type = "tar.gz",
-        sha256 = "d52a9bb7ec0cf484c551830a7ce27bd20d67eac647e1befb56b0be4ee39a55d2",
-        strip_prefix = "ansi_term-0.12.1",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.ansi_term-0.12.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__anyhow__1_0_53",
-        url = "https://crates.io/api/v1/crates/anyhow/1.0.53/download",
-        type = "tar.gz",
-        sha256 = "94a45b455c14666b85fc40a019e8ab9eb75e3a124e05494f5397122bc9eb06e0",
-        strip_prefix = "anyhow-1.0.53",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.anyhow-1.0.53.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__atty__0_2_14",
-        url = "https://crates.io/api/v1/crates/atty/0.2.14/download",
-        type = "tar.gz",
-        sha256 = "d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8",
-        strip_prefix = "atty-0.2.14",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.atty-0.2.14.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__bitflags__1_3_2",
-        url = "https://crates.io/api/v1/crates/bitflags/1.3.2/download",
-        type = "tar.gz",
-        sha256 = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a",
-        strip_prefix = "bitflags-1.3.2",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.bitflags-1.3.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__byteorder__1_4_3",
-        url = "https://crates.io/api/v1/crates/byteorder/1.4.3/download",
-        type = "tar.gz",
-        sha256 = "14c189c53d098945499cdfa7ecc63567cf3886b3332b312a5b4585d8d3a6a610",
-        strip_prefix = "byteorder-1.4.3",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.byteorder-1.4.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__cfg_if__1_0_0",
-        url = "https://crates.io/api/v1/crates/cfg-if/1.0.0/download",
-        type = "tar.gz",
-        sha256 = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd",
-        strip_prefix = "cfg-if-1.0.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.cfg-if-1.0.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__clap__2_34_0",
-        url = "https://crates.io/api/v1/crates/clap/2.34.0/download",
-        type = "tar.gz",
-        sha256 = "a0610544180c38b88101fecf2dd634b174a62eef6946f84dfc6a7127512b381c",
-        strip_prefix = "clap-2.34.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.clap-2.34.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__ed25519_compact__1_0_8",
-        url = "https://crates.io/api/v1/crates/ed25519-compact/1.0.8/download",
-        type = "tar.gz",
-        sha256 = "302ea73924517e9952bf08b505536f757e28dca8372cbf8b20723a0e2bab6c01",
-        strip_prefix = "ed25519-compact-1.0.8",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.ed25519-compact-1.0.8.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__getrandom__0_2_4",
-        url = "https://crates.io/api/v1/crates/getrandom/0.2.4/download",
-        type = "tar.gz",
-        sha256 = "418d37c8b1d42553c93648be529cb70f920d3baf8ef469b74b9638df426e0b4c",
-        strip_prefix = "getrandom-0.2.4",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.getrandom-0.2.4.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__hermit_abi__0_1_19",
-        url = "https://crates.io/api/v1/crates/hermit-abi/0.1.19/download",
-        type = "tar.gz",
-        sha256 = "62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33",
-        strip_prefix = "hermit-abi-0.1.19",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.hermit-abi-0.1.19.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__hmac_sha512__1_1_1",
-        url = "https://crates.io/api/v1/crates/hmac-sha512/1.1.1/download",
-        type = "tar.gz",
-        sha256 = "6b2ce076d8070f292037093a825343f6341fe0ce873268c2477e2f49abd57b10",
-        strip_prefix = "hmac-sha512-1.1.1",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.hmac-sha512-1.1.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__libc__0_2_114",
-        url = "https://crates.io/api/v1/crates/libc/0.2.114/download",
-        type = "tar.gz",
-        sha256 = "b0005d08a8f7b65fb8073cb697aa0b12b631ed251ce73d862ce50eeb52ce3b50",
-        strip_prefix = "libc-0.2.114",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.libc-0.2.114.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__parity_wasm__0_42_2",
-        url = "https://crates.io/api/v1/crates/parity-wasm/0.42.2/download",
-        type = "tar.gz",
-        sha256 = "be5e13c266502aadf83426d87d81a0f5d1ef45b8027f5a471c360abfe4bfae92",
-        strip_prefix = "parity-wasm-0.42.2",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.parity-wasm-0.42.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__proc_macro2__1_0_36",
-        url = "https://crates.io/api/v1/crates/proc-macro2/1.0.36/download",
-        type = "tar.gz",
-        sha256 = "c7342d5883fbccae1cc37a2353b09c87c9b0f3afd73f5fb9bba687a1f733b029",
-        strip_prefix = "proc-macro2-1.0.36",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.proc-macro2-1.0.36.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__quote__1_0_15",
-        url = "https://crates.io/api/v1/crates/quote/1.0.15/download",
-        type = "tar.gz",
-        sha256 = "864d3e96a899863136fc6e99f3d7cae289dafe43bf2c5ac19b70df7210c0a145",
-        strip_prefix = "quote-1.0.15",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.quote-1.0.15.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__strsim__0_8_0",
-        url = "https://crates.io/api/v1/crates/strsim/0.8.0/download",
-        type = "tar.gz",
-        sha256 = "8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a",
-        strip_prefix = "strsim-0.8.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.strsim-0.8.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__syn__1_0_86",
-        url = "https://crates.io/api/v1/crates/syn/1.0.86/download",
-        type = "tar.gz",
-        sha256 = "8a65b3f4ffa0092e9887669db0eae07941f023991ab58ea44da8fe8e2d511c6b",
-        strip_prefix = "syn-1.0.86",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.syn-1.0.86.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__textwrap__0_11_0",
-        url = "https://crates.io/api/v1/crates/textwrap/0.11.0/download",
-        type = "tar.gz",
-        sha256 = "d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060",
-        strip_prefix = "textwrap-0.11.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.textwrap-0.11.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__thiserror__1_0_30",
-        url = "https://crates.io/api/v1/crates/thiserror/1.0.30/download",
-        type = "tar.gz",
-        sha256 = "854babe52e4df1653706b98fcfc05843010039b406875930a70e4d9644e5c417",
-        strip_prefix = "thiserror-1.0.30",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.thiserror-1.0.30.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__thiserror_impl__1_0_30",
-        url = "https://crates.io/api/v1/crates/thiserror-impl/1.0.30/download",
-        type = "tar.gz",
-        sha256 = "aa32fd3f627f367fe16f893e2597ae3c05020f8bba2666a4e6ea73d377e5714b",
-        strip_prefix = "thiserror-impl-1.0.30",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.thiserror-impl-1.0.30.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__unicode_width__0_1_9",
-        url = "https://crates.io/api/v1/crates/unicode-width/0.1.9/download",
-        type = "tar.gz",
-        sha256 = "3ed742d4ea2bd1176e236172c8429aaf54486e7ac098db29ffe6529e0ce50973",
-        strip_prefix = "unicode-width-0.1.9",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.unicode-width-0.1.9.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__unicode_xid__0_2_2",
-        url = "https://crates.io/api/v1/crates/unicode-xid/0.2.2/download",
-        type = "tar.gz",
-        sha256 = "8ccb82d61f80a663efe1f787a51b16b5a51e3314d6ac365b08639f52387b33f3",
-        strip_prefix = "unicode-xid-0.2.2",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.unicode-xid-0.2.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__vec_map__0_8_2",
-        url = "https://crates.io/api/v1/crates/vec_map/0.8.2/download",
-        type = "tar.gz",
-        sha256 = "f1bddf1187be692e79c5ffeab891132dfb0f236ed36a43c7ed39f1165ee20191",
-        strip_prefix = "vec_map-0.8.2",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.vec_map-0.8.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__wasi__0_10_2_wasi_snapshot_preview1",
-        url = "https://crates.io/api/v1/crates/wasi/0.10.2+wasi-snapshot-preview1/download",
-        type = "tar.gz",
-        sha256 = "fd6fbd9a79829dd1ad0cc20627bf1ed606756a7f77edff7b66b7064f9cb327c6",
-        strip_prefix = "wasi-0.10.2+wasi-snapshot-preview1",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel"),
-    )
-
-    maybe(
-        new_git_repository,
-        name = "wasmsign__wasmsign__0_1_2",
-        remote = "https://github.com/jedisct1/wasmsign",
-        commit = "dfbc0aabe81885d59e88e667aa9c1e6a62dfe9cc",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.wasmsign-0.1.2.bazel"),
-        init_submodules = True,
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__winapi__0_3_9",
-        url = "https://crates.io/api/v1/crates/winapi/0.3.9/download",
-        type = "tar.gz",
-        sha256 = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419",
-        strip_prefix = "winapi-0.3.9",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.winapi-0.3.9.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__winapi_i686_pc_windows_gnu__0_4_0",
-        url = "https://crates.io/api/v1/crates/winapi-i686-pc-windows-gnu/0.4.0/download",
-        type = "tar.gz",
-        sha256 = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6",
-        strip_prefix = "winapi-i686-pc-windows-gnu-0.4.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmsign__winapi_x86_64_pc_windows_gnu__0_4_0",
-        url = "https://crates.io/api/v1/crates/winapi-x86_64-pc-windows-gnu/0.4.0/download",
-        type = "tar.gz",
-        sha256 = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f",
-        strip_prefix = "winapi-x86_64-pc-windows-gnu-0.4.0",
-        build_file = Label("//bazel/cargo/wasmsign/remote:BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel"),
-    )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.ansi_term-0.12.1.bazel b/bazel/cargo/wasmsign/remote/BUILD.ansi_term-0.12.1.bazel
index b1e6ca34f..c9b94b758 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.ansi_term-0.12.1.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.ansi_term-0.12.1.bazel
@@ -1,70 +1,55 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "256_colours" with type "example" omitted
-
-# Unsupported target "basic_colours" with type "example" omitted
-
-# Unsupported target "rgb_colours" with type "example" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "ansi_term",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=ansi_term",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.12.1",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmsign__winapi__0_3_9//:winapi",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(target_os = "windows")
         ],
         "//conditions:default": [],
     }),
diff --git a/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.53.bazel b/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.53.bazel
deleted file mode 100644
index 0d6557ced..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.53.bazel
+++ /dev/null
@@ -1,116 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "anyhow_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.53",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "anyhow",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=anyhow",
-        "manual",
-    ],
-    version = "1.0.53",
-    # buildifier: leave-alone
-    deps = [
-        ":anyhow_build_script",
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test_autotrait" with type "test" omitted
-
-# Unsupported target "test_backtrace" with type "test" omitted
-
-# Unsupported target "test_boxed" with type "test" omitted
-
-# Unsupported target "test_chain" with type "test" omitted
-
-# Unsupported target "test_context" with type "test" omitted
-
-# Unsupported target "test_convert" with type "test" omitted
-
-# Unsupported target "test_downcast" with type "test" omitted
-
-# Unsupported target "test_ensure" with type "test" omitted
-
-# Unsupported target "test_ffi" with type "test" omitted
-
-# Unsupported target "test_fmt" with type "test" omitted
-
-# Unsupported target "test_macros" with type "test" omitted
-
-# Unsupported target "test_repr" with type "test" omitted
-
-# Unsupported target "test_source" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.86.bazel b/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.86.bazel
new file mode 100644
index 000000000..6c6cb4127
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.anyhow-1.0.86.bazel
@@ -0,0 +1,97 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "anyhow",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=anyhow",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    deps = [
+        "@cu__anyhow-1.0.86//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "anyhow_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=anyhow",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":anyhow_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.atty-0.2.14.bazel b/bazel/cargo/wasmsign/remote/BUILD.atty-0.2.14.bazel
index 9f3121cc3..041f36f9e 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.atty-0.2.14.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.atty-0.2.14.bazel
@@ -1,89 +1,127 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "atty" with type "example" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "atty",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=atty",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.2.14",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmsign__libc__0_2_114//:libc",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
         ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmsign__winapi__0_3_9//:winapi",
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__winapi-0.3.9//:winapi",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
         ],
         "//conditions:default": [],
     }),
diff --git a/bazel/cargo/wasmsign/remote/BUILD.bazel b/bazel/cargo/wasmsign/remote/BUILD.bazel
index e69de29bb..87eba7241 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.bazel
@@ -0,0 +1,45 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+package(default_visibility = ["//visibility:public"])
+
+exports_files(
+    [
+        "cargo-bazel.json",
+        "crates.bzl",
+        "defs.bzl",
+    ] + glob(
+        include = ["*.bazel"],
+        allow_empty = True,
+    ),
+)
+
+filegroup(
+    name = "srcs",
+    srcs = glob(
+        include = [
+            "*.bazel",
+            "*.bzl",
+        ],
+        allow_empty = True,
+    ),
+)
+
+# Workspace Member Dependencies
+alias(
+    name = "wasmsign",
+    actual = "@cu__wasmsign-0.1.2//:wasmsign",
+    tags = ["manual"],
+)
+
+# Binaries
+alias(
+    name = "wasmsign__wasmsign",
+    actual = "@cu__wasmsign-0.1.2//:wasmsign__bin",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.bitflags-1.3.2.bazel b/bazel/cargo/wasmsign/remote/BUILD.bitflags-1.3.2.bazel
index 345927151..653792564 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.bitflags-1.3.2.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.bitflags-1.3.2.bazel
@@ -1,59 +1,47 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "bitflags",
-    srcs = glob(["**/*.rs"]),
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_features = [
         "default",
     ],
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=bitflags",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "1.3.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
-
-# Unsupported target "basic" with type "test" omitted
-
-# Unsupported target "compile" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.4.3.bazel b/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.4.3.bazel
deleted file mode 100644
index 5540dc77d..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.4.3.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # Unlicense from expression "Unlicense OR MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "byteorder",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=byteorder",
-        "manual",
-    ],
-    version = "1.4.3",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.5.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.5.0.bazel
new file mode 100644
index 000000000..fd6870278
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.byteorder-1.5.0.bazel
@@ -0,0 +1,48 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "byteorder",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=byteorder",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.5.0",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.cfg-if-1.0.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.cfg-if-1.0.0.bazel
index cdfafef08..e7c34e5d4 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.cfg-if-1.0.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.cfg-if-1.0.0.bazel
@@ -1,56 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "cfg_if",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=cfg-if",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "1.0.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
-
-# Unsupported target "xcrate" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.clap-2.34.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.clap-2.34.0.bazel
index f95162fab..ed355234f 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.clap-2.34.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.clap-2.34.0.bazel
@@ -1,41 +1,33 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "clap",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_features = [
         "ansi_term",
         "atty",
@@ -46,48 +38,118 @@ rust_library(
         "vec_map",
     ],
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=clap",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "2.34.0",
-    # buildifier: leave-alone
     deps = [
-        "@wasmsign__atty__0_2_14//:atty",
-        "@wasmsign__bitflags__1_3_2//:bitflags",
-        "@wasmsign__strsim__0_8_0//:strsim",
-        "@wasmsign__textwrap__0_11_0//:textwrap",
-        "@wasmsign__unicode_width__0_1_9//:unicode_width",
-        "@wasmsign__vec_map__0_8_2//:vec_map",
-    ] + selects.with_or({
-        # cfg(not(windows))
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:wasm32-unknown-unknown",
-            "@rules_rust//rust/platform:wasm32-wasi",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmsign__ansi_term__0_12_1//:ansi_term",
+        "@cu__atty-0.2.14//:atty",
+        "@cu__bitflags-1.3.2//:bitflags",
+        "@cu__strsim-0.8.0//:strsim",
+        "@cu__textwrap-0.11.0//:textwrap",
+        "@cu__unicode-width-0.1.13//:unicode_width",
+        "@cu__vec_map-0.8.2//:vec_map",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:riscv32imc-unknown-none-elf": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:riscv64gc-unknown-none-elf": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:thumbv7em-none-eabi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:thumbv8m.main-none-eabi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:wasm32-unknown-unknown": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-none": [
+            "@cu__ansi_term-0.12.1//:ansi_term",  # cfg(not(windows))
         ],
         "//conditions:default": [],
     }),
diff --git a/bazel/cargo/wasmsign/remote/BUILD.ct-codecs-1.1.1.bazel b/bazel/cargo/wasmsign/remote/BUILD.ct-codecs-1.1.1.bazel
new file mode 100644
index 000000000..a0cbb9f65
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.ct-codecs-1.1.1.bazel
@@ -0,0 +1,48 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "ct_codecs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=ct-codecs",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.1.1",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.16.bazel b/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.16.bazel
new file mode 100644
index 000000000..f0da91e4f
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.16.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "ed25519_compact",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "ct-codecs",
+        "default",
+        "getrandom",
+        "pem",
+        "random",
+        "std",
+        "x25519",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=ed25519-compact",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.16",
+    deps = [
+        "@cu__ct-codecs-1.1.1//:ct_codecs",
+        "@cu__getrandom-0.2.15//:getrandom",
+    ],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.8.bazel b/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.8.bazel
deleted file mode 100644
index 55d81676f..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.ed25519-compact-1.0.8.bazel
+++ /dev/null
@@ -1,59 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # ISC from expression "ISC"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "ed25519_compact",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "getrandom",
-        "random",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=ed25519-compact",
-        "manual",
-    ],
-    version = "1.0.8",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmsign__getrandom__0_2_4//:getrandom",
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.15.bazel b/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.15.bazel
new file mode 100644
index 000000000..619a612bd
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.15.bazel
@@ -0,0 +1,124 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "getrandom",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=getrandom",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.15",
+    deps = [
+        "@cu__cfg-if-1.0.0//:cfg_if",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__wasi-0.11.0-wasi-snapshot-preview1//:wasi",  # cfg(target_os = "wasi")
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.4.bazel b/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.4.bazel
deleted file mode 100644
index 9f107edbf..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.getrandom-0.2.4.bazel
+++ /dev/null
@@ -1,96 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "mod" with type "bench" omitted
-
-rust_library(
-    name = "getrandom",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=getrandom",
-        "manual",
-    ],
-    version = "0.2.4",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmsign__cfg_if__1_0_0//:cfg_if",
-    ] + selects.with_or({
-        # cfg(target_os = "wasi")
-        (
-            "@rules_rust//rust/platform:wasm32-wasi",
-        ): [
-            "@wasmsign__wasi__0_10_2_wasi_snapshot_preview1//:wasi",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmsign__libc__0_2_114//:libc",
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-# Unsupported target "custom" with type "test" omitted
-
-# Unsupported target "normal" with type "test" omitted
-
-# Unsupported target "rdrand" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.hermit-abi-0.1.19.bazel b/bazel/cargo/wasmsign/remote/BUILD.hermit-abi-0.1.19.bazel
index 714afbab6..2be88f2ce 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.hermit-abi-0.1.19.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.hermit-abi-0.1.19.bazel
@@ -1,56 +1,47 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "hermit_abi",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=hermit-abi",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.1.19",
-    # buildifier: leave-alone
     deps = [
-        "@wasmsign__libc__0_2_114//:libc",
+        "@cu__libc-0.2.155//:libc",
     ],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.1.bazel b/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.1.bazel
deleted file mode 100644
index a98166ac6..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.1.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # ISC from expression "ISC"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "hmac_sha512",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "sha384",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=hmac-sha512",
-        "manual",
-    ],
-    version = "1.1.1",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.5.bazel b/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.5.bazel
new file mode 100644
index 000000000..c6f58d5ae
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.hmac-sha512-1.1.5.bazel
@@ -0,0 +1,48 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "hmac_sha512",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "sha384",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=hmac-sha512",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.1.5",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.114.bazel b/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.114.bazel
deleted file mode 100644
index 19145c96a..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.114.bazel
+++ /dev/null
@@ -1,86 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "libc_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.2.114",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "libc",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=libc",
-        "manual",
-    ],
-    version = "0.2.114",
-    # buildifier: leave-alone
-    deps = [
-        ":libc_build_script",
-    ],
-)
-
-# Unsupported target "const_fn" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.155.bazel b/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.155.bazel
new file mode 100644
index 000000000..61bb833b9
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.libc-0.2.155.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "libc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.155",
+    deps = [
+        "@cu__libc-0.2.155//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "libc_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.155",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":libc_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.parity-wasm-0.42.2.bazel b/bazel/cargo/wasmsign/remote/BUILD.parity-wasm-0.42.2.bazel
index eb0b8425a..ad79a67a5 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.parity-wasm-0.42.2.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.parity-wasm-0.42.2.bazel
@@ -1,72 +1,48 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "bench-decoder" with type "example" omitted
-
-# Unsupported target "build" with type "example" omitted
-
-# Unsupported target "data" with type "example" omitted
-
-# Unsupported target "exports" with type "example" omitted
-
-# Unsupported target "info" with type "example" omitted
-
-# Unsupported target "inject" with type "example" omitted
-
-# Unsupported target "roundtrip" with type "example" omitted
-
-# Unsupported target "show" with type "example" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "parity_wasm",
-    srcs = glob(["**/*.rs"]),
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_features = [
         "default",
         "std",
     ],
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=parity-wasm",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.42.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.36.bazel b/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.36.bazel
deleted file mode 100644
index 98ac0ca43..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.36.bazel
+++ /dev/null
@@ -1,99 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "proc_macro2_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.36",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "proc_macro2",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=proc-macro2",
-        "manual",
-    ],
-    version = "1.0.36",
-    # buildifier: leave-alone
-    deps = [
-        ":proc_macro2_build_script",
-        "@wasmsign__unicode_xid__0_2_2//:unicode_xid",
-    ],
-)
-
-# Unsupported target "comments" with type "test" omitted
-
-# Unsupported target "features" with type "test" omitted
-
-# Unsupported target "marker" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
-
-# Unsupported target "test_fmt" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.86.bazel b/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.86.bazel
new file mode 100644
index 000000000..072a238b8
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.proc-macro2-1.0.86.bazel
@@ -0,0 +1,98 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "proc_macro2",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=proc-macro2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:build_script_build",
+        "@cu__unicode-ident-1.0.12//:unicode_ident",
+    ],
+)
+
+cargo_build_script(
+    name = "proc-macro2_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=proc-macro2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":proc-macro2_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.15.bazel b/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.15.bazel
deleted file mode 100644
index 984db3ca0..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.15.bazel
+++ /dev/null
@@ -1,61 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "quote",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=quote",
-        "manual",
-    ],
-    version = "1.0.15",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmsign__proc_macro2__1_0_36//:proc_macro2",
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.36.bazel b/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.36.bazel
new file mode 100644
index 000000000..554f71a78
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.quote-1.0.36.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "quote",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=quote",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.36",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+    ],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.strsim-0.8.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.strsim-0.8.0.bazel
index 17633e197..928090c3d 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.strsim-0.8.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.strsim-0.8.0.bazel
@@ -1,58 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "benches" with type "bench" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "strsim",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=strsim",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.8.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
-
-# Unsupported target "lib" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.syn-1.0.86.bazel b/bazel/cargo/wasmsign/remote/BUILD.syn-1.0.86.bazel
deleted file mode 100644
index 8fe60304a..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.syn-1.0.86.bazel
+++ /dev/null
@@ -1,159 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "syn_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "clone-impls",
-        "default",
-        "derive",
-        "parsing",
-        "printing",
-        "proc-macro",
-        "quote",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.86",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "file" with type "bench" omitted
-
-# Unsupported target "rust" with type "bench" omitted
-
-rust_library(
-    name = "syn",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "clone-impls",
-        "default",
-        "derive",
-        "parsing",
-        "printing",
-        "proc-macro",
-        "quote",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=syn",
-        "manual",
-    ],
-    version = "1.0.86",
-    # buildifier: leave-alone
-    deps = [
-        ":syn_build_script",
-        "@wasmsign__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmsign__quote__1_0_15//:quote",
-        "@wasmsign__unicode_xid__0_2_2//:unicode_xid",
-    ],
-)
-
-# Unsupported target "regression" with type "test" omitted
-
-# Unsupported target "test_asyncness" with type "test" omitted
-
-# Unsupported target "test_attribute" with type "test" omitted
-
-# Unsupported target "test_derive_input" with type "test" omitted
-
-# Unsupported target "test_expr" with type "test" omitted
-
-# Unsupported target "test_generics" with type "test" omitted
-
-# Unsupported target "test_grouping" with type "test" omitted
-
-# Unsupported target "test_ident" with type "test" omitted
-
-# Unsupported target "test_item" with type "test" omitted
-
-# Unsupported target "test_iterators" with type "test" omitted
-
-# Unsupported target "test_lit" with type "test" omitted
-
-# Unsupported target "test_meta" with type "test" omitted
-
-# Unsupported target "test_parse_buffer" with type "test" omitted
-
-# Unsupported target "test_parse_stream" with type "test" omitted
-
-# Unsupported target "test_pat" with type "test" omitted
-
-# Unsupported target "test_path" with type "test" omitted
-
-# Unsupported target "test_precedence" with type "test" omitted
-
-# Unsupported target "test_receiver" with type "test" omitted
-
-# Unsupported target "test_round_trip" with type "test" omitted
-
-# Unsupported target "test_shebang" with type "test" omitted
-
-# Unsupported target "test_should_parse" with type "test" omitted
-
-# Unsupported target "test_size" with type "test" omitted
-
-# Unsupported target "test_stmt" with type "test" omitted
-
-# Unsupported target "test_token_trees" with type "test" omitted
-
-# Unsupported target "test_ty" with type "test" omitted
-
-# Unsupported target "test_visibility" with type "test" omitted
-
-# Unsupported target "zzz_stable" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.syn-2.0.72.bazel b/bazel/cargo/wasmsign/remote/BUILD.syn-2.0.72.bazel
new file mode 100644
index 000000000..0ac5ed93c
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.syn-2.0.72.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "syn",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "clone-impls",
+        "default",
+        "derive",
+        "parsing",
+        "printing",
+        "proc-macro",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=syn",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.0.72",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__unicode-ident-1.0.12//:unicode_ident",
+    ],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.textwrap-0.11.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.textwrap-0.11.0.bazel
index 1f5ef4754..49e49e09e 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.textwrap-0.11.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.textwrap-0.11.0.bazel
@@ -1,63 +1,47 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "linear" with type "bench" omitted
-
-# Unsupported target "layout" with type "example" omitted
-
-# Unsupported target "termwidth" with type "example" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "textwrap",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=textwrap",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.11.0",
-    # buildifier: leave-alone
     deps = [
-        "@wasmsign__unicode_width__0_1_9//:unicode_width",
+        "@cu__unicode-width-0.1.13//:unicode_width",
     ],
 )
-
-# Unsupported target "version-numbers" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.30.bazel b/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.30.bazel
deleted file mode 100644
index 963d9d3ee..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.30.bazel
+++ /dev/null
@@ -1,81 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "thiserror",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    proc_macro_deps = [
-        "@wasmsign__thiserror_impl__1_0_30//:thiserror_impl",
-    ],
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=thiserror",
-        "manual",
-    ],
-    version = "1.0.30",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test_backtrace" with type "test" omitted
-
-# Unsupported target "test_display" with type "test" omitted
-
-# Unsupported target "test_error" with type "test" omitted
-
-# Unsupported target "test_expr" with type "test" omitted
-
-# Unsupported target "test_from" with type "test" omitted
-
-# Unsupported target "test_generics" with type "test" omitted
-
-# Unsupported target "test_lints" with type "test" omitted
-
-# Unsupported target "test_option" with type "test" omitted
-
-# Unsupported target "test_path" with type "test" omitted
-
-# Unsupported target "test_source" with type "test" omitted
-
-# Unsupported target "test_transparent" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.63.bazel b/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.63.bazel
new file mode 100644
index 000000000..588c5d5c2
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.thiserror-1.0.63.bazel
@@ -0,0 +1,92 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "thiserror",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__thiserror-impl-1.0.63//:thiserror_impl",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    deps = [
+        "@cu__thiserror-1.0.63//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "thiserror_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":thiserror_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.30.bazel b/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.30.bazel
deleted file mode 100644
index 5f03eb1e5..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.30.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_proc_macro(
-    name = "thiserror_impl",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=thiserror-impl",
-        "manual",
-    ],
-    version = "1.0.30",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmsign__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmsign__quote__1_0_15//:quote",
-        "@wasmsign__syn__1_0_86//:syn",
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.63.bazel b/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.63.bazel
new file mode 100644
index 000000000..fc2cf7141
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.thiserror-impl-1.0.63.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "thiserror_impl",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror-impl",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.unicode-ident-1.0.12.bazel b/bazel/cargo/wasmsign/remote/BUILD.unicode-ident-1.0.12.bazel
new file mode 100644
index 000000000..caed93c98
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.unicode-ident-1.0.12.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "unicode_ident",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=unicode-ident",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.12",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.13.bazel b/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.13.bazel
new file mode 100644
index 000000000..449da1a99
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.13.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "unicode_width",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=unicode-width",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.13",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.9.bazel b/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.9.bazel
deleted file mode 100644
index 205525026..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.unicode-width-0.1.9.bazel
+++ /dev/null
@@ -1,55 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "unicode_width",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=unicode-width",
-        "manual",
-    ],
-    version = "0.1.9",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.unicode-xid-0.2.2.bazel b/bazel/cargo/wasmsign/remote/BUILD.unicode-xid-0.2.2.bazel
deleted file mode 100644
index 489f09ed3..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.unicode-xid-0.2.2.bazel
+++ /dev/null
@@ -1,59 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "xid" with type "bench" omitted
-
-rust_library(
-    name = "unicode_xid",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=unicode-xid",
-        "manual",
-    ],
-    version = "0.2.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "exhaustive_tests" with type "test" omitted
diff --git a/bazel/cargo/wasmsign/remote/BUILD.vec_map-0.8.2.bazel b/bazel/cargo/wasmsign/remote/BUILD.vec_map-0.8.2.bazel
index 41e120f56..21fe8eee8 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.vec_map-0.8.2.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.vec_map-0.8.2.bazel
@@ -1,54 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "vec_map",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=vec_map",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.8.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel b/bazel/cargo/wasmsign/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel
deleted file mode 100644
index 120daec83..000000000
--- a/bazel/cargo/wasmsign/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR (Apache-2.0 OR MIT)"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasi",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasi",
-        "manual",
-    ],
-    version = "0.10.2+wasi-snapshot-preview1",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.wasi-0.11.0+wasi-snapshot-preview1.bazel b/bazel/cargo/wasmsign/remote/BUILD.wasi-0.11.0+wasi-snapshot-preview1.bazel
new file mode 100644
index 000000000..b5ff1e516
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/BUILD.wasi-0.11.0+wasi-snapshot-preview1.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasi",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasi",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.11.0+wasi-snapshot-preview1",
+)
diff --git a/bazel/cargo/wasmsign/remote/BUILD.wasmsign-0.1.2.bazel b/bazel/cargo/wasmsign/remote/BUILD.wasmsign-0.1.2.bazel
index ecf416787..07b49f69b 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.wasmsign-0.1.2.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.wasmsign-0.1.2.bazel
@@ -1,93 +1,100 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
 load(
     "@rules_rust//rust:defs.bzl",
     "rust_binary",
     "rust_library",
-    "rust_proc_macro",
-    "rust_test",
 )
 
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "restricted",  # no license
-])
+package(default_visibility = ["//visibility:public"])
 
-# Generated Targets
-
-rust_binary(
-    # Prefix bin name to disambiguate from (probable) collision with lib name
-    # N.B.: The exact form of this is subject to change.
-    name = "cargo_bin_wasmsign",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/bin/wasmsign.rs",
-    data = [],
+rust_library(
+    name = "wasmsign",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=wasmsign",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.1.2",
-    # buildifier: leave-alone
     deps = [
-        ":wasmsign",
-        "@wasmsign__anyhow__1_0_53//:anyhow",
-        "@wasmsign__byteorder__1_4_3//:byteorder",
-        "@wasmsign__clap__2_34_0//:clap",
-        "@wasmsign__ed25519_compact__1_0_8//:ed25519_compact",
-        "@wasmsign__hmac_sha512__1_1_1//:hmac_sha512",
-        "@wasmsign__parity_wasm__0_42_2//:parity_wasm",
-        "@wasmsign__thiserror__1_0_30//:thiserror",
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__byteorder-1.5.0//:byteorder",
+        "@cu__clap-2.34.0//:clap",
+        "@cu__ed25519-compact-1.0.16//:ed25519_compact",
+        "@cu__hmac-sha512-1.1.5//:hmac_sha512",
+        "@cu__parity-wasm-0.42.2//:parity_wasm",
+        "@cu__thiserror-1.0.63//:thiserror",
     ],
 )
 
-rust_library(
-    name = "wasmsign",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
+rust_binary(
+    name = "wasmsign__bin",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/bin/wasmsign.rs",
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=wasmsign",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.1.2",
-    # buildifier: leave-alone
     deps = [
-        "@wasmsign__anyhow__1_0_53//:anyhow",
-        "@wasmsign__byteorder__1_4_3//:byteorder",
-        "@wasmsign__clap__2_34_0//:clap",
-        "@wasmsign__ed25519_compact__1_0_8//:ed25519_compact",
-        "@wasmsign__hmac_sha512__1_1_1//:hmac_sha512",
-        "@wasmsign__parity_wasm__0_42_2//:parity_wasm",
-        "@wasmsign__thiserror__1_0_30//:thiserror",
+        ":wasmsign",
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__byteorder-1.5.0//:byteorder",
+        "@cu__clap-2.34.0//:clap",
+        "@cu__ed25519-compact-1.0.16//:ed25519_compact",
+        "@cu__hmac-sha512-1.1.5//:hmac_sha512",
+        "@cu__parity-wasm-0.42.2//:parity_wasm",
+        "@cu__thiserror-1.0.63//:thiserror",
     ],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.winapi-0.3.9.bazel b/bazel/cargo/wasmsign/remote/BUILD.winapi-0.3.9.bazel
index 165665faa..02f57bf83 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.winapi-0.3.9.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.winapi-0.3.9.bazel
@@ -1,100 +1,103 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
+package(default_visibility = ["//visibility:public"])
 
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
+rust_library(
+    name = "winapi",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_features = [
         "consoleapi",
-        "errhandlingapi",
-        "fileapi",
-        "handleapi",
         "minwinbase",
         "minwindef",
         "processenv",
         "winbase",
     ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
+    crate_root = "src/lib.rs",
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
+        "crate-name=winapi",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.3.9",
-    visibility = ["//visibility:private"],
     deps = [
+        "@cu__winapi-0.3.9//:build_script_build",
     ],
 )
 
-rust_library(
-    name = "winapi",
-    srcs = glob(["**/*.rs"]),
+cargo_build_script(
+    name = "winapi_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
     crate_features = [
         "consoleapi",
-        "errhandlingapi",
-        "fileapi",
-        "handleapi",
         "minwinbase",
         "minwindef",
         "processenv",
         "winbase",
     ],
-    crate_root = "src/lib.rs",
-    data = [],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=winapi",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.3.9",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_build_script",
-    ],
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":winapi_bs",
+    tags = ["manual"],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel
index 71509c182..c1fb3c90b 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel
@@ -1,84 +1,89 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
+package(default_visibility = ["//visibility:public"])
 
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_i686_pc_windows_gnu_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
+rust_library(
+    name = "winapi_i686_pc_windows_gnu",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
+        "crate-name=winapi-i686-pc-windows-gnu",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.4.0",
-    visibility = ["//visibility:private"],
     deps = [
+        "@cu__winapi-i686-pc-windows-gnu-0.4.0//:build_script_build",
     ],
 )
 
-rust_library(
-    name = "winapi_i686_pc_windows_gnu",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
+cargo_build_script(
+    name = "winapi-i686-pc-windows-gnu_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=winapi-i686-pc-windows-gnu",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.4.0",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_i686_pc_windows_gnu_build_script",
-    ],
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":winapi-i686-pc-windows-gnu_bs",
+    tags = ["manual"],
 )
diff --git a/bazel/cargo/wasmsign/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel b/bazel/cargo/wasmsign/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel
index f94e57719..3468dd114 100644
--- a/bazel/cargo/wasmsign/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel
+++ b/bazel/cargo/wasmsign/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel
@@ -1,84 +1,89 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
+package(default_visibility = ["//visibility:public"])
 
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmsign", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_x86_64_pc_windows_gnu_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
+rust_library(
+    name = "winapi_x86_64_pc_windows_gnu",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
+        "crate-name=winapi-x86_64-pc-windows-gnu",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.4.0",
-    visibility = ["//visibility:private"],
     deps = [
+        "@cu__winapi-x86_64-pc-windows-gnu-0.4.0//:build_script_build",
     ],
 )
 
-rust_library(
-    name = "winapi_x86_64_pc_windows_gnu",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
+cargo_build_script(
+    name = "winapi-x86_64-pc-windows-gnu_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=winapi-x86_64-pc-windows-gnu",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "0.4.0",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_x86_64_pc_windows_gnu_build_script",
-    ],
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":winapi-x86_64-pc-windows-gnu_bs",
+    tags = ["manual"],
 )
diff --git a/bazel/cargo/wasmsign/remote/alias_rules.bzl b/bazel/cargo/wasmsign/remote/alias_rules.bzl
new file mode 100644
index 000000000..14b04c127
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/alias_rules.bzl
@@ -0,0 +1,47 @@
+"""Alias that transitions its target to `compilation_mode=opt`.  Use `transition_alias="opt"` to enable."""
+
+load("@rules_cc//cc:defs.bzl", "CcInfo")
+load("@rules_rust//rust:rust_common.bzl", "COMMON_PROVIDERS")
+
+def _transition_alias_impl(ctx):
+    # `ctx.attr.actual` is a list of 1 item due to the transition
+    providers = [ctx.attr.actual[0][provider] for provider in COMMON_PROVIDERS]
+    if CcInfo in ctx.attr.actual[0]:
+        providers.append(ctx.attr.actual[0][CcInfo])
+    return providers
+
+def _change_compilation_mode(compilation_mode):
+    def _change_compilation_mode_impl(_settings, _attr):
+        return {
+            "//command_line_option:compilation_mode": compilation_mode,
+        }
+
+    return transition(
+        implementation = _change_compilation_mode_impl,
+        inputs = [],
+        outputs = [
+            "//command_line_option:compilation_mode",
+        ],
+    )
+
+def _transition_alias_rule(compilation_mode):
+    return rule(
+        implementation = _transition_alias_impl,
+        provides = COMMON_PROVIDERS,
+        attrs = {
+            "actual": attr.label(
+                mandatory = True,
+                doc = "`rust_library()` target to transition to `compilation_mode=opt`.",
+                providers = COMMON_PROVIDERS,
+                cfg = _change_compilation_mode(compilation_mode),
+            ),
+            "_allowlist_function_transition": attr.label(
+                default = "@bazel_tools//tools/allowlists/function_transition_allowlist",
+            ),
+        },
+        doc = "Transitions a Rust library crate to the `compilation_mode=opt`.",
+    )
+
+transition_alias_dbg = _transition_alias_rule("dbg")
+transition_alias_fastbuild = _transition_alias_rule("fastbuild")
+transition_alias_opt = _transition_alias_rule("opt")
diff --git a/bazel/cargo/wasmsign/remote/crates.bzl b/bazel/cargo/wasmsign/remote/crates.bzl
new file mode 100644
index 000000000..b91fb21aa
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/crates.bzl
@@ -0,0 +1,32 @@
+###############################################################################
+# @generated
+# This file is auto-generated by the cargo-bazel tool.
+#
+# DO NOT MODIFY: Local changes may be replaced in future executions.
+###############################################################################
+"""Rules for defining repositories for remote `crates_vendor` repositories"""
+
+load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
+
+# buildifier: disable=bzl-visibility
+load("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:defs.bzl", _crate_repositories = "crate_repositories")
+
+# buildifier: disable=bzl-visibility
+load("@rules_rust//crate_universe/private:crates_vendor.bzl", "crates_vendor_remote_repository")
+
+def crate_repositories():
+    """Generates repositories for vendored crates.
+
+    Returns:
+      A list of repos visible to the module through the module extension.
+    """
+    maybe(
+        crates_vendor_remote_repository,
+        name = "cu",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.bazel"),
+        defs_module = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:defs.bzl"),
+    )
+
+    direct_deps = [struct(repo = "cu", is_dev_dep = False)]
+    direct_deps.extend(_crate_repositories())
+    return direct_deps
diff --git a/bazel/cargo/wasmsign/remote/defs.bzl b/bazel/cargo/wasmsign/remote/defs.bzl
new file mode 100644
index 000000000..57a80662e
--- /dev/null
+++ b/bazel/cargo/wasmsign/remote/defs.bzl
@@ -0,0 +1,705 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmsign:crates_vendor
+###############################################################################
+"""
+# `crates_repository` API
+
+- [aliases](#aliases)
+- [crate_deps](#crate_deps)
+- [all_crate_deps](#all_crate_deps)
+- [crate_repositories](#crate_repositories)
+
+"""
+
+load("@bazel_skylib//lib:selects.bzl", "selects")
+load("@bazel_tools//tools/build_defs/repo:git.bzl", "new_git_repository")
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
+
+###############################################################################
+# MACROS API
+###############################################################################
+
+# An identifier that represent common dependencies (unconditional).
+_COMMON_CONDITION = ""
+
+def _flatten_dependency_maps(all_dependency_maps):
+    """Flatten a list of dependency maps into one dictionary.
+
+    Dependency maps have the following structure:
+
+    ```python
+    DEPENDENCIES_MAP = {
+        # The first key in the map is a Bazel package
+        # name of the workspace this file is defined in.
+        "workspace_member_package": {
+
+            # Not all dependencies are supported for all platforms.
+            # the condition key is the condition required to be true
+            # on the host platform.
+            "condition": {
+
+                # An alias to a crate target.     # The label of the crate target the
+                # Aliases are only crate names.   # package name refers to.
+                "package_name":                   "@full//:label",
+            }
+        }
+    }
+    ```
+
+    Args:
+        all_dependency_maps (list): A list of dicts as described above
+
+    Returns:
+        dict: A dictionary as described above
+    """
+    dependencies = {}
+
+    for workspace_deps_map in all_dependency_maps:
+        for pkg_name, conditional_deps_map in workspace_deps_map.items():
+            if pkg_name not in dependencies:
+                non_frozen_map = dict()
+                for key, values in conditional_deps_map.items():
+                    non_frozen_map.update({key: dict(values.items())})
+                dependencies.setdefault(pkg_name, non_frozen_map)
+                continue
+
+            for condition, deps_map in conditional_deps_map.items():
+                # If the condition has not been recorded, do so and continue
+                if condition not in dependencies[pkg_name]:
+                    dependencies[pkg_name].setdefault(condition, dict(deps_map.items()))
+                    continue
+
+                # Alert on any miss-matched dependencies
+                inconsistent_entries = []
+                for crate_name, crate_label in deps_map.items():
+                    existing = dependencies[pkg_name][condition].get(crate_name)
+                    if existing and existing != crate_label:
+                        inconsistent_entries.append((crate_name, existing, crate_label))
+                    dependencies[pkg_name][condition].update({crate_name: crate_label})
+
+    return dependencies
+
+def crate_deps(deps, package_name = None):
+    """Finds the fully qualified label of the requested crates for the package where this macro is called.
+
+    Args:
+        deps (list): The desired list of crate targets.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()`.
+
+    Returns:
+        list: A list of labels to generated rust targets (str)
+    """
+
+    if not deps:
+        return []
+
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Join both sets of dependencies
+    dependencies = _flatten_dependency_maps([
+        _NORMAL_DEPENDENCIES,
+        _NORMAL_DEV_DEPENDENCIES,
+        _PROC_MACRO_DEPENDENCIES,
+        _PROC_MACRO_DEV_DEPENDENCIES,
+        _BUILD_DEPENDENCIES,
+        _BUILD_PROC_MACRO_DEPENDENCIES,
+    ]).pop(package_name, {})
+
+    # Combine all conditional packages so we can easily index over a flat list
+    # TODO: Perhaps this should actually return select statements and maintain
+    # the conditionals of the dependencies
+    flat_deps = {}
+    for deps_set in dependencies.values():
+        for crate_name, crate_label in deps_set.items():
+            flat_deps.update({crate_name: crate_label})
+
+    missing_crates = []
+    crate_targets = []
+    for crate_target in deps:
+        if crate_target not in flat_deps:
+            missing_crates.append(crate_target)
+        else:
+            crate_targets.append(flat_deps[crate_target])
+
+    if missing_crates:
+        fail("Could not find crates `{}` among dependencies of `{}`. Available dependencies were `{}`".format(
+            missing_crates,
+            package_name,
+            dependencies,
+        ))
+
+    return crate_targets
+
+def all_crate_deps(
+        normal = False,
+        normal_dev = False,
+        proc_macro = False,
+        proc_macro_dev = False,
+        build = False,
+        build_proc_macro = False,
+        package_name = None):
+    """Finds the fully qualified label of all requested direct crate dependencies \
+    for the package where this macro is called.
+
+    If no parameters are set, all normal dependencies are returned. Setting any one flag will
+    otherwise impact the contents of the returned list.
+
+    Args:
+        normal (bool, optional): If True, normal dependencies are included in the
+            output list.
+        normal_dev (bool, optional): If True, normal dev dependencies will be
+            included in the output list..
+        proc_macro (bool, optional): If True, proc_macro dependencies are included
+            in the output list.
+        proc_macro_dev (bool, optional): If True, dev proc_macro dependencies are
+            included in the output list.
+        build (bool, optional): If True, build dependencies are included
+            in the output list.
+        build_proc_macro (bool, optional): If True, build proc_macro dependencies are
+            included in the output list.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()` when unset.
+
+    Returns:
+        list: A list of labels to generated rust targets (str)
+    """
+
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Determine the relevant maps to use
+    all_dependency_maps = []
+    if normal:
+        all_dependency_maps.append(_NORMAL_DEPENDENCIES)
+    if normal_dev:
+        all_dependency_maps.append(_NORMAL_DEV_DEPENDENCIES)
+    if proc_macro:
+        all_dependency_maps.append(_PROC_MACRO_DEPENDENCIES)
+    if proc_macro_dev:
+        all_dependency_maps.append(_PROC_MACRO_DEV_DEPENDENCIES)
+    if build:
+        all_dependency_maps.append(_BUILD_DEPENDENCIES)
+    if build_proc_macro:
+        all_dependency_maps.append(_BUILD_PROC_MACRO_DEPENDENCIES)
+
+    # Default to always using normal dependencies
+    if not all_dependency_maps:
+        all_dependency_maps.append(_NORMAL_DEPENDENCIES)
+
+    dependencies = _flatten_dependency_maps(all_dependency_maps).pop(package_name, None)
+
+    if not dependencies:
+        if dependencies == None:
+            fail("Tried to get all_crate_deps for package " + package_name + " but that package had no Cargo.toml file")
+        else:
+            return []
+
+    crate_deps = list(dependencies.pop(_COMMON_CONDITION, {}).values())
+    for condition, deps in dependencies.items():
+        crate_deps += selects.with_or({
+            tuple(_CONDITIONS[condition]): deps.values(),
+            "//conditions:default": [],
+        })
+
+    return crate_deps
+
+def aliases(
+        normal = False,
+        normal_dev = False,
+        proc_macro = False,
+        proc_macro_dev = False,
+        build = False,
+        build_proc_macro = False,
+        package_name = None):
+    """Produces a map of Crate alias names to their original label
+
+    If no dependency kinds are specified, `normal` and `proc_macro` are used by default.
+    Setting any one flag will otherwise determine the contents of the returned dict.
+
+    Args:
+        normal (bool, optional): If True, normal dependencies are included in the
+            output list.
+        normal_dev (bool, optional): If True, normal dev dependencies will be
+            included in the output list..
+        proc_macro (bool, optional): If True, proc_macro dependencies are included
+            in the output list.
+        proc_macro_dev (bool, optional): If True, dev proc_macro dependencies are
+            included in the output list.
+        build (bool, optional): If True, build dependencies are included
+            in the output list.
+        build_proc_macro (bool, optional): If True, build proc_macro dependencies are
+            included in the output list.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()` when unset.
+
+    Returns:
+        dict: The aliases of all associated packages
+    """
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Determine the relevant maps to use
+    all_aliases_maps = []
+    if normal:
+        all_aliases_maps.append(_NORMAL_ALIASES)
+    if normal_dev:
+        all_aliases_maps.append(_NORMAL_DEV_ALIASES)
+    if proc_macro:
+        all_aliases_maps.append(_PROC_MACRO_ALIASES)
+    if proc_macro_dev:
+        all_aliases_maps.append(_PROC_MACRO_DEV_ALIASES)
+    if build:
+        all_aliases_maps.append(_BUILD_ALIASES)
+    if build_proc_macro:
+        all_aliases_maps.append(_BUILD_PROC_MACRO_ALIASES)
+
+    # Default to always using normal aliases
+    if not all_aliases_maps:
+        all_aliases_maps.append(_NORMAL_ALIASES)
+        all_aliases_maps.append(_PROC_MACRO_ALIASES)
+
+    aliases = _flatten_dependency_maps(all_aliases_maps).pop(package_name, None)
+
+    if not aliases:
+        return dict()
+
+    common_items = aliases.pop(_COMMON_CONDITION, {}).items()
+
+    # If there are only common items in the dictionary, immediately return them
+    if not len(aliases.keys()) == 1:
+        return dict(common_items)
+
+    # Build a single select statement where each conditional has accounted for the
+    # common set of aliases.
+    crate_aliases = {"//conditions:default": dict(common_items)}
+    for condition, deps in aliases.items():
+        condition_triples = _CONDITIONS[condition]
+        for triple in condition_triples:
+            if triple in crate_aliases:
+                crate_aliases[triple].update(deps)
+            else:
+                crate_aliases.update({triple: dict(deps.items() + common_items)})
+
+    return select(crate_aliases)
+
+###############################################################################
+# WORKSPACE MEMBER DEPS AND ALIASES
+###############################################################################
+
+_NORMAL_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+        _COMMON_CONDITION: {
+            "wasmsign": Label("@cu__wasmsign-0.1.2//:wasmsign"),
+        },
+    },
+}
+
+_NORMAL_ALIASES = {
+    "bazel/cargo/wasmsign": {
+        _COMMON_CONDITION: {
+        },
+    },
+}
+
+_NORMAL_DEV_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_NORMAL_DEV_ALIASES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_PROC_MACRO_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_PROC_MACRO_ALIASES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_PROC_MACRO_DEV_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_PROC_MACRO_DEV_ALIASES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_BUILD_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_BUILD_ALIASES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_BUILD_PROC_MACRO_DEPENDENCIES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_BUILD_PROC_MACRO_ALIASES = {
+    "bazel/cargo/wasmsign": {
+    },
+}
+
+_CONDITIONS = {
+    "aarch64-apple-darwin": ["@rules_rust//rust/platform:aarch64-apple-darwin"],
+    "aarch64-apple-ios": ["@rules_rust//rust/platform:aarch64-apple-ios"],
+    "aarch64-apple-ios-sim": ["@rules_rust//rust/platform:aarch64-apple-ios-sim"],
+    "aarch64-fuchsia": ["@rules_rust//rust/platform:aarch64-fuchsia"],
+    "aarch64-linux-android": ["@rules_rust//rust/platform:aarch64-linux-android"],
+    "aarch64-pc-windows-msvc": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc"],
+    "aarch64-unknown-linux-gnu": ["@rules_rust//rust/platform:aarch64-unknown-linux-gnu"],
+    "aarch64-unknown-nixos-gnu": ["@rules_rust//rust/platform:aarch64-unknown-nixos-gnu"],
+    "aarch64-unknown-nto-qnx710": ["@rules_rust//rust/platform:aarch64-unknown-nto-qnx710"],
+    "arm-unknown-linux-gnueabi": ["@rules_rust//rust/platform:arm-unknown-linux-gnueabi"],
+    "armv7-linux-androideabi": ["@rules_rust//rust/platform:armv7-linux-androideabi"],
+    "armv7-unknown-linux-gnueabi": ["@rules_rust//rust/platform:armv7-unknown-linux-gnueabi"],
+    "cfg(not(windows))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:riscv32imc-unknown-none-elf", "@rules_rust//rust/platform:riscv64gc-unknown-none-elf", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:thumbv7em-none-eabi", "@rules_rust//rust/platform:thumbv8m.main-none-eabi", "@rules_rust//rust/platform:wasm32-unknown-unknown", "@rules_rust//rust/platform:wasm32-wasi", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu", "@rules_rust//rust/platform:x86_64-unknown-none"],
+    "cfg(target_os = \"hermit\")": [],
+    "cfg(target_os = \"wasi\")": ["@rules_rust//rust/platform:wasm32-wasi"],
+    "cfg(target_os = \"windows\")": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc", "@rules_rust//rust/platform:i686-pc-windows-msvc", "@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "cfg(unix)": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(windows)": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc", "@rules_rust//rust/platform:i686-pc-windows-msvc", "@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "i686-apple-darwin": ["@rules_rust//rust/platform:i686-apple-darwin"],
+    "i686-linux-android": ["@rules_rust//rust/platform:i686-linux-android"],
+    "i686-pc-windows-gnu": [],
+    "i686-pc-windows-msvc": ["@rules_rust//rust/platform:i686-pc-windows-msvc"],
+    "i686-unknown-freebsd": ["@rules_rust//rust/platform:i686-unknown-freebsd"],
+    "i686-unknown-linux-gnu": ["@rules_rust//rust/platform:i686-unknown-linux-gnu"],
+    "powerpc-unknown-linux-gnu": ["@rules_rust//rust/platform:powerpc-unknown-linux-gnu"],
+    "riscv32imc-unknown-none-elf": ["@rules_rust//rust/platform:riscv32imc-unknown-none-elf"],
+    "riscv64gc-unknown-none-elf": ["@rules_rust//rust/platform:riscv64gc-unknown-none-elf"],
+    "s390x-unknown-linux-gnu": ["@rules_rust//rust/platform:s390x-unknown-linux-gnu"],
+    "thumbv7em-none-eabi": ["@rules_rust//rust/platform:thumbv7em-none-eabi"],
+    "thumbv8m.main-none-eabi": ["@rules_rust//rust/platform:thumbv8m.main-none-eabi"],
+    "wasm32-unknown-unknown": ["@rules_rust//rust/platform:wasm32-unknown-unknown"],
+    "wasm32-wasi": ["@rules_rust//rust/platform:wasm32-wasi"],
+    "x86_64-apple-darwin": ["@rules_rust//rust/platform:x86_64-apple-darwin"],
+    "x86_64-apple-ios": ["@rules_rust//rust/platform:x86_64-apple-ios"],
+    "x86_64-fuchsia": ["@rules_rust//rust/platform:x86_64-fuchsia"],
+    "x86_64-linux-android": ["@rules_rust//rust/platform:x86_64-linux-android"],
+    "x86_64-pc-windows-gnu": [],
+    "x86_64-pc-windows-msvc": ["@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "x86_64-unknown-freebsd": ["@rules_rust//rust/platform:x86_64-unknown-freebsd"],
+    "x86_64-unknown-linux-gnu": ["@rules_rust//rust/platform:x86_64-unknown-linux-gnu"],
+    "x86_64-unknown-nixos-gnu": ["@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "x86_64-unknown-none": ["@rules_rust//rust/platform:x86_64-unknown-none"],
+}
+
+###############################################################################
+
+def crate_repositories():
+    """A macro for defining repositories for all generated crates.
+
+    Returns:
+      A list of repos visible to the module through the module extension.
+    """
+    maybe(
+        http_archive,
+        name = "cu__ansi_term-0.12.1",
+        sha256 = "d52a9bb7ec0cf484c551830a7ce27bd20d67eac647e1befb56b0be4ee39a55d2",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/ansi_term/0.12.1/download"],
+        strip_prefix = "ansi_term-0.12.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.ansi_term-0.12.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__anyhow-1.0.86",
+        sha256 = "b3d1d046238990b9cf5bcde22a3fb3584ee5cf65fb2765f454ed428c7a0063da",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/anyhow/1.0.86/download"],
+        strip_prefix = "anyhow-1.0.86",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.anyhow-1.0.86.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__atty-0.2.14",
+        sha256 = "d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/atty/0.2.14/download"],
+        strip_prefix = "atty-0.2.14",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.atty-0.2.14.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__bitflags-1.3.2",
+        sha256 = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/bitflags/1.3.2/download"],
+        strip_prefix = "bitflags-1.3.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.bitflags-1.3.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__byteorder-1.5.0",
+        sha256 = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/byteorder/1.5.0/download"],
+        strip_prefix = "byteorder-1.5.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.byteorder-1.5.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cfg-if-1.0.0",
+        sha256 = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cfg-if/1.0.0/download"],
+        strip_prefix = "cfg-if-1.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.cfg-if-1.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__clap-2.34.0",
+        sha256 = "a0610544180c38b88101fecf2dd634b174a62eef6946f84dfc6a7127512b381c",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/clap/2.34.0/download"],
+        strip_prefix = "clap-2.34.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.clap-2.34.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__ct-codecs-1.1.1",
+        sha256 = "f3b7eb4404b8195a9abb6356f4ac07d8ba267045c8d6d220ac4dc992e6cc75df",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/ct-codecs/1.1.1/download"],
+        strip_prefix = "ct-codecs-1.1.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.ct-codecs-1.1.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__ed25519-compact-1.0.16",
+        sha256 = "e18997d4604542d0736fae2c5ad6de987f0a50530cbcc14a7ce5a685328a252d",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/ed25519-compact/1.0.16/download"],
+        strip_prefix = "ed25519-compact-1.0.16",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.ed25519-compact-1.0.16.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__getrandom-0.2.15",
+        sha256 = "c4567c8db10ae91089c99af84c68c38da3ec2f087c3f82960bcdbf3656b6f4d7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/getrandom/0.2.15/download"],
+        strip_prefix = "getrandom-0.2.15",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.getrandom-0.2.15.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__hermit-abi-0.1.19",
+        sha256 = "62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/hermit-abi/0.1.19/download"],
+        strip_prefix = "hermit-abi-0.1.19",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.hermit-abi-0.1.19.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__hmac-sha512-1.1.5",
+        sha256 = "e4ce1f4656bae589a3fab938f9f09bf58645b7ed01a2c5f8a3c238e01a4ef78a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/hmac-sha512/1.1.5/download"],
+        strip_prefix = "hmac-sha512-1.1.5",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.hmac-sha512-1.1.5.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__libc-0.2.155",
+        sha256 = "97b3888a4aecf77e811145cadf6eef5901f4782c53886191b2f693f24761847c",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/libc/0.2.155/download"],
+        strip_prefix = "libc-0.2.155",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.libc-0.2.155.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__parity-wasm-0.42.2",
+        sha256 = "be5e13c266502aadf83426d87d81a0f5d1ef45b8027f5a471c360abfe4bfae92",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/parity-wasm/0.42.2/download"],
+        strip_prefix = "parity-wasm-0.42.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.parity-wasm-0.42.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__proc-macro2-1.0.86",
+        sha256 = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/proc-macro2/1.0.86/download"],
+        strip_prefix = "proc-macro2-1.0.86",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.proc-macro2-1.0.86.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__quote-1.0.36",
+        sha256 = "0fa76aaf39101c457836aec0ce2316dbdc3ab723cdda1c6bd4e6ad4208acaca7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/quote/1.0.36/download"],
+        strip_prefix = "quote-1.0.36",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.quote-1.0.36.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__strsim-0.8.0",
+        sha256 = "8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/strsim/0.8.0/download"],
+        strip_prefix = "strsim-0.8.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.strsim-0.8.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__syn-2.0.72",
+        sha256 = "dc4b9b9bf2add8093d3f2c0204471e951b2285580335de42f9d2534f3ae7a8af",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/syn/2.0.72/download"],
+        strip_prefix = "syn-2.0.72",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.syn-2.0.72.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__textwrap-0.11.0",
+        sha256 = "d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/textwrap/0.11.0/download"],
+        strip_prefix = "textwrap-0.11.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.textwrap-0.11.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__thiserror-1.0.63",
+        sha256 = "c0342370b38b6a11b6cc11d6a805569958d54cfa061a29969c3b5ce2ea405724",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/thiserror/1.0.63/download"],
+        strip_prefix = "thiserror-1.0.63",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.thiserror-1.0.63.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__thiserror-impl-1.0.63",
+        sha256 = "a4558b58466b9ad7ca0f102865eccc95938dca1a74a856f2b57b6629050da261",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/thiserror-impl/1.0.63/download"],
+        strip_prefix = "thiserror-impl-1.0.63",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.thiserror-impl-1.0.63.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__unicode-ident-1.0.12",
+        sha256 = "3354b9ac3fae1ff6755cb6db53683adb661634f67557942dea4facebec0fee4b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/unicode-ident/1.0.12/download"],
+        strip_prefix = "unicode-ident-1.0.12",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.unicode-ident-1.0.12.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__unicode-width-0.1.13",
+        sha256 = "0336d538f7abc86d282a4189614dfaa90810dfc2c6f6427eaf88e16311dd225d",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/unicode-width/0.1.13/download"],
+        strip_prefix = "unicode-width-0.1.13",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.unicode-width-0.1.13.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__vec_map-0.8.2",
+        sha256 = "f1bddf1187be692e79c5ffeab891132dfb0f236ed36a43c7ed39f1165ee20191",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/vec_map/0.8.2/download"],
+        strip_prefix = "vec_map-0.8.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.vec_map-0.8.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasi-0.11.0-wasi-snapshot-preview1",
+        sha256 = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasi/0.11.0+wasi-snapshot-preview1/download"],
+        strip_prefix = "wasi-0.11.0+wasi-snapshot-preview1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.wasi-0.11.0+wasi-snapshot-preview1.bazel"),
+    )
+
+    maybe(
+        new_git_repository,
+        name = "cu__wasmsign-0.1.2",
+        commit = "6a6ef1c6f99063a5bd4ef9efc2ee41c5ea8f4f96",
+        init_submodules = True,
+        remote = "https://github.com/jedisct1/wasmsign",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.wasmsign-0.1.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__winapi-0.3.9",
+        sha256 = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/winapi/0.3.9/download"],
+        strip_prefix = "winapi-0.3.9",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.winapi-0.3.9.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__winapi-i686-pc-windows-gnu-0.4.0",
+        sha256 = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/winapi-i686-pc-windows-gnu/0.4.0/download"],
+        strip_prefix = "winapi-i686-pc-windows-gnu-0.4.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__winapi-x86_64-pc-windows-gnu-0.4.0",
+        sha256 = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/winapi-x86_64-pc-windows-gnu/0.4.0/download"],
+        strip_prefix = "winapi-x86_64-pc-windows-gnu-0.4.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel"),
+    )
+
+    return [
+        struct(repo = "cu__wasmsign-0.1.2", is_dev_dep = False),
+    ]
diff --git a/bazel/cargo/wasmtime/BUILD.bazel b/bazel/cargo/wasmtime/BUILD.bazel
index 03b3d856f..969a2a96a 100644
--- a/bazel/cargo/wasmtime/BUILD.bazel
+++ b/bazel/cargo/wasmtime/BUILD.bazel
@@ -1,66 +1,35 @@
-"""
-@generated
-cargo-raze generated Bazel file.
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_rust//crate_universe:defs.bzl", "crates_vendor")
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-package(default_visibility = ["//visibility:public"])
-
-licenses([
-    "notice",  # See individual crates for specific licenses
-])
-
-# Aliased targets
-alias(
-    name = "anyhow",
-    actual = "@wasmtime__anyhow__1_0_56//:anyhow",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-alias(
-    name = "env_logger",
-    actual = "@wasmtime__env_logger__0_8_4//:env_logger",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-alias(
-    name = "once_cell",
-    actual = "@wasmtime__once_cell__1_10_0//:once_cell",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-alias(
-    name = "wasmtime",
-    actual = "@wasmtime__wasmtime__0_35_1//:wasmtime",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-alias(
-    name = "wasmtime_c_api_macros",
-    actual = "@wasmtime__wasmtime_c_api_macros__0_19_0//:wasmtime_c_api_macros",
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-)
-
-# Export file for Stardoc support
 exports_files(
     [
-        "crates.bzl",
+        "Cargo.toml",
+        "Cargo.Bazel.lock",
     ],
-    visibility = ["//visibility:public"],
+)
+
+# Run this target to regenerate cargo_lockfile and vendor_path/*.
+# $ bazelisk run bazel/cargo/wasmtime:crates_vendor -- --repin
+crates_vendor(
+    name = "crates_vendor",
+    cargo_lockfile = ":Cargo.Bazel.lock",
+    generate_target_compatible_with = False,
+    manifests = [":Cargo.toml"],
+    mode = "remote",
+    repository_name = "cu",  # shorten generated paths for Windows...
+    tags = ["manual"],
+    vendor_path = "remote",
 )
diff --git a/bazel/cargo/wasmtime/Cargo.Bazel.lock b/bazel/cargo/wasmtime/Cargo.Bazel.lock
new file mode 100644
index 000000000..93579f697
--- /dev/null
+++ b/bazel/cargo/wasmtime/Cargo.Bazel.lock
@@ -0,0 +1,1031 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 3
+
+[[package]]
+name = "ahash"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e89da841a80418a9b391ebaea17f5c112ffaaa96f621d2c285b5174da76b9011"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.86"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3d1d046238990b9cf5bcde22a3fb3584ee5cf65fb2765f454ed428c7a0063da"
+
+[[package]]
+name = "arbitrary"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5a26814d8dcb93b0e5a0ff3c6d80a8843bafb21b39e8e18a6f05471870e110"
+
+[[package]]
+name = "bitflags"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b048fb63fd8b5923fc5aa7b340d8e156aec7ec02f0c78fa8a6ddc2613f6f71de"
+
+[[package]]
+name = "bumpalo"
+version = "3.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "79296716171880943b8470b5f8d03aa55eb2e645a4874bdbb28adb49162e012c"
+
+[[package]]
+name = "cc"
+version = "1.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26a5c3fd7bfa1ce3897a3a3501d362b2d87b7f2583ebcb4a949ec25911025cbc"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+
+[[package]]
+name = "cobs"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67ba02a97a2bd10f4b59b25c7973101c79642302776489e030cd13cdab09ed15"
+
+[[package]]
+name = "cranelift-bforest"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b80c3a50b9c4c7e5b5f73c0ed746687774fc9e36ef652b110da8daebf0c6e0e6"
+dependencies = [
+ "cranelift-entity",
+]
+
+[[package]]
+name = "cranelift-bitset"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38778758c2ca918b05acb2199134e0c561fb577c50574259b26190b6c2d95ded"
+dependencies = [
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "cranelift-codegen"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58258667ad10e468bfc13a8d620f50dfcd4bb35d668123e97defa2549b9ad397"
+dependencies = [
+ "bumpalo",
+ "cranelift-bforest",
+ "cranelift-bitset",
+ "cranelift-codegen-meta",
+ "cranelift-codegen-shared",
+ "cranelift-control",
+ "cranelift-entity",
+ "cranelift-isle",
+ "gimli",
+ "hashbrown 0.14.5",
+ "log",
+ "regalloc2",
+ "rustc-hash",
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cranelift-codegen-meta"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "043f0b702e529dcb07ff92bd7d40e7d5317b5493595172c5eb0983343751ee06"
+dependencies = [
+ "cranelift-codegen-shared",
+]
+
+[[package]]
+name = "cranelift-codegen-shared"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7763578888ab53eca5ce7da141953f828e82c2bfadcffc106d10d1866094ffbb"
+
+[[package]]
+name = "cranelift-control"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32db15f08c05df570f11e8ab33cb1ec449a64b37c8a3498377b77650bef33d8b"
+dependencies = [
+ "arbitrary",
+]
+
+[[package]]
+name = "cranelift-entity"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5289cdb399381a27e7bbfa1b42185916007c3d49aeef70b1d01cb4caa8010130"
+dependencies = [
+ "cranelift-bitset",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "cranelift-frontend"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "31ba8ab24eb9470477e98ddfa3c799a649ac5a0d9a2042868c4c952133c234e8"
+dependencies = [
+ "cranelift-codegen",
+ "log",
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cranelift-isle"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b72a3c5c166a70426dcb209bdd0bb71a787c1ea76023dc0974fbabca770e8f9"
+
+[[package]]
+name = "cranelift-native"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a42424c956bbc31fc5c2706073df896156c5420ae8fa2a5d48dbc7b295d71b"
+dependencies = [
+ "cranelift-codegen",
+ "libc",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cranelift-wasm"
+version = "0.111.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49778df4289933d735b93c30a345513e030cf83101de0036e19b760f8aa09f68"
+dependencies = [
+ "cranelift-codegen",
+ "cranelift-entity",
+ "cranelift-frontend",
+ "itertools",
+ "log",
+ "smallvec",
+ "wasmparser",
+ "wasmtime-types",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "either"
+version = "1.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60b1af1c220855b6ceac025d3f6ecdd2b7c4894bfe9cd9bda4fbb4bc7c0d4cf0"
+
+[[package]]
+name = "embedded-io"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
+
+[[package]]
+name = "env_logger"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd405aab171cb85d6735e5c8d9db038c17d3ca007a4d2c25f337935c3d90580"
+dependencies = [
+ "humantime",
+ "is-terminal",
+ "log",
+ "regex",
+ "termcolor",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5443807d6dff69373d433ab9ef5378ad8df50ca6298caf15de6e52e24aaf54d5"
+
+[[package]]
+name = "errno"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "534c5cf6194dfab3db3242765c03bbe257cf92f22b38f6bc0c58d59108a820ba"
+dependencies = [
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "fallible-iterator"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
+
+[[package]]
+name = "gimli"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40ecd4077b5ae9fd2e9e169b102c6c330d0605168eb0e8bf79952b256dbefffd"
+dependencies = [
+ "fallible-iterator",
+ "indexmap",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43a3c133739dddd0d2990f9a4bdf8eb4b21ef50e4851ca85ab661199821d510e"
+dependencies = [
+ "ahash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+dependencies = [
+ "ahash",
+ "serde",
+]
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "hermit-abi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d231dfb89cfffdbc30e7fc41579ed6066ad03abda9e567ccafae602b97ec5024"
+
+[[package]]
+name = "humantime"
+version = "2.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4"
+
+[[package]]
+name = "id-arena"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25a2bc672d1148e28034f176e01fffebb08b35768468cc954630da77a1449005"
+
+[[package]]
+name = "indexmap"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de3fc2e30ba82dd1b3911c8de1ffc143c74a914a14e99514d7637e3099df5ea0"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.14.5",
+ "serde",
+]
+
+[[package]]
+name = "is-terminal"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f23ff5ef2b80d608d61efee834934d862cd92461afc0560dedf493e4c033738b"
+dependencies = [
+ "hermit-abi",
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "itertools"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49f1f14873335454500d59611f1cf4a4b0f786f9ac11f4312a78e4cf2566695b"
+
+[[package]]
+name = "leb128"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "884e2677b40cc8c339eaefcb701c32ef1fd2493d71118dc0ca4b6a736c93bd67"
+
+[[package]]
+name = "libc"
+version = "0.2.155"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97b3888a4aecf77e811145cadf6eef5901f4782c53886191b2f693f24761847c"
+
+[[package]]
+name = "libm"
+version = "0.2.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ec2a862134d2a7d32d7983ddcdd1c4923530833c9f2ea1a44fc5fa473989058"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89"
+
+[[package]]
+name = "log"
+version = "0.4.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7a70ba024b9dc04c27ea2f0c0548feb474ec5c54bba33a7f72f873a39d07b24"
+
+[[package]]
+name = "mach2"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19b955cdeb2a02b9117f121ce63aa52d08ade45de53e48fe6a38b39c10f6f709"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "memchr"
+version = "2.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
+
+[[package]]
+name = "memfd"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2cffa4ad52c6f791f4f8b15f0c05f9824b2ced1160e88cc393d64fff9a8ac64"
+dependencies = [
+ "rustix",
+]
+
+[[package]]
+name = "object"
+version = "0.36.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f203fa8daa7bb185f760ae12bd8e097f63d17041dcdcaf675ac54cdf863170e"
+dependencies = [
+ "crc32fast",
+ "hashbrown 0.14.5",
+ "indexmap",
+ "memchr",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fdb12b2476b595f9358c5161aa467c2438859caa136dec86c26fdd2efe17b92"
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bda66fc9667c18cb2758a2ac84d1167245054bcf85d5d1aaa6923f45801bdd02"
+
+[[package]]
+name = "postcard"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a55c51ee6c0db07e68448e336cf8ea4131a620edefebf9893e759b2d793420f8"
+dependencies = [
+ "cobs",
+ "embedded-io",
+ "serde",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.86"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "psm"
+version = "0.1.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5787f7cda34e3033a72192c018bc5883100330f362ef279a8cbccfce8bb4e874"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa76aaf39101c457836aec0ce2316dbdc3ab723cdda1c6bd4e6ad4208acaca7"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "regalloc2"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad156d539c879b7a24a363a2016d77961786e71f48f2e2fc8302a92abd2429a6"
+dependencies = [
+ "hashbrown 0.13.2",
+ "log",
+ "rustc-hash",
+ "slice-group-by",
+ "smallvec",
+]
+
+[[package]]
+name = "regex"
+version = "1.10.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b91213439dad192326a0d7c6ee3955910425f441d7038e0d6933b0aec5c4517f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38caf58cc5ef2fed281f89292ef23f6365465ed9a41b7a7754eb4e26496c92df"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a66a03ae7c801facd77a29370b4faec201768915ac14a721ba36f20bc9c209b"
+
+[[package]]
+name = "rustc-hash"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
+
+[[package]]
+name = "rustix"
+version = "0.38.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70dc5ec042f7a43c4a73241207cecc9873a06d45debb38b329f8541d85c2730f"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys",
+]
+
+[[package]]
+name = "ryu"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3cb5ba0dc43242ce17de99c180e96db90b235b8a9fdc9543c96d2209116bd9f"
+
+[[package]]
+name = "semver"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61697e0a1c7e512e84a621326239844a24d8207b4669b41bc18b32ea5cbf988b"
+
+[[package]]
+name = "serde"
+version = "1.0.204"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc76f558e0cbb2a839d37354c575f1dc3fdc6546b5be373ba43d95f231bf7c12"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.204"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0cd7e117be63d3c3678776753929474f3b04a43a080c744d6b0ae2a8c28e222"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.120"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e0d21c9a8cae1235ad58a00c11cb40d4b1e5c784f1ef2c537876ed6ffd8b7c5"
+dependencies = [
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "slice-group-by"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "826167069c09b99d56f31e9ae5c99049e932a98c9dc2dac47645b08dbbf76ba7"
+
+[[package]]
+name = "smallvec"
+version = "1.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c5e1a9a646d36c3599cd173a41282daf47c44583ad367b8e6837255952e5c67"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "sptr"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a"
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
+
+[[package]]
+name = "syn"
+version = "2.0.72"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc4b9b9bf2add8093d3f2c0204471e951b2285580335de42f9d2534f3ae7a8af"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "termcolor"
+version = "1.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.63"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0342370b38b6a11b6cc11d6a805569958d54cfa061a29969c3b5ce2ea405724"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.63"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4558b58466b9ad7ca0f102865eccc95938dca1a74a856f2b57b6629050da261"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing"
+version = "0.1.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3523ab5a71916ccf420eebdf5521fcef02141234bbc0b8a49f2fdc4544364ef"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34704c8d6ebcbc939824180af020566b01a7c01f80641264eba0999f6c2b6be7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c06d3da6113f116aaee68e4d601191614c9053067f9ab7f6edbcb161237daa54"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3354b9ac3fae1ff6755cb6db53683adb661634f67557942dea4facebec0fee4b"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f962df74c8c05a667b5ee8bcf162993134c104e96440b663c8daa176dc772d8c"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "wasm-encoder"
+version = "0.215.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fb56df3e06b8e6b77e37d2969a50ba51281029a9aeb3855e76b7f49b6418847"
+dependencies = [
+ "leb128",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.215.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53fbde0881f24199b81cf49b6ff8f9c145ac8eb1b7fc439adb5c099734f7d90e"
+dependencies = [
+ "ahash",
+ "bitflags",
+ "hashbrown 0.14.5",
+ "indexmap",
+ "semver",
+ "serde",
+]
+
+[[package]]
+name = "wasmprinter"
+version = "0.215.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8e9a325d85053408209b3d2ce5eaddd0dd6864d1cff7a007147ba073157defc"
+dependencies = [
+ "anyhow",
+ "termcolor",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmtime"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a5883d64dfc8423c56e3d8df27cffc44db25336aa468e8e0724fddf30a333d7"
+dependencies = [
+ "anyhow",
+ "bitflags",
+ "bumpalo",
+ "cc",
+ "cfg-if",
+ "hashbrown 0.14.5",
+ "indexmap",
+ "libc",
+ "libm",
+ "log",
+ "mach2",
+ "memfd",
+ "object",
+ "once_cell",
+ "paste",
+ "postcard",
+ "psm",
+ "rustix",
+ "serde",
+ "serde_derive",
+ "smallvec",
+ "sptr",
+ "target-lexicon",
+ "wasmparser",
+ "wasmtime-asm-macros",
+ "wasmtime-component-macro",
+ "wasmtime-cranelift",
+ "wasmtime-environ",
+ "wasmtime-jit-icache-coherence",
+ "wasmtime-slab",
+ "wasmtime-versioned-export-macros",
+ "windows-sys",
+]
+
+[[package]]
+name = "wasmtime-asm-macros"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c4dc7e2a379c0dd6be5b55857d14c4b277f43a9c429a9e14403eb61776ae3be"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "wasmtime-c-api-bazel"
+version = "24.0.0"
+dependencies = [
+ "anyhow",
+ "env_logger",
+ "log",
+ "once_cell",
+ "tracing",
+ "wasmtime",
+ "wasmtime-c-api-macros",
+]
+
+[[package]]
+name = "wasmtime-c-api-macros"
+version = "24.0.0"
+source = "git+https://github.com/bytecodealliance/wasmtime?tag=v24.0.0#6fc3d274c7994dad20c816ccc0739bf766b39a11"
+dependencies = [
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "wasmtime-component-macro"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b07773d1c3dab5f014ec61316ee317aa424033e17e70a63abdf7c3a47e58fcf"
+dependencies = [
+ "anyhow",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasmtime-component-util",
+ "wasmtime-wit-bindgen",
+ "wit-parser",
+]
+
+[[package]]
+name = "wasmtime-component-util"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e38d735320f4e83478369ce649ad8fe87c6b893220902e798547a225fc0c5874"
+
+[[package]]
+name = "wasmtime-cranelift"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e570d831d0785d93d7d8c722b1eb9a34e0d0c1534317666f65892818358a2da9"
+dependencies = [
+ "anyhow",
+ "cfg-if",
+ "cranelift-codegen",
+ "cranelift-control",
+ "cranelift-entity",
+ "cranelift-frontend",
+ "cranelift-native",
+ "cranelift-wasm",
+ "gimli",
+ "log",
+ "object",
+ "target-lexicon",
+ "thiserror",
+ "wasmparser",
+ "wasmtime-environ",
+ "wasmtime-versioned-export-macros",
+]
+
+[[package]]
+name = "wasmtime-environ"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5fe80dfbd81687431a7d4f25929fae1ae96894786d5c96b14ae41164ee97377"
+dependencies = [
+ "anyhow",
+ "cranelift-bitset",
+ "cranelift-entity",
+ "gimli",
+ "indexmap",
+ "log",
+ "object",
+ "postcard",
+ "serde",
+ "serde_derive",
+ "target-lexicon",
+ "wasm-encoder",
+ "wasmparser",
+ "wasmprinter",
+ "wasmtime-types",
+]
+
+[[package]]
+name = "wasmtime-jit-icache-coherence"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d15de8429db996f0d17a4163a35eccc3f874cbfb50f29c379951ea1bbb39452e"
+dependencies = [
+ "anyhow",
+ "cfg-if",
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "wasmtime-slab"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f68d38fa6b30c5e1fc7d608263062997306f79e577ebd197ddcd6b0f55d87d1"
+
+[[package]]
+name = "wasmtime-types"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6634e7079d9c5cfc81af8610ed59b488cc5b7f9777a2f4c1667a2565c2e45249"
+dependencies = [
+ "anyhow",
+ "cranelift-entity",
+ "serde",
+ "serde_derive",
+ "smallvec",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmtime-versioned-export-macros"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3850e3511d6c7f11a72d571890b0ed5f6204681f7f050b9de2690e7f13123fed"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "wasmtime-wit-bindgen"
+version = "24.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3cb331ac7ed1d5ba49cddcdb6b11973752a857148858bb308777d2fc5584121f"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "wit-parser",
+]
+
+[[package]]
+name = "winapi-util"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d4cc384e1e73b93bafa6fb4f1df8c41695c8a91cf9c4c64358067d15a7b6c6b"
+dependencies = [
+ "windows-sys",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm",
+ "windows_aarch64_msvc",
+ "windows_i686_gnu",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc",
+ "windows_x86_64_gnu",
+ "windows_x86_64_gnullvm",
+ "windows_x86_64_msvc",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "wit-parser"
+version = "0.215.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "935a97eaffd57c3b413aa510f8f0b550a4a9fe7d59e79cd8b89a83dcb860321f"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.7.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.7.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
diff --git a/bazel/cargo/wasmtime/Cargo.raze.lock b/bazel/cargo/wasmtime/Cargo.raze.lock
deleted file mode 100644
index 084d0dc59..000000000
--- a/bazel/cargo/wasmtime/Cargo.raze.lock
+++ /dev/null
@@ -1,820 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-[[package]]
-name = "addr2line"
-version = "0.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9ecd88a8c8378ca913a680cd98f0f13ac67383d35993f86c90a70e3f137816b"
-dependencies = [
- "gimli",
-]
-
-[[package]]
-name = "adler"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe"
-
-[[package]]
-name = "aho-corasick"
-version = "0.7.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e37cfd5e7657ada45f742d6e99ca5788580b5c529dc78faf11ece6dc702656f"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.56"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4361135be9122e0870de935d7c439aef945b9f9ddd4199a553b5270b49c82a27"
-
-[[package]]
-name = "atty"
-version = "0.2.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8"
-dependencies = [
- "hermit-abi",
- "libc",
- "winapi",
-]
-
-[[package]]
-name = "autocfg"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d468802bab17cbc0cc575e9b053f41e72aa36bfa6b7f55e3529ffa43161b97fa"
-
-[[package]]
-name = "backtrace"
-version = "0.3.64"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e121dee8023ce33ab248d9ce1493df03c3b38a659b240096fcbd7048ff9c31f"
-dependencies = [
- "addr2line",
- "cc",
- "cfg-if",
- "libc",
- "miniz_oxide",
- "object",
- "rustc-demangle",
-]
-
-[[package]]
-name = "bincode"
-version = "1.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "bitflags"
-version = "1.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
-
-[[package]]
-name = "cc"
-version = "1.0.73"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11"
-
-[[package]]
-name = "cfg-if"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
-
-[[package]]
-name = "cpp_demangle"
-version = "0.3.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eeaa953eaad386a53111e47172c2fedba671e5684c8dd601a5f474f4f118710f"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "cranelift-bforest"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d16922317bd7dd104d509a373887822caa0242fc1def00de66abb538db221db4"
-dependencies = [
- "cranelift-entity",
-]
-
-[[package]]
-name = "cranelift-codegen"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b80bf40380256307b68a3dcbe1b91cac92a533e212b5b635abc3e4525781a0a"
-dependencies = [
- "cranelift-bforest",
- "cranelift-codegen-meta",
- "cranelift-codegen-shared",
- "cranelift-entity",
- "gimli",
- "log",
- "regalloc",
- "smallvec",
- "target-lexicon",
-]
-
-[[package]]
-name = "cranelift-codegen-meta"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "703d0ed7d3bc6c7a814ca12858175bf4e93167a3584127858c686e4b5dd6e432"
-dependencies = [
- "cranelift-codegen-shared",
-]
-
-[[package]]
-name = "cranelift-codegen-shared"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "80f52311e1c90de12dcf8c4b9999c6ebfd1ed360373e88c357160936844511f6"
-
-[[package]]
-name = "cranelift-entity"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "66bc82ef522c1f643baf7d4d40b7c52643ee4549d8960b0e6a047daacb83f897"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "cranelift-frontend"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3cc35e4251864b17515845ba47447bca88fec9ca1a4186b19fe42526e36140e8"
-dependencies = [
- "cranelift-codegen",
- "log",
- "smallvec",
- "target-lexicon",
-]
-
-[[package]]
-name = "cranelift-native"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b882b2251c9845d509d92aebfdb6c8bb3b3b48e207ac951f21fbd20cfe7f90b3"
-dependencies = [
- "cranelift-codegen",
- "libc",
- "target-lexicon",
-]
-
-[[package]]
-name = "cranelift-wasm"
-version = "0.82.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0354e819732c02acdd98ab969dd81c7670304fff4c8fc4c86bc999b55fa1f0c"
-dependencies = [
- "cranelift-codegen",
- "cranelift-entity",
- "cranelift-frontend",
- "itertools",
- "log",
- "smallvec",
- "wasmparser",
- "wasmtime-types",
-]
-
-[[package]]
-name = "crc32fast"
-version = "1.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "either"
-version = "1.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e78d4f1cc4ae33bbfc157ed5d5a5ef3bc29227303d595861deb238fcec4e9457"
-
-[[package]]
-name = "env_logger"
-version = "0.8.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a19187fea3ac7e84da7dacf48de0c45d63c6a76f9490dae389aead16c243fce3"
-dependencies = [
- "atty",
- "humantime",
- "log",
- "regex",
- "termcolor",
-]
-
-[[package]]
-name = "errno"
-version = "0.2.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f639046355ee4f37944e44f60642c6f3a7efa3cf6b78c78a0d989a8ce6c396a1"
-dependencies = [
- "errno-dragonfly",
- "libc",
- "winapi",
-]
-
-[[package]]
-name = "errno-dragonfly"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa68f1b12764fab894d2755d2518754e71b4fd80ecfb822714a1206c2aab39bf"
-dependencies = [
- "cc",
- "libc",
-]
-
-[[package]]
-name = "fallible-iterator"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4443176a9f2c162692bd3d352d745ef9413eec5782a80d8fd6f8a1ac692a07f7"
-
-[[package]]
-name = "getrandom"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d39cd93900197114fa1fcb7ae84ca742095eed9442088988ae74fa744e930e77"
-dependencies = [
- "cfg-if",
- "libc",
- "wasi",
-]
-
-[[package]]
-name = "gimli"
-version = "0.26.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78cc372d058dcf6d5ecd98510e7fbc9e5aec4d21de70f65fea8fecebcd881bd4"
-dependencies = [
- "fallible-iterator",
- "indexmap",
- "stable_deref_trait",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ab5ef0d4909ef3724cc8cce6ccc8572c5c817592e9285f5464f8e86f8bd3726e"
-
-[[package]]
-name = "hermit-abi"
-version = "0.1.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "humantime"
-version = "2.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4"
-
-[[package]]
-name = "indexmap"
-version = "1.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "282a6247722caba404c065016bbfa522806e51714c34f5dfc3e4a3a46fcb4223"
-dependencies = [
- "autocfg",
- "hashbrown",
- "serde",
-]
-
-[[package]]
-name = "io-lifetimes"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec58677acfea8a15352d42fc87d11d63596ade9239e0a7c9352914417515dbe6"
-
-[[package]]
-name = "itertools"
-version = "0.10.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9a9d19fa1e79b6215ff29b9d6880b706147f16e9b1dbb1e4e5947b5b02bc5e3"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "lazy_static"
-version = "1.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646"
-
-[[package]]
-name = "libc"
-version = "0.2.119"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1bf2e165bb3457c8e098ea76f3e3bc9db55f87aa90d52d0e6be741470916aaa4"
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.0.42"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5284f00d480e1c39af34e72f8ad60b94f47007e3481cd3b731c1d67190ddc7b7"
-
-[[package]]
-name = "log"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "51b9bbe6c47d51fc3e1a9b945965946b4c44142ab8792c50835a980d362c2710"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "mach"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b823e83b2affd8f40a9ee8c29dbc56404c1e34cd2710921f2801e2cf29527afa"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "memchr"
-version = "2.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "308cc39be01b73d0d18f82a0e7b2a3df85245f84af96fdddc5d202d27e47b86a"
-
-[[package]]
-name = "memoffset"
-version = "0.6.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5aa361d4faea93603064a027415f07bd8e1d5c88c9fbf68bf56a285428fd79ce"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "miniz_oxide"
-version = "0.4.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a92518e98c078586bc6c934028adcca4c92a53d6a958196de835170a01d84e4b"
-dependencies = [
- "adler",
- "autocfg",
-]
-
-[[package]]
-name = "more-asserts"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7843ec2de400bcbc6a6328c958dc38e5359da6e93e72e37bc5246bf1ae776389"
-
-[[package]]
-name = "object"
-version = "0.27.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67ac1d3f9a1d3616fd9a60c8d74296f22406a238b6a72f5cc1e6f314df4ffbf9"
-dependencies = [
- "crc32fast",
- "indexmap",
- "memchr",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87f3e037eac156d1775da914196f0f37741a274155e34a0b7e427c35d2a2ecb9"
-
-[[package]]
-name = "paste"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0744126afe1a6dd7f394cb50a716dbe086cb06e255e53d8d0185d82828358fb5"
-
-[[package]]
-name = "ppv-lite86"
-version = "0.2.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eb9f9e6e233e5c4a35559a617bf40a4ec447db2e84c20b55a6f83167b7e57872"
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.36"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7342d5883fbccae1cc37a2353b09c87c9b0f3afd73f5fb9bba687a1f733b029"
-dependencies = [
- "unicode-xid",
-]
-
-[[package]]
-name = "psm"
-version = "0.1.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6eca0fa5dd7c4c96e184cec588f0b1db1ee3165e678db21c09793105acb17e6f"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "864d3e96a899863136fc6e99f3d7cae289dafe43bf2c5ac19b70df7210c0a145"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "rand"
-version = "0.8.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
-dependencies = [
- "libc",
- "rand_chacha",
- "rand_core",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
-dependencies = [
- "ppv-lite86",
- "rand_core",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.6.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d34f1408f55294453790c48b2f1ebbb1c5b4b7563eb1f418bcfcfdbb06ebb4e7"
-dependencies = [
- "getrandom",
-]
-
-[[package]]
-name = "regalloc"
-version = "0.0.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62446b1d3ebf980bdc68837700af1d77b37bc430e524bf95319c6eada2a4cc02"
-dependencies = [
- "log",
- "rustc-hash",
- "smallvec",
-]
-
-[[package]]
-name = "regex"
-version = "1.5.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a11647b6b25ff05a515cb92c365cec08801e83423a235b51e231e1808747286"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-syntax"
-version = "0.6.25"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f497285884f3fcff424ffc933e56d7cbca511def0c9831a7f9b5f6153e3cc89b"
-
-[[package]]
-name = "region"
-version = "2.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877e54ea2adcd70d80e9179344c97f93ef0dffd6b03e1f4529e6e83ab2fa9ae0"
-dependencies = [
- "bitflags",
- "libc",
- "mach",
- "winapi",
-]
-
-[[package]]
-name = "rustc-demangle"
-version = "0.1.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ef03e0a2b150c7a90d01faf6254c9c48a41e95fb2a8c2ac1c6f0d2b9aefc342"
-
-[[package]]
-name = "rustc-hash"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
-
-[[package]]
-name = "rustix"
-version = "0.33.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef7ec6a44fba95d21fa522760c03c16ca5ee95cebb6e4ef579cab3e6d7ba6c06"
-dependencies = [
- "bitflags",
- "errno",
- "io-lifetimes",
- "libc",
- "linux-raw-sys",
- "winapi",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.136"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce31e24b01e1e524df96f1c2fdd054405f8d7376249a5110886fb4b658484789"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.136"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08597e7152fcd306f41838ed3e37be9eaeed2b61c42e2117266a554fab4662f9"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "smallvec"
-version = "1.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2dd574626839106c320a323308629dcb1acfc96e32a8cba364ddc61ac23ee83"
-
-[[package]]
-name = "stable_deref_trait"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
-
-[[package]]
-name = "syn"
-version = "1.0.87"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e59d925cf59d8151f25a3bedf97c9c157597c9df7324d32d68991cc399ed08b"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-xid",
-]
-
-[[package]]
-name = "target-lexicon"
-version = "0.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7fa7e55043acb85fca6b3c01485a2eeb6b69c5d21002e273c79e465f43b7ac1"
-
-[[package]]
-name = "termcolor"
-version = "1.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bab24d30b911b2376f3a13cc2cd443142f0c81dda04c118693e35b3835757755"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.30"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "854babe52e4df1653706b98fcfc05843010039b406875930a70e4d9644e5c417"
-dependencies = [
- "thiserror-impl",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.30"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa32fd3f627f367fe16f893e2597ae3c05020f8bba2666a4e6ea73d377e5714b"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "unicode-xid"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ccb82d61f80a663efe1f787a51b16b5a51e3314d6ac365b08639f52387b33f3"
-
-[[package]]
-name = "wasi"
-version = "0.10.2+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd6fbd9a79829dd1ad0cc20627bf1ed606756a7f77edff7b66b7064f9cb327c6"
-
-[[package]]
-name = "wasmparser"
-version = "0.83.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "718ed7c55c2add6548cca3ddd6383d738cd73b892df400e96b9aa876f0141d7a"
-
-[[package]]
-name = "wasmtime"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07f4245f65310fb41e4bdb75b0f794798aab23e3911c34a38a11c6e15f4906dd"
-dependencies = [
- "anyhow",
- "backtrace",
- "bincode",
- "cfg-if",
- "indexmap",
- "lazy_static",
- "libc",
- "log",
- "object",
- "once_cell",
- "paste",
- "psm",
- "region",
- "serde",
- "target-lexicon",
- "wasmparser",
- "wasmtime-cranelift",
- "wasmtime-environ",
- "wasmtime-jit",
- "wasmtime-runtime",
- "winapi",
-]
-
-[[package]]
-name = "wasmtime-c-api-bazel"
-version = "0.35.1"
-dependencies = [
- "anyhow",
- "env_logger",
- "once_cell",
- "wasmtime",
- "wasmtime-c-api-macros",
-]
-
-[[package]]
-name = "wasmtime-c-api-macros"
-version = "0.19.0"
-source = "git+https://github.com/bytecodealliance/wasmtime?tag=v0.35.1#5b09b74f4c5e0fd817febd3263947ee3682759bd"
-dependencies = [
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "wasmtime-cranelift"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da49deb7024bbf9ee72019a30c05fa752dab8cba8b32f709b2ddf66329d46c74"
-dependencies = [
- "anyhow",
- "cranelift-codegen",
- "cranelift-entity",
- "cranelift-frontend",
- "cranelift-native",
- "cranelift-wasm",
- "gimli",
- "log",
- "more-asserts",
- "object",
- "target-lexicon",
- "thiserror",
- "wasmparser",
- "wasmtime-environ",
-]
-
-[[package]]
-name = "wasmtime-environ"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0dbf66220878adc123fe744df623eb141d4e73f03daed3f2aba3dbc7786d921e"
-dependencies = [
- "anyhow",
- "cranelift-entity",
- "gimli",
- "indexmap",
- "log",
- "more-asserts",
- "object",
- "serde",
- "target-lexicon",
- "thiserror",
- "wasmparser",
- "wasmtime-types",
-]
-
-[[package]]
-name = "wasmtime-jit"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62157c76f1204c4845c2c33f6aa4472369c7d9d7deb2e6218c4fabebbae8ac1b"
-dependencies = [
- "addr2line",
- "anyhow",
- "bincode",
- "cfg-if",
- "cpp_demangle",
- "gimli",
- "log",
- "object",
- "region",
- "rustc-demangle",
- "rustix",
- "serde",
- "target-lexicon",
- "thiserror",
- "wasmtime-environ",
- "wasmtime-runtime",
- "winapi",
-]
-
-[[package]]
-name = "wasmtime-jit-debug"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d314887fca993322b7ee4e08e5e2c0e79e812fbd1d6272c1781db884e3daabb"
-dependencies = [
- "lazy_static",
-]
-
-[[package]]
-name = "wasmtime-runtime"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "15c0a7901d0645bf99b1efaebf7f7e144170641c575e96eb1fb6a9218290726c"
-dependencies = [
- "anyhow",
- "backtrace",
- "cc",
- "cfg-if",
- "indexmap",
- "libc",
- "log",
- "mach",
- "memoffset",
- "more-asserts",
- "rand",
- "region",
- "rustix",
- "thiserror",
- "wasmtime-environ",
- "wasmtime-jit-debug",
- "winapi",
-]
-
-[[package]]
-name = "wasmtime-types"
-version = "0.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d9841ad7624110410291d03645876474a79fcedaed729016e384308145c29eb"
-dependencies = [
- "cranelift-entity",
- "serde",
- "thiserror",
- "wasmparser",
-]
-
-[[package]]
-name = "winapi"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
-dependencies = [
- "winapi-i686-pc-windows-gnu",
- "winapi-x86_64-pc-windows-gnu",
-]
-
-[[package]]
-name = "winapi-i686-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
-
-[[package]]
-name = "winapi-util"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70ec6ce85bb158151cae5e5c87f95a8e97d2c0c4b001223f33a334e3ce5de178"
-dependencies = [
- "winapi",
-]
-
-[[package]]
-name = "winapi-x86_64-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
diff --git a/bazel/cargo/wasmtime/Cargo.toml b/bazel/cargo/wasmtime/Cargo.toml
index 9bd1fc823..b038be7fd 100644
--- a/bazel/cargo/wasmtime/Cargo.toml
+++ b/bazel/cargo/wasmtime/Cargo.toml
@@ -1,30 +1,31 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 [package]
-edition = "2018"
+edition = "2021"
 name = "wasmtime-c-api-bazel"
-version = "0.35.1"
+version = "24.0.0"
+rust-version = "1.78.0"
 
 [lib]
 path = "fake_lib.rs"
 
 [dependencies]
-env_logger = "0.8"
+env_logger = "0.10"
 anyhow = "1.0"
-once_cell = "1.3"
-wasmtime = {version = "0.35.1", default-features = false, features = ['cranelift']}
-wasmtime-c-api-macros = {git = "https://github.com/bytecodealliance/wasmtime", tag = "v0.35.1"}
-
-[package.metadata.raze]
-rust_rules_workspace_name = "rules_rust"
-gen_workspace_prefix = "wasmtime"
-genmode = "Remote"
-package_aliases_dir = "."
-workspace_path = "//bazel/cargo/wasmtime"
-
-[package.metadata.raze.crates.rustix.'*']
-additional_flags = [
-    "--cfg=feature=\\\"cc\\\"",
-]
-buildrs_additional_deps = [
-    "@wasmtime__cc__1_0_73//:cc",
-]
-
+once_cell = "1.12"
+log = {version = "0.4.8", default-features = false}
+tracing = "0.1.26"
+wasmtime = {version = "24.0.0", default-features = false, features = ['cranelift', 'runtime', 'gc', 'std']}
+wasmtime-c-api-macros = {git = "https://github.com/bytecodealliance/wasmtime", tag = "v24.0.0"}
diff --git a/bazel/cargo/wasmtime/crates.bzl b/bazel/cargo/wasmtime/crates.bzl
deleted file mode 100644
index ef6d6897d..000000000
--- a/bazel/cargo/wasmtime/crates.bzl
+++ /dev/null
@@ -1,851 +0,0 @@
-"""
-@generated
-cargo-raze generated Bazel file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-load("@bazel_tools//tools/build_defs/repo:git.bzl", "new_git_repository")  # buildifier: disable=load
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")  # buildifier: disable=load
-load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")  # buildifier: disable=load
-
-def wasmtime_fetch_remote_crates():
-    """This function defines a collection of repos and should be called in a WORKSPACE file"""
-    maybe(
-        http_archive,
-        name = "wasmtime__addr2line__0_17_0",
-        url = "https://crates.io/api/v1/crates/addr2line/0.17.0/download",
-        type = "tar.gz",
-        sha256 = "b9ecd88a8c8378ca913a680cd98f0f13ac67383d35993f86c90a70e3f137816b",
-        strip_prefix = "addr2line-0.17.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.addr2line-0.17.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__adler__1_0_2",
-        url = "https://crates.io/api/v1/crates/adler/1.0.2/download",
-        type = "tar.gz",
-        sha256 = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe",
-        strip_prefix = "adler-1.0.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.adler-1.0.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__aho_corasick__0_7_18",
-        url = "https://crates.io/api/v1/crates/aho-corasick/0.7.18/download",
-        type = "tar.gz",
-        sha256 = "1e37cfd5e7657ada45f742d6e99ca5788580b5c529dc78faf11ece6dc702656f",
-        strip_prefix = "aho-corasick-0.7.18",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.aho-corasick-0.7.18.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__anyhow__1_0_56",
-        url = "https://crates.io/api/v1/crates/anyhow/1.0.56/download",
-        type = "tar.gz",
-        sha256 = "4361135be9122e0870de935d7c439aef945b9f9ddd4199a553b5270b49c82a27",
-        strip_prefix = "anyhow-1.0.56",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.anyhow-1.0.56.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__atty__0_2_14",
-        url = "https://crates.io/api/v1/crates/atty/0.2.14/download",
-        type = "tar.gz",
-        sha256 = "d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8",
-        strip_prefix = "atty-0.2.14",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.atty-0.2.14.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__autocfg__1_1_0",
-        url = "https://crates.io/api/v1/crates/autocfg/1.1.0/download",
-        type = "tar.gz",
-        sha256 = "d468802bab17cbc0cc575e9b053f41e72aa36bfa6b7f55e3529ffa43161b97fa",
-        strip_prefix = "autocfg-1.1.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.autocfg-1.1.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__backtrace__0_3_64",
-        url = "https://crates.io/api/v1/crates/backtrace/0.3.64/download",
-        type = "tar.gz",
-        sha256 = "5e121dee8023ce33ab248d9ce1493df03c3b38a659b240096fcbd7048ff9c31f",
-        strip_prefix = "backtrace-0.3.64",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.backtrace-0.3.64.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__bincode__1_3_3",
-        url = "https://crates.io/api/v1/crates/bincode/1.3.3/download",
-        type = "tar.gz",
-        sha256 = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad",
-        strip_prefix = "bincode-1.3.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.bincode-1.3.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__bitflags__1_3_2",
-        url = "https://crates.io/api/v1/crates/bitflags/1.3.2/download",
-        type = "tar.gz",
-        sha256 = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a",
-        strip_prefix = "bitflags-1.3.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.bitflags-1.3.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cc__1_0_73",
-        url = "https://crates.io/api/v1/crates/cc/1.0.73/download",
-        type = "tar.gz",
-        sha256 = "2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11",
-        strip_prefix = "cc-1.0.73",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cc-1.0.73.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cfg_if__1_0_0",
-        url = "https://crates.io/api/v1/crates/cfg-if/1.0.0/download",
-        type = "tar.gz",
-        sha256 = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd",
-        strip_prefix = "cfg-if-1.0.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cfg-if-1.0.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cpp_demangle__0_3_5",
-        url = "https://crates.io/api/v1/crates/cpp_demangle/0.3.5/download",
-        type = "tar.gz",
-        sha256 = "eeaa953eaad386a53111e47172c2fedba671e5684c8dd601a5f474f4f118710f",
-        strip_prefix = "cpp_demangle-0.3.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cpp_demangle-0.3.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_bforest__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-bforest/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "d16922317bd7dd104d509a373887822caa0242fc1def00de66abb538db221db4",
-        strip_prefix = "cranelift-bforest-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-bforest-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_codegen__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-codegen/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "8b80bf40380256307b68a3dcbe1b91cac92a533e212b5b635abc3e4525781a0a",
-        strip_prefix = "cranelift-codegen-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_codegen_meta__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-codegen-meta/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "703d0ed7d3bc6c7a814ca12858175bf4e93167a3584127858c686e4b5dd6e432",
-        strip_prefix = "cranelift-codegen-meta-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-meta-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_codegen_shared__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-codegen-shared/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "80f52311e1c90de12dcf8c4b9999c6ebfd1ed360373e88c357160936844511f6",
-        strip_prefix = "cranelift-codegen-shared-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-shared-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_entity__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-entity/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "66bc82ef522c1f643baf7d4d40b7c52643ee4549d8960b0e6a047daacb83f897",
-        strip_prefix = "cranelift-entity-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-entity-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_frontend__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-frontend/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "3cc35e4251864b17515845ba47447bca88fec9ca1a4186b19fe42526e36140e8",
-        strip_prefix = "cranelift-frontend-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-frontend-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_native__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-native/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "b882b2251c9845d509d92aebfdb6c8bb3b3b48e207ac951f21fbd20cfe7f90b3",
-        strip_prefix = "cranelift-native-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-native-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__cranelift_wasm__0_82_1",
-        url = "https://crates.io/api/v1/crates/cranelift-wasm/0.82.1/download",
-        type = "tar.gz",
-        sha256 = "f0354e819732c02acdd98ab969dd81c7670304fff4c8fc4c86bc999b55fa1f0c",
-        strip_prefix = "cranelift-wasm-0.82.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.cranelift-wasm-0.82.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__crc32fast__1_3_2",
-        url = "https://crates.io/api/v1/crates/crc32fast/1.3.2/download",
-        type = "tar.gz",
-        sha256 = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d",
-        strip_prefix = "crc32fast-1.3.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.crc32fast-1.3.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__either__1_6_1",
-        url = "https://crates.io/api/v1/crates/either/1.6.1/download",
-        type = "tar.gz",
-        sha256 = "e78d4f1cc4ae33bbfc157ed5d5a5ef3bc29227303d595861deb238fcec4e9457",
-        strip_prefix = "either-1.6.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.either-1.6.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__env_logger__0_8_4",
-        url = "https://crates.io/api/v1/crates/env_logger/0.8.4/download",
-        type = "tar.gz",
-        sha256 = "a19187fea3ac7e84da7dacf48de0c45d63c6a76f9490dae389aead16c243fce3",
-        strip_prefix = "env_logger-0.8.4",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.env_logger-0.8.4.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__errno__0_2_8",
-        url = "https://crates.io/api/v1/crates/errno/0.2.8/download",
-        type = "tar.gz",
-        sha256 = "f639046355ee4f37944e44f60642c6f3a7efa3cf6b78c78a0d989a8ce6c396a1",
-        strip_prefix = "errno-0.2.8",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.errno-0.2.8.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__errno_dragonfly__0_1_2",
-        url = "https://crates.io/api/v1/crates/errno-dragonfly/0.1.2/download",
-        type = "tar.gz",
-        sha256 = "aa68f1b12764fab894d2755d2518754e71b4fd80ecfb822714a1206c2aab39bf",
-        strip_prefix = "errno-dragonfly-0.1.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.errno-dragonfly-0.1.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__fallible_iterator__0_2_0",
-        url = "https://crates.io/api/v1/crates/fallible-iterator/0.2.0/download",
-        type = "tar.gz",
-        sha256 = "4443176a9f2c162692bd3d352d745ef9413eec5782a80d8fd6f8a1ac692a07f7",
-        strip_prefix = "fallible-iterator-0.2.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.fallible-iterator-0.2.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__getrandom__0_2_5",
-        url = "https://crates.io/api/v1/crates/getrandom/0.2.5/download",
-        type = "tar.gz",
-        sha256 = "d39cd93900197114fa1fcb7ae84ca742095eed9442088988ae74fa744e930e77",
-        strip_prefix = "getrandom-0.2.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.getrandom-0.2.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__gimli__0_26_1",
-        url = "https://crates.io/api/v1/crates/gimli/0.26.1/download",
-        type = "tar.gz",
-        sha256 = "78cc372d058dcf6d5ecd98510e7fbc9e5aec4d21de70f65fea8fecebcd881bd4",
-        strip_prefix = "gimli-0.26.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.gimli-0.26.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__hashbrown__0_11_2",
-        url = "https://crates.io/api/v1/crates/hashbrown/0.11.2/download",
-        type = "tar.gz",
-        sha256 = "ab5ef0d4909ef3724cc8cce6ccc8572c5c817592e9285f5464f8e86f8bd3726e",
-        strip_prefix = "hashbrown-0.11.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.hashbrown-0.11.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__hermit_abi__0_1_19",
-        url = "https://crates.io/api/v1/crates/hermit-abi/0.1.19/download",
-        type = "tar.gz",
-        sha256 = "62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33",
-        strip_prefix = "hermit-abi-0.1.19",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.hermit-abi-0.1.19.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__humantime__2_1_0",
-        url = "https://crates.io/api/v1/crates/humantime/2.1.0/download",
-        type = "tar.gz",
-        sha256 = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4",
-        strip_prefix = "humantime-2.1.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.humantime-2.1.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__indexmap__1_8_0",
-        url = "https://crates.io/api/v1/crates/indexmap/1.8.0/download",
-        type = "tar.gz",
-        sha256 = "282a6247722caba404c065016bbfa522806e51714c34f5dfc3e4a3a46fcb4223",
-        strip_prefix = "indexmap-1.8.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.indexmap-1.8.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__io_lifetimes__0_5_3",
-        url = "https://crates.io/api/v1/crates/io-lifetimes/0.5.3/download",
-        type = "tar.gz",
-        sha256 = "ec58677acfea8a15352d42fc87d11d63596ade9239e0a7c9352914417515dbe6",
-        strip_prefix = "io-lifetimes-0.5.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.io-lifetimes-0.5.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__itertools__0_10_3",
-        url = "https://crates.io/api/v1/crates/itertools/0.10.3/download",
-        type = "tar.gz",
-        sha256 = "a9a9d19fa1e79b6215ff29b9d6880b706147f16e9b1dbb1e4e5947b5b02bc5e3",
-        strip_prefix = "itertools-0.10.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.itertools-0.10.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__lazy_static__1_4_0",
-        url = "https://crates.io/api/v1/crates/lazy_static/1.4.0/download",
-        type = "tar.gz",
-        sha256 = "e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646",
-        strip_prefix = "lazy_static-1.4.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.lazy_static-1.4.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__libc__0_2_119",
-        url = "https://crates.io/api/v1/crates/libc/0.2.119/download",
-        type = "tar.gz",
-        sha256 = "1bf2e165bb3457c8e098ea76f3e3bc9db55f87aa90d52d0e6be741470916aaa4",
-        strip_prefix = "libc-0.2.119",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.libc-0.2.119.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__linux_raw_sys__0_0_42",
-        url = "https://crates.io/api/v1/crates/linux-raw-sys/0.0.42/download",
-        type = "tar.gz",
-        sha256 = "5284f00d480e1c39af34e72f8ad60b94f47007e3481cd3b731c1d67190ddc7b7",
-        strip_prefix = "linux-raw-sys-0.0.42",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.linux-raw-sys-0.0.42.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__log__0_4_14",
-        url = "https://crates.io/api/v1/crates/log/0.4.14/download",
-        type = "tar.gz",
-        sha256 = "51b9bbe6c47d51fc3e1a9b945965946b4c44142ab8792c50835a980d362c2710",
-        strip_prefix = "log-0.4.14",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.log-0.4.14.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__mach__0_3_2",
-        url = "https://crates.io/api/v1/crates/mach/0.3.2/download",
-        type = "tar.gz",
-        sha256 = "b823e83b2affd8f40a9ee8c29dbc56404c1e34cd2710921f2801e2cf29527afa",
-        strip_prefix = "mach-0.3.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.mach-0.3.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__memchr__2_4_1",
-        url = "https://crates.io/api/v1/crates/memchr/2.4.1/download",
-        type = "tar.gz",
-        sha256 = "308cc39be01b73d0d18f82a0e7b2a3df85245f84af96fdddc5d202d27e47b86a",
-        strip_prefix = "memchr-2.4.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.memchr-2.4.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__memoffset__0_6_5",
-        url = "https://crates.io/api/v1/crates/memoffset/0.6.5/download",
-        type = "tar.gz",
-        sha256 = "5aa361d4faea93603064a027415f07bd8e1d5c88c9fbf68bf56a285428fd79ce",
-        strip_prefix = "memoffset-0.6.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.memoffset-0.6.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__miniz_oxide__0_4_4",
-        url = "https://crates.io/api/v1/crates/miniz_oxide/0.4.4/download",
-        type = "tar.gz",
-        sha256 = "a92518e98c078586bc6c934028adcca4c92a53d6a958196de835170a01d84e4b",
-        strip_prefix = "miniz_oxide-0.4.4",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.miniz_oxide-0.4.4.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__more_asserts__0_2_2",
-        url = "https://crates.io/api/v1/crates/more-asserts/0.2.2/download",
-        type = "tar.gz",
-        sha256 = "7843ec2de400bcbc6a6328c958dc38e5359da6e93e72e37bc5246bf1ae776389",
-        strip_prefix = "more-asserts-0.2.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.more-asserts-0.2.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__object__0_27_1",
-        url = "https://crates.io/api/v1/crates/object/0.27.1/download",
-        type = "tar.gz",
-        sha256 = "67ac1d3f9a1d3616fd9a60c8d74296f22406a238b6a72f5cc1e6f314df4ffbf9",
-        strip_prefix = "object-0.27.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.object-0.27.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__once_cell__1_10_0",
-        url = "https://crates.io/api/v1/crates/once_cell/1.10.0/download",
-        type = "tar.gz",
-        sha256 = "87f3e037eac156d1775da914196f0f37741a274155e34a0b7e427c35d2a2ecb9",
-        strip_prefix = "once_cell-1.10.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.once_cell-1.10.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__paste__1_0_6",
-        url = "https://crates.io/api/v1/crates/paste/1.0.6/download",
-        type = "tar.gz",
-        sha256 = "0744126afe1a6dd7f394cb50a716dbe086cb06e255e53d8d0185d82828358fb5",
-        strip_prefix = "paste-1.0.6",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.paste-1.0.6.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__ppv_lite86__0_2_16",
-        url = "https://crates.io/api/v1/crates/ppv-lite86/0.2.16/download",
-        type = "tar.gz",
-        sha256 = "eb9f9e6e233e5c4a35559a617bf40a4ec447db2e84c20b55a6f83167b7e57872",
-        strip_prefix = "ppv-lite86-0.2.16",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.ppv-lite86-0.2.16.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__proc_macro2__1_0_36",
-        url = "https://crates.io/api/v1/crates/proc-macro2/1.0.36/download",
-        type = "tar.gz",
-        sha256 = "c7342d5883fbccae1cc37a2353b09c87c9b0f3afd73f5fb9bba687a1f733b029",
-        strip_prefix = "proc-macro2-1.0.36",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.proc-macro2-1.0.36.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__psm__0_1_17",
-        url = "https://crates.io/api/v1/crates/psm/0.1.17/download",
-        type = "tar.gz",
-        sha256 = "6eca0fa5dd7c4c96e184cec588f0b1db1ee3165e678db21c09793105acb17e6f",
-        strip_prefix = "psm-0.1.17",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.psm-0.1.17.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__quote__1_0_15",
-        url = "https://crates.io/api/v1/crates/quote/1.0.15/download",
-        type = "tar.gz",
-        sha256 = "864d3e96a899863136fc6e99f3d7cae289dafe43bf2c5ac19b70df7210c0a145",
-        strip_prefix = "quote-1.0.15",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.quote-1.0.15.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rand__0_8_5",
-        url = "https://crates.io/api/v1/crates/rand/0.8.5/download",
-        type = "tar.gz",
-        sha256 = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404",
-        strip_prefix = "rand-0.8.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rand-0.8.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rand_chacha__0_3_1",
-        url = "https://crates.io/api/v1/crates/rand_chacha/0.3.1/download",
-        type = "tar.gz",
-        sha256 = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88",
-        strip_prefix = "rand_chacha-0.3.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rand_chacha-0.3.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rand_core__0_6_3",
-        url = "https://crates.io/api/v1/crates/rand_core/0.6.3/download",
-        type = "tar.gz",
-        sha256 = "d34f1408f55294453790c48b2f1ebbb1c5b4b7563eb1f418bcfcfdbb06ebb4e7",
-        strip_prefix = "rand_core-0.6.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rand_core-0.6.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__regalloc__0_0_34",
-        url = "https://crates.io/api/v1/crates/regalloc/0.0.34/download",
-        type = "tar.gz",
-        sha256 = "62446b1d3ebf980bdc68837700af1d77b37bc430e524bf95319c6eada2a4cc02",
-        strip_prefix = "regalloc-0.0.34",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.regalloc-0.0.34.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__regex__1_5_5",
-        url = "https://crates.io/api/v1/crates/regex/1.5.5/download",
-        type = "tar.gz",
-        sha256 = "1a11647b6b25ff05a515cb92c365cec08801e83423a235b51e231e1808747286",
-        strip_prefix = "regex-1.5.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.regex-1.5.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__regex_syntax__0_6_25",
-        url = "https://crates.io/api/v1/crates/regex-syntax/0.6.25/download",
-        type = "tar.gz",
-        sha256 = "f497285884f3fcff424ffc933e56d7cbca511def0c9831a7f9b5f6153e3cc89b",
-        strip_prefix = "regex-syntax-0.6.25",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.regex-syntax-0.6.25.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__region__2_2_0",
-        url = "https://crates.io/api/v1/crates/region/2.2.0/download",
-        type = "tar.gz",
-        sha256 = "877e54ea2adcd70d80e9179344c97f93ef0dffd6b03e1f4529e6e83ab2fa9ae0",
-        strip_prefix = "region-2.2.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.region-2.2.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rustc_demangle__0_1_21",
-        url = "https://crates.io/api/v1/crates/rustc-demangle/0.1.21/download",
-        type = "tar.gz",
-        sha256 = "7ef03e0a2b150c7a90d01faf6254c9c48a41e95fb2a8c2ac1c6f0d2b9aefc342",
-        strip_prefix = "rustc-demangle-0.1.21",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rustc-demangle-0.1.21.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rustc_hash__1_1_0",
-        url = "https://crates.io/api/v1/crates/rustc-hash/1.1.0/download",
-        type = "tar.gz",
-        sha256 = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2",
-        strip_prefix = "rustc-hash-1.1.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rustc-hash-1.1.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__rustix__0_33_4",
-        url = "https://crates.io/api/v1/crates/rustix/0.33.4/download",
-        type = "tar.gz",
-        sha256 = "ef7ec6a44fba95d21fa522760c03c16ca5ee95cebb6e4ef579cab3e6d7ba6c06",
-        strip_prefix = "rustix-0.33.4",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.rustix-0.33.4.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__serde__1_0_136",
-        url = "https://crates.io/api/v1/crates/serde/1.0.136/download",
-        type = "tar.gz",
-        sha256 = "ce31e24b01e1e524df96f1c2fdd054405f8d7376249a5110886fb4b658484789",
-        strip_prefix = "serde-1.0.136",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.serde-1.0.136.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__serde_derive__1_0_136",
-        url = "https://crates.io/api/v1/crates/serde_derive/1.0.136/download",
-        type = "tar.gz",
-        sha256 = "08597e7152fcd306f41838ed3e37be9eaeed2b61c42e2117266a554fab4662f9",
-        strip_prefix = "serde_derive-1.0.136",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.serde_derive-1.0.136.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__smallvec__1_8_0",
-        url = "https://crates.io/api/v1/crates/smallvec/1.8.0/download",
-        type = "tar.gz",
-        sha256 = "f2dd574626839106c320a323308629dcb1acfc96e32a8cba364ddc61ac23ee83",
-        strip_prefix = "smallvec-1.8.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.smallvec-1.8.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__stable_deref_trait__1_2_0",
-        url = "https://crates.io/api/v1/crates/stable_deref_trait/1.2.0/download",
-        type = "tar.gz",
-        sha256 = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3",
-        strip_prefix = "stable_deref_trait-1.2.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.stable_deref_trait-1.2.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__syn__1_0_87",
-        url = "https://crates.io/api/v1/crates/syn/1.0.87/download",
-        type = "tar.gz",
-        sha256 = "1e59d925cf59d8151f25a3bedf97c9c157597c9df7324d32d68991cc399ed08b",
-        strip_prefix = "syn-1.0.87",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.syn-1.0.87.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__target_lexicon__0_12_3",
-        url = "https://crates.io/api/v1/crates/target-lexicon/0.12.3/download",
-        type = "tar.gz",
-        sha256 = "d7fa7e55043acb85fca6b3c01485a2eeb6b69c5d21002e273c79e465f43b7ac1",
-        strip_prefix = "target-lexicon-0.12.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.target-lexicon-0.12.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__termcolor__1_1_3",
-        url = "https://crates.io/api/v1/crates/termcolor/1.1.3/download",
-        type = "tar.gz",
-        sha256 = "bab24d30b911b2376f3a13cc2cd443142f0c81dda04c118693e35b3835757755",
-        strip_prefix = "termcolor-1.1.3",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.termcolor-1.1.3.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__thiserror__1_0_30",
-        url = "https://crates.io/api/v1/crates/thiserror/1.0.30/download",
-        type = "tar.gz",
-        sha256 = "854babe52e4df1653706b98fcfc05843010039b406875930a70e4d9644e5c417",
-        strip_prefix = "thiserror-1.0.30",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.thiserror-1.0.30.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__thiserror_impl__1_0_30",
-        url = "https://crates.io/api/v1/crates/thiserror-impl/1.0.30/download",
-        type = "tar.gz",
-        sha256 = "aa32fd3f627f367fe16f893e2597ae3c05020f8bba2666a4e6ea73d377e5714b",
-        strip_prefix = "thiserror-impl-1.0.30",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.thiserror-impl-1.0.30.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__unicode_xid__0_2_2",
-        url = "https://crates.io/api/v1/crates/unicode-xid/0.2.2/download",
-        type = "tar.gz",
-        sha256 = "8ccb82d61f80a663efe1f787a51b16b5a51e3314d6ac365b08639f52387b33f3",
-        strip_prefix = "unicode-xid-0.2.2",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.unicode-xid-0.2.2.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasi__0_10_2_wasi_snapshot_preview1",
-        url = "https://crates.io/api/v1/crates/wasi/0.10.2+wasi-snapshot-preview1/download",
-        type = "tar.gz",
-        sha256 = "fd6fbd9a79829dd1ad0cc20627bf1ed606756a7f77edff7b66b7064f9cb327c6",
-        strip_prefix = "wasi-0.10.2+wasi-snapshot-preview1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmparser__0_83_0",
-        url = "https://crates.io/api/v1/crates/wasmparser/0.83.0/download",
-        type = "tar.gz",
-        sha256 = "718ed7c55c2add6548cca3ddd6383d738cd73b892df400e96b9aa876f0141d7a",
-        strip_prefix = "wasmparser-0.83.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmparser-0.83.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "07f4245f65310fb41e4bdb75b0f794798aab23e3911c34a38a11c6e15f4906dd",
-        strip_prefix = "wasmtime-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-0.35.1.bazel"),
-    )
-
-    maybe(
-        new_git_repository,
-        name = "wasmtime__wasmtime_c_api_macros__0_19_0",
-        remote = "https://github.com/bytecodealliance/wasmtime",
-        commit = "5b09b74f4c5e0fd817febd3263947ee3682759bd",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-c-api-macros-0.19.0.bazel"),
-        init_submodules = True,
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_cranelift__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-cranelift/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "da49deb7024bbf9ee72019a30c05fa752dab8cba8b32f709b2ddf66329d46c74",
-        strip_prefix = "wasmtime-cranelift-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-cranelift-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_environ__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-environ/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "0dbf66220878adc123fe744df623eb141d4e73f03daed3f2aba3dbc7786d921e",
-        strip_prefix = "wasmtime-environ-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-environ-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_jit__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-jit/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "62157c76f1204c4845c2c33f6aa4472369c7d9d7deb2e6218c4fabebbae8ac1b",
-        strip_prefix = "wasmtime-jit-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-jit-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_jit_debug__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-jit-debug/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "1d314887fca993322b7ee4e08e5e2c0e79e812fbd1d6272c1781db884e3daabb",
-        strip_prefix = "wasmtime-jit-debug-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-jit-debug-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_runtime__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-runtime/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "15c0a7901d0645bf99b1efaebf7f7e144170641c575e96eb1fb6a9218290726c",
-        strip_prefix = "wasmtime-runtime-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-runtime-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__wasmtime_types__0_35_1",
-        url = "https://crates.io/api/v1/crates/wasmtime-types/0.35.1/download",
-        type = "tar.gz",
-        sha256 = "4d9841ad7624110410291d03645876474a79fcedaed729016e384308145c29eb",
-        strip_prefix = "wasmtime-types-0.35.1",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.wasmtime-types-0.35.1.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__winapi__0_3_9",
-        url = "https://crates.io/api/v1/crates/winapi/0.3.9/download",
-        type = "tar.gz",
-        sha256 = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419",
-        strip_prefix = "winapi-0.3.9",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.winapi-0.3.9.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__winapi_i686_pc_windows_gnu__0_4_0",
-        url = "https://crates.io/api/v1/crates/winapi-i686-pc-windows-gnu/0.4.0/download",
-        type = "tar.gz",
-        sha256 = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6",
-        strip_prefix = "winapi-i686-pc-windows-gnu-0.4.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__winapi_util__0_1_5",
-        url = "https://crates.io/api/v1/crates/winapi-util/0.1.5/download",
-        type = "tar.gz",
-        sha256 = "70ec6ce85bb158151cae5e5c87f95a8e97d2c0c4b001223f33a334e3ce5de178",
-        strip_prefix = "winapi-util-0.1.5",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.winapi-util-0.1.5.bazel"),
-    )
-
-    maybe(
-        http_archive,
-        name = "wasmtime__winapi_x86_64_pc_windows_gnu__0_4_0",
-        url = "https://crates.io/api/v1/crates/winapi-x86_64-pc-windows-gnu/0.4.0/download",
-        type = "tar.gz",
-        sha256 = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f",
-        strip_prefix = "winapi-x86_64-pc-windows-gnu-0.4.0",
-        build_file = Label("//bazel/cargo/wasmtime/remote:BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel"),
-    )
diff --git a/bazel/cargo/wasmtime/remote/BUILD.addr2line-0.17.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.addr2line-0.17.0.bazel
deleted file mode 100644
index 35a316e9b..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.addr2line-0.17.0.bazel
+++ /dev/null
@@ -1,63 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "addr2line" with type "example" omitted
-
-rust_library(
-    name = "addr2line",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=addr2line",
-        "manual",
-    ],
-    version = "0.17.0",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__gimli__0_26_1//:gimli",
-    ],
-)
-
-# Unsupported target "correctness" with type "test" omitted
-
-# Unsupported target "output_equivalence" with type "test" omitted
-
-# Unsupported target "parse" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.adler-1.0.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.adler-1.0.2.bazel
deleted file mode 100644
index 602f9dd28..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.adler-1.0.2.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "0BSD OR (MIT OR Apache-2.0)"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "adler",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=adler",
-        "manual",
-    ],
-    version = "1.0.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.ahash-0.8.11.bazel b/bazel/cargo/wasmtime/remote/BUILD.ahash-0.8.11.bazel
new file mode 100644
index 000000000..3efe4bb2b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.ahash-0.8.11.bazel
@@ -0,0 +1,192 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "ahash",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=ahash",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.8.11",
+    deps = [
+        "@cu__ahash-0.8.11//:build_script_build",
+        "@cu__cfg-if-1.0.0//:cfg_if",
+        "@cu__zerocopy-0.7.35//:zerocopy",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:riscv32imc-unknown-none-elf": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:riscv64gc-unknown-none-elf": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:wasm32-unknown-unknown": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-none": [
+            "@cu__once_cell-1.19.0//:once_cell",  # cfg(not(all(target_arch = "arm", target_os = "none")))
+        ],
+        "//conditions:default": [],
+    }),
+)
+
+cargo_build_script(
+    name = "ahash_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=ahash",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.8.11",
+    visibility = ["//visibility:private"],
+    deps = [
+        "@cu__version_check-0.9.5//:version_check",
+    ],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":ahash_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-0.7.18.bazel b/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-0.7.18.bazel
deleted file mode 100644
index e43497742..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-0.7.18.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # Unlicense from expression "Unlicense OR MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "aho_corasick",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=aho_corasick",
-        "manual",
-    ],
-    version = "0.7.18",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__memchr__2_4_1//:memchr",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-1.1.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-1.1.3.bazel
new file mode 100644
index 000000000..193a2843c
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.aho-corasick-1.1.3.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "aho_corasick",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "perf-literal",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=aho-corasick",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.1.3",
+    deps = [
+        "@cu__memchr-2.7.4//:memchr",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.56.bazel b/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.56.bazel
deleted file mode 100644
index 203451dba..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.56.bazel
+++ /dev/null
@@ -1,116 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "anyhow_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.56",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "anyhow",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=anyhow",
-        "manual",
-    ],
-    version = "1.0.56",
-    # buildifier: leave-alone
-    deps = [
-        ":anyhow_build_script",
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test_autotrait" with type "test" omitted
-
-# Unsupported target "test_backtrace" with type "test" omitted
-
-# Unsupported target "test_boxed" with type "test" omitted
-
-# Unsupported target "test_chain" with type "test" omitted
-
-# Unsupported target "test_context" with type "test" omitted
-
-# Unsupported target "test_convert" with type "test" omitted
-
-# Unsupported target "test_downcast" with type "test" omitted
-
-# Unsupported target "test_ensure" with type "test" omitted
-
-# Unsupported target "test_ffi" with type "test" omitted
-
-# Unsupported target "test_fmt" with type "test" omitted
-
-# Unsupported target "test_macros" with type "test" omitted
-
-# Unsupported target "test_repr" with type "test" omitted
-
-# Unsupported target "test_source" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.86.bazel b/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.86.bazel
new file mode 100644
index 000000000..3021b737f
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.anyhow-1.0.86.bazel
@@ -0,0 +1,97 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "anyhow",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=anyhow",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    deps = [
+        "@cu__anyhow-1.0.86//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "anyhow_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=anyhow",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":anyhow_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.arbitrary-1.3.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.arbitrary-1.3.2.bazel
new file mode 100644
index 000000000..d36ba3e9a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.arbitrary-1.3.2.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "arbitrary",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=arbitrary",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.3.2",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.atty-0.2.14.bazel b/bazel/cargo/wasmtime/remote/BUILD.atty-0.2.14.bazel
deleted file mode 100644
index 18cade6f1..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.atty-0.2.14.bazel
+++ /dev/null
@@ -1,90 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "atty" with type "example" omitted
-
-rust_library(
-    name = "atty",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=atty",
-        "manual",
-    ],
-    version = "0.2.14",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.autocfg-1.1.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.autocfg-1.1.0.bazel
deleted file mode 100644
index 8b7d36892..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.autocfg-1.1.0.bazel
+++ /dev/null
@@ -1,64 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "integers" with type "example" omitted
-
-# Unsupported target "paths" with type "example" omitted
-
-# Unsupported target "traits" with type "example" omitted
-
-# Unsupported target "versions" with type "example" omitted
-
-rust_library(
-    name = "autocfg",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=autocfg",
-        "manual",
-    ],
-    version = "1.1.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "rustflags" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.backtrace-0.3.64.bazel b/bazel/cargo/wasmtime/remote/BUILD.backtrace-0.3.64.bazel
deleted file mode 100644
index 110f5a9be..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.backtrace-0.3.64.bazel
+++ /dev/null
@@ -1,111 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "backtrace_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.3.64",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cc__1_0_73//:cc",
-    ],
-)
-
-# Unsupported target "benchmarks" with type "bench" omitted
-
-# Unsupported target "backtrace" with type "example" omitted
-
-# Unsupported target "raw" with type "example" omitted
-
-rust_library(
-    name = "backtrace",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=backtrace",
-        "manual",
-    ],
-    version = "0.3.64",
-    # buildifier: leave-alone
-    deps = [
-        ":backtrace_build_script",
-        "@wasmtime__addr2line__0_17_0//:addr2line",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-        "@wasmtime__libc__0_2_119//:libc",
-        "@wasmtime__miniz_oxide__0_4_4//:miniz_oxide",
-        "@wasmtime__object__0_27_1//:object",
-        "@wasmtime__rustc_demangle__0_1_21//:rustc_demangle",
-    ],
-)
-
-# Unsupported target "accuracy" with type "test" omitted
-
-# Unsupported target "concurrent-panics" with type "test" omitted
-
-# Unsupported target "long_fn_name" with type "test" omitted
-
-# Unsupported target "skip_inner_frames" with type "test" omitted
-
-# Unsupported target "smoke" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.bazel b/bazel/cargo/wasmtime/remote/BUILD.bazel
index e69de29bb..db793c6e6 100644
--- a/bazel/cargo/wasmtime/remote/BUILD.bazel
+++ b/bazel/cargo/wasmtime/remote/BUILD.bazel
@@ -0,0 +1,74 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+package(default_visibility = ["//visibility:public"])
+
+exports_files(
+    [
+        "cargo-bazel.json",
+        "crates.bzl",
+        "defs.bzl",
+    ] + glob(
+        include = ["*.bazel"],
+        allow_empty = True,
+    ),
+)
+
+filegroup(
+    name = "srcs",
+    srcs = glob(
+        include = [
+            "*.bazel",
+            "*.bzl",
+        ],
+        allow_empty = True,
+    ),
+)
+
+# Workspace Member Dependencies
+alias(
+    name = "anyhow",
+    actual = "@cu__anyhow-1.0.86//:anyhow",
+    tags = ["manual"],
+)
+
+alias(
+    name = "env_logger",
+    actual = "@cu__env_logger-0.10.2//:env_logger",
+    tags = ["manual"],
+)
+
+alias(
+    name = "log",
+    actual = "@cu__log-0.4.22//:log",
+    tags = ["manual"],
+)
+
+alias(
+    name = "once_cell",
+    actual = "@cu__once_cell-1.19.0//:once_cell",
+    tags = ["manual"],
+)
+
+alias(
+    name = "tracing",
+    actual = "@cu__tracing-0.1.40//:tracing",
+    tags = ["manual"],
+)
+
+alias(
+    name = "wasmtime",
+    actual = "@cu__wasmtime-24.0.0//:wasmtime",
+    tags = ["manual"],
+)
+
+alias(
+    name = "wasmtime-c-api-macros",
+    actual = "@cu__wasmtime-c-api-macros-24.0.0//:wasmtime_c_api_macros",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.bincode-1.3.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.bincode-1.3.3.bazel
deleted file mode 100644
index e22d4cc7b..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.bincode-1.3.3.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "bincode",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=bincode",
-        "manual",
-    ],
-    version = "1.3.3",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__serde__1_0_136//:serde",
-    ],
-)
-
-# Unsupported target "test" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.bitflags-1.3.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.bitflags-1.3.2.bazel
deleted file mode 100644
index 0e31ead71..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.bitflags-1.3.2.bazel
+++ /dev/null
@@ -1,59 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "bitflags",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=bitflags",
-        "manual",
-    ],
-    version = "1.3.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "basic" with type "test" omitted
-
-# Unsupported target "compile" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.bitflags-2.6.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.bitflags-2.6.0.bazel
new file mode 100644
index 000000000..31767882b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.bitflags-2.6.0.bazel
@@ -0,0 +1,119 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "bitflags",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "std",  # aarch64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "std",  # aarch64-apple-ios
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "std",  # aarch64-apple-ios-sim
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "std",  # aarch64-fuchsia
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "std",  # aarch64-linux-android
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "std",  # aarch64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "std",  # aarch64-unknown-nixos-gnu
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "std",  # aarch64-unknown-nto-qnx710
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "std",  # arm-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "std",  # armv7-linux-androideabi
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "std",  # armv7-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "std",  # i686-apple-darwin
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "std",  # i686-linux-android
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "std",  # i686-unknown-freebsd
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "std",  # i686-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "std",  # powerpc-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "std",  # s390x-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "std",  # x86_64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "std",  # x86_64-apple-ios
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "std",  # x86_64-fuchsia
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "std",  # x86_64-linux-android
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "std",  # x86_64-unknown-freebsd
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "std",  # x86_64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "std",  # x86_64-unknown-nixos-gnu
+        ],
+        "//conditions:default": [],
+    }),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=bitflags",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.6.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.bumpalo-3.16.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.bumpalo-3.16.0.bazel
new file mode 100644
index 000000000..2dd737714
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.bumpalo-3.16.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "bumpalo",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=bumpalo",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "3.16.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cc-1.0.73.bazel b/bazel/cargo/wasmtime/remote/BUILD.cc-1.0.73.bazel
deleted file mode 100644
index 1fa5ec2af..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cc-1.0.73.bazel
+++ /dev/null
@@ -1,87 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_binary(
-    # Prefix bin name to disambiguate from (probable) collision with lib name
-    # N.B.: The exact form of this is subject to change.
-    name = "cargo_bin_gcc_shim",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/bin/gcc-shim.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=gcc-shim",
-        "manual",
-    ],
-    version = "1.0.73",
-    # buildifier: leave-alone
-    deps = [
-        ":cc",
-    ],
-)
-
-rust_library(
-    name = "cc",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cc",
-        "manual",
-    ],
-    version = "1.0.73",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "cc_env" with type "test" omitted
-
-# Unsupported target "cflags" with type "test" omitted
-
-# Unsupported target "cxxflags" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cc-1.1.7.bazel b/bazel/cargo/wasmtime/remote/BUILD.cc-1.1.7.bazel
new file mode 100644
index 000000000..14f88e535
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cc-1.1.7.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.1.7",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cfg-if-1.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cfg-if-1.0.0.bazel
index 2b86c1e35..f9019274b 100644
--- a/bazel/cargo/wasmtime/remote/BUILD.cfg-if-1.0.0.bazel
+++ b/bazel/cargo/wasmtime/remote/BUILD.cfg-if-1.0.0.bazel
@@ -1,56 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "cfg_if",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=cfg-if",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "1.0.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
-
-# Unsupported target "xcrate" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cobs-0.2.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.cobs-0.2.3.bazel
new file mode 100644
index 000000000..00da2e823
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cobs-0.2.3.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cobs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cobs",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.3",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cpp_demangle-0.3.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.cpp_demangle-0.3.5.bazel
deleted file mode 100644
index 68344269d..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cpp_demangle-0.3.5.bazel
+++ /dev/null
@@ -1,120 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "cpp_demangle_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.3.5",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_binary(
-    # Prefix bin name to disambiguate from (probable) collision with lib name
-    # N.B.: The exact form of this is subject to change.
-    name = "cargo_bin_afl_runner",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/bin/afl_runner.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=afl_runner",
-        "manual",
-    ],
-    version = "0.3.5",
-    # buildifier: leave-alone
-    deps = [
-        ":cpp_demangle",
-        ":cpp_demangle_build_script",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-    ],
-)
-
-# Unsupported target "cppfilt" with type "example" omitted
-
-rust_library(
-    name = "cpp_demangle",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cpp_demangle",
-        "manual",
-    ],
-    version = "0.3.5",
-    # buildifier: leave-alone
-    deps = [
-        ":cpp_demangle_build_script",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.111.0.bazel
new file mode 100644
index 000000000..a4651a993
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.111.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_bforest",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-bforest",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.82.1.bazel
deleted file mode 100644
index 84eefb2d7..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-bforest-0.82.1.bazel
+++ /dev/null
@@ -1,55 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_bforest",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-bforest",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-bitset-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-bitset-0.111.0.bazel
new file mode 100644
index 000000000..7d70417f0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-bitset-0.111.0.bazel
@@ -0,0 +1,53 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_bitset",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "enable-serde",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-bitset",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.111.0.bazel
new file mode 100644
index 000000000..cb569892f
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.111.0.bazel
@@ -0,0 +1,120 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_codegen",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "gimli",
+        "host-arch",
+        "std",
+        "trace-log",
+        "unwind",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-codegen",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__bumpalo-3.16.0//:bumpalo",
+        "@cu__cranelift-bforest-0.111.0//:cranelift_bforest",
+        "@cu__cranelift-bitset-0.111.0//:cranelift_bitset",
+        "@cu__cranelift-codegen-0.111.0//:build_script_build",
+        "@cu__cranelift-codegen-shared-0.111.0//:cranelift_codegen_shared",
+        "@cu__cranelift-control-0.111.0//:cranelift_control",
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+        "@cu__gimli-0.29.0//:gimli",
+        "@cu__hashbrown-0.14.5//:hashbrown",
+        "@cu__log-0.4.22//:log",
+        "@cu__regalloc2-0.9.3//:regalloc2",
+        "@cu__rustc-hash-1.1.0//:rustc_hash",
+        "@cu__smallvec-1.13.2//:smallvec",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+    ],
+)
+
+cargo_build_script(
+    name = "cranelift-codegen_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "gimli",
+        "host-arch",
+        "std",
+        "trace-log",
+        "unwind",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-codegen",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    visibility = ["//visibility:private"],
+    deps = [
+        "@cu__cranelift-codegen-meta-0.111.0//:cranelift_codegen_meta",
+        "@cu__cranelift-isle-0.111.0//:cranelift_isle",
+    ],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":cranelift-codegen_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.82.1.bazel
deleted file mode 100644
index 98f3b2a42..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-0.82.1.bazel
+++ /dev/null
@@ -1,103 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "cranelift_codegen_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "gimli",
-        "std",
-        "unwind",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.82.1",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cranelift_codegen_meta__0_82_1//:cranelift_codegen_meta",
-    ],
-)
-
-# Unsupported target "x64-evex-encoding" with type "bench" omitted
-
-rust_library(
-    name = "cranelift_codegen",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "gimli",
-        "std",
-        "unwind",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-codegen",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        ":cranelift_codegen_build_script",
-        "@wasmtime__cranelift_bforest__0_82_1//:cranelift_bforest",
-        "@wasmtime__cranelift_codegen_shared__0_82_1//:cranelift_codegen_shared",
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-        "@wasmtime__gimli__0_26_1//:gimli",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__regalloc__0_0_34//:regalloc",
-        "@wasmtime__smallvec__1_8_0//:smallvec",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.111.0.bazel
new file mode 100644
index 000000000..9ccb599a1
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.111.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_codegen_meta",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-codegen-meta",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-codegen-shared-0.111.0//:cranelift_codegen_shared",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.82.1.bazel
deleted file mode 100644
index 650fee915..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-meta-0.82.1.bazel
+++ /dev/null
@@ -1,55 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_codegen_meta",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-codegen-meta",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_codegen_shared__0_82_1//:cranelift_codegen_shared",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.111.0.bazel
new file mode 100644
index 000000000..8820100ff
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.111.0.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_codegen_shared",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-codegen-shared",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.82.1.bazel
deleted file mode 100644
index 7ba69253e..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-codegen-shared-0.82.1.bazel
+++ /dev/null
@@ -1,54 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_codegen_shared",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-codegen-shared",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-control-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-control-0.111.0.bazel
new file mode 100644
index 000000000..51c64ada2
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-control-0.111.0.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_control",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "fuzz",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-control",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__arbitrary-1.3.2//:arbitrary",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.111.0.bazel
new file mode 100644
index 000000000..f59f1f47b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.111.0.bazel
@@ -0,0 +1,56 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_entity",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "enable-serde",
+        "serde",
+        "serde_derive",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-entity",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-bitset-0.111.0//:cranelift_bitset",
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.82.1.bazel
deleted file mode 100644
index 6461eba90..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-entity-0.82.1.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_entity",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "enable-serde",
-        "serde",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-entity",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__serde__1_0_136//:serde",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.111.0.bazel
new file mode 100644
index 000000000..b1ae57324
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.111.0.bazel
@@ -0,0 +1,54 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_frontend",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-frontend",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-codegen-0.111.0//:cranelift_codegen",
+        "@cu__log-0.4.22//:log",
+        "@cu__smallvec-1.13.2//:smallvec",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.82.1.bazel
deleted file mode 100644
index 121b6a3eb..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-frontend-0.82.1.bazel
+++ /dev/null
@@ -1,60 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_frontend",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-frontend",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_codegen__0_82_1//:cranelift_codegen",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__smallvec__1_8_0//:smallvec",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-isle-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-isle-0.111.0.bazel
new file mode 100644
index 000000000..687a5406a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-isle-0.111.0.bazel
@@ -0,0 +1,95 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_isle",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-isle",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-isle-0.111.0//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "cranelift-isle_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-isle",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":cranelift-isle_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.111.0.bazel
new file mode 100644
index 000000000..c6b0a99f0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.111.0.bazel
@@ -0,0 +1,60 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_native",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-native",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-codegen-0.111.0//:cranelift_codegen",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+    ] + select({
+        "@rules_rust//rust/platform:riscv64gc-unknown-none-elf": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_arch = "s390x", target_arch = "riscv64"))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_arch = "s390x", target_arch = "riscv64"))
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.82.1.bazel
deleted file mode 100644
index c7ca0614c..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-native-0.82.1.bazel
+++ /dev/null
@@ -1,68 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_native",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-native",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_codegen__0_82_1//:cranelift_codegen",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-    ] + selects.with_or({
-        # cfg(target_arch = "s390x")
-        (
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.111.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.111.0.bazel
new file mode 100644
index 000000000..38d4bb412
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.111.0.bazel
@@ -0,0 +1,58 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "cranelift_wasm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=cranelift-wasm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.111.0",
+    deps = [
+        "@cu__cranelift-codegen-0.111.0//:cranelift_codegen",
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+        "@cu__cranelift-frontend-0.111.0//:cranelift_frontend",
+        "@cu__itertools-0.12.1//:itertools",
+        "@cu__log-0.4.22//:log",
+        "@cu__smallvec-1.13.2//:smallvec",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+        "@cu__wasmtime-types-24.0.0//:wasmtime_types",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.82.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.82.1.bazel
deleted file mode 100644
index 61b351774..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.cranelift-wasm-0.82.1.bazel
+++ /dev/null
@@ -1,66 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "cranelift_wasm",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=cranelift-wasm",
-        "manual",
-    ],
-    version = "0.82.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_codegen__0_82_1//:cranelift_codegen",
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-        "@wasmtime__cranelift_frontend__0_82_1//:cranelift_frontend",
-        "@wasmtime__itertools__0_10_3//:itertools",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__smallvec__1_8_0//:smallvec",
-        "@wasmtime__wasmparser__0_83_0//:wasmparser",
-        "@wasmtime__wasmtime_types__0_35_1//:wasmtime_types",
-    ],
-)
-
-# Unsupported target "wasm_testsuite" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.3.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.3.2.bazel
deleted file mode 100644
index 128a07730..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.3.2.bazel
+++ /dev/null
@@ -1,91 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "crc32fast_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.3.2",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "crc32fast",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=crc32fast",
-        "manual",
-    ],
-    version = "1.3.2",
-    # buildifier: leave-alone
-    deps = [
-        ":crc32fast_build_script",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.4.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.4.2.bazel
new file mode 100644
index 000000000..063a0afb7
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.crc32fast-1.4.2.bazel
@@ -0,0 +1,50 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "crc32fast",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=crc32fast",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.4.2",
+    deps = [
+        "@cu__cfg-if-1.0.0//:cfg_if",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.either-1.13.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.either-1.13.0.bazel
new file mode 100644
index 000000000..043006849
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.either-1.13.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "either",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "use_std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=either",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.13.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.either-1.6.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.either-1.6.1.bazel
deleted file mode 100644
index 051360647..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.either-1.6.1.bazel
+++ /dev/null
@@ -1,54 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "either",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=either",
-        "manual",
-    ],
-    version = "1.6.1",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.embedded-io-0.4.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.embedded-io-0.4.0.bazel
new file mode 100644
index 000000000..c9ef73301
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.embedded-io-0.4.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "embedded_io",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=embedded-io",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.10.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.10.2.bazel
new file mode 100644
index 000000000..ce9eb6262
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.10.2.bazel
@@ -0,0 +1,58 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "env_logger",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "auto-color",
+        "color",
+        "default",
+        "humantime",
+        "regex",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=env_logger",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.10.2",
+    deps = [
+        "@cu__humantime-2.1.0//:humantime",
+        "@cu__is-terminal-0.4.12//:is_terminal",
+        "@cu__log-0.4.22//:log",
+        "@cu__regex-1.10.5//:regex",
+        "@cu__termcolor-1.4.1//:termcolor",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.8.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.8.4.bazel
deleted file mode 100644
index ca3ce977a..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.env_logger-0.8.4.bazel
+++ /dev/null
@@ -1,72 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "env_logger",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "atty",
-        "default",
-        "humantime",
-        "regex",
-        "termcolor",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=env_logger",
-        "manual",
-    ],
-    version = "0.8.4",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__atty__0_2_14//:atty",
-        "@wasmtime__humantime__2_1_0//:humantime",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__regex__1_5_5//:regex",
-        "@wasmtime__termcolor__1_1_3//:termcolor",
-    ],
-)
-
-# Unsupported target "init-twice-retains-filter" with type "test" omitted
-
-# Unsupported target "log-in-log" with type "test" omitted
-
-# Unsupported target "log_tls_dtors" with type "test" omitted
-
-# Unsupported target "regexp_filter" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.equivalent-1.0.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.equivalent-1.0.1.bazel
new file mode 100644
index 000000000..c3be9a81d
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.equivalent-1.0.1.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "equivalent",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=equivalent",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.1",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.errno-0.2.8.bazel b/bazel/cargo/wasmtime/remote/BUILD.errno-0.2.8.bazel
deleted file mode 100644
index 53d140f8c..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.errno-0.2.8.bazel
+++ /dev/null
@@ -1,89 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "errno",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=errno",
-        "manual",
-    ],
-    version = "0.2.8",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-            "@rules_rust//rust/platform:wasm32-wasi",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.errno-0.3.9.bazel b/bazel/cargo/wasmtime/remote/BUILD.errno-0.3.9.bazel
new file mode 100644
index 000000000..904e5aba0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.errno-0.3.9.bazel
@@ -0,0 +1,134 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "errno",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=errno",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.3.9",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(target_os = "wasi")
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(unix)
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.errno-dragonfly-0.1.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.errno-dragonfly-0.1.2.bazel
deleted file mode 100644
index 7fbaaf0ee..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.errno-dragonfly-0.1.2.bazel
+++ /dev/null
@@ -1,86 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "errno_dragonfly_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.1.2",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cc__1_0_73//:cc",
-    ],
-)
-
-rust_library(
-    name = "errno_dragonfly",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=errno-dragonfly",
-        "manual",
-    ],
-    version = "0.1.2",
-    # buildifier: leave-alone
-    deps = [
-        ":errno_dragonfly_build_script",
-        "@wasmtime__libc__0_2_119//:libc",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.2.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.2.0.bazel
deleted file mode 100644
index d43820ced..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.2.0.bazel
+++ /dev/null
@@ -1,55 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "fallible_iterator",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=fallible-iterator",
-        "manual",
-    ],
-    version = "0.2.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.3.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.3.0.bazel
new file mode 100644
index 000000000..b2bdbf6fc
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.fallible-iterator-0.3.0.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "fallible_iterator",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=fallible-iterator",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.3.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.getrandom-0.2.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.getrandom-0.2.5.bazel
deleted file mode 100644
index edfe9eb6c..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.getrandom-0.2.5.bazel
+++ /dev/null
@@ -1,97 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "mod" with type "bench" omitted
-
-rust_library(
-    name = "getrandom",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=getrandom",
-        "manual",
-    ],
-    version = "0.2.5",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-    ] + selects.with_or({
-        # cfg(target_os = "wasi")
-        (
-            "@rules_rust//rust/platform:wasm32-wasi",
-        ): [
-            "@wasmtime__wasi__0_10_2_wasi_snapshot_preview1//:wasi",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-# Unsupported target "custom" with type "test" omitted
-
-# Unsupported target "normal" with type "test" omitted
-
-# Unsupported target "rdrand" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.gimli-0.26.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.gimli-0.26.1.bazel
deleted file mode 100644
index e449bfc35..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.gimli-0.26.1.bazel
+++ /dev/null
@@ -1,78 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-# Unsupported target "dwarf-validate" with type "example" omitted
-
-# Unsupported target "dwarfdump" with type "example" omitted
-
-# Unsupported target "simple" with type "example" omitted
-
-# Unsupported target "simple_line" with type "example" omitted
-
-rust_library(
-    name = "gimli",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "fallible-iterator",
-        "indexmap",
-        "read",
-        "read-core",
-        "stable_deref_trait",
-        "std",
-        "write",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=gimli",
-        "manual",
-    ],
-    version = "0.26.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__fallible_iterator__0_2_0//:fallible_iterator",
-        "@wasmtime__indexmap__1_8_0//:indexmap",
-        "@wasmtime__stable_deref_trait__1_2_0//:stable_deref_trait",
-    ],
-)
-
-# Unsupported target "convert_self" with type "test" omitted
-
-# Unsupported target "parse_self" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.gimli-0.29.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.gimli-0.29.0.bazel
new file mode 100644
index 000000000..852f5bdee
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.gimli-0.29.0.bazel
@@ -0,0 +1,53 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "gimli",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "read",
+        "read-core",
+        "std",
+        "write",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=gimli",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.29.0",
+    deps = [
+        "@cu__indexmap-2.3.0//:indexmap",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.11.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.11.2.bazel
deleted file mode 100644
index 1cc30e2cf..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.11.2.bazel
+++ /dev/null
@@ -1,65 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "hashbrown",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "raw",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=hashbrown",
-        "manual",
-    ],
-    version = "0.11.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "hasher" with type "test" omitted
-
-# Unsupported target "rayon" with type "test" omitted
-
-# Unsupported target "serde" with type "test" omitted
-
-# Unsupported target "set" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.13.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.13.2.bazel
new file mode 100644
index 000000000..4bcf220d3
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.13.2.bazel
@@ -0,0 +1,52 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "hashbrown",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "ahash",
+        "default",
+        "inline-more",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=hashbrown",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.13.2",
+    deps = [
+        "@cu__ahash-0.8.11//:ahash",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.14.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.14.5.bazel
new file mode 100644
index 000000000..921bfbbea
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.hashbrown-0.14.5.bazel
@@ -0,0 +1,53 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "hashbrown",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "ahash",
+        "raw",
+        "serde",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=hashbrown",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.14.5",
+    deps = [
+        "@cu__ahash-0.8.11//:ahash",
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.heck-0.4.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.heck-0.4.1.bazel
new file mode 100644
index 000000000..5f94cda10
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.heck-0.4.1.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "heck",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=heck",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.1",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.1.19.bazel b/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.1.19.bazel
deleted file mode 100644
index d0bf22754..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.1.19.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "hermit_abi",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=hermit-abi",
-        "manual",
-    ],
-    version = "0.1.19",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__libc__0_2_119//:libc",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.3.9.bazel b/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.3.9.bazel
new file mode 100644
index 000000000..75dff9155
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.hermit-abi-0.3.9.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "hermit_abi",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=hermit-abi",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.3.9",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.humantime-2.1.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.humantime-2.1.0.bazel
index 162d7370b..d1691cafd 100644
--- a/bazel/cargo/wasmtime/remote/BUILD.humantime-2.1.0.bazel
+++ b/bazel/cargo/wasmtime/remote/BUILD.humantime-2.1.0.bazel
@@ -1,58 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "datetime_format" with type "bench" omitted
-
-# Unsupported target "datetime_parse" with type "bench" omitted
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "humantime",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2018",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=humantime",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "2.1.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
diff --git a/bazel/cargo/wasmtime/remote/BUILD.id-arena-2.2.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.id-arena-2.2.1.bazel
new file mode 100644
index 000000000..1248a97fb
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.id-arena-2.2.1.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "id_arena",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=id-arena",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.2.1",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.indexmap-1.8.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.indexmap-1.8.0.bazel
deleted file mode 100644
index b0f1acbfd..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.indexmap-1.8.0.bazel
+++ /dev/null
@@ -1,105 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "indexmap_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "serde",
-        "serde-1",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.8.0",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__autocfg__1_1_0//:autocfg",
-    ],
-)
-
-# Unsupported target "bench" with type "bench" omitted
-
-# Unsupported target "faststring" with type "bench" omitted
-
-rust_library(
-    name = "indexmap",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "serde",
-        "serde-1",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=indexmap",
-        "manual",
-    ],
-    version = "1.8.0",
-    # buildifier: leave-alone
-    deps = [
-        ":indexmap_build_script",
-        "@wasmtime__hashbrown__0_11_2//:hashbrown",
-        "@wasmtime__serde__1_0_136//:serde",
-    ],
-)
-
-# Unsupported target "equivalent_trait" with type "test" omitted
-
-# Unsupported target "macros_full_path" with type "test" omitted
-
-# Unsupported target "quick" with type "test" omitted
-
-# Unsupported target "tests" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.indexmap-2.3.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.indexmap-2.3.0.bazel
new file mode 100644
index 000000000..07d4be633
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.indexmap-2.3.0.bazel
@@ -0,0 +1,54 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "indexmap",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "serde",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=indexmap",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.3.0",
+    deps = [
+        "@cu__equivalent-1.0.1//:equivalent",
+        "@cu__hashbrown-0.14.5//:hashbrown",
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.io-lifetimes-0.5.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.io-lifetimes-0.5.3.bazel
deleted file mode 100644
index 711157c37..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.io-lifetimes-0.5.3.bazel
+++ /dev/null
@@ -1,102 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR (Apache-2.0 OR MIT)"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "io_lifetimes_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.5.3",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "easy-conversions" with type "example" omitted
-
-# Unsupported target "flexible-apis" with type "example" omitted
-
-# Unsupported target "hello" with type "example" omitted
-
-# Unsupported target "owning-wrapper" with type "example" omitted
-
-# Unsupported target "portable-views" with type "example" omitted
-
-rust_library(
-    name = "io_lifetimes",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=io-lifetimes",
-        "manual",
-    ],
-    version = "0.5.3",
-    # buildifier: leave-alone
-    deps = [
-        ":io_lifetimes_build_script",
-    ],
-)
-
-# Unsupported target "api" with type "test" omitted
-
-# Unsupported target "assumptions" with type "test" omitted
-
-# Unsupported target "ffi" with type "test" omitted
-
-# Unsupported target "niche-optimizations" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.is-terminal-0.4.12.bazel b/bazel/cargo/wasmtime/remote/BUILD.is-terminal-0.4.12.bazel
new file mode 100644
index 000000000..84a3f0fb0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.is-terminal-0.4.12.bazel
@@ -0,0 +1,131 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "is_terminal",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=is-terminal",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.12",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(unix, target_os = "wasi"))
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.itertools-0.10.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.itertools-0.10.3.bazel
deleted file mode 100644
index cf8c4ca3e..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.itertools-0.10.3.bazel
+++ /dev/null
@@ -1,98 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "bench1" with type "bench" omitted
-
-# Unsupported target "combinations" with type "bench" omitted
-
-# Unsupported target "combinations_with_replacement" with type "bench" omitted
-
-# Unsupported target "fold_specialization" with type "bench" omitted
-
-# Unsupported target "powerset" with type "bench" omitted
-
-# Unsupported target "tree_fold1" with type "bench" omitted
-
-# Unsupported target "tuple_combinations" with type "bench" omitted
-
-# Unsupported target "tuples" with type "bench" omitted
-
-# Unsupported target "iris" with type "example" omitted
-
-rust_library(
-    name = "itertools",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "use_alloc",
-        "use_std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=itertools",
-        "manual",
-    ],
-    version = "0.10.3",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__either__1_6_1//:either",
-    ],
-)
-
-# Unsupported target "adaptors_no_collect" with type "test" omitted
-
-# Unsupported target "flatten_ok" with type "test" omitted
-
-# Unsupported target "macros_hygiene" with type "test" omitted
-
-# Unsupported target "merge_join" with type "test" omitted
-
-# Unsupported target "peeking_take_while" with type "test" omitted
-
-# Unsupported target "quick" with type "test" omitted
-
-# Unsupported target "specializations" with type "test" omitted
-
-# Unsupported target "test_core" with type "test" omitted
-
-# Unsupported target "test_std" with type "test" omitted
-
-# Unsupported target "tuples" with type "test" omitted
-
-# Unsupported target "zip" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.itertools-0.12.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.itertools-0.12.1.bazel
new file mode 100644
index 000000000..6578e4624
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.itertools-0.12.1.bazel
@@ -0,0 +1,52 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "itertools",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "use_alloc",
+        "use_std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=itertools",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.12.1",
+    deps = [
+        "@cu__either-1.13.0//:either",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.itoa-1.0.11.bazel b/bazel/cargo/wasmtime/remote/BUILD.itoa-1.0.11.bazel
new file mode 100644
index 000000000..71c5cae88
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.itoa-1.0.11.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "itoa",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=itoa",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.11",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.lazy_static-1.4.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.lazy_static-1.4.0.bazel
deleted file mode 100644
index 28cacc564..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.lazy_static-1.4.0.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "lazy_static",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=lazy_static",
-        "manual",
-    ],
-    version = "1.4.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "no_std" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.leb128-0.2.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.leb128-0.2.5.bazel
new file mode 100644
index 000000000..12f06a0c6
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.leb128-0.2.5.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "leb128",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=leb128",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.5",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.119.bazel b/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.119.bazel
deleted file mode 100644
index 778ffbcda..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.119.bazel
+++ /dev/null
@@ -1,92 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "libc_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "extra_traits",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.2.119",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "libc",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "extra_traits",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=libc",
-        "manual",
-    ],
-    version = "0.2.119",
-    # buildifier: leave-alone
-    deps = [
-        ":libc_build_script",
-    ],
-)
-
-# Unsupported target "const_fn" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.155.bazel b/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.155.bazel
new file mode 100644
index 000000000..07f451864
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.libc-0.2.155.bazel
@@ -0,0 +1,203 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "libc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "extra_traits",  # aarch64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "extra_traits",  # aarch64-apple-ios
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "extra_traits",  # aarch64-apple-ios-sim
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "extra_traits",  # aarch64-fuchsia
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "extra_traits",  # aarch64-linux-android
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "extra_traits",  # aarch64-unknown-nto-qnx710
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "extra_traits",  # armv7-linux-androideabi
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "extra_traits",  # i686-apple-darwin
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "extra_traits",  # i686-linux-android
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "extra_traits",  # i686-unknown-freebsd
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "extra_traits",  # powerpc-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "extra_traits",  # s390x-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "extra_traits",  # x86_64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "extra_traits",  # x86_64-apple-ios
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "extra_traits",  # x86_64-fuchsia
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "extra_traits",  # x86_64-linux-android
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "extra_traits",  # x86_64-unknown-freebsd
+        ],
+        "//conditions:default": [],
+    }),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.155",
+    deps = [
+        "@cu__libc-0.2.155//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "libc_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+        "std",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "extra_traits",  # aarch64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "extra_traits",  # aarch64-apple-ios
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "extra_traits",  # aarch64-apple-ios-sim
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "extra_traits",  # aarch64-fuchsia
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "extra_traits",  # aarch64-linux-android
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "extra_traits",  # aarch64-unknown-nto-qnx710
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "extra_traits",  # armv7-linux-androideabi
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "extra_traits",  # i686-apple-darwin
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "extra_traits",  # i686-linux-android
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "extra_traits",  # i686-unknown-freebsd
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "extra_traits",  # powerpc-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "extra_traits",  # s390x-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "extra_traits",  # x86_64-apple-darwin
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "extra_traits",  # x86_64-apple-ios
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "extra_traits",  # x86_64-fuchsia
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "extra_traits",  # x86_64-linux-android
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "extra_traits",  # x86_64-unknown-freebsd
+        ],
+        "//conditions:default": [],
+    }),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.155",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":libc_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.libm-0.2.8.bazel b/bazel/cargo/wasmtime/remote/BUILD.libm-0.2.8.bazel
new file mode 100644
index 000000000..cf70de29c
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.libm-0.2.8.bazel
@@ -0,0 +1,95 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "libm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.8",
+    deps = [
+        "@cu__libm-0.2.8//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "libm_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=libm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.8",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":libm_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.0.42.bazel b/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.0.42.bazel
deleted file mode 100644
index 9aa497183..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.0.42.bazel
+++ /dev/null
@@ -1,59 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR (Apache-2.0 OR MIT)"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "linux_raw_sys",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "errno",
-        "general",
-        "ioctl",
-        "no_std",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=linux-raw-sys",
-        "manual",
-    ],
-    version = "0.0.42",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.4.14.bazel b/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.4.14.bazel
new file mode 100644
index 000000000..733fee359
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.linux-raw-sys-0.4.14.bazel
@@ -0,0 +1,79 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "linux_raw_sys",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "general",
+        "ioctl",
+        "no_std",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "elf",  # aarch64-unknown-linux-gnu
+            "errno",  # aarch64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "elf",  # aarch64-unknown-nixos-gnu
+            "errno",  # aarch64-unknown-nixos-gnu
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "elf",  # arm-unknown-linux-gnueabi
+            "errno",  # arm-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "elf",  # armv7-unknown-linux-gnueabi
+            "errno",  # armv7-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "elf",  # i686-unknown-linux-gnu
+            "errno",  # i686-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "elf",  # x86_64-unknown-linux-gnu
+            "errno",  # x86_64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "elf",  # x86_64-unknown-nixos-gnu
+            "errno",  # x86_64-unknown-nixos-gnu
+        ],
+        "//conditions:default": [],
+    }),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=linux-raw-sys",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.14",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.log-0.4.14.bazel b/bazel/cargo/wasmtime/remote/BUILD.log-0.4.14.bazel
deleted file mode 100644
index 38a9c611f..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.log-0.4.14.bazel
+++ /dev/null
@@ -1,93 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "log_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.4.14",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "value" with type "bench" omitted
-
-rust_library(
-    name = "log",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=log",
-        "manual",
-    ],
-    version = "0.4.14",
-    # buildifier: leave-alone
-    deps = [
-        ":log_build_script",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-    ],
-)
-
-# Unsupported target "filters" with type "test" omitted
-
-# Unsupported target "macros" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.log-0.4.22.bazel b/bazel/cargo/wasmtime/remote/BUILD.log-0.4.22.bazel
new file mode 100644
index 000000000..7afd4d234
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.log-0.4.22.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "log",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=log",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.22",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.mach-0.3.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.mach-0.3.2.bazel
deleted file mode 100644
index 8391a5ff0..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.mach-0.3.2.bazel
+++ /dev/null
@@ -1,71 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "restricted",  # BSD-2-Clause from expression "BSD-2-Clause"
-])
-
-# Generated Targets
-
-# Unsupported target "dump_process_registers" with type "example" omitted
-
-rust_library(
-    name = "mach",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=mach",
-        "manual",
-    ],
-    version = "0.3.2",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(any(target_os = "macos", target_os = "ios"))
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.mach2-0.4.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.mach2-0.4.2.bazel
new file mode 100644
index 000000000..6c5f412cc
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.mach2-0.4.2.bazel
@@ -0,0 +1,68 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "mach2",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=mach2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.2",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "macos", target_os = "ios"))
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.memchr-2.4.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.memchr-2.4.1.bazel
deleted file mode 100644
index eeecd0e64..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.memchr-2.4.1.bazel
+++ /dev/null
@@ -1,88 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # Unlicense from expression "Unlicense OR MIT"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "memchr_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "2.4.1",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "memchr",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=memchr",
-        "manual",
-    ],
-    version = "2.4.1",
-    # buildifier: leave-alone
-    deps = [
-        ":memchr_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.memchr-2.7.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.memchr-2.7.4.bazel
new file mode 100644
index 000000000..bee4bd07c
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.memchr-2.7.4.bazel
@@ -0,0 +1,48 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "memchr",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=memchr",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.7.4",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.memfd-0.6.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.memfd-0.6.4.bazel
new file mode 100644
index 000000000..db840ec0d
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.memfd-0.6.4.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "memfd",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=memfd",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.6.4",
+    deps = [
+        "@cu__rustix-0.38.34//:rustix",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.memoffset-0.6.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.memoffset-0.6.5.bazel
deleted file mode 100644
index 0c4b891cc..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.memoffset-0.6.5.bazel
+++ /dev/null
@@ -1,87 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "memoffset_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.6.5",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__autocfg__1_1_0//:autocfg",
-    ],
-)
-
-rust_library(
-    name = "memoffset",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=memoffset",
-        "manual",
-    ],
-    version = "0.6.5",
-    # buildifier: leave-alone
-    deps = [
-        ":memoffset_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.miniz_oxide-0.4.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.miniz_oxide-0.4.4.bazel
deleted file mode 100644
index 734d45524..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.miniz_oxide-0.4.4.bazel
+++ /dev/null
@@ -1,86 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR (Zlib OR Apache-2.0)"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "miniz_oxide_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.4.4",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__autocfg__1_1_0//:autocfg",
-    ],
-)
-
-rust_library(
-    name = "miniz_oxide",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=miniz_oxide",
-        "manual",
-    ],
-    version = "0.4.4",
-    # buildifier: leave-alone
-    deps = [
-        ":miniz_oxide_build_script",
-        "@wasmtime__adler__1_0_2//:adler",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.more-asserts-0.2.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.more-asserts-0.2.2.bazel
deleted file mode 100644
index 123327069..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.more-asserts-0.2.2.bazel
+++ /dev/null
@@ -1,54 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # CC0-1.0 from expression "CC0-1.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "more_asserts",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=more-asserts",
-        "manual",
-    ],
-    version = "0.2.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.object-0.27.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.object-0.27.1.bazel
deleted file mode 100644
index 1c37a3e1e..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.object-0.27.1.bazel
+++ /dev/null
@@ -1,73 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "object",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "archive",
-        "coff",
-        "crc32fast",
-        "elf",
-        "indexmap",
-        "macho",
-        "pe",
-        "read_core",
-        "std",
-        "unaligned",
-        "write",
-        "write_core",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=object",
-        "manual",
-    ],
-    version = "0.27.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__crc32fast__1_3_2//:crc32fast",
-        "@wasmtime__indexmap__1_8_0//:indexmap",
-        "@wasmtime__memchr__2_4_1//:memchr",
-    ],
-)
-
-# Unsupported target "integration" with type "test" omitted
-
-# Unsupported target "parse_self" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.object-0.36.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.object-0.36.2.bazel
new file mode 100644
index 000000000..11133ca1e
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.object-0.36.2.bazel
@@ -0,0 +1,62 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "object",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "coff",
+        "elf",
+        "macho",
+        "pe",
+        "read_core",
+        "std",
+        "write",
+        "write_core",
+        "write_std",
+        "xcoff",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=object",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.36.2",
+    deps = [
+        "@cu__crc32fast-1.4.2//:crc32fast",
+        "@cu__hashbrown-0.14.5//:hashbrown",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__memchr-2.7.4//:memchr",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.10.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.10.0.bazel
deleted file mode 100644
index df9306375..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.10.0.bazel
+++ /dev/null
@@ -1,74 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "example" omitted
-
-# Unsupported target "bench_acquire" with type "example" omitted
-
-# Unsupported target "bench_vs_lazy_static" with type "example" omitted
-
-# Unsupported target "lazy_static" with type "example" omitted
-
-# Unsupported target "reentrant_init_deadlocks" with type "example" omitted
-
-# Unsupported target "regex" with type "example" omitted
-
-# Unsupported target "test_synchronization" with type "example" omitted
-
-rust_library(
-    name = "once_cell",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "alloc",
-        "default",
-        "race",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=once_cell",
-        "manual",
-    ],
-    version = "1.10.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "it" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.19.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.19.0.bazel
new file mode 100644
index 000000000..d4155cdc0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.once_cell-1.19.0.bazel
@@ -0,0 +1,50 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "once_cell",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "default",
+        "race",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=once_cell",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.19.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.15.bazel b/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.15.bazel
new file mode 100644
index 000000000..aa2c97e31
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.15.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "paste",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=paste",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.15",
+    deps = [
+        "@cu__paste-1.0.15//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "paste_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=paste",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.15",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":paste_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.6.bazel
deleted file mode 100644
index 5e5c49e88..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.paste-1.0.6.bazel
+++ /dev/null
@@ -1,64 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_proc_macro(
-    name = "paste",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=paste",
-        "manual",
-    ],
-    version = "1.0.6",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test_attr" with type "test" omitted
-
-# Unsupported target "test_doc" with type "test" omitted
-
-# Unsupported target "test_expr" with type "test" omitted
-
-# Unsupported target "test_item" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.pin-project-lite-0.2.14.bazel b/bazel/cargo/wasmtime/remote/BUILD.pin-project-lite-0.2.14.bazel
new file mode 100644
index 000000000..65aba34bd
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.pin-project-lite-0.2.14.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "pin_project_lite",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=pin-project-lite",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.14",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.postcard-1.0.8.bazel b/bazel/cargo/wasmtime/remote/BUILD.postcard-1.0.8.bazel
new file mode 100644
index 000000000..d3af18cb4
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.postcard-1.0.8.bazel
@@ -0,0 +1,54 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "postcard",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "embedded-io",
+        "use-std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=postcard",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.8",
+    deps = [
+        "@cu__cobs-0.2.3//:cobs",
+        "@cu__embedded-io-0.4.0//:embedded_io",
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.ppv-lite86-0.2.16.bazel b/bazel/cargo/wasmtime/remote/BUILD.ppv-lite86-0.2.16.bazel
deleted file mode 100644
index 1f3e2d8de..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.ppv-lite86-0.2.16.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "ppv_lite86",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "simd",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=ppv-lite86",
-        "manual",
-    ],
-    version = "0.2.16",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.36.bazel b/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.36.bazel
deleted file mode 100644
index ab2480f0f..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.36.bazel
+++ /dev/null
@@ -1,99 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "proc_macro2_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.36",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "proc_macro2",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=proc-macro2",
-        "manual",
-    ],
-    version = "1.0.36",
-    # buildifier: leave-alone
-    deps = [
-        ":proc_macro2_build_script",
-        "@wasmtime__unicode_xid__0_2_2//:unicode_xid",
-    ],
-)
-
-# Unsupported target "comments" with type "test" omitted
-
-# Unsupported target "features" with type "test" omitted
-
-# Unsupported target "marker" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
-
-# Unsupported target "test_fmt" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.86.bazel b/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.86.bazel
new file mode 100644
index 000000000..f5ffa7899
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.proc-macro2-1.0.86.bazel
@@ -0,0 +1,98 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "proc_macro2",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=proc-macro2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:build_script_build",
+        "@cu__unicode-ident-1.0.12//:unicode_ident",
+    ],
+)
+
+cargo_build_script(
+    name = "proc-macro2_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=proc-macro2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.86",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":proc-macro2_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.17.bazel b/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.17.bazel
deleted file mode 100644
index 284f26934..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.17.bazel
+++ /dev/null
@@ -1,101 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "psm_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.1.17",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cc__1_0_73//:cc",
-    ],
-)
-
-# Unsupported target "info" with type "example" omitted
-
-# Unsupported target "on_stack_fibo" with type "example" omitted
-
-# Unsupported target "on_stack_fibo_alloc_each_frame" with type "example" omitted
-
-# Unsupported target "panics" with type "example" omitted
-
-# Unsupported target "replace_stack_1" with type "example" omitted
-
-# Unsupported target "thread" with type "example" omitted
-
-rust_library(
-    name = "psm",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=psm",
-        "manual",
-    ],
-    version = "0.1.17",
-    # buildifier: leave-alone
-    deps = [
-        ":psm_build_script",
-    ],
-)
-
-# Unsupported target "stack_direction" with type "test" omitted
-
-# Unsupported target "stack_direction_2" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.21.bazel b/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.21.bazel
new file mode 100644
index 000000000..ec02d2243
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.psm-0.1.21.bazel
@@ -0,0 +1,92 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "psm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=psm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.21",
+    deps = [
+        "@cu__psm-0.1.21//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "psm_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=psm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.21",
+    visibility = ["//visibility:private"],
+    deps = [
+        "@cu__cc-1.1.7//:cc",
+    ],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":psm_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.15.bazel b/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.15.bazel
deleted file mode 100644
index f83b9dc24..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.15.bazel
+++ /dev/null
@@ -1,61 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "quote",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "proc-macro",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=quote",
-        "manual",
-    ],
-    version = "1.0.15",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__proc_macro2__1_0_36//:proc_macro2",
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.36.bazel b/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.36.bazel
new file mode 100644
index 000000000..3ad108f8f
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.quote-1.0.36.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "quote",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+        "proc-macro",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=quote",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.36",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rand-0.8.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.rand-0.8.5.bazel
deleted file mode 100644
index 993e290be..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.rand-0.8.5.bazel
+++ /dev/null
@@ -1,88 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "rand",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "alloc",
-        "default",
-        "getrandom",
-        "libc",
-        "rand_chacha",
-        "std",
-        "std_rng",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=rand",
-        "manual",
-    ],
-    version = "0.8.5",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__rand_chacha__0_3_1//:rand_chacha",
-        "@wasmtime__rand_core__0_6_3//:rand_core",
-    ] + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rand_chacha-0.3.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.rand_chacha-0.3.1.bazel
deleted file mode 100644
index 9fdf44b28..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.rand_chacha-0.3.1.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "rand_chacha",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=rand_chacha",
-        "manual",
-    ],
-    version = "0.3.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__ppv_lite86__0_2_16//:ppv_lite86",
-        "@wasmtime__rand_core__0_6_3//:rand_core",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rand_core-0.6.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.rand_core-0.6.3.bazel
deleted file mode 100644
index 6447e4832..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.rand_core-0.6.3.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "rand_core",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "alloc",
-        "getrandom",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=rand_core",
-        "manual",
-    ],
-    version = "0.6.3",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__getrandom__0_2_5//:getrandom",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regalloc-0.0.34.bazel b/bazel/cargo/wasmtime/remote/BUILD.regalloc-0.0.34.bazel
deleted file mode 100644
index d76108a0a..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.regalloc-0.0.34.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "regalloc",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=regalloc",
-        "manual",
-    ],
-    version = "0.0.34",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__rustc_hash__1_1_0//:rustc_hash",
-        "@wasmtime__smallvec__1_8_0//:smallvec",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regalloc2-0.9.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.regalloc2-0.9.3.bazel
new file mode 100644
index 000000000..cbd3ed5fd
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.regalloc2-0.9.3.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "regalloc2",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "checker",
+        "default",
+        "std",
+        "trace-log",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=regalloc2",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.9.3",
+    deps = [
+        "@cu__hashbrown-0.13.2//:hashbrown",
+        "@cu__log-0.4.22//:log",
+        "@cu__rustc-hash-1.1.0//:rustc_hash",
+        "@cu__slice-group-by-0.3.1//:slice_group_by",
+        "@cu__smallvec-1.13.2//:smallvec",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regex-1.10.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.regex-1.10.5.bazel
new file mode 100644
index 000000000..efdf89bd0
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.regex-1.10.5.bazel
@@ -0,0 +1,60 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "regex",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "perf",
+        "perf-backtrack",
+        "perf-cache",
+        "perf-dfa",
+        "perf-inline",
+        "perf-literal",
+        "perf-onepass",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=regex",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.10.5",
+    deps = [
+        "@cu__aho-corasick-1.1.3//:aho_corasick",
+        "@cu__memchr-2.7.4//:memchr",
+        "@cu__regex-automata-0.4.7//:regex_automata",
+        "@cu__regex-syntax-0.8.4//:regex_syntax",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regex-1.5.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.regex-1.5.5.bazel
deleted file mode 100644
index 0d24833b0..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.regex-1.5.5.bazel
+++ /dev/null
@@ -1,95 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "shootout-regex-dna" with type "example" omitted
-
-# Unsupported target "shootout-regex-dna-bytes" with type "example" omitted
-
-# Unsupported target "shootout-regex-dna-cheat" with type "example" omitted
-
-# Unsupported target "shootout-regex-dna-replace" with type "example" omitted
-
-# Unsupported target "shootout-regex-dna-single" with type "example" omitted
-
-# Unsupported target "shootout-regex-dna-single-cheat" with type "example" omitted
-
-rust_library(
-    name = "regex",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "aho-corasick",
-        "memchr",
-        "perf",
-        "perf-cache",
-        "perf-dfa",
-        "perf-inline",
-        "perf-literal",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=regex",
-        "manual",
-    ],
-    version = "1.5.5",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__aho_corasick__0_7_18//:aho_corasick",
-        "@wasmtime__memchr__2_4_1//:memchr",
-        "@wasmtime__regex_syntax__0_6_25//:regex_syntax",
-    ],
-)
-
-# Unsupported target "backtrack" with type "test" omitted
-
-# Unsupported target "backtrack-bytes" with type "test" omitted
-
-# Unsupported target "backtrack-utf8bytes" with type "test" omitted
-
-# Unsupported target "crates-regex" with type "test" omitted
-
-# Unsupported target "default" with type "test" omitted
-
-# Unsupported target "default-bytes" with type "test" omitted
-
-# Unsupported target "nfa" with type "test" omitted
-
-# Unsupported target "nfa-bytes" with type "test" omitted
-
-# Unsupported target "nfa-utf8bytes" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regex-automata-0.4.7.bazel b/bazel/cargo/wasmtime/remote/BUILD.regex-automata-0.4.7.bazel
new file mode 100644
index 000000000..da56abc92
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.regex-automata-0.4.7.bazel
@@ -0,0 +1,64 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "regex_automata",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "dfa-onepass",
+        "hybrid",
+        "meta",
+        "nfa-backtrack",
+        "nfa-pikevm",
+        "nfa-thompson",
+        "perf-inline",
+        "perf-literal",
+        "perf-literal-multisubstring",
+        "perf-literal-substring",
+        "std",
+        "syntax",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=regex-automata",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.4.7",
+    deps = [
+        "@cu__aho-corasick-1.1.3//:aho_corasick",
+        "@cu__memchr-2.7.4//:memchr",
+        "@cu__regex-syntax-0.8.4//:regex_syntax",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.6.25.bazel b/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.6.25.bazel
deleted file mode 100644
index b04c80e3c..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.6.25.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "regex_syntax",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=regex-syntax",
-        "manual",
-    ],
-    version = "0.6.25",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.8.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.8.4.bazel
new file mode 100644
index 000000000..36b411c94
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.regex-syntax-0.8.4.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "regex_syntax",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=regex-syntax",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.8.4",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.region-2.2.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.region-2.2.0.bazel
deleted file mode 100644
index 934a832b0..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.region-2.2.0.bazel
+++ /dev/null
@@ -1,79 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "region",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=region",
-        "manual",
-    ],
-    version = "2.2.0",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__bitflags__1_3_2//:bitflags",
-        "@wasmtime__libc__0_2_119//:libc",
-    ] + selects.with_or({
-        # cfg(any(target_os = "macos", target_os = "ios"))
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-        ): [
-            "@wasmtime__mach__0_3_2//:mach",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rustc-demangle-0.1.21.bazel b/bazel/cargo/wasmtime/remote/BUILD.rustc-demangle-0.1.21.bazel
deleted file mode 100644
index 2b062d029..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.rustc-demangle-0.1.21.bazel
+++ /dev/null
@@ -1,54 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "rustc_demangle",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=rustc-demangle",
-        "manual",
-    ],
-    version = "0.1.21",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rustc-hash-1.1.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.rustc-hash-1.1.0.bazel
index 0f07a4bc7..4892ae611 100644
--- a/bazel/cargo/wasmtime/remote/BUILD.rustc-hash-1.1.0.bazel
+++ b/bazel/cargo/wasmtime/remote/BUILD.rustc-hash-1.1.0.bazel
@@ -1,56 +1,48 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR MIT"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "rustc_hash",
-    srcs = glob(["**/*.rs"]),
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_features = [
         "default",
         "std",
     ],
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=rustc-hash",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "1.1.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rustix-0.33.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.rustix-0.33.4.bazel
deleted file mode 100644
index 624ee4e22..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.rustix-0.33.4.bazel
+++ /dev/null
@@ -1,212 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR (Apache-2.0 OR MIT)"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "rustix_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "io-lifetimes",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-        "--cfg=feature=\"cc\"",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.33.4",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cc__1_0_73//:cc",
-    ] + selects.with_or({
-        # cfg(all(not(rustix_use_libc), target_os = "linux", any(target_arch = "x86", all(target_arch = "x86_64", not(target_pointer_width = "32")), target_arch = "arm", target_arch = "aarch64", target_arch = "powerpc64", target_arch = "riscv64", target_arch = "mips", target_arch = "mips64")))
-        (
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-        ): [
-            "@wasmtime__linux_raw_sys__0_0_42//:linux_raw_sys",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(any(rustix_use_libc, not(all(target_os = "linux", any(target_arch = "x86", all(target_arch = "x86_64", not(target_pointer_width = "32")), target_arch = "arm", target_arch = "aarch64", target_arch = "powerpc64", target_arch = "riscv64", target_arch = "mips", target_arch = "mips64")))))
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:wasm32-unknown-unknown",
-            "@rules_rust//rust/platform:wasm32-wasi",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-# Unsupported target "mod" with type "bench" omitted
-
-# Unsupported target "dup2_to_replace_stdio" with type "example" omitted
-
-# Unsupported target "hello" with type "example" omitted
-
-# Unsupported target "process" with type "example" omitted
-
-# Unsupported target "stdio" with type "example" omitted
-
-# Unsupported target "time" with type "example" omitted
-
-rust_library(
-    name = "rustix",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "default",
-        "io-lifetimes",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-        "--cfg=feature=\"cc\"",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=rustix",
-        "manual",
-    ],
-    version = "0.33.4",
-    # buildifier: leave-alone
-    deps = [
-        ":rustix_build_script",
-        "@wasmtime__bitflags__1_3_2//:bitflags",
-        "@wasmtime__io_lifetimes__0_5_3//:io_lifetimes",
-    ] + selects.with_or({
-        # cfg(all(not(rustix_use_libc), target_os = "linux", any(target_arch = "x86", all(target_arch = "x86_64", not(target_pointer_width = "32")), target_arch = "arm", target_arch = "aarch64", target_arch = "powerpc64", target_arch = "riscv64", target_arch = "mips", target_arch = "mips64")))
-        (
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-        ): [
-            "@wasmtime__linux_raw_sys__0_0_42//:linux_raw_sys",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(any(rustix_use_libc, not(all(target_os = "linux", any(target_arch = "x86", all(target_arch = "x86_64", not(target_pointer_width = "32")), target_arch = "arm", target_arch = "aarch64", target_arch = "powerpc64", target_arch = "riscv64", target_arch = "mips", target_arch = "mips64")))))
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:wasm32-unknown-unknown",
-            "@rules_rust//rust/platform:wasm32-wasi",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmtime__errno__0_2_8//:errno",
-            "@wasmtime__libc__0_2_119//:libc",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-# Unsupported target "backends" with type "test" omitted
-
-# Unsupported target "fs" with type "test" omitted
-
-# Unsupported target "io" with type "test" omitted
-
-# Unsupported target "net" with type "test" omitted
-
-# Unsupported target "path" with type "test" omitted
-
-# Unsupported target "process" with type "test" omitted
-
-# Unsupported target "rand" with type "test" omitted
-
-# Unsupported target "thread" with type "test" omitted
-
-# Unsupported target "time" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.rustix-0.38.34.bazel b/bazel/cargo/wasmtime/remote/BUILD.rustix-0.38.34.bazel
new file mode 100644
index 000000000..8cde617b3
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.rustix-0.38.34.bazel
@@ -0,0 +1,385 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "rustix",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    aliases = select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:aarch64-apple-ios": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:aarch64-fuchsia": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:aarch64-linux-android": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(windows)
+        },
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:armv7-linux-androideabi": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:i686-apple-darwin": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:i686-linux-android": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(windows)
+        },
+        "@rules_rust//rust/platform:i686-unknown-freebsd": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:riscv32imc-unknown-none-elf": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:riscv64gc-unknown-none-elf": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:thumbv7em-none-eabi": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:thumbv8m.main-none-eabi": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:wasm32-unknown-unknown": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:wasm32-wasi": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-apple-darwin": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-apple-ios": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-fuchsia": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-linux-android": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(windows)
+        },
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "@rules_rust//rust/platform:x86_64-unknown-none": {
+            "@cu__errno-0.3.9//:errno": "libc_errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        },
+        "//conditions:default": {},
+    }),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "default",
+        "libc-extra-traits",
+        "mm",
+        "std",
+        "use-libc-auxv",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "fs",  # aarch64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "fs",  # aarch64-unknown-nixos-gnu
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "fs",  # arm-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "fs",  # armv7-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "fs",  # i686-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "fs",  # powerpc-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "fs",  # s390x-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "fs",  # x86_64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "fs",  # x86_64-unknown-nixos-gnu
+        ],
+        "//conditions:default": [],
+    }),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=rustix",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.38.34",
+    deps = [
+        "@cu__bitflags-2.6.0//:bitflags",
+        "@cu__rustix-0.38.34//:build_script_build",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__errno-0.3.9//:errno",  # cfg(windows)
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__errno-0.3.9//:errno",  # cfg(windows)
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:riscv32imc-unknown-none-elf": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:riscv64gc-unknown-none-elf": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:thumbv7em-none-eabi": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:thumbv8m.main-none-eabi": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:wasm32-unknown-unknown": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:wasm32-wasi": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(any(target_os = "android", target_os = "linux"), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__errno-0.3.9//:errno",  # cfg(windows)
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__linux-raw-sys-0.4.14//:linux_raw_sys",  # cfg(all(not(rustix_use_libc), not(miri), target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64"))))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-none": [
+            "@cu__errno-0.3.9//:errno",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+            "@cu__libc-0.2.155//:libc",  # cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = "linux", target_endian = "little", any(target_arch = "arm", all(target_arch = "aarch64", target_pointer_width = "64"), target_arch = "riscv64", all(rustix_use_experimental_asm, target_arch = "powerpc64"), all(rustix_use_experimental_asm, target_arch = "mips"), all(rustix_use_experimental_asm, target_arch = "mips32r6"), all(rustix_use_experimental_asm, target_arch = "mips64"), all(rustix_use_experimental_asm, target_arch = "mips64r6"), target_arch = "x86", all(target_arch = "x86_64", target_pointer_width = "64")))))))
+        ],
+        "//conditions:default": [],
+    }),
+)
+
+cargo_build_script(
+    name = "rustix_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "alloc",
+        "default",
+        "libc-extra-traits",
+        "mm",
+        "std",
+        "use-libc-auxv",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "fs",  # aarch64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "fs",  # aarch64-unknown-nixos-gnu
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "fs",  # arm-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "fs",  # armv7-unknown-linux-gnueabi
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "fs",  # i686-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "fs",  # powerpc-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "fs",  # s390x-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "fs",  # x86_64-unknown-linux-gnu
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "fs",  # x86_64-unknown-nixos-gnu
+        ],
+        "//conditions:default": [],
+    }),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=rustix",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.38.34",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":rustix_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.ryu-1.0.18.bazel b/bazel/cargo/wasmtime/remote/BUILD.ryu-1.0.18.bazel
new file mode 100644
index 000000000..59399d34a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.ryu-1.0.18.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "ryu",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=ryu",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.18",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.semver-1.0.23.bazel b/bazel/cargo/wasmtime/remote/BUILD.semver-1.0.23.bazel
new file mode 100644
index 000000000..cb1d7f86c
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.semver-1.0.23.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "semver",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=semver",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.23",
+    deps = [
+        "@cu__semver-1.0.23//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "semver_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=semver",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.23",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":semver_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.136.bazel b/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.136.bazel
deleted file mode 100644
index 311d8f4c9..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.136.bazel
+++ /dev/null
@@ -1,95 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "serde_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-        "derive",
-        "serde_derive",
-        "std",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.136",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "serde",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "derive",
-        "serde_derive",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    proc_macro_deps = [
-        "@wasmtime__serde_derive__1_0_136//:serde_derive",
-    ],
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=serde",
-        "manual",
-    ],
-    version = "1.0.136",
-    # buildifier: leave-alone
-    deps = [
-        ":serde_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.204.bazel b/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.204.bazel
new file mode 100644
index 000000000..7e417ffd9
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.serde-1.0.204.bazel
@@ -0,0 +1,104 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "serde",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "alloc",
+        "derive",
+        "serde_derive",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=serde",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.204",
+    deps = [
+        "@cu__serde-1.0.204//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "serde_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "alloc",
+        "derive",
+        "serde_derive",
+        "std",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=serde",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.204",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":serde_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.136.bazel b/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.136.bazel
deleted file mode 100644
index 5ee849c35..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.136.bazel
+++ /dev/null
@@ -1,89 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "serde_derive_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.136",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_proc_macro(
-    name = "serde_derive",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=serde_derive",
-        "manual",
-    ],
-    version = "1.0.136",
-    # buildifier: leave-alone
-    deps = [
-        ":serde_derive_build_script",
-        "@wasmtime__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmtime__quote__1_0_15//:quote",
-        "@wasmtime__syn__1_0_87//:syn",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.204.bazel b/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.204.bazel
new file mode 100644
index 000000000..ef5fe8588
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.serde_derive-1.0.204.bazel
@@ -0,0 +1,52 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "serde_derive",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=serde_derive",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.204",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.serde_json-1.0.120.bazel b/bazel/cargo/wasmtime/remote/BUILD.serde_json-1.0.120.bazel
new file mode 100644
index 000000000..108736275
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.serde_json-1.0.120.bazel
@@ -0,0 +1,92 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "serde_json",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=serde_json",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.120",
+    deps = [
+        "@cu__itoa-1.0.11//:itoa",
+        "@cu__ryu-1.0.18//:ryu",
+        "@cu__serde-1.0.204//:serde",
+        "@cu__serde_json-1.0.120//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "serde_json_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=serde_json",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.120",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":serde_json_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.slice-group-by-0.3.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.slice-group-by-0.3.1.bazel
new file mode 100644
index 000000000..8f7e3cdc9
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.slice-group-by-0.3.1.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "slice_group_by",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=slice-group-by",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.3.1",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.13.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.13.2.bazel
new file mode 100644
index 000000000..d6bcdee92
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.13.2.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "smallvec",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "serde",
+        "union",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=smallvec",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.13.2",
+    deps = [
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.8.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.8.0.bazel
deleted file mode 100644
index 734404e4a..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.smallvec-1.8.0.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "bench" with type "bench" omitted
-
-rust_library(
-    name = "smallvec",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=smallvec",
-        "manual",
-    ],
-    version = "1.8.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "macro" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.sptr-0.3.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.sptr-0.3.2.bazel
new file mode 100644
index 000000000..e4da3ae80
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.sptr-0.3.2.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "sptr",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=sptr",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.3.2",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.stable_deref_trait-1.2.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.stable_deref_trait-1.2.0.bazel
index 584db4e50..3bce00c61 100644
--- a/bazel/cargo/wasmtime/remote/BUILD.stable_deref_trait-1.2.0.bazel
+++ b/bazel/cargo/wasmtime/remote/BUILD.stable_deref_trait-1.2.0.bazel
@@ -1,56 +1,44 @@
-"""
-@generated
-cargo-raze crate build file.
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
 
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
+load("@rules_rust//rust:defs.bzl", "rust_library")
 
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
+package(default_visibility = ["//visibility:public"])
 
 rust_library(
     name = "stable_deref_trait",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "alloc",
-        "std",
-    ],
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
     crate_root = "src/lib.rs",
-    data = [],
     edition = "2015",
     rustc_flags = [
         "--cap-lints=allow",
     ],
     tags = [
-        "cargo-raze",
+        "cargo-bazel",
         "crate-name=stable_deref_trait",
         "manual",
+        "noclippy",
+        "norustfmt",
     ],
     version = "1.2.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
 )
diff --git a/bazel/cargo/wasmtime/remote/BUILD.syn-1.0.87.bazel b/bazel/cargo/wasmtime/remote/BUILD.syn-1.0.87.bazel
deleted file mode 100644
index ccb29e57a..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.syn-1.0.87.bazel
+++ /dev/null
@@ -1,159 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "syn_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "clone-impls",
-        "default",
-        "derive",
-        "parsing",
-        "printing",
-        "proc-macro",
-        "quote",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "1.0.87",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "file" with type "bench" omitted
-
-# Unsupported target "rust" with type "bench" omitted
-
-rust_library(
-    name = "syn",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "clone-impls",
-        "default",
-        "derive",
-        "parsing",
-        "printing",
-        "proc-macro",
-        "quote",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=syn",
-        "manual",
-    ],
-    version = "1.0.87",
-    # buildifier: leave-alone
-    deps = [
-        ":syn_build_script",
-        "@wasmtime__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmtime__quote__1_0_15//:quote",
-        "@wasmtime__unicode_xid__0_2_2//:unicode_xid",
-    ],
-)
-
-# Unsupported target "regression" with type "test" omitted
-
-# Unsupported target "test_asyncness" with type "test" omitted
-
-# Unsupported target "test_attribute" with type "test" omitted
-
-# Unsupported target "test_derive_input" with type "test" omitted
-
-# Unsupported target "test_expr" with type "test" omitted
-
-# Unsupported target "test_generics" with type "test" omitted
-
-# Unsupported target "test_grouping" with type "test" omitted
-
-# Unsupported target "test_ident" with type "test" omitted
-
-# Unsupported target "test_item" with type "test" omitted
-
-# Unsupported target "test_iterators" with type "test" omitted
-
-# Unsupported target "test_lit" with type "test" omitted
-
-# Unsupported target "test_meta" with type "test" omitted
-
-# Unsupported target "test_parse_buffer" with type "test" omitted
-
-# Unsupported target "test_parse_stream" with type "test" omitted
-
-# Unsupported target "test_pat" with type "test" omitted
-
-# Unsupported target "test_path" with type "test" omitted
-
-# Unsupported target "test_precedence" with type "test" omitted
-
-# Unsupported target "test_receiver" with type "test" omitted
-
-# Unsupported target "test_round_trip" with type "test" omitted
-
-# Unsupported target "test_shebang" with type "test" omitted
-
-# Unsupported target "test_should_parse" with type "test" omitted
-
-# Unsupported target "test_size" with type "test" omitted
-
-# Unsupported target "test_stmt" with type "test" omitted
-
-# Unsupported target "test_token_trees" with type "test" omitted
-
-# Unsupported target "test_ty" with type "test" omitted
-
-# Unsupported target "test_visibility" with type "test" omitted
-
-# Unsupported target "zzz_stable" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.syn-2.0.72.bazel b/bazel/cargo/wasmtime/remote/BUILD.syn-2.0.72.bazel
new file mode 100644
index 000000000..acacb26fd
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.syn-2.0.72.bazel
@@ -0,0 +1,60 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "syn",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "clone-impls",
+        "default",
+        "derive",
+        "extra-traits",
+        "full",
+        "parsing",
+        "printing",
+        "proc-macro",
+        "visit-mut",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=syn",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "2.0.72",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__unicode-ident-1.0.12//:unicode_ident",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.16.bazel b/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.16.bazel
new file mode 100644
index 000000000..200965695
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.16.bazel
@@ -0,0 +1,95 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "target_lexicon",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=target-lexicon",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.12.16",
+    deps = [
+        "@cu__target-lexicon-0.12.16//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "target-lexicon_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "default",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=target-lexicon",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.12.16",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":target-lexicon_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.3.bazel
deleted file mode 100644
index c4767d0a5..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.target-lexicon-0.12.3.bazel
+++ /dev/null
@@ -1,90 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "target_lexicon_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.12.3",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-# Unsupported target "host" with type "example" omitted
-
-# Unsupported target "misc" with type "example" omitted
-
-rust_library(
-    name = "target_lexicon",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=target-lexicon",
-        "manual",
-    ],
-    version = "0.12.3",
-    # buildifier: leave-alone
-    deps = [
-        ":target_lexicon_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.1.3.bazel b/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.1.3.bazel
deleted file mode 100644
index 2e9f4307a..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.1.3.bazel
+++ /dev/null
@@ -1,65 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # Unlicense from expression "Unlicense OR MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "termcolor",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=termcolor",
-        "manual",
-    ],
-    version = "1.1.3",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi_util__0_1_5//:winapi_util",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.4.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.4.1.bazel
new file mode 100644
index 000000000..ccdaaf3f8
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.termcolor-1.4.1.bazel
@@ -0,0 +1,56 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "termcolor",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=termcolor",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.4.1",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__winapi-util-0.1.8//:winapi_util",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__winapi-util-0.1.8//:winapi_util",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__winapi-util-0.1.8//:winapi_util",  # cfg(windows)
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.30.bazel b/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.30.bazel
deleted file mode 100644
index d6c042ae0..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.30.bazel
+++ /dev/null
@@ -1,81 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "thiserror",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    proc_macro_deps = [
-        "@wasmtime__thiserror_impl__1_0_30//:thiserror_impl",
-    ],
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=thiserror",
-        "manual",
-    ],
-    version = "1.0.30",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "compiletest" with type "test" omitted
-
-# Unsupported target "test_backtrace" with type "test" omitted
-
-# Unsupported target "test_display" with type "test" omitted
-
-# Unsupported target "test_error" with type "test" omitted
-
-# Unsupported target "test_expr" with type "test" omitted
-
-# Unsupported target "test_from" with type "test" omitted
-
-# Unsupported target "test_generics" with type "test" omitted
-
-# Unsupported target "test_lints" with type "test" omitted
-
-# Unsupported target "test_option" with type "test" omitted
-
-# Unsupported target "test_path" with type "test" omitted
-
-# Unsupported target "test_source" with type "test" omitted
-
-# Unsupported target "test_transparent" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.63.bazel b/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.63.bazel
new file mode 100644
index 000000000..075c39ee8
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.thiserror-1.0.63.bazel
@@ -0,0 +1,92 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "thiserror",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__thiserror-impl-1.0.63//:thiserror_impl",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    deps = [
+        "@cu__thiserror-1.0.63//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "thiserror_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":thiserror_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.30.bazel b/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.30.bazel
deleted file mode 100644
index c9cfb24af..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.30.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-rust_proc_macro(
-    name = "thiserror_impl",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=thiserror-impl",
-        "manual",
-    ],
-    version = "1.0.30",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmtime__quote__1_0_15//:quote",
-        "@wasmtime__syn__1_0_87//:syn",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.63.bazel b/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.63.bazel
new file mode 100644
index 000000000..827631585
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.thiserror-impl-1.0.63.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "thiserror_impl",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=thiserror-impl",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.63",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.tracing-0.1.40.bazel b/bazel/cargo/wasmtime/remote/BUILD.tracing-0.1.40.bazel
new file mode 100644
index 000000000..e8bbf2590
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.tracing-0.1.40.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "tracing",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "attributes",
+        "default",
+        "std",
+        "tracing-attributes",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    proc_macro_deps = [
+        "@cu__tracing-attributes-0.1.27//:tracing_attributes",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=tracing",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.40",
+    deps = [
+        "@cu__pin-project-lite-0.2.14//:pin_project_lite",
+        "@cu__tracing-core-0.1.32//:tracing_core",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.tracing-attributes-0.1.27.bazel b/bazel/cargo/wasmtime/remote/BUILD.tracing-attributes-0.1.27.bazel
new file mode 100644
index 000000000..8dc144d30
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.tracing-attributes-0.1.27.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "tracing_attributes",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=tracing-attributes",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.27",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.tracing-core-0.1.32.bazel b/bazel/cargo/wasmtime/remote/BUILD.tracing-core-0.1.32.bazel
new file mode 100644
index 000000000..cd5b7378b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.tracing-core-0.1.32.bazel
@@ -0,0 +1,51 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "tracing_core",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "once_cell",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=tracing-core",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.32",
+    deps = [
+        "@cu__once_cell-1.19.0//:once_cell",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.unicode-ident-1.0.12.bazel b/bazel/cargo/wasmtime/remote/BUILD.unicode-ident-1.0.12.bazel
new file mode 100644
index 000000000..e21e8cd07
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.unicode-ident-1.0.12.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "unicode_ident",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=unicode-ident",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "1.0.12",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.2.bazel b/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.2.bazel
deleted file mode 100644
index 4f3bb923c..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.2.bazel
+++ /dev/null
@@ -1,59 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "xid" with type "bench" omitted
-
-rust_library(
-    name = "unicode_xid",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=unicode-xid",
-        "manual",
-    ],
-    version = "0.2.2",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
-
-# Unsupported target "exhaustive_tests" with type "test" omitted
diff --git a/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.4.bazel b/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.4.bazel
new file mode 100644
index 000000000..a8b5dda0b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.unicode-xid-0.2.4.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "unicode_xid",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=unicode-xid",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.2.4",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.version_check-0.9.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.version_check-0.9.5.bazel
new file mode 100644
index 000000000..e24cea268
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.version_check-0.9.5.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "version_check",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2015",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=version_check",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.9.5",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel
deleted file mode 100644
index 1c0bde1e7..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasi-0.10.2+wasi-snapshot-preview1.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0 OR (Apache-2.0 OR MIT)"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasi",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "default",
-        "std",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasi",
-        "manual",
-    ],
-    version = "0.10.2+wasi-snapshot-preview1",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasm-encoder-0.215.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasm-encoder-0.215.0.bazel
new file mode 100644
index 000000000..e24ef2076
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasm-encoder-0.215.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasm_encoder",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasm-encoder",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.215.0",
+    deps = [
+        "@cu__leb128-0.2.5//:leb128",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.215.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.215.0.bazel
new file mode 100644
index 000000000..3f3d22eb9
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.215.0.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmparser",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "serde",
+        "std",
+        "validate",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmparser",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.215.0",
+    deps = [
+        "@cu__ahash-0.8.11//:ahash",
+        "@cu__bitflags-2.6.0//:bitflags",
+        "@cu__hashbrown-0.14.5//:hashbrown",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__semver-1.0.23//:semver",
+        "@cu__serde-1.0.204//:serde",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.83.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.83.0.bazel
deleted file mode 100644
index 7f37d9630..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmparser-0.83.0.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-# Unsupported target "benchmark" with type "bench" omitted
-
-# Unsupported target "simple" with type "example" omitted
-
-rust_library(
-    name = "wasmparser",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmparser",
-        "manual",
-    ],
-    version = "0.83.0",
-    # buildifier: leave-alone
-    deps = [
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmprinter-0.215.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmprinter-0.215.0.bazel
new file mode 100644
index 000000000..5ee382b0f
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmprinter-0.215.0.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmprinter",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmprinter",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.215.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__termcolor-1.4.1//:termcolor",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-0.35.1.bazel
deleted file mode 100644
index 68589c980..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-0.35.1.bazel
+++ /dev/null
@@ -1,129 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "wasmtime_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "cranelift",
-        "wasmtime-cranelift",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.35.1",
-    visibility = ["//visibility:private"],
-    deps = [
-    ] + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-rust_library(
-    name = "wasmtime",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "cranelift",
-        "wasmtime-cranelift",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    proc_macro_deps = [
-        "@wasmtime__paste__1_0_6//:paste",
-    ],
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        ":wasmtime_build_script",
-        "@wasmtime__anyhow__1_0_56//:anyhow",
-        "@wasmtime__backtrace__0_3_64//:backtrace",
-        "@wasmtime__bincode__1_3_3//:bincode",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-        "@wasmtime__indexmap__1_8_0//:indexmap",
-        "@wasmtime__lazy_static__1_4_0//:lazy_static",
-        "@wasmtime__libc__0_2_119//:libc",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__object__0_27_1//:object",
-        "@wasmtime__once_cell__1_10_0//:once_cell",
-        "@wasmtime__psm__0_1_17//:psm",
-        "@wasmtime__region__2_2_0//:region",
-        "@wasmtime__serde__1_0_136//:serde",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-        "@wasmtime__wasmparser__0_83_0//:wasmparser",
-        "@wasmtime__wasmtime_cranelift__0_35_1//:wasmtime_cranelift",
-        "@wasmtime__wasmtime_environ__0_35_1//:wasmtime_environ",
-        "@wasmtime__wasmtime_jit__0_35_1//:wasmtime_jit",
-        "@wasmtime__wasmtime_runtime__0_35_1//:wasmtime_runtime",
-    ] + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-24.0.0.bazel
new file mode 100644
index 000000000..1f77ab476
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-24.0.0.bazel
@@ -0,0 +1,230 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "cranelift",
+        "gc",
+        "runtime",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__paste-1.0.15//:paste",
+        "@cu__serde_derive-1.0.204//:serde_derive",
+        "@cu__wasmtime-versioned-export-macros-24.0.0//:wasmtime_versioned_export_macros",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__bitflags-2.6.0//:bitflags",
+        "@cu__bumpalo-3.16.0//:bumpalo",
+        "@cu__cfg-if-1.0.0//:cfg_if",
+        "@cu__hashbrown-0.14.5//:hashbrown",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__libc-0.2.155//:libc",
+        "@cu__libm-0.2.8//:libm",
+        "@cu__log-0.4.22//:log",
+        "@cu__object-0.36.2//:object",
+        "@cu__once_cell-1.19.0//:once_cell",
+        "@cu__postcard-1.0.8//:postcard",
+        "@cu__serde-1.0.204//:serde",
+        "@cu__smallvec-1.13.2//:smallvec",
+        "@cu__sptr-0.3.2//:sptr",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+        "@cu__wasmtime-24.0.0//:build_script_build",
+        "@cu__wasmtime-asm-macros-24.0.0//:wasmtime_asm_macros",
+        "@cu__wasmtime-cranelift-24.0.0//:wasmtime_cranelift",
+        "@cu__wasmtime-environ-24.0.0//:wasmtime_environ",
+        "@cu__wasmtime-jit-icache-coherence-24.0.0//:wasmtime_jit_icache_coherence",
+        "@cu__wasmtime-slab-24.0.0//:wasmtime_slab",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__mach2-0.4.2//:mach2",  # cfg(target_os = "macos")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-apple-ios-sim": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-fuchsia": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__mach2-0.4.2//:mach2",  # cfg(target_os = "macos")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__psm-0.1.21//:psm",  # cfg(target_arch = "s390x")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__mach2-0.4.2//:mach2",  # cfg(target_os = "macos")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-ios": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-fuchsia": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__memfd-0.6.4//:memfd",  # cfg(target_os = "linux")
+            "@cu__rustix-0.38.34//:rustix",  # cfg(unix)
+        ],
+        "//conditions:default": [],
+    }),
+)
+
+cargo_build_script(
+    name = "wasmtime_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_features = [
+        "cranelift",
+        "gc",
+        "runtime",
+        "std",
+    ],
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__wasmtime-versioned-export-macros-24.0.0//:wasmtime_versioned_export_macros",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    visibility = ["//visibility:private"],
+    deps = [
+        "@cu__cc-1.1.7//:cc",
+    ],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":wasmtime_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-asm-macros-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-asm-macros-24.0.0.bazel
new file mode 100644
index 000000000..d90c660db
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-asm-macros-24.0.0.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_asm_macros",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-asm-macros",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__cfg-if-1.0.0//:cfg_if",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-0.19.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-0.19.0.bazel
deleted file mode 100644
index d5e19072f..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-0.19.0.bazel
+++ /dev/null
@@ -1,56 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "restricted",  # no license
-])
-
-# Generated Targets
-
-rust_proc_macro(
-    name = "wasmtime_c_api_macros",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "crates/c-api/macros/src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-c-api-macros",
-        "manual",
-    ],
-    version = "0.19.0",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__proc_macro2__1_0_36//:proc_macro2",
-        "@wasmtime__quote__1_0_15//:quote",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-24.0.0.bazel
new file mode 100644
index 000000000..735e52d30
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-c-api-macros-24.0.0.bazel
@@ -0,0 +1,48 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "wasmtime_c_api_macros",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-c-api-macros",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-macro-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-macro-24.0.0.bazel
new file mode 100644
index 000000000..5e50e4fc8
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-macro-24.0.0.bazel
@@ -0,0 +1,96 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "wasmtime_component_macro",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-component-macro",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+        "@cu__wasmtime-component-macro-24.0.0//:build_script_build",
+        "@cu__wasmtime-component-util-24.0.0//:wasmtime_component_util",
+        "@cu__wasmtime-wit-bindgen-24.0.0//:wasmtime_wit_bindgen",
+        "@cu__wit-parser-0.215.0//:wit_parser",
+    ],
+)
+
+cargo_build_script(
+    name = "wasmtime-component-macro_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-component-macro",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":wasmtime-component-macro_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-util-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-util-24.0.0.bazel
new file mode 100644
index 000000000..9823cd36b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-component-util-24.0.0.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_component_util",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-component-util",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-0.35.1.bazel
deleted file mode 100644
index 564ebb738..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-0.35.1.bazel
+++ /dev/null
@@ -1,68 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasmtime_cranelift",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-cranelift",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__anyhow__1_0_56//:anyhow",
-        "@wasmtime__cranelift_codegen__0_82_1//:cranelift_codegen",
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-        "@wasmtime__cranelift_frontend__0_82_1//:cranelift_frontend",
-        "@wasmtime__cranelift_native__0_82_1//:cranelift_native",
-        "@wasmtime__cranelift_wasm__0_82_1//:cranelift_wasm",
-        "@wasmtime__gimli__0_26_1//:gimli",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__more_asserts__0_2_2//:more_asserts",
-        "@wasmtime__object__0_27_1//:object",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-        "@wasmtime__thiserror__1_0_30//:thiserror",
-        "@wasmtime__wasmparser__0_83_0//:wasmparser",
-        "@wasmtime__wasmtime_environ__0_35_1//:wasmtime_environ",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-24.0.0.bazel
new file mode 100644
index 000000000..4687bb7c8
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-cranelift-24.0.0.bazel
@@ -0,0 +1,67 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_cranelift",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "gc",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__wasmtime-versioned-export-macros-24.0.0//:wasmtime_versioned_export_macros",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-cranelift",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__cfg-if-1.0.0//:cfg_if",
+        "@cu__cranelift-codegen-0.111.0//:cranelift_codegen",
+        "@cu__cranelift-control-0.111.0//:cranelift_control",
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+        "@cu__cranelift-frontend-0.111.0//:cranelift_frontend",
+        "@cu__cranelift-native-0.111.0//:cranelift_native",
+        "@cu__cranelift-wasm-0.111.0//:cranelift_wasm",
+        "@cu__gimli-0.29.0//:gimli",
+        "@cu__log-0.4.22//:log",
+        "@cu__object-0.36.2//:object",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+        "@cu__thiserror-1.0.63//:thiserror",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+        "@cu__wasmtime-environ-24.0.0//:wasmtime_environ",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-0.35.1.bazel
deleted file mode 100644
index 24b3da798..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-0.35.1.bazel
+++ /dev/null
@@ -1,66 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasmtime_environ",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-environ",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__anyhow__1_0_56//:anyhow",
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-        "@wasmtime__gimli__0_26_1//:gimli",
-        "@wasmtime__indexmap__1_8_0//:indexmap",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__more_asserts__0_2_2//:more_asserts",
-        "@wasmtime__object__0_27_1//:object",
-        "@wasmtime__serde__1_0_136//:serde",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-        "@wasmtime__thiserror__1_0_30//:thiserror",
-        "@wasmtime__wasmparser__0_83_0//:wasmparser",
-        "@wasmtime__wasmtime_types__0_35_1//:wasmtime_types",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-24.0.0.bazel
new file mode 100644
index 000000000..879839848
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-environ-24.0.0.bazel
@@ -0,0 +1,68 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_environ",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "compile",
+        "gc",
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-environ",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__cranelift-bitset-0.111.0//:cranelift_bitset",
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+        "@cu__gimli-0.29.0//:gimli",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__log-0.4.22//:log",
+        "@cu__object-0.36.2//:object",
+        "@cu__postcard-1.0.8//:postcard",
+        "@cu__serde-1.0.204//:serde",
+        "@cu__target-lexicon-0.12.16//:target_lexicon",
+        "@cu__wasm-encoder-0.215.0//:wasm_encoder",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+        "@cu__wasmprinter-0.215.0//:wasmprinter",
+        "@cu__wasmtime-types-24.0.0//:wasmtime_types",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-0.35.1.bazel
deleted file mode 100644
index 13c93c6c3..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-0.35.1.bazel
+++ /dev/null
@@ -1,93 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasmtime_jit",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-jit",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__addr2line__0_17_0//:addr2line",
-        "@wasmtime__anyhow__1_0_56//:anyhow",
-        "@wasmtime__bincode__1_3_3//:bincode",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-        "@wasmtime__cpp_demangle__0_3_5//:cpp_demangle",
-        "@wasmtime__gimli__0_26_1//:gimli",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__object__0_27_1//:object",
-        "@wasmtime__region__2_2_0//:region",
-        "@wasmtime__rustc_demangle__0_1_21//:rustc_demangle",
-        "@wasmtime__serde__1_0_136//:serde",
-        "@wasmtime__target_lexicon__0_12_3//:target_lexicon",
-        "@wasmtime__thiserror__1_0_30//:thiserror",
-        "@wasmtime__wasmtime_environ__0_35_1//:wasmtime_environ",
-        "@wasmtime__wasmtime_runtime__0_35_1//:wasmtime_runtime",
-    ] + selects.with_or({
-        # cfg(target_os = "linux")
-        (
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-        ): [
-            "@wasmtime__rustix__0_33_4//:rustix",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-debug-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-debug-0.35.1.bazel
deleted file mode 100644
index dee406b57..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-debug-0.35.1.bazel
+++ /dev/null
@@ -1,57 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasmtime_jit_debug",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "gdb_jit_int",
-        "lazy_static",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-jit-debug",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__lazy_static__1_4_0//:lazy_static",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-icache-coherence-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-icache-coherence-24.0.0.bazel
new file mode 100644
index 000000000..a1c3e8bdd
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-jit-icache-coherence-24.0.0.bazel
@@ -0,0 +1,113 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_jit_icache_coherence",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-jit-icache-coherence",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__cfg-if-1.0.0//:cfg_if",
+    ] + select({
+        "@rules_rust//rust/platform:aarch64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:aarch64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:arm-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:armv7-linux-androideabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:i686-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:i686-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:i686-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:powerpc-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:s390x-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:x86_64-apple-darwin": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:x86_64-linux-android": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(target_os = "windows")
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-freebsd": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__libc-0.2.155//:libc",  # cfg(any(target_os = "linux", target_os = "macos", target_os = "freebsd", target_os = "android"))
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-runtime-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-runtime-0.35.1.bazel
deleted file mode 100644
index 9a72b9723..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-runtime-0.35.1.bazel
+++ /dev/null
@@ -1,183 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "wasmtime_runtime_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.35.1",
-    visibility = ["//visibility:private"],
-    deps = [
-        "@wasmtime__cc__1_0_73//:cc",
-    ] + selects.with_or({
-        # cfg(target_os = "macos")
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-        ): [
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-        ],
-        "//conditions:default": [],
-    }),
-)
-
-rust_library(
-    name = "wasmtime_runtime",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-        "default",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-runtime",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        ":wasmtime_runtime_build_script",
-        "@wasmtime__anyhow__1_0_56//:anyhow",
-        "@wasmtime__backtrace__0_3_64//:backtrace",
-        "@wasmtime__cfg_if__1_0_0//:cfg_if",
-        "@wasmtime__indexmap__1_8_0//:indexmap",
-        "@wasmtime__libc__0_2_119//:libc",
-        "@wasmtime__log__0_4_14//:log",
-        "@wasmtime__memoffset__0_6_5//:memoffset",
-        "@wasmtime__more_asserts__0_2_2//:more_asserts",
-        "@wasmtime__rand__0_8_5//:rand",
-        "@wasmtime__region__2_2_0//:region",
-        "@wasmtime__thiserror__1_0_30//:thiserror",
-        "@wasmtime__wasmtime_environ__0_35_1//:wasmtime_environ",
-        "@wasmtime__wasmtime_jit_debug__0_35_1//:wasmtime_jit_debug",
-    ] + selects.with_or({
-        # cfg(target_os = "macos")
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-        ): [
-            "@wasmtime__mach__0_3_2//:mach",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(target_os = "windows")
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }) + selects.with_or({
-        # cfg(unix)
-        (
-            "@rules_rust//rust/platform:i686-apple-darwin",
-            "@rules_rust//rust/platform:i686-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-darwin",
-            "@rules_rust//rust/platform:x86_64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:aarch64-apple-darwin",
-            "@rules_rust//rust/platform:aarch64-apple-ios",
-            "@rules_rust//rust/platform:aarch64-linux-android",
-            "@rules_rust//rust/platform:aarch64-unknown-linux-gnu",
-            "@rules_rust//rust/platform:arm-unknown-linux-gnueabi",
-            "@rules_rust//rust/platform:i686-linux-android",
-            "@rules_rust//rust/platform:i686-unknown-freebsd",
-            "@rules_rust//rust/platform:powerpc-unknown-linux-gnu",
-            "@rules_rust//rust/platform:s390x-unknown-linux-gnu",
-            "@rules_rust//rust/platform:x86_64-apple-ios",
-            "@rules_rust//rust/platform:x86_64-linux-android",
-            "@rules_rust//rust/platform:x86_64-unknown-freebsd",
-        ): [
-            "@wasmtime__rustix__0_33_4//:rustix",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-slab-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-slab-24.0.0.bazel
new file mode 100644
index 000000000..6a2147b54
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-slab-24.0.0.bazel
@@ -0,0 +1,44 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_slab",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-slab",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-0.35.1.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-0.35.1.bazel
deleted file mode 100644
index 24d5f36d9..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-0.35.1.bazel
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # Apache-2.0 from expression "Apache-2.0"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "wasmtime_types",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=wasmtime-types",
-        "manual",
-    ],
-    version = "0.35.1",
-    # buildifier: leave-alone
-    deps = [
-        "@wasmtime__cranelift_entity__0_82_1//:cranelift_entity",
-        "@wasmtime__serde__1_0_136//:serde",
-        "@wasmtime__thiserror__1_0_30//:thiserror",
-        "@wasmtime__wasmparser__0_83_0//:wasmparser",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-24.0.0.bazel
new file mode 100644
index 000000000..4305c4a59
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-types-24.0.0.bazel
@@ -0,0 +1,57 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_types",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "std",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-types",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__cranelift-entity-0.111.0//:cranelift_entity",
+        "@cu__serde-1.0.204//:serde",
+        "@cu__smallvec-1.13.2//:smallvec",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-versioned-export-macros-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-versioned-export-macros-24.0.0.bazel
new file mode 100644
index 000000000..27dcf699a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-versioned-export-macros-24.0.0.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "wasmtime_versioned_export_macros",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-versioned-export-macros",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wasmtime-wit-bindgen-24.0.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-wit-bindgen-24.0.0.bazel
new file mode 100644
index 000000000..53a8655c1
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wasmtime-wit-bindgen-24.0.0.bazel
@@ -0,0 +1,50 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wasmtime_wit_bindgen",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wasmtime-wit-bindgen",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "24.0.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__heck-0.4.1//:heck",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__wit-parser-0.215.0//:wit_parser",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.winapi-0.3.9.bazel b/bazel/cargo/wasmtime/remote/BUILD.winapi-0.3.9.bazel
deleted file mode 100644
index 55dfd5cad..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.winapi-0.3.9.bazel
+++ /dev/null
@@ -1,122 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-        "basetsd",
-        "consoleapi",
-        "errhandlingapi",
-        "fileapi",
-        "handleapi",
-        "impl-default",
-        "memoryapi",
-        "minwinbase",
-        "minwindef",
-        "ntdef",
-        "processenv",
-        "std",
-        "sysinfoapi",
-        "winbase",
-        "wincon",
-        "winerror",
-        "winnt",
-        "ws2ipdef",
-        "ws2tcpip",
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.3.9",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "winapi",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-        "basetsd",
-        "consoleapi",
-        "errhandlingapi",
-        "fileapi",
-        "handleapi",
-        "impl-default",
-        "memoryapi",
-        "minwinbase",
-        "minwindef",
-        "ntdef",
-        "processenv",
-        "std",
-        "sysinfoapi",
-        "winbase",
-        "wincon",
-        "winerror",
-        "winnt",
-        "ws2ipdef",
-        "ws2tcpip",
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=winapi",
-        "manual",
-    ],
-    version = "0.3.9",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel
deleted file mode 100644
index 6cc4aaf22..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.winapi-i686-pc-windows-gnu-0.4.0.bazel
+++ /dev/null
@@ -1,84 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_i686_pc_windows_gnu_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.4.0",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "winapi_i686_pc_windows_gnu",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=winapi-i686-pc-windows-gnu",
-        "manual",
-    ],
-    version = "0.4.0",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_i686_pc_windows_gnu_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.5.bazel b/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.5.bazel
deleted file mode 100644
index 656930ec9..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.5.bazel
+++ /dev/null
@@ -1,65 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "unencumbered",  # Unlicense from expression "Unlicense OR MIT"
-])
-
-# Generated Targets
-
-rust_library(
-    name = "winapi_util",
-    srcs = glob(["**/*.rs"]),
-    aliases = {
-    },
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2018",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=winapi-util",
-        "manual",
-    ],
-    version = "0.1.5",
-    # buildifier: leave-alone
-    deps = [
-    ] + selects.with_or({
-        # cfg(windows)
-        (
-            "@rules_rust//rust/platform:i686-pc-windows-msvc",
-            "@rules_rust//rust/platform:x86_64-pc-windows-msvc",
-        ): [
-            "@wasmtime__winapi__0_3_9//:winapi",
-        ],
-        "//conditions:default": [],
-    }),
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.8.bazel b/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.8.bazel
new file mode 100644
index 000000000..7df210fa1
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.winapi-util-0.1.8.bazel
@@ -0,0 +1,56 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "winapi_util",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=winapi-util",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.1.8",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows-sys-0.52.0//:windows_sys",  # cfg(windows)
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel
deleted file mode 100644
index e34ab339d..000000000
--- a/bazel/cargo/wasmtime/remote/BUILD.winapi-x86_64-pc-windows-gnu-0.4.0.bazel
+++ /dev/null
@@ -1,84 +0,0 @@
-"""
-@generated
-cargo-raze crate build file.
-
-DO NOT EDIT! Replaced on runs of cargo-raze
-"""
-
-# buildifier: disable=load
-load("@bazel_skylib//lib:selects.bzl", "selects")
-
-# buildifier: disable=load
-load(
-    "@rules_rust//rust:defs.bzl",
-    "rust_binary",
-    "rust_library",
-    "rust_proc_macro",
-    "rust_test",
-)
-
-package(default_visibility = [
-    # Public for visibility by "@raze__crate__version//" targets.
-    #
-    # Prefer access through "//bazel/cargo/wasmtime", which limits external
-    # visibility to explicit Cargo.toml dependencies.
-    "//visibility:public",
-])
-
-licenses([
-    "notice",  # MIT from expression "MIT OR Apache-2.0"
-])
-
-# Generated Targets
-# buildifier: disable=out-of-order-load
-# buildifier: disable=load-on-top
-load(
-    "@rules_rust//cargo:cargo_build_script.bzl",
-    "cargo_build_script",
-)
-
-cargo_build_script(
-    name = "winapi_x86_64_pc_windows_gnu_build_script",
-    srcs = glob(["**/*.rs"]),
-    build_script_env = {
-    },
-    crate_features = [
-    ],
-    crate_root = "build.rs",
-    data = glob(["**"]),
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "manual",
-    ],
-    version = "0.4.0",
-    visibility = ["//visibility:private"],
-    deps = [
-    ],
-)
-
-rust_library(
-    name = "winapi_x86_64_pc_windows_gnu",
-    srcs = glob(["**/*.rs"]),
-    crate_features = [
-    ],
-    crate_root = "src/lib.rs",
-    data = [],
-    edition = "2015",
-    rustc_flags = [
-        "--cap-lints=allow",
-    ],
-    tags = [
-        "cargo-raze",
-        "crate-name=winapi-x86_64-pc-windows-gnu",
-        "manual",
-    ],
-    version = "0.4.0",
-    # buildifier: leave-alone
-    deps = [
-        ":winapi_x86_64_pc_windows_gnu_build_script",
-    ],
-)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows-sys-0.52.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows-sys-0.52.0.bazel
new file mode 100644
index 000000000..eaa163139
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows-sys-0.52.0.bazel
@@ -0,0 +1,63 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_sys",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "Win32",
+        "Win32_Foundation",
+        "Win32_Security",
+        "Win32_Storage",
+        "Win32_Storage_FileSystem",
+        "Win32_System",
+        "Win32_System_Console",
+        "Win32_System_Diagnostics",
+        "Win32_System_Diagnostics_Debug",
+        "Win32_System_Kernel",
+        "Win32_System_Memory",
+        "Win32_System_SystemInformation",
+        "Win32_System_Threading",
+        "default",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows-sys",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.0",
+    deps = [
+        "@cu__windows-targets-0.52.6//:windows_targets",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows-targets-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows-targets-0.52.6.bazel
new file mode 100644
index 000000000..eddc343ce
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows-targets-0.52.6.bazel
@@ -0,0 +1,65 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_targets",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows-targets",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = select({
+        "@rules_rust//rust/platform:aarch64-pc-windows-msvc": [
+            "@cu__windows_aarch64_msvc-0.52.6//:windows_aarch64_msvc",  # cfg(all(target_arch = "aarch64", target_env = "msvc", not(windows_raw_dylib)))
+        ],
+        "@rules_rust//rust/platform:i686-pc-windows-msvc": [
+            "@cu__windows_i686_msvc-0.52.6//:windows_i686_msvc",  # cfg(all(target_arch = "x86", target_env = "msvc", not(windows_raw_dylib)))
+        ],
+        "@rules_rust//rust/platform:i686-unknown-linux-gnu": [
+            "@cu__windows_i686_gnu-0.52.6//:windows_i686_gnu",  # cfg(all(target_arch = "x86", target_env = "gnu", not(target_abi = "llvm"), not(windows_raw_dylib)))
+        ],
+        "@rules_rust//rust/platform:x86_64-pc-windows-msvc": [
+            "@cu__windows_x86_64_msvc-0.52.6//:windows_x86_64_msvc",  # cfg(all(any(target_arch = "x86_64", target_arch = "arm64ec"), target_env = "msvc", not(windows_raw_dylib)))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-linux-gnu": [
+            "@cu__windows_x86_64_gnu-0.52.6//:windows_x86_64_gnu",  # cfg(all(target_arch = "x86_64", target_env = "gnu", not(target_abi = "llvm"), not(windows_raw_dylib)))
+        ],
+        "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu": [
+            "@cu__windows_x86_64_gnu-0.52.6//:windows_x86_64_gnu",  # cfg(all(target_arch = "x86_64", target_env = "gnu", not(target_abi = "llvm"), not(windows_raw_dylib)))
+        ],
+        "//conditions:default": [],
+    }),
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_gnullvm-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_gnullvm-0.52.6.bazel
new file mode 100644
index 000000000..ec79e2200
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_gnullvm-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_aarch64_gnullvm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_aarch64_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_aarch64_gnullvm-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_aarch64_gnullvm_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_aarch64_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_aarch64_gnullvm_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_msvc-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_msvc-0.52.6.bazel
new file mode 100644
index 000000000..47ac38a7a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_aarch64_msvc-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_aarch64_msvc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_aarch64_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_aarch64_msvc-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_aarch64_msvc_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_aarch64_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_aarch64_msvc_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnu-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnu-0.52.6.bazel
new file mode 100644
index 000000000..e3f0ef486
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnu-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_i686_gnu",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_gnu",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_i686_gnu-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_i686_gnu_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_gnu",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_i686_gnu_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnullvm-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnullvm-0.52.6.bazel
new file mode 100644
index 000000000..d89f239b5
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_gnullvm-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_i686_gnullvm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_i686_gnullvm-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_i686_gnullvm_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_i686_gnullvm_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_i686_msvc-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_msvc-0.52.6.bazel
new file mode 100644
index 000000000..f6e758e5b
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_i686_msvc-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_i686_msvc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_i686_msvc-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_i686_msvc_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_i686_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_i686_msvc_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnu-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnu-0.52.6.bazel
new file mode 100644
index 000000000..cbccf337a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnu-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_x86_64_gnu",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_gnu",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_x86_64_gnu-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_x86_64_gnu_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_gnu",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_x86_64_gnu_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnullvm-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnullvm-0.52.6.bazel
new file mode 100644
index 000000000..91ac1adff
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_gnullvm-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_x86_64_gnullvm",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_x86_64_gnullvm-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_x86_64_gnullvm_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_gnullvm",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_x86_64_gnullvm_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_msvc-0.52.6.bazel b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_msvc-0.52.6.bazel
new file mode 100644
index 000000000..fda09849a
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.windows_x86_64_msvc-0.52.6.bazel
@@ -0,0 +1,89 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//cargo:defs.bzl", "cargo_build_script")
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "windows_x86_64_msvc",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    deps = [
+        "@cu__windows_x86_64_msvc-0.52.6//:build_script_build",
+    ],
+)
+
+cargo_build_script(
+    name = "windows_x86_64_msvc_bs",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    crate_name = "build_script_build",
+    crate_root = "build.rs",
+    data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    edition = "2021",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=windows_x86_64_msvc",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.52.6",
+    visibility = ["//visibility:private"],
+)
+
+alias(
+    name = "build_script_build",
+    actual = ":windows_x86_64_msvc_bs",
+    tags = ["manual"],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.wit-parser-0.215.0.bazel b/bazel/cargo/wasmtime/remote/BUILD.wit-parser-0.215.0.bazel
new file mode 100644
index 000000000..f2e6ad6a2
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.wit-parser-0.215.0.bazel
@@ -0,0 +1,58 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "wit_parser",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2021",
+    proc_macro_deps = [
+        "@cu__serde_derive-1.0.204//:serde_derive",
+    ],
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=wit-parser",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.215.0",
+    deps = [
+        "@cu__anyhow-1.0.86//:anyhow",
+        "@cu__id-arena-2.2.1//:id_arena",
+        "@cu__indexmap-2.3.0//:indexmap",
+        "@cu__log-0.4.22//:log",
+        "@cu__semver-1.0.23//:semver",
+        "@cu__serde-1.0.204//:serde",
+        "@cu__serde_json-1.0.120//:serde_json",
+        "@cu__unicode-xid-0.2.4//:unicode_xid",
+        "@cu__wasmparser-0.215.0//:wasmparser",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.zerocopy-0.7.35.bazel b/bazel/cargo/wasmtime/remote/BUILD.zerocopy-0.7.35.bazel
new file mode 100644
index 000000000..5bb874604
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.zerocopy-0.7.35.bazel
@@ -0,0 +1,47 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_library")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_library(
+    name = "zerocopy",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_features = [
+        "simd",
+    ],
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=zerocopy",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.7.35",
+)
diff --git a/bazel/cargo/wasmtime/remote/BUILD.zerocopy-derive-0.7.35.bazel b/bazel/cargo/wasmtime/remote/BUILD.zerocopy-derive-0.7.35.bazel
new file mode 100644
index 000000000..dc6f82dfc
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/BUILD.zerocopy-derive-0.7.35.bazel
@@ -0,0 +1,49 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+
+load("@rules_rust//rust:defs.bzl", "rust_proc_macro")
+
+package(default_visibility = ["//visibility:public"])
+
+rust_proc_macro(
+    name = "zerocopy_derive",
+    srcs = glob(
+        include = ["**/*.rs"],
+        allow_empty = False,
+    ),
+    compile_data = glob(
+        include = ["**"],
+        allow_empty = True,
+        exclude = [
+            "**/* *",
+            ".tmp_git_root/**/*",
+            "BUILD",
+            "BUILD.bazel",
+            "WORKSPACE",
+            "WORKSPACE.bazel",
+        ],
+    ),
+    crate_root = "src/lib.rs",
+    edition = "2018",
+    rustc_flags = [
+        "--cap-lints=allow",
+    ],
+    tags = [
+        "cargo-bazel",
+        "crate-name=zerocopy-derive",
+        "manual",
+        "noclippy",
+        "norustfmt",
+    ],
+    version = "0.7.35",
+    deps = [
+        "@cu__proc-macro2-1.0.86//:proc_macro2",
+        "@cu__quote-1.0.36//:quote",
+        "@cu__syn-2.0.72//:syn",
+    ],
+)
diff --git a/bazel/cargo/wasmtime/remote/alias_rules.bzl b/bazel/cargo/wasmtime/remote/alias_rules.bzl
new file mode 100644
index 000000000..14b04c127
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/alias_rules.bzl
@@ -0,0 +1,47 @@
+"""Alias that transitions its target to `compilation_mode=opt`.  Use `transition_alias="opt"` to enable."""
+
+load("@rules_cc//cc:defs.bzl", "CcInfo")
+load("@rules_rust//rust:rust_common.bzl", "COMMON_PROVIDERS")
+
+def _transition_alias_impl(ctx):
+    # `ctx.attr.actual` is a list of 1 item due to the transition
+    providers = [ctx.attr.actual[0][provider] for provider in COMMON_PROVIDERS]
+    if CcInfo in ctx.attr.actual[0]:
+        providers.append(ctx.attr.actual[0][CcInfo])
+    return providers
+
+def _change_compilation_mode(compilation_mode):
+    def _change_compilation_mode_impl(_settings, _attr):
+        return {
+            "//command_line_option:compilation_mode": compilation_mode,
+        }
+
+    return transition(
+        implementation = _change_compilation_mode_impl,
+        inputs = [],
+        outputs = [
+            "//command_line_option:compilation_mode",
+        ],
+    )
+
+def _transition_alias_rule(compilation_mode):
+    return rule(
+        implementation = _transition_alias_impl,
+        provides = COMMON_PROVIDERS,
+        attrs = {
+            "actual": attr.label(
+                mandatory = True,
+                doc = "`rust_library()` target to transition to `compilation_mode=opt`.",
+                providers = COMMON_PROVIDERS,
+                cfg = _change_compilation_mode(compilation_mode),
+            ),
+            "_allowlist_function_transition": attr.label(
+                default = "@bazel_tools//tools/allowlists/function_transition_allowlist",
+            ),
+        },
+        doc = "Transitions a Rust library crate to the `compilation_mode=opt`.",
+    )
+
+transition_alias_dbg = _transition_alias_rule("dbg")
+transition_alias_fastbuild = _transition_alias_rule("fastbuild")
+transition_alias_opt = _transition_alias_rule("opt")
diff --git a/bazel/cargo/wasmtime/remote/crates.bzl b/bazel/cargo/wasmtime/remote/crates.bzl
new file mode 100644
index 000000000..c2726d29f
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/crates.bzl
@@ -0,0 +1,32 @@
+###############################################################################
+# @generated
+# This file is auto-generated by the cargo-bazel tool.
+#
+# DO NOT MODIFY: Local changes may be replaced in future executions.
+###############################################################################
+"""Rules for defining repositories for remote `crates_vendor` repositories"""
+
+load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
+
+# buildifier: disable=bzl-visibility
+load("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:defs.bzl", _crate_repositories = "crate_repositories")
+
+# buildifier: disable=bzl-visibility
+load("@rules_rust//crate_universe/private:crates_vendor.bzl", "crates_vendor_remote_repository")
+
+def crate_repositories():
+    """Generates repositories for vendored crates.
+
+    Returns:
+      A list of repos visible to the module through the module extension.
+    """
+    maybe(
+        crates_vendor_remote_repository,
+        name = "cu",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.bazel"),
+        defs_module = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:defs.bzl"),
+    )
+
+    direct_deps = [struct(repo = "cu", is_dev_dep = False)]
+    direct_deps.extend(_crate_repositories())
+    return direct_deps
diff --git a/bazel/cargo/wasmtime/remote/defs.bzl b/bazel/cargo/wasmtime/remote/defs.bzl
new file mode 100644
index 000000000..0f2656ce1
--- /dev/null
+++ b/bazel/cargo/wasmtime/remote/defs.bzl
@@ -0,0 +1,1537 @@
+###############################################################################
+# @generated
+# DO NOT MODIFY: This file is auto-generated by a crate_universe tool. To
+# regenerate this file, run the following:
+#
+#     bazel run @//bazel/cargo/wasmtime:crates_vendor
+###############################################################################
+"""
+# `crates_repository` API
+
+- [aliases](#aliases)
+- [crate_deps](#crate_deps)
+- [all_crate_deps](#all_crate_deps)
+- [crate_repositories](#crate_repositories)
+
+"""
+
+load("@bazel_skylib//lib:selects.bzl", "selects")
+load("@bazel_tools//tools/build_defs/repo:git.bzl", "new_git_repository")
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
+
+###############################################################################
+# MACROS API
+###############################################################################
+
+# An identifier that represent common dependencies (unconditional).
+_COMMON_CONDITION = ""
+
+def _flatten_dependency_maps(all_dependency_maps):
+    """Flatten a list of dependency maps into one dictionary.
+
+    Dependency maps have the following structure:
+
+    ```python
+    DEPENDENCIES_MAP = {
+        # The first key in the map is a Bazel package
+        # name of the workspace this file is defined in.
+        "workspace_member_package": {
+
+            # Not all dependencies are supported for all platforms.
+            # the condition key is the condition required to be true
+            # on the host platform.
+            "condition": {
+
+                # An alias to a crate target.     # The label of the crate target the
+                # Aliases are only crate names.   # package name refers to.
+                "package_name":                   "@full//:label",
+            }
+        }
+    }
+    ```
+
+    Args:
+        all_dependency_maps (list): A list of dicts as described above
+
+    Returns:
+        dict: A dictionary as described above
+    """
+    dependencies = {}
+
+    for workspace_deps_map in all_dependency_maps:
+        for pkg_name, conditional_deps_map in workspace_deps_map.items():
+            if pkg_name not in dependencies:
+                non_frozen_map = dict()
+                for key, values in conditional_deps_map.items():
+                    non_frozen_map.update({key: dict(values.items())})
+                dependencies.setdefault(pkg_name, non_frozen_map)
+                continue
+
+            for condition, deps_map in conditional_deps_map.items():
+                # If the condition has not been recorded, do so and continue
+                if condition not in dependencies[pkg_name]:
+                    dependencies[pkg_name].setdefault(condition, dict(deps_map.items()))
+                    continue
+
+                # Alert on any miss-matched dependencies
+                inconsistent_entries = []
+                for crate_name, crate_label in deps_map.items():
+                    existing = dependencies[pkg_name][condition].get(crate_name)
+                    if existing and existing != crate_label:
+                        inconsistent_entries.append((crate_name, existing, crate_label))
+                    dependencies[pkg_name][condition].update({crate_name: crate_label})
+
+    return dependencies
+
+def crate_deps(deps, package_name = None):
+    """Finds the fully qualified label of the requested crates for the package where this macro is called.
+
+    Args:
+        deps (list): The desired list of crate targets.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()`.
+
+    Returns:
+        list: A list of labels to generated rust targets (str)
+    """
+
+    if not deps:
+        return []
+
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Join both sets of dependencies
+    dependencies = _flatten_dependency_maps([
+        _NORMAL_DEPENDENCIES,
+        _NORMAL_DEV_DEPENDENCIES,
+        _PROC_MACRO_DEPENDENCIES,
+        _PROC_MACRO_DEV_DEPENDENCIES,
+        _BUILD_DEPENDENCIES,
+        _BUILD_PROC_MACRO_DEPENDENCIES,
+    ]).pop(package_name, {})
+
+    # Combine all conditional packages so we can easily index over a flat list
+    # TODO: Perhaps this should actually return select statements and maintain
+    # the conditionals of the dependencies
+    flat_deps = {}
+    for deps_set in dependencies.values():
+        for crate_name, crate_label in deps_set.items():
+            flat_deps.update({crate_name: crate_label})
+
+    missing_crates = []
+    crate_targets = []
+    for crate_target in deps:
+        if crate_target not in flat_deps:
+            missing_crates.append(crate_target)
+        else:
+            crate_targets.append(flat_deps[crate_target])
+
+    if missing_crates:
+        fail("Could not find crates `{}` among dependencies of `{}`. Available dependencies were `{}`".format(
+            missing_crates,
+            package_name,
+            dependencies,
+        ))
+
+    return crate_targets
+
+def all_crate_deps(
+        normal = False,
+        normal_dev = False,
+        proc_macro = False,
+        proc_macro_dev = False,
+        build = False,
+        build_proc_macro = False,
+        package_name = None):
+    """Finds the fully qualified label of all requested direct crate dependencies \
+    for the package where this macro is called.
+
+    If no parameters are set, all normal dependencies are returned. Setting any one flag will
+    otherwise impact the contents of the returned list.
+
+    Args:
+        normal (bool, optional): If True, normal dependencies are included in the
+            output list.
+        normal_dev (bool, optional): If True, normal dev dependencies will be
+            included in the output list..
+        proc_macro (bool, optional): If True, proc_macro dependencies are included
+            in the output list.
+        proc_macro_dev (bool, optional): If True, dev proc_macro dependencies are
+            included in the output list.
+        build (bool, optional): If True, build dependencies are included
+            in the output list.
+        build_proc_macro (bool, optional): If True, build proc_macro dependencies are
+            included in the output list.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()` when unset.
+
+    Returns:
+        list: A list of labels to generated rust targets (str)
+    """
+
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Determine the relevant maps to use
+    all_dependency_maps = []
+    if normal:
+        all_dependency_maps.append(_NORMAL_DEPENDENCIES)
+    if normal_dev:
+        all_dependency_maps.append(_NORMAL_DEV_DEPENDENCIES)
+    if proc_macro:
+        all_dependency_maps.append(_PROC_MACRO_DEPENDENCIES)
+    if proc_macro_dev:
+        all_dependency_maps.append(_PROC_MACRO_DEV_DEPENDENCIES)
+    if build:
+        all_dependency_maps.append(_BUILD_DEPENDENCIES)
+    if build_proc_macro:
+        all_dependency_maps.append(_BUILD_PROC_MACRO_DEPENDENCIES)
+
+    # Default to always using normal dependencies
+    if not all_dependency_maps:
+        all_dependency_maps.append(_NORMAL_DEPENDENCIES)
+
+    dependencies = _flatten_dependency_maps(all_dependency_maps).pop(package_name, None)
+
+    if not dependencies:
+        if dependencies == None:
+            fail("Tried to get all_crate_deps for package " + package_name + " but that package had no Cargo.toml file")
+        else:
+            return []
+
+    crate_deps = list(dependencies.pop(_COMMON_CONDITION, {}).values())
+    for condition, deps in dependencies.items():
+        crate_deps += selects.with_or({
+            tuple(_CONDITIONS[condition]): deps.values(),
+            "//conditions:default": [],
+        })
+
+    return crate_deps
+
+def aliases(
+        normal = False,
+        normal_dev = False,
+        proc_macro = False,
+        proc_macro_dev = False,
+        build = False,
+        build_proc_macro = False,
+        package_name = None):
+    """Produces a map of Crate alias names to their original label
+
+    If no dependency kinds are specified, `normal` and `proc_macro` are used by default.
+    Setting any one flag will otherwise determine the contents of the returned dict.
+
+    Args:
+        normal (bool, optional): If True, normal dependencies are included in the
+            output list.
+        normal_dev (bool, optional): If True, normal dev dependencies will be
+            included in the output list..
+        proc_macro (bool, optional): If True, proc_macro dependencies are included
+            in the output list.
+        proc_macro_dev (bool, optional): If True, dev proc_macro dependencies are
+            included in the output list.
+        build (bool, optional): If True, build dependencies are included
+            in the output list.
+        build_proc_macro (bool, optional): If True, build proc_macro dependencies are
+            included in the output list.
+        package_name (str, optional): The package name of the set of dependencies to look up.
+            Defaults to `native.package_name()` when unset.
+
+    Returns:
+        dict: The aliases of all associated packages
+    """
+    if package_name == None:
+        package_name = native.package_name()
+
+    # Determine the relevant maps to use
+    all_aliases_maps = []
+    if normal:
+        all_aliases_maps.append(_NORMAL_ALIASES)
+    if normal_dev:
+        all_aliases_maps.append(_NORMAL_DEV_ALIASES)
+    if proc_macro:
+        all_aliases_maps.append(_PROC_MACRO_ALIASES)
+    if proc_macro_dev:
+        all_aliases_maps.append(_PROC_MACRO_DEV_ALIASES)
+    if build:
+        all_aliases_maps.append(_BUILD_ALIASES)
+    if build_proc_macro:
+        all_aliases_maps.append(_BUILD_PROC_MACRO_ALIASES)
+
+    # Default to always using normal aliases
+    if not all_aliases_maps:
+        all_aliases_maps.append(_NORMAL_ALIASES)
+        all_aliases_maps.append(_PROC_MACRO_ALIASES)
+
+    aliases = _flatten_dependency_maps(all_aliases_maps).pop(package_name, None)
+
+    if not aliases:
+        return dict()
+
+    common_items = aliases.pop(_COMMON_CONDITION, {}).items()
+
+    # If there are only common items in the dictionary, immediately return them
+    if not len(aliases.keys()) == 1:
+        return dict(common_items)
+
+    # Build a single select statement where each conditional has accounted for the
+    # common set of aliases.
+    crate_aliases = {"//conditions:default": dict(common_items)}
+    for condition, deps in aliases.items():
+        condition_triples = _CONDITIONS[condition]
+        for triple in condition_triples:
+            if triple in crate_aliases:
+                crate_aliases[triple].update(deps)
+            else:
+                crate_aliases.update({triple: dict(deps.items() + common_items)})
+
+    return select(crate_aliases)
+
+###############################################################################
+# WORKSPACE MEMBER DEPS AND ALIASES
+###############################################################################
+
+_NORMAL_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+        _COMMON_CONDITION: {
+            "anyhow": Label("@cu__anyhow-1.0.86//:anyhow"),
+            "env_logger": Label("@cu__env_logger-0.10.2//:env_logger"),
+            "log": Label("@cu__log-0.4.22//:log"),
+            "once_cell": Label("@cu__once_cell-1.19.0//:once_cell"),
+            "tracing": Label("@cu__tracing-0.1.40//:tracing"),
+            "wasmtime": Label("@cu__wasmtime-24.0.0//:wasmtime"),
+        },
+    },
+}
+
+_NORMAL_ALIASES = {
+    "bazel/cargo/wasmtime": {
+        _COMMON_CONDITION: {
+        },
+    },
+}
+
+_NORMAL_DEV_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_NORMAL_DEV_ALIASES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_PROC_MACRO_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+        _COMMON_CONDITION: {
+            "wasmtime-c-api-macros": Label("@cu__wasmtime-c-api-macros-24.0.0//:wasmtime_c_api_macros"),
+        },
+    },
+}
+
+_PROC_MACRO_ALIASES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_PROC_MACRO_DEV_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_PROC_MACRO_DEV_ALIASES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_BUILD_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_BUILD_ALIASES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_BUILD_PROC_MACRO_DEPENDENCIES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_BUILD_PROC_MACRO_ALIASES = {
+    "bazel/cargo/wasmtime": {
+    },
+}
+
+_CONDITIONS = {
+    "aarch64-apple-darwin": ["@rules_rust//rust/platform:aarch64-apple-darwin"],
+    "aarch64-apple-ios": ["@rules_rust//rust/platform:aarch64-apple-ios"],
+    "aarch64-apple-ios-sim": ["@rules_rust//rust/platform:aarch64-apple-ios-sim"],
+    "aarch64-fuchsia": ["@rules_rust//rust/platform:aarch64-fuchsia"],
+    "aarch64-linux-android": ["@rules_rust//rust/platform:aarch64-linux-android"],
+    "aarch64-pc-windows-gnullvm": [],
+    "aarch64-pc-windows-msvc": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc"],
+    "aarch64-unknown-linux-gnu": ["@rules_rust//rust/platform:aarch64-unknown-linux-gnu"],
+    "aarch64-unknown-nixos-gnu": ["@rules_rust//rust/platform:aarch64-unknown-nixos-gnu"],
+    "aarch64-unknown-nto-qnx710": ["@rules_rust//rust/platform:aarch64-unknown-nto-qnx710"],
+    "arm-unknown-linux-gnueabi": ["@rules_rust//rust/platform:arm-unknown-linux-gnueabi"],
+    "armv7-linux-androideabi": ["@rules_rust//rust/platform:armv7-linux-androideabi"],
+    "armv7-unknown-linux-gnueabi": ["@rules_rust//rust/platform:armv7-unknown-linux-gnueabi"],
+    "cfg(all(any(target_arch = \"x86_64\", target_arch = \"arm64ec\"), target_env = \"msvc\", not(windows_raw_dylib)))": ["@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "cfg(all(any(target_os = \"android\", target_os = \"linux\"), any(rustix_use_libc, miri, not(all(target_os = \"linux\", target_endian = \"little\", any(target_arch = \"arm\", all(target_arch = \"aarch64\", target_pointer_width = \"64\"), target_arch = \"riscv64\", all(rustix_use_experimental_asm, target_arch = \"powerpc64\"), all(rustix_use_experimental_asm, target_arch = \"mips\"), all(rustix_use_experimental_asm, target_arch = \"mips32r6\"), all(rustix_use_experimental_asm, target_arch = \"mips64\"), all(rustix_use_experimental_asm, target_arch = \"mips64r6\"), target_arch = \"x86\", all(target_arch = \"x86_64\", target_pointer_width = \"64\")))))))": ["@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-linux-android"],
+    "cfg(all(not(rustix_use_libc), not(miri), target_os = \"linux\", target_endian = \"little\", any(target_arch = \"arm\", all(target_arch = \"aarch64\", target_pointer_width = \"64\"), target_arch = \"riscv64\", all(rustix_use_experimental_asm, target_arch = \"powerpc64\"), all(rustix_use_experimental_asm, target_arch = \"mips\"), all(rustix_use_experimental_asm, target_arch = \"mips32r6\"), all(rustix_use_experimental_asm, target_arch = \"mips64\"), all(rustix_use_experimental_asm, target_arch = \"mips64r6\"), target_arch = \"x86\", all(target_arch = \"x86_64\", target_pointer_width = \"64\"))))": ["@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(all(not(windows), any(rustix_use_libc, miri, not(all(target_os = \"linux\", target_endian = \"little\", any(target_arch = \"arm\", all(target_arch = \"aarch64\", target_pointer_width = \"64\"), target_arch = \"riscv64\", all(rustix_use_experimental_asm, target_arch = \"powerpc64\"), all(rustix_use_experimental_asm, target_arch = \"mips\"), all(rustix_use_experimental_asm, target_arch = \"mips32r6\"), all(rustix_use_experimental_asm, target_arch = \"mips64\"), all(rustix_use_experimental_asm, target_arch = \"mips64r6\"), target_arch = \"x86\", all(target_arch = \"x86_64\", target_pointer_width = \"64\")))))))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:riscv32imc-unknown-none-elf", "@rules_rust//rust/platform:riscv64gc-unknown-none-elf", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:thumbv7em-none-eabi", "@rules_rust//rust/platform:thumbv8m.main-none-eabi", "@rules_rust//rust/platform:wasm32-unknown-unknown", "@rules_rust//rust/platform:wasm32-wasi", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-none"],
+    "cfg(all(target_arch = \"aarch64\", target_env = \"msvc\", not(windows_raw_dylib)))": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc"],
+    "cfg(all(target_arch = \"x86\", target_env = \"gnu\", not(target_abi = \"llvm\"), not(windows_raw_dylib)))": ["@rules_rust//rust/platform:i686-unknown-linux-gnu"],
+    "cfg(all(target_arch = \"x86\", target_env = \"msvc\", not(windows_raw_dylib)))": ["@rules_rust//rust/platform:i686-pc-windows-msvc"],
+    "cfg(all(target_arch = \"x86_64\", target_env = \"gnu\", not(target_abi = \"llvm\"), not(windows_raw_dylib)))": ["@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(any())": [],
+    "cfg(any(target_arch = \"s390x\", target_arch = \"riscv64\"))": ["@rules_rust//rust/platform:riscv64gc-unknown-none-elf", "@rules_rust//rust/platform:s390x-unknown-linux-gnu"],
+    "cfg(any(target_os = \"linux\", target_os = \"macos\", target_os = \"freebsd\", target_os = \"android\"))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(any(target_os = \"macos\", target_os = \"ios\"))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios"],
+    "cfg(any(unix, target_os = \"wasi\"))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:wasm32-wasi", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(not(all(target_arch = \"arm\", target_os = \"none\")))": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-pc-windows-msvc", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-pc-windows-msvc", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:riscv32imc-unknown-none-elf", "@rules_rust//rust/platform:riscv64gc-unknown-none-elf", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:wasm32-unknown-unknown", "@rules_rust//rust/platform:wasm32-wasi", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-pc-windows-msvc", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu", "@rules_rust//rust/platform:x86_64-unknown-none"],
+    "cfg(target_arch = \"s390x\")": ["@rules_rust//rust/platform:s390x-unknown-linux-gnu"],
+    "cfg(target_os = \"hermit\")": [],
+    "cfg(target_os = \"linux\")": ["@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(target_os = \"macos\")": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-darwin"],
+    "cfg(target_os = \"wasi\")": ["@rules_rust//rust/platform:wasm32-wasi"],
+    "cfg(target_os = \"windows\")": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc", "@rules_rust//rust/platform:i686-pc-windows-msvc", "@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "cfg(unix)": ["@rules_rust//rust/platform:aarch64-apple-darwin", "@rules_rust//rust/platform:aarch64-apple-ios", "@rules_rust//rust/platform:aarch64-apple-ios-sim", "@rules_rust//rust/platform:aarch64-fuchsia", "@rules_rust//rust/platform:aarch64-linux-android", "@rules_rust//rust/platform:aarch64-unknown-linux-gnu", "@rules_rust//rust/platform:aarch64-unknown-nixos-gnu", "@rules_rust//rust/platform:aarch64-unknown-nto-qnx710", "@rules_rust//rust/platform:arm-unknown-linux-gnueabi", "@rules_rust//rust/platform:armv7-linux-androideabi", "@rules_rust//rust/platform:armv7-unknown-linux-gnueabi", "@rules_rust//rust/platform:i686-apple-darwin", "@rules_rust//rust/platform:i686-linux-android", "@rules_rust//rust/platform:i686-unknown-freebsd", "@rules_rust//rust/platform:i686-unknown-linux-gnu", "@rules_rust//rust/platform:powerpc-unknown-linux-gnu", "@rules_rust//rust/platform:s390x-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-apple-darwin", "@rules_rust//rust/platform:x86_64-apple-ios", "@rules_rust//rust/platform:x86_64-fuchsia", "@rules_rust//rust/platform:x86_64-linux-android", "@rules_rust//rust/platform:x86_64-unknown-freebsd", "@rules_rust//rust/platform:x86_64-unknown-linux-gnu", "@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "cfg(windows)": ["@rules_rust//rust/platform:aarch64-pc-windows-msvc", "@rules_rust//rust/platform:i686-pc-windows-msvc", "@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "i686-apple-darwin": ["@rules_rust//rust/platform:i686-apple-darwin"],
+    "i686-linux-android": ["@rules_rust//rust/platform:i686-linux-android"],
+    "i686-pc-windows-gnullvm": [],
+    "i686-pc-windows-msvc": ["@rules_rust//rust/platform:i686-pc-windows-msvc"],
+    "i686-unknown-freebsd": ["@rules_rust//rust/platform:i686-unknown-freebsd"],
+    "i686-unknown-linux-gnu": ["@rules_rust//rust/platform:i686-unknown-linux-gnu"],
+    "powerpc-unknown-linux-gnu": ["@rules_rust//rust/platform:powerpc-unknown-linux-gnu"],
+    "riscv32imc-unknown-none-elf": ["@rules_rust//rust/platform:riscv32imc-unknown-none-elf"],
+    "riscv64gc-unknown-none-elf": ["@rules_rust//rust/platform:riscv64gc-unknown-none-elf"],
+    "s390x-unknown-linux-gnu": ["@rules_rust//rust/platform:s390x-unknown-linux-gnu"],
+    "thumbv7em-none-eabi": ["@rules_rust//rust/platform:thumbv7em-none-eabi"],
+    "thumbv8m.main-none-eabi": ["@rules_rust//rust/platform:thumbv8m.main-none-eabi"],
+    "wasm32-unknown-unknown": ["@rules_rust//rust/platform:wasm32-unknown-unknown"],
+    "wasm32-wasi": ["@rules_rust//rust/platform:wasm32-wasi"],
+    "x86_64-apple-darwin": ["@rules_rust//rust/platform:x86_64-apple-darwin"],
+    "x86_64-apple-ios": ["@rules_rust//rust/platform:x86_64-apple-ios"],
+    "x86_64-fuchsia": ["@rules_rust//rust/platform:x86_64-fuchsia"],
+    "x86_64-linux-android": ["@rules_rust//rust/platform:x86_64-linux-android"],
+    "x86_64-pc-windows-gnullvm": [],
+    "x86_64-pc-windows-msvc": ["@rules_rust//rust/platform:x86_64-pc-windows-msvc"],
+    "x86_64-unknown-freebsd": ["@rules_rust//rust/platform:x86_64-unknown-freebsd"],
+    "x86_64-unknown-linux-gnu": ["@rules_rust//rust/platform:x86_64-unknown-linux-gnu"],
+    "x86_64-unknown-nixos-gnu": ["@rules_rust//rust/platform:x86_64-unknown-nixos-gnu"],
+    "x86_64-unknown-none": ["@rules_rust//rust/platform:x86_64-unknown-none"],
+}
+
+###############################################################################
+
+def crate_repositories():
+    """A macro for defining repositories for all generated crates.
+
+    Returns:
+      A list of repos visible to the module through the module extension.
+    """
+    maybe(
+        http_archive,
+        name = "cu__ahash-0.8.11",
+        sha256 = "e89da841a80418a9b391ebaea17f5c112ffaaa96f621d2c285b5174da76b9011",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/ahash/0.8.11/download"],
+        strip_prefix = "ahash-0.8.11",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.ahash-0.8.11.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__aho-corasick-1.1.3",
+        sha256 = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/aho-corasick/1.1.3/download"],
+        strip_prefix = "aho-corasick-1.1.3",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.aho-corasick-1.1.3.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__anyhow-1.0.86",
+        sha256 = "b3d1d046238990b9cf5bcde22a3fb3584ee5cf65fb2765f454ed428c7a0063da",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/anyhow/1.0.86/download"],
+        strip_prefix = "anyhow-1.0.86",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.anyhow-1.0.86.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__arbitrary-1.3.2",
+        sha256 = "7d5a26814d8dcb93b0e5a0ff3c6d80a8843bafb21b39e8e18a6f05471870e110",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/arbitrary/1.3.2/download"],
+        strip_prefix = "arbitrary-1.3.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.arbitrary-1.3.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__bitflags-2.6.0",
+        sha256 = "b048fb63fd8b5923fc5aa7b340d8e156aec7ec02f0c78fa8a6ddc2613f6f71de",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/bitflags/2.6.0/download"],
+        strip_prefix = "bitflags-2.6.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.bitflags-2.6.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__bumpalo-3.16.0",
+        sha256 = "79296716171880943b8470b5f8d03aa55eb2e645a4874bdbb28adb49162e012c",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/bumpalo/3.16.0/download"],
+        strip_prefix = "bumpalo-3.16.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.bumpalo-3.16.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cc-1.1.7",
+        sha256 = "26a5c3fd7bfa1ce3897a3a3501d362b2d87b7f2583ebcb4a949ec25911025cbc",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cc/1.1.7/download"],
+        strip_prefix = "cc-1.1.7",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cc-1.1.7.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cfg-if-1.0.0",
+        sha256 = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cfg-if/1.0.0/download"],
+        strip_prefix = "cfg-if-1.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cfg-if-1.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cobs-0.2.3",
+        sha256 = "67ba02a97a2bd10f4b59b25c7973101c79642302776489e030cd13cdab09ed15",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cobs/0.2.3/download"],
+        strip_prefix = "cobs-0.2.3",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cobs-0.2.3.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-bforest-0.111.0",
+        sha256 = "b80c3a50b9c4c7e5b5f73c0ed746687774fc9e36ef652b110da8daebf0c6e0e6",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-bforest/0.111.0/download"],
+        strip_prefix = "cranelift-bforest-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-bforest-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-bitset-0.111.0",
+        sha256 = "38778758c2ca918b05acb2199134e0c561fb577c50574259b26190b6c2d95ded",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-bitset/0.111.0/download"],
+        strip_prefix = "cranelift-bitset-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-bitset-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-codegen-0.111.0",
+        sha256 = "58258667ad10e468bfc13a8d620f50dfcd4bb35d668123e97defa2549b9ad397",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-codegen/0.111.0/download"],
+        strip_prefix = "cranelift-codegen-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-codegen-meta-0.111.0",
+        sha256 = "043f0b702e529dcb07ff92bd7d40e7d5317b5493595172c5eb0983343751ee06",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-codegen-meta/0.111.0/download"],
+        strip_prefix = "cranelift-codegen-meta-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-meta-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-codegen-shared-0.111.0",
+        sha256 = "7763578888ab53eca5ce7da141953f828e82c2bfadcffc106d10d1866094ffbb",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-codegen-shared/0.111.0/download"],
+        strip_prefix = "cranelift-codegen-shared-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-codegen-shared-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-control-0.111.0",
+        sha256 = "32db15f08c05df570f11e8ab33cb1ec449a64b37c8a3498377b77650bef33d8b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-control/0.111.0/download"],
+        strip_prefix = "cranelift-control-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-control-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-entity-0.111.0",
+        sha256 = "5289cdb399381a27e7bbfa1b42185916007c3d49aeef70b1d01cb4caa8010130",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-entity/0.111.0/download"],
+        strip_prefix = "cranelift-entity-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-entity-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-frontend-0.111.0",
+        sha256 = "31ba8ab24eb9470477e98ddfa3c799a649ac5a0d9a2042868c4c952133c234e8",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-frontend/0.111.0/download"],
+        strip_prefix = "cranelift-frontend-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-frontend-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-isle-0.111.0",
+        sha256 = "2b72a3c5c166a70426dcb209bdd0bb71a787c1ea76023dc0974fbabca770e8f9",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-isle/0.111.0/download"],
+        strip_prefix = "cranelift-isle-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-isle-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-native-0.111.0",
+        sha256 = "46a42424c956bbc31fc5c2706073df896156c5420ae8fa2a5d48dbc7b295d71b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-native/0.111.0/download"],
+        strip_prefix = "cranelift-native-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-native-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__cranelift-wasm-0.111.0",
+        sha256 = "49778df4289933d735b93c30a345513e030cf83101de0036e19b760f8aa09f68",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/cranelift-wasm/0.111.0/download"],
+        strip_prefix = "cranelift-wasm-0.111.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.cranelift-wasm-0.111.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__crc32fast-1.4.2",
+        sha256 = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/crc32fast/1.4.2/download"],
+        strip_prefix = "crc32fast-1.4.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.crc32fast-1.4.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__either-1.13.0",
+        sha256 = "60b1af1c220855b6ceac025d3f6ecdd2b7c4894bfe9cd9bda4fbb4bc7c0d4cf0",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/either/1.13.0/download"],
+        strip_prefix = "either-1.13.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.either-1.13.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__embedded-io-0.4.0",
+        sha256 = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/embedded-io/0.4.0/download"],
+        strip_prefix = "embedded-io-0.4.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.embedded-io-0.4.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__env_logger-0.10.2",
+        sha256 = "4cd405aab171cb85d6735e5c8d9db038c17d3ca007a4d2c25f337935c3d90580",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/env_logger/0.10.2/download"],
+        strip_prefix = "env_logger-0.10.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.env_logger-0.10.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__equivalent-1.0.1",
+        sha256 = "5443807d6dff69373d433ab9ef5378ad8df50ca6298caf15de6e52e24aaf54d5",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/equivalent/1.0.1/download"],
+        strip_prefix = "equivalent-1.0.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.equivalent-1.0.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__errno-0.3.9",
+        sha256 = "534c5cf6194dfab3db3242765c03bbe257cf92f22b38f6bc0c58d59108a820ba",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/errno/0.3.9/download"],
+        strip_prefix = "errno-0.3.9",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.errno-0.3.9.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__fallible-iterator-0.3.0",
+        sha256 = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/fallible-iterator/0.3.0/download"],
+        strip_prefix = "fallible-iterator-0.3.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.fallible-iterator-0.3.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__gimli-0.29.0",
+        sha256 = "40ecd4077b5ae9fd2e9e169b102c6c330d0605168eb0e8bf79952b256dbefffd",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/gimli/0.29.0/download"],
+        strip_prefix = "gimli-0.29.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.gimli-0.29.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__hashbrown-0.13.2",
+        sha256 = "43a3c133739dddd0d2990f9a4bdf8eb4b21ef50e4851ca85ab661199821d510e",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/hashbrown/0.13.2/download"],
+        strip_prefix = "hashbrown-0.13.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.hashbrown-0.13.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__hashbrown-0.14.5",
+        sha256 = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/hashbrown/0.14.5/download"],
+        strip_prefix = "hashbrown-0.14.5",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.hashbrown-0.14.5.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__heck-0.4.1",
+        sha256 = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/heck/0.4.1/download"],
+        strip_prefix = "heck-0.4.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.heck-0.4.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__hermit-abi-0.3.9",
+        sha256 = "d231dfb89cfffdbc30e7fc41579ed6066ad03abda9e567ccafae602b97ec5024",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/hermit-abi/0.3.9/download"],
+        strip_prefix = "hermit-abi-0.3.9",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.hermit-abi-0.3.9.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__humantime-2.1.0",
+        sha256 = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/humantime/2.1.0/download"],
+        strip_prefix = "humantime-2.1.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.humantime-2.1.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__id-arena-2.2.1",
+        sha256 = "25a2bc672d1148e28034f176e01fffebb08b35768468cc954630da77a1449005",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/id-arena/2.2.1/download"],
+        strip_prefix = "id-arena-2.2.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.id-arena-2.2.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__indexmap-2.3.0",
+        sha256 = "de3fc2e30ba82dd1b3911c8de1ffc143c74a914a14e99514d7637e3099df5ea0",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/indexmap/2.3.0/download"],
+        strip_prefix = "indexmap-2.3.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.indexmap-2.3.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__is-terminal-0.4.12",
+        sha256 = "f23ff5ef2b80d608d61efee834934d862cd92461afc0560dedf493e4c033738b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/is-terminal/0.4.12/download"],
+        strip_prefix = "is-terminal-0.4.12",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.is-terminal-0.4.12.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__itertools-0.12.1",
+        sha256 = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/itertools/0.12.1/download"],
+        strip_prefix = "itertools-0.12.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.itertools-0.12.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__itoa-1.0.11",
+        sha256 = "49f1f14873335454500d59611f1cf4a4b0f786f9ac11f4312a78e4cf2566695b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/itoa/1.0.11/download"],
+        strip_prefix = "itoa-1.0.11",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.itoa-1.0.11.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__leb128-0.2.5",
+        sha256 = "884e2677b40cc8c339eaefcb701c32ef1fd2493d71118dc0ca4b6a736c93bd67",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/leb128/0.2.5/download"],
+        strip_prefix = "leb128-0.2.5",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.leb128-0.2.5.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__libc-0.2.155",
+        sha256 = "97b3888a4aecf77e811145cadf6eef5901f4782c53886191b2f693f24761847c",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/libc/0.2.155/download"],
+        strip_prefix = "libc-0.2.155",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.libc-0.2.155.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__libm-0.2.8",
+        sha256 = "4ec2a862134d2a7d32d7983ddcdd1c4923530833c9f2ea1a44fc5fa473989058",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/libm/0.2.8/download"],
+        strip_prefix = "libm-0.2.8",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.libm-0.2.8.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__linux-raw-sys-0.4.14",
+        sha256 = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/linux-raw-sys/0.4.14/download"],
+        strip_prefix = "linux-raw-sys-0.4.14",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.linux-raw-sys-0.4.14.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__log-0.4.22",
+        sha256 = "a7a70ba024b9dc04c27ea2f0c0548feb474ec5c54bba33a7f72f873a39d07b24",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/log/0.4.22/download"],
+        strip_prefix = "log-0.4.22",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.log-0.4.22.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__mach2-0.4.2",
+        sha256 = "19b955cdeb2a02b9117f121ce63aa52d08ade45de53e48fe6a38b39c10f6f709",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/mach2/0.4.2/download"],
+        strip_prefix = "mach2-0.4.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.mach2-0.4.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__memchr-2.7.4",
+        sha256 = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/memchr/2.7.4/download"],
+        strip_prefix = "memchr-2.7.4",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.memchr-2.7.4.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__memfd-0.6.4",
+        sha256 = "b2cffa4ad52c6f791f4f8b15f0c05f9824b2ced1160e88cc393d64fff9a8ac64",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/memfd/0.6.4/download"],
+        strip_prefix = "memfd-0.6.4",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.memfd-0.6.4.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__object-0.36.2",
+        sha256 = "3f203fa8daa7bb185f760ae12bd8e097f63d17041dcdcaf675ac54cdf863170e",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/object/0.36.2/download"],
+        strip_prefix = "object-0.36.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.object-0.36.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__once_cell-1.19.0",
+        sha256 = "3fdb12b2476b595f9358c5161aa467c2438859caa136dec86c26fdd2efe17b92",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/once_cell/1.19.0/download"],
+        strip_prefix = "once_cell-1.19.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.once_cell-1.19.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__paste-1.0.15",
+        sha256 = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/paste/1.0.15/download"],
+        strip_prefix = "paste-1.0.15",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.paste-1.0.15.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__pin-project-lite-0.2.14",
+        sha256 = "bda66fc9667c18cb2758a2ac84d1167245054bcf85d5d1aaa6923f45801bdd02",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/pin-project-lite/0.2.14/download"],
+        strip_prefix = "pin-project-lite-0.2.14",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.pin-project-lite-0.2.14.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__postcard-1.0.8",
+        sha256 = "a55c51ee6c0db07e68448e336cf8ea4131a620edefebf9893e759b2d793420f8",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/postcard/1.0.8/download"],
+        strip_prefix = "postcard-1.0.8",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.postcard-1.0.8.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__proc-macro2-1.0.86",
+        sha256 = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/proc-macro2/1.0.86/download"],
+        strip_prefix = "proc-macro2-1.0.86",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.proc-macro2-1.0.86.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__psm-0.1.21",
+        sha256 = "5787f7cda34e3033a72192c018bc5883100330f362ef279a8cbccfce8bb4e874",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/psm/0.1.21/download"],
+        strip_prefix = "psm-0.1.21",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.psm-0.1.21.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__quote-1.0.36",
+        sha256 = "0fa76aaf39101c457836aec0ce2316dbdc3ab723cdda1c6bd4e6ad4208acaca7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/quote/1.0.36/download"],
+        strip_prefix = "quote-1.0.36",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.quote-1.0.36.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__regalloc2-0.9.3",
+        sha256 = "ad156d539c879b7a24a363a2016d77961786e71f48f2e2fc8302a92abd2429a6",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/regalloc2/0.9.3/download"],
+        strip_prefix = "regalloc2-0.9.3",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.regalloc2-0.9.3.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__regex-1.10.5",
+        sha256 = "b91213439dad192326a0d7c6ee3955910425f441d7038e0d6933b0aec5c4517f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/regex/1.10.5/download"],
+        strip_prefix = "regex-1.10.5",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.regex-1.10.5.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__regex-automata-0.4.7",
+        sha256 = "38caf58cc5ef2fed281f89292ef23f6365465ed9a41b7a7754eb4e26496c92df",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/regex-automata/0.4.7/download"],
+        strip_prefix = "regex-automata-0.4.7",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.regex-automata-0.4.7.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__regex-syntax-0.8.4",
+        sha256 = "7a66a03ae7c801facd77a29370b4faec201768915ac14a721ba36f20bc9c209b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/regex-syntax/0.8.4/download"],
+        strip_prefix = "regex-syntax-0.8.4",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.regex-syntax-0.8.4.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__rustc-hash-1.1.0",
+        sha256 = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/rustc-hash/1.1.0/download"],
+        strip_prefix = "rustc-hash-1.1.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.rustc-hash-1.1.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__rustix-0.38.34",
+        sha256 = "70dc5ec042f7a43c4a73241207cecc9873a06d45debb38b329f8541d85c2730f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/rustix/0.38.34/download"],
+        strip_prefix = "rustix-0.38.34",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.rustix-0.38.34.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__ryu-1.0.18",
+        sha256 = "f3cb5ba0dc43242ce17de99c180e96db90b235b8a9fdc9543c96d2209116bd9f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/ryu/1.0.18/download"],
+        strip_prefix = "ryu-1.0.18",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.ryu-1.0.18.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__semver-1.0.23",
+        sha256 = "61697e0a1c7e512e84a621326239844a24d8207b4669b41bc18b32ea5cbf988b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/semver/1.0.23/download"],
+        strip_prefix = "semver-1.0.23",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.semver-1.0.23.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__serde-1.0.204",
+        sha256 = "bc76f558e0cbb2a839d37354c575f1dc3fdc6546b5be373ba43d95f231bf7c12",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/serde/1.0.204/download"],
+        strip_prefix = "serde-1.0.204",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.serde-1.0.204.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__serde_derive-1.0.204",
+        sha256 = "e0cd7e117be63d3c3678776753929474f3b04a43a080c744d6b0ae2a8c28e222",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/serde_derive/1.0.204/download"],
+        strip_prefix = "serde_derive-1.0.204",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.serde_derive-1.0.204.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__serde_json-1.0.120",
+        sha256 = "4e0d21c9a8cae1235ad58a00c11cb40d4b1e5c784f1ef2c537876ed6ffd8b7c5",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/serde_json/1.0.120/download"],
+        strip_prefix = "serde_json-1.0.120",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.serde_json-1.0.120.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__slice-group-by-0.3.1",
+        sha256 = "826167069c09b99d56f31e9ae5c99049e932a98c9dc2dac47645b08dbbf76ba7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/slice-group-by/0.3.1/download"],
+        strip_prefix = "slice-group-by-0.3.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.slice-group-by-0.3.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__smallvec-1.13.2",
+        sha256 = "3c5e1a9a646d36c3599cd173a41282daf47c44583ad367b8e6837255952e5c67",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/smallvec/1.13.2/download"],
+        strip_prefix = "smallvec-1.13.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.smallvec-1.13.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__sptr-0.3.2",
+        sha256 = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/sptr/0.3.2/download"],
+        strip_prefix = "sptr-0.3.2",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.sptr-0.3.2.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__stable_deref_trait-1.2.0",
+        sha256 = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/stable_deref_trait/1.2.0/download"],
+        strip_prefix = "stable_deref_trait-1.2.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.stable_deref_trait-1.2.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__syn-2.0.72",
+        sha256 = "dc4b9b9bf2add8093d3f2c0204471e951b2285580335de42f9d2534f3ae7a8af",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/syn/2.0.72/download"],
+        strip_prefix = "syn-2.0.72",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.syn-2.0.72.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__target-lexicon-0.12.16",
+        sha256 = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/target-lexicon/0.12.16/download"],
+        strip_prefix = "target-lexicon-0.12.16",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.target-lexicon-0.12.16.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__termcolor-1.4.1",
+        sha256 = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/termcolor/1.4.1/download"],
+        strip_prefix = "termcolor-1.4.1",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.termcolor-1.4.1.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__thiserror-1.0.63",
+        sha256 = "c0342370b38b6a11b6cc11d6a805569958d54cfa061a29969c3b5ce2ea405724",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/thiserror/1.0.63/download"],
+        strip_prefix = "thiserror-1.0.63",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.thiserror-1.0.63.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__thiserror-impl-1.0.63",
+        sha256 = "a4558b58466b9ad7ca0f102865eccc95938dca1a74a856f2b57b6629050da261",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/thiserror-impl/1.0.63/download"],
+        strip_prefix = "thiserror-impl-1.0.63",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.thiserror-impl-1.0.63.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__tracing-0.1.40",
+        sha256 = "c3523ab5a71916ccf420eebdf5521fcef02141234bbc0b8a49f2fdc4544364ef",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/tracing/0.1.40/download"],
+        strip_prefix = "tracing-0.1.40",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.tracing-0.1.40.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__tracing-attributes-0.1.27",
+        sha256 = "34704c8d6ebcbc939824180af020566b01a7c01f80641264eba0999f6c2b6be7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/tracing-attributes/0.1.27/download"],
+        strip_prefix = "tracing-attributes-0.1.27",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.tracing-attributes-0.1.27.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__tracing-core-0.1.32",
+        sha256 = "c06d3da6113f116aaee68e4d601191614c9053067f9ab7f6edbcb161237daa54",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/tracing-core/0.1.32/download"],
+        strip_prefix = "tracing-core-0.1.32",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.tracing-core-0.1.32.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__unicode-ident-1.0.12",
+        sha256 = "3354b9ac3fae1ff6755cb6db53683adb661634f67557942dea4facebec0fee4b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/unicode-ident/1.0.12/download"],
+        strip_prefix = "unicode-ident-1.0.12",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.unicode-ident-1.0.12.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__unicode-xid-0.2.4",
+        sha256 = "f962df74c8c05a667b5ee8bcf162993134c104e96440b663c8daa176dc772d8c",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/unicode-xid/0.2.4/download"],
+        strip_prefix = "unicode-xid-0.2.4",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.unicode-xid-0.2.4.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__version_check-0.9.5",
+        sha256 = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/version_check/0.9.5/download"],
+        strip_prefix = "version_check-0.9.5",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.version_check-0.9.5.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasm-encoder-0.215.0",
+        sha256 = "4fb56df3e06b8e6b77e37d2969a50ba51281029a9aeb3855e76b7f49b6418847",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasm-encoder/0.215.0/download"],
+        strip_prefix = "wasm-encoder-0.215.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasm-encoder-0.215.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmparser-0.215.0",
+        sha256 = "53fbde0881f24199b81cf49b6ff8f9c145ac8eb1b7fc439adb5c099734f7d90e",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmparser/0.215.0/download"],
+        strip_prefix = "wasmparser-0.215.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmparser-0.215.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmprinter-0.215.0",
+        sha256 = "d8e9a325d85053408209b3d2ce5eaddd0dd6864d1cff7a007147ba073157defc",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmprinter/0.215.0/download"],
+        strip_prefix = "wasmprinter-0.215.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmprinter-0.215.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-24.0.0",
+        sha256 = "9a5883d64dfc8423c56e3d8df27cffc44db25336aa468e8e0724fddf30a333d7",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime/24.0.0/download"],
+        strip_prefix = "wasmtime-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-asm-macros-24.0.0",
+        sha256 = "1c4dc7e2a379c0dd6be5b55857d14c4b277f43a9c429a9e14403eb61776ae3be",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-asm-macros/24.0.0/download"],
+        strip_prefix = "wasmtime-asm-macros-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-asm-macros-24.0.0.bazel"),
+    )
+
+    maybe(
+        new_git_repository,
+        name = "cu__wasmtime-c-api-macros-24.0.0",
+        commit = "6fc3d274c7994dad20c816ccc0739bf766b39a11",
+        init_submodules = True,
+        remote = "https://github.com/bytecodealliance/wasmtime",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-c-api-macros-24.0.0.bazel"),
+        strip_prefix = "crates/c-api-macros",
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-component-macro-24.0.0",
+        sha256 = "4b07773d1c3dab5f014ec61316ee317aa424033e17e70a63abdf7c3a47e58fcf",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-component-macro/24.0.0/download"],
+        strip_prefix = "wasmtime-component-macro-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-component-macro-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-component-util-24.0.0",
+        sha256 = "e38d735320f4e83478369ce649ad8fe87c6b893220902e798547a225fc0c5874",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-component-util/24.0.0/download"],
+        strip_prefix = "wasmtime-component-util-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-component-util-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-cranelift-24.0.0",
+        sha256 = "e570d831d0785d93d7d8c722b1eb9a34e0d0c1534317666f65892818358a2da9",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-cranelift/24.0.0/download"],
+        strip_prefix = "wasmtime-cranelift-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-cranelift-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-environ-24.0.0",
+        sha256 = "c5fe80dfbd81687431a7d4f25929fae1ae96894786d5c96b14ae41164ee97377",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-environ/24.0.0/download"],
+        strip_prefix = "wasmtime-environ-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-environ-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-jit-icache-coherence-24.0.0",
+        sha256 = "d15de8429db996f0d17a4163a35eccc3f874cbfb50f29c379951ea1bbb39452e",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-jit-icache-coherence/24.0.0/download"],
+        strip_prefix = "wasmtime-jit-icache-coherence-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-jit-icache-coherence-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-slab-24.0.0",
+        sha256 = "1f68d38fa6b30c5e1fc7d608263062997306f79e577ebd197ddcd6b0f55d87d1",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-slab/24.0.0/download"],
+        strip_prefix = "wasmtime-slab-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-slab-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-types-24.0.0",
+        sha256 = "6634e7079d9c5cfc81af8610ed59b488cc5b7f9777a2f4c1667a2565c2e45249",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-types/24.0.0/download"],
+        strip_prefix = "wasmtime-types-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-types-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-versioned-export-macros-24.0.0",
+        sha256 = "3850e3511d6c7f11a72d571890b0ed5f6204681f7f050b9de2690e7f13123fed",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-versioned-export-macros/24.0.0/download"],
+        strip_prefix = "wasmtime-versioned-export-macros-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-versioned-export-macros-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wasmtime-wit-bindgen-24.0.0",
+        sha256 = "3cb331ac7ed1d5ba49cddcdb6b11973752a857148858bb308777d2fc5584121f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wasmtime-wit-bindgen/24.0.0/download"],
+        strip_prefix = "wasmtime-wit-bindgen-24.0.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wasmtime-wit-bindgen-24.0.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__winapi-util-0.1.8",
+        sha256 = "4d4cc384e1e73b93bafa6fb4f1df8c41695c8a91cf9c4c64358067d15a7b6c6b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/winapi-util/0.1.8/download"],
+        strip_prefix = "winapi-util-0.1.8",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.winapi-util-0.1.8.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows-sys-0.52.0",
+        sha256 = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows-sys/0.52.0/download"],
+        strip_prefix = "windows-sys-0.52.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows-sys-0.52.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows-targets-0.52.6",
+        sha256 = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows-targets/0.52.6/download"],
+        strip_prefix = "windows-targets-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows-targets-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_aarch64_gnullvm-0.52.6",
+        sha256 = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_aarch64_gnullvm/0.52.6/download"],
+        strip_prefix = "windows_aarch64_gnullvm-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_aarch64_gnullvm-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_aarch64_msvc-0.52.6",
+        sha256 = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_aarch64_msvc/0.52.6/download"],
+        strip_prefix = "windows_aarch64_msvc-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_aarch64_msvc-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_i686_gnu-0.52.6",
+        sha256 = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_i686_gnu/0.52.6/download"],
+        strip_prefix = "windows_i686_gnu-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_i686_gnu-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_i686_gnullvm-0.52.6",
+        sha256 = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_i686_gnullvm/0.52.6/download"],
+        strip_prefix = "windows_i686_gnullvm-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_i686_gnullvm-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_i686_msvc-0.52.6",
+        sha256 = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_i686_msvc/0.52.6/download"],
+        strip_prefix = "windows_i686_msvc-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_i686_msvc-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_x86_64_gnu-0.52.6",
+        sha256 = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_x86_64_gnu/0.52.6/download"],
+        strip_prefix = "windows_x86_64_gnu-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_x86_64_gnu-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_x86_64_gnullvm-0.52.6",
+        sha256 = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_x86_64_gnullvm/0.52.6/download"],
+        strip_prefix = "windows_x86_64_gnullvm-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_x86_64_gnullvm-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__windows_x86_64_msvc-0.52.6",
+        sha256 = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/windows_x86_64_msvc/0.52.6/download"],
+        strip_prefix = "windows_x86_64_msvc-0.52.6",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.windows_x86_64_msvc-0.52.6.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__wit-parser-0.215.0",
+        sha256 = "935a97eaffd57c3b413aa510f8f0b550a4a9fe7d59e79cd8b89a83dcb860321f",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/wit-parser/0.215.0/download"],
+        strip_prefix = "wit-parser-0.215.0",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.wit-parser-0.215.0.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__zerocopy-0.7.35",
+        sha256 = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/zerocopy/0.7.35/download"],
+        strip_prefix = "zerocopy-0.7.35",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.zerocopy-0.7.35.bazel"),
+    )
+
+    maybe(
+        http_archive,
+        name = "cu__zerocopy-derive-0.7.35",
+        sha256 = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e",
+        type = "tar.gz",
+        urls = ["https://static.crates.io/crates/zerocopy-derive/0.7.35/download"],
+        strip_prefix = "zerocopy-derive-0.7.35",
+        build_file = Label("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:BUILD.zerocopy-derive-0.7.35.bazel"),
+    )
+
+    return [
+        struct(repo = "cu__anyhow-1.0.86", is_dev_dep = False),
+        struct(repo = "cu__env_logger-0.10.2", is_dev_dep = False),
+        struct(repo = "cu__log-0.4.22", is_dev_dep = False),
+        struct(repo = "cu__once_cell-1.19.0", is_dev_dep = False),
+        struct(repo = "cu__tracing-0.1.40", is_dev_dep = False),
+        struct(repo = "cu__wasmtime-24.0.0", is_dev_dep = False),
+        struct(repo = "cu__wasmtime-c-api-macros-24.0.0", is_dev_dep = False),
+    ]
diff --git a/bazel/cc_defs.bzl b/bazel/cc_defs.bzl
new file mode 100644
index 000000000..5951de438
--- /dev/null
+++ b/bazel/cc_defs.bzl
@@ -0,0 +1,22 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", _cc_test = "cc_test")
+load("@rules_fuzzing//fuzzing:cc_defs.bzl", _cc_fuzz_test = "cc_fuzz_test")
+
+def cc_test(data = [], **kwargs):
+    _cc_test(data = data + ["//bazel:tsan_suppressions.txt"], **kwargs)
+
+def cc_fuzz_test(data = [], **kwargs):
+    _cc_fuzz_test(data = data + ["//bazel:tsan_suppressions.txt"], **kwargs)
diff --git a/bazel/dependencies.bzl b/bazel/dependencies.bzl
index 553352e31..683fb9964 100644
--- a/bazel/dependencies.bzl
+++ b/bazel/dependencies.bzl
@@ -12,18 +12,25 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-load("@bazel-zig-cc//toolchain:defs.bzl", zig_register_toolchains = "register_toolchains")
 load("@com_google_protobuf//:protobuf_deps.bzl", "protobuf_deps")
-load("@proxy_wasm_cpp_host//bazel/cargo/wasmsign:crates.bzl", "wasmsign_fetch_remote_crates")
-load("@proxy_wasm_cpp_host//bazel/cargo/wasmtime:crates.bzl", "wasmtime_fetch_remote_crates")
-load("@rules_foreign_cc//foreign_cc:repositories.bzl", "rules_foreign_cc_dependencies")
-load("@rules_python//python:pip.bzl", "pip_install")
+load("@envoy_toolshed//sysroot:sysroot.bzl", "setup_sysroots")
+load("@proxy_wasm_cpp_host//bazel/cargo/wasmsign/remote:crates.bzl", wasmsign_crate_repositories = "crate_repositories")
+load("@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:crates.bzl", wasmtime_crate_repositories = "crate_repositories")
+load("@rules_python//python:repositories.bzl", "py_repositories", "python_register_toolchains")
+load("@rules_rust//crate_universe:repositories.bzl", "crate_universe_dependencies")
 load("@rules_rust//rust:repositories.bzl", "rust_repositories", "rust_repository_set")
+load("@toolchains_llvm//toolchain:deps.bzl", "bazel_toolchain_dependencies")
+load("@toolchains_llvm//toolchain:rules.bzl", "llvm_toolchain")
 
 def proxy_wasm_cpp_host_dependencies():
     # Bazel extensions.
 
-    rules_foreign_cc_dependencies()
+    py_repositories()
+    python_register_toolchains(
+        name = "python_3_9",
+        python_version = "3.9",
+        ignore_root_user_error = True,  # for docker run
+    )
 
     rust_repositories()
     rust_repository_set(
@@ -32,9 +39,9 @@ def proxy_wasm_cpp_host_dependencies():
         extra_target_triples = [
             "aarch64-unknown-linux-gnu",
             "wasm32-unknown-unknown",
-            "wasm32-wasi",
+            "wasm32-wasi",  # TODO: Change to wasm32-wasip1 once https://github.com/bazelbuild/rules_rust/issues/2782 is fixed
         ],
-        version = "1.58.1",
+        version = "1.77.2",
     )
     rust_repository_set(
         name = "rust_linux_s390x",
@@ -43,36 +50,54 @@ def proxy_wasm_cpp_host_dependencies():
             "wasm32-unknown-unknown",
             "wasm32-wasi",
         ],
-        version = "1.58.1",
+        version = "1.77.2",
     )
+    crate_universe_dependencies(bootstrap = True)
 
-    zig_register_toolchains(
-        version = "0.9.1",
-        url_format = "https://ziglang.org/download/%7Bversion%7D/zig-%7Bhost_platform%7D-%7Bversion%7D.tar.xz",
-        host_platform_sha256 = {
-            "linux-aarch64": "5d99a39cded1870a3fa95d4de4ce68ac2610cca440336cfd252ffdddc2b90e66",
-            "linux-x86_64": "be8da632c1d3273f766b69244d80669fe4f5e27798654681d77c992f17c237d7",
-            "macos-aarch64": "8c473082b4f0f819f1da05de2dbd0c1e891dff7d85d2c12b6ee876887d438287",
-            "macos-x86_64": "2d94984972d67292b55c1eb1c00de46580e9916575d083003546e9a01166754c",
+    setup_sysroots()
+    bazel_toolchain_dependencies()
+    llvm_toolchain(
+        name = "llvm_toolchain",
+        llvm_version = "19.1.0",
+        sha256 = {
+            "linux-x86_64": "cee77d641690466a193d9b88c89705de1c02bbad46bde6a3b126793c0a0f2923",
+            "linux-aarch64": "7bb54afd330fe1a1c2d4c593fa1e2dbe2abd9bf34fb3597994ff41e443cf144b",
+            "darwin-aarch64": "9da86f64a99f5ce9b679caf54e938736ca269c5e069d0c94ad08b995c5f25c16",
+            "darwin-x86_64": "264f2f1e8b67f066749349ae8b4943d346cd44e099464164ef21b42a57663540",
+        },
+        strip_prefix = {
+            "linux-x86_64": "LLVM-19.1.0-Linux-X64",
+            "linux-aarch64": "clang+llvm-19.1.0-aarch64-linux-gnu",
+            "darwin-aarch64": "LLVM-19.1.0-macOS-ARM64",
+            "darwin-x86_64": "LLVM-19.1.0-macOS-X64",
+        },
+        urls = {
+            "linux-x86_64": ["https://github.com/llvm/llvm-project/releases/download/llvmorg-19.1.0/LLVM-19.1.0-Linux-X64.tar.xz"],
+            "linux-aarch64": ["https://github.com/llvm/llvm-project/releases/download/llvmorg-19.1.0/clang+llvm-19.1.0-aarch64-linux-gnu.tar.xz"],
+            "darwin-aarch64": ["https://github.com/llvm/llvm-project/releases/download/llvmorg-19.1.0/LLVM-19.1.0-macOS-ARM64.tar.xz"],
+            "darwin-x86_64": ["https://github.com/llvm/llvm-project/releases/download/llvmorg-19.1.0/LLVM-19.1.0-macOS-X64.tar.xz"],
         },
     )
 
-    # Test dependencies.
-
-    wasmsign_fetch_remote_crates()
+    llvm_toolchain(
+        name = "llvm_aarch64",
+        llvm_version = "19.1.0",
+        toolchain_roots = {
+            "": "@llvm_toolchain_llvm//",
+        },
+        sysroot = {
+            "linux-aarch64": "@sysroot_linux_arm64//:sysroot",
+        },
+    )
 
     # NullVM dependencies.
 
     protobuf_deps()
 
-    # V8 dependencies.
+    # Wasmtime dependencies.
 
-    pip_install(
-        name = "v8_python_deps",
-        extra_pip_args = ["--require-hashes"],
-        requirements = "@v8//:bazel/requirements.txt",
-    )
+    wasmtime_crate_repositories()
 
-    # Wasmtime dependencies.
+    # Test dependencies.
 
-    wasmtime_fetch_remote_crates()
+    wasmsign_crate_repositories()
diff --git a/bazel/dependencies_import.bzl b/bazel/dependencies_import.bzl
new file mode 100644
index 000000000..e4cf5e879
--- /dev/null
+++ b/bazel/dependencies_import.bzl
@@ -0,0 +1,28 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@fuzzing_py_deps//:requirements.bzl", pip_fuzzing_dependencies = "install_deps")
+load("@llvm_toolchain//:toolchains.bzl", "llvm_register_toolchains")
+load("@rules_foreign_cc//foreign_cc:repositories.bzl", "rules_foreign_cc_dependencies")
+load("@rules_fuzzing//fuzzing:repositories.bzl", "rules_fuzzing_dependencies")
+load("@v8_python_deps//:requirements.bzl", pip_v8_dependencies = "install_deps")
+
+def proxy_wasm_cpp_host_dependencies_import():
+    llvm_register_toolchains()
+
+    rules_foreign_cc_dependencies()
+    rules_fuzzing_dependencies()
+
+    pip_fuzzing_dependencies()
+    pip_v8_dependencies()
diff --git a/bazel/dependencies_python.bzl b/bazel/dependencies_python.bzl
new file mode 100644
index 000000000..4207c79cf
--- /dev/null
+++ b/bazel/dependencies_python.bzl
@@ -0,0 +1,27 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_fuzzing//fuzzing:init.bzl", "rules_fuzzing_init")
+load("@rules_python//python:pip.bzl", "pip_parse")
+
+def proxy_wasm_cpp_host_dependencies_python():
+    # NOTE: this loads @fuzzing_py_deps via pip_parse
+    rules_fuzzing_init()
+
+    # V8 dependencies.
+    pip_parse(
+        name = "v8_python_deps",
+        extra_pip_args = ["--require-hashes"],
+        requirements_lock = "@v8//:bazel/requirements.txt",
+    )
diff --git a/bazel/external/BUILD b/bazel/external/BUILD
index e69de29bb..6d6d1266c 100644
--- a/bazel/external/BUILD
+++ b/bazel/external/BUILD
@@ -0,0 +1,13 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
diff --git a/bazel/external/Dockerfile.bazel b/bazel/external/Dockerfile.bazel
new file mode 100644
index 000000000..9b16abeb3
--- /dev/null
+++ b/bazel/external/Dockerfile.bazel
@@ -0,0 +1,75 @@
+# syntax=docker/dockerfile:1
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+# Prep:
+#   docker run --rm --privileged tonistiigi/binfmt --install all
+#   docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
+#   Need to see "F" flag: cat /proc/sys/fs/binfmt_misc/qemu-*
+#
+# Build:
+#   docker buildx build --platform linux/s390x -t $IMAGE -f Dockerfile.bazel
+#
+# Push:
+#   docker image tag $IMAGE ghcr.io/proxy-wasm/$IMAGE
+#   docker push ghcr.io/proxy-wasm/$IMAGE
+#
+# Test:
+#   docker run --rm --volume $(pwd):/mnt --workdir /mnt \
+#     --platform linux/s390x $IMAGE \
+#     bazel test --verbose_failures --test_output=errors \
+#     --define engine=null --config=clang --test_timeout=1800 \
+#     -- //test/...
+
+# Update base image
+ARG UBUNTU_VERSION=22.04
+FROM ubuntu:${UBUNTU_VERSION} as build
+RUN apt update && apt upgrade -y
+RUN apt autoremove -y
+
+# Install Bazel deps
+RUN apt install -y software-properties-common
+RUN add-apt-repository ppa:openjdk-r/ppa
+RUN apt install -y \
+    build-essential \
+    openjdk-11-jdk \
+    python3 \
+    curl \
+    zip \
+    unzip
+
+# Download Bazel source
+ARG BAZEL_VERSION=6.5.0
+RUN cd ~ && mkdir bazel && cd bazel
+RUN curl -LO https://github.com/bazelbuild/bazel/releases/download/${BAZEL_VERSION}/bazel-${BAZEL_VERSION}-dist.zip
+RUN unzip -q bazel-${BAZEL_VERSION}-dist.zip
+
+# Build Bazel
+# NOTE: This step is flaky and frequently hangs for multiarch / buildx.
+# If it takes more than 2 hours, restart the Docker build and try again.
+ENV EXTRA_BAZEL_ARGS="--tool_java_runtime_version=local_jdk"
+RUN bash ./compile.sh
+
+# Copy output to /usr/bin
+RUN cp /output/bazel /usr/bin/bazel
+
+# Install ProxyWasm build deps
+RUN apt install -y \
+    git \
+    python3-distutils \
+    clang \
+    libstdc++6 \
+    libssl-dev \
+    libz-dev
diff --git a/bazel/external/bazel_clang_tidy.patch b/bazel/external/bazel_clang_tidy.patch
index 9c84b3c7f..82711d83e 100644
--- a/bazel/external/bazel_clang_tidy.patch
+++ b/bazel/external/bazel_clang_tidy.patch
@@ -1,5 +1,4 @@
 # 1. Treat .h files as C++ headers.
-# 2. Hardcode clang-tidy-12.
 
 diff --git a/clang_tidy/clang_tidy.bzl b/clang_tidy/clang_tidy.bzl
 index 3a5ed07..5db5c6c 100644
@@ -15,13 +14,3 @@ index 3a5ed07..5db5c6c 100644
      # start args passed to the compiler
      args.add("--")
  
-diff --git a/clang_tidy/run_clang_tidy.sh b/clang_tidy/run_clang_tidy.sh
-index 582bab1..b9ebb94 100755
---- a/clang_tidy/run_clang_tidy.sh
-+++ b/clang_tidy/run_clang_tidy.sh
-@@ -11,4 +11,4 @@ shift
- touch $OUTPUT
- truncate -s 0 $OUTPUT
- 
--clang-tidy "$@"
-+clang-tidy-12 "$@"
diff --git a/bazel/external/dragonbox.BUILD b/bazel/external/dragonbox.BUILD
new file mode 100644
index 000000000..00f3ee074
--- /dev/null
+++ b/bazel/external/dragonbox.BUILD
@@ -0,0 +1,26 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", "cc_library")
+
+licenses(["notice"])  # Apache 2
+
+package(default_visibility = ["//visibility:public"])
+
+cc_library(
+    name = "dragonbox",
+    srcs = [],
+    hdrs = ["include/dragonbox/dragonbox.h"],
+    includes = ["include/"],
+)
diff --git a/bazel/external/fp16.BUILD b/bazel/external/fp16.BUILD
new file mode 100644
index 000000000..f82146cff
--- /dev/null
+++ b/bazel/external/fp16.BUILD
@@ -0,0 +1,29 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", "cc_library")
+
+licenses(["notice"])  # MIT
+
+package(default_visibility = ["//visibility:public"])
+
+cc_library(
+    name = "FP16",
+    hdrs = [
+        "include/fp16.h",
+        "include/fp16/bitcasts.h",
+        "include/fp16/fp16.h",
+    ],
+    includes = ["include/"],
+)
diff --git a/bazel/external/googletest.patch b/bazel/external/googletest.patch
new file mode 100644
index 000000000..502ef58b3
--- /dev/null
+++ b/bazel/external/googletest.patch
@@ -0,0 +1,13 @@
+diff --git a/BUILD.bazel b/BUILD.bazel
+index 8099642a85..3598661079 100644
+--- a/BUILD.bazel
++++ b/BUILD.bazel
+@@ -40,7 +40,7 @@ exports_files(["LICENSE"])
+
+ config_setting(
+     name = "windows",
+-    constraint_values = ["@bazel_tools//platforms:windows"],
++    constraint_values = ["@platforms//os:windows"],
+ )
+
+ config_setting(
diff --git a/bazel/external/intel_ittapi.BUILD b/bazel/external/intel_ittapi.BUILD
new file mode 100644
index 000000000..cc867842f
--- /dev/null
+++ b/bazel/external/intel_ittapi.BUILD
@@ -0,0 +1,35 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", "cc_library")
+
+licenses(["notice"])
+
+package(default_visibility = ["//visibility:public"])
+
+cc_library(
+    name = "lib_ittapi",
+    srcs = [
+        "include/ittnotify.h",
+        "include/jitprofiling.h",
+        "src/ittnotify/ittnotify_config.h",
+        "src/ittnotify/jitprofiling.c",
+    ],
+    hdrs = [
+        "include/ittnotify.h",
+        "src/ittnotify/ittnotify_types.h",
+    ],
+    includes = ["include/"],
+    visibility = ["//visibility:public"],
+)
diff --git a/bazel/external/llvm.BUILD b/bazel/external/llvm.BUILD
index 38909ee9a..9dccf5c98 100644
--- a/bazel/external/llvm.BUILD
+++ b/bazel/external/llvm.BUILD
@@ -1,3 +1,17 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load("@rules_foreign_cc//foreign_cc:defs.bzl", "cmake")
 
 licenses(["notice"])  # Apache 2
diff --git a/bazel/external/rules_rust.patch b/bazel/external/rules_rust.patch
index 7a1d0ab9b..a9a57c931 100644
--- a/bazel/external/rules_rust.patch
+++ b/bazel/external/rules_rust.patch
@@ -1,107 +1,15 @@
-# Pass CFLAGS and CXXFLAGS to build scripts (https://github.com/bazelbuild/rules_rust/pull/1081).
+# https://github.com/bazelbuild/rules_rust/pull/1315
 
-diff --git a/cargo/cargo_build_script.bzl b/cargo/cargo_build_script.bzl
-index 688fe3143..25e8eabc3 100644
---- a/cargo/cargo_build_script.bzl
-+++ b/cargo/cargo_build_script.bzl
-@@ -1,5 +1,5 @@
- # buildifier: disable=module-docstring
--load("@bazel_tools//tools/build_defs/cc:action_names.bzl", "C_COMPILE_ACTION_NAME")
-+load("@bazel_tools//tools/build_defs/cc:action_names.bzl", "CPP_COMPILE_ACTION_NAME", "C_COMPILE_ACTION_NAME")
- load("@bazel_tools//tools/cpp:toolchain_utils.bzl", "find_cpp_toolchain")
- load("//rust:defs.bzl", "rust_binary", "rust_common")
- 
-@@ -9,7 +9,7 @@ load("//rust/private:rustc.bzl", "BuildInfo", "get_compilation_mode_opts", "get_
- # buildifier: disable=bzl-visibility
- load("//rust/private:utils.bzl", "expand_dict_value_locations", "find_cc_toolchain", "find_toolchain", "name_to_crate_name")
- 
--def get_cc_compile_env(cc_toolchain, feature_configuration):
-+def get_cc_compile_args_and_env(cc_toolchain, feature_configuration):
-     """Gather cc environment variables from the given `cc_toolchain`
- 
-     Args:
-@@ -17,17 +17,31 @@ def get_cc_compile_env(cc_toolchain, feature_configuration):
-         feature_configuration (FeatureConfiguration): Class used to construct command lines from CROSSTOOL features.
- 
-     Returns:
--        dict: Returns environment variables to be set for given action.
-+        tuple: A tuple of the following items:
-+            - (sequence): A flattened C command line flags for given action.
-+            - (sequence): A flattened CXX command line flags for given action.
-+            - (dict): C environment variables to be set for given action.
-     """
-     compile_variables = cc_common.create_compile_variables(
-         feature_configuration = feature_configuration,
-         cc_toolchain = cc_toolchain,
-     )
--    return cc_common.get_environment_variables(
-+    cc_c_args = cc_common.get_memory_inefficient_command_line(
-         feature_configuration = feature_configuration,
-         action_name = C_COMPILE_ACTION_NAME,
-         variables = compile_variables,
-     )
-+    cc_cxx_args = cc_common.get_memory_inefficient_command_line(
-+        feature_configuration = feature_configuration,
-+        action_name = CPP_COMPILE_ACTION_NAME,
-+        variables = compile_variables,
-+    )
-+    cc_env = cc_common.get_environment_variables(
-+        feature_configuration = feature_configuration,
-+        action_name = C_COMPILE_ACTION_NAME,
-+        variables = compile_variables,
-+    )
-+    return cc_c_args, cc_cxx_args, cc_env
- 
- def _build_script_impl(ctx):
-     """The implementation for the `_build_script_run` rule.
-@@ -102,7 +116,7 @@ def _build_script_impl(ctx):
-     env["LDFLAGS"] = " ".join(link_args)
- 
-     # MSVC requires INCLUDE to be set
--    cc_env = get_cc_compile_env(cc_toolchain, feature_configuration)
-+    cc_c_args, cc_cxx_args, cc_env = get_cc_compile_args_and_env(cc_toolchain, feature_configuration)
-     include = cc_env.get("INCLUDE")
-     if include:
-         env["INCLUDE"] = include
-@@ -120,6 +134,12 @@ def _build_script_impl(ctx):
-         if cc_toolchain.sysroot:
-             env["SYSROOT"] = cc_toolchain.sysroot
- 
-+        # Populate CFLAGS and CXXFLAGS that cc-rs relies on when building from source, in particular
-+        # to determine the deployment target when building for apple platforms (`macosx-version-min`
-+        # for example, itself derived from the `macos_minimum_os` Bazel argument).
-+        env["CFLAGS"] = " ".join(cc_c_args)
-+        env["CXXFLAGS"] = " ".join(cc_cxx_args)
-+
-     for f in ctx.attr.crate_features:
-         env["CARGO_FEATURE_" + f.upper().replace("-", "_")] = "1"
- 
-diff --git a/test/cargo_build_script/build.rs b/test/cargo_build_script/build.rs
-index 68cef7232..4b337b48f 100644
---- a/test/cargo_build_script/build.rs
-+++ b/test/cargo_build_script/build.rs
-@@ -5,12 +5,12 @@ fn main() {
-         std::env::var("TOOL").unwrap()
-     );
- 
--    // Assert that the CC and CXX env vars existed and were executable.
-+    // Assert that the CC, CXX and LD env vars existed and were executable.
-     // We don't assert what happens when they're executed (in particular, we don't check for a
-     // non-zero exit code), but this asserts that it's an existing file which is executable.
-     //
-     // Unfortunately we need to shlex the path, because we add a `--sysroot=...` arg to the env var.
--    for env_var in &["CC", "CXX"] {
-+    for env_var in &["CC", "CXX", "LD"] {
-         let v = std::env::var(env_var)
-             .unwrap_or_else(|err| panic!("Error getting {}: {}", env_var, err));
-         let (path, args) = if let Some(index) = v.find("--sysroot") {
-@@ -24,4 +24,9 @@ fn main() {
-             .status()
-             .unwrap();
-     }
-+
-+    // Assert that some env variables are set.
-+    for env_var in &["CFLAGS", "CXXFLAGS", "LDFLAGS"] {
-+        assert!(std::env::var(env_var).is_ok());
-+    }
- }
+diff --git a/rust/private/rustc.bzl b/rust/private/rustc.bzl
+index bfd96ed9..d7e38658 100644
+--- a/rust/private/rustc.bzl
++++ b/rust/private/rustc.bzl
+@@ -1507,7 +1507,7 @@ def rustc_compile_action(
+         })
+         crate_info = rust_common.create_crate_info(**crate_info_dict)
+
+-    if crate_info.type in ["staticlib", "cdylib"]:
++    if crate_info.type in ["staticlib", "cdylib"] and not out_binary:
+         # These rules are not supposed to be depended on by other rust targets, and
+         # as such they shouldn't provide a CrateInfo. However, one may still want to
+         # write a rust_test for them, so we provide the CrateInfo wrapped in a provider
diff --git a/bazel/external/simdutf.BUILD b/bazel/external/simdutf.BUILD
new file mode 100644
index 000000000..834467e35
--- /dev/null
+++ b/bazel/external/simdutf.BUILD
@@ -0,0 +1,25 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", "cc_library")
+
+licenses(["notice"])  # Apache 2
+
+package(default_visibility = ["//visibility:public"])
+
+cc_library(
+    name = "simdutf",
+    srcs = ["simdutf.cpp"],
+    hdrs = ["simdutf.h"],
+)
diff --git a/bazel/external/v8.patch b/bazel/external/v8.patch
index 219935001..a124cf9a5 100644
--- a/bazel/external/v8.patch
+++ b/bazel/external/v8.patch
@@ -1,12 +1,20 @@
-# 1. Disable pointer compression (limits the maximum number of WasmVMs).
-# 2. Don't expose Wasm C API (only Wasm C++ API).
-# 3. Fix linking on Linux (needed only for branch-heads/10.0).
+From bc2a85e39fd55879b9baed51429c08b27d5514c8 Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 16:55:02 -0400
+Subject: [PATCH 1/7] Disable pointer compression
+
+Pointer compression limits the maximum number of WasmVMs.
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ BUILD.bazel | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/BUILD.bazel b/BUILD.bazel
-index 5fb10d3940..a19930d36e 100644
+index 3f5a87d054e..0a693b7ee10 100644
 --- a/BUILD.bazel
 +++ b/BUILD.bazel
-@@ -161,7 +161,7 @@ v8_int(
+@@ -292,7 +292,7 @@ v8_int(
  # If no explicit value for v8_enable_pointer_compression, we set it to 'none'.
  v8_string(
      name = "v8_enable_pointer_compression",
@@ -15,11 +23,80 @@ index 5fb10d3940..a19930d36e 100644
  )
  
  # Default setting for v8_enable_pointer_compression.
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From 61898e9a63ac89a37261c081b84714cfc400a4b1 Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 16:56:31 -0400
+Subject: [PATCH 2/7] Restore _allowlist_function_transition
+
+Reverts v8 commit b26554ec368e9553782012c96aa5e99b163eaff2, which removed use of
+_allowlist_function_transition from v8 bazel/defs.bzl, since it is still required
+by the version of Bazel we currently use (6.5.0).
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ bazel/defs.bzl                       |  3 +++
+ bazel/v8-non-pointer-compression.bzl | 11 +++++++++++
+ 2 files changed, 14 insertions(+)
+
+diff --git a/bazel/defs.bzl b/bazel/defs.bzl
+index 0539ea176ac..14d7ace5e59 100644
+--- a/bazel/defs.bzl
++++ b/bazel/defs.bzl
+@@ -485,6 +485,9 @@ _v8_mksnapshot = rule(
+             cfg = "exec",
+         ),
+         "target_os": attr.string(mandatory = True),
++        "_allowlist_function_transition": attr.label(
++            default = "@bazel_tools//tools/allowlists/function_transition_allowlist",
++        ),
+         "prefix": attr.string(mandatory = True),
+         "suffix": attr.string(mandatory = True),
+     },
+diff --git a/bazel/v8-non-pointer-compression.bzl b/bazel/v8-non-pointer-compression.bzl
+index 8c929454840..57336154cf7 100644
+--- a/bazel/v8-non-pointer-compression.bzl
++++ b/bazel/v8-non-pointer-compression.bzl
+@@ -47,6 +47,17 @@ v8_binary_non_pointer_compression = rule(
+         # Note specificaly how it's configured with v8_target_cpu_transition, which
+         # ensures that setting propagates down the graph.
+         "binary": attr.label(cfg = v8_disable_pointer_compression),
++        # This is a stock Bazel requirement for any rule that uses Starlark
++        # transitions. It's okay to copy the below verbatim for all such rules.
++        #
++        # The purpose of this requirement is to give the ability to restrict
++        # which packages can invoke these rules, since Starlark transitions
++        # make much larger graphs possible that can have memory and performance
++        # consequences for your build. The whitelist defaults to "everything".
++        # But you can redefine it more strictly if you feel that's prudent.
++        "_allowlist_function_transition": attr.label(
++            default = "@bazel_tools//tools/allowlists/function_transition_allowlist",
++        ),
+     },
+     # Making this executable means it works with "$ bazel run".
+     executable = True,
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From 4a6e7158fd4ca48c75c8e33ea15760c9beea1d2f Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 16:56:52 -0400
+Subject: [PATCH 3/7] Don't expose Wasm C API (only Wasm C++ API).
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ src/wasm/c-api.cc | 4 ++++
+ 1 file changed, 4 insertions(+)
+
 diff --git a/src/wasm/c-api.cc b/src/wasm/c-api.cc
-index ce3f569fd5..dc8a4c4f6a 100644
+index 05e4029f183..d705be96a16 100644
 --- a/src/wasm/c-api.cc
 +++ b/src/wasm/c-api.cc
-@@ -2238,6 +2238,8 @@ auto Instance::exports() const -> ownvec<Extern> {
+@@ -2472,6 +2472,8 @@ WASM_EXPORT auto Instance::exports() const -> ownvec<Extern> {
  
  }  // namespace wasm
  
@@ -28,37 +105,242 @@ index ce3f569fd5..dc8a4c4f6a 100644
  // BEGIN FILE wasm-c.cc
  
  extern "C" {
-@@ -3257,3 +3259,5 @@ wasm_instance_t* wasm_frame_instance(const wasm_frame_t* frame) {
+@@ -3518,3 +3520,5 @@ wasm_instance_t* wasm_frame_instance(const wasm_frame_t* frame) {
  #undef WASM_DEFINE_SHARABLE_REF
  
  }  // extern "C"
 +
 +#endif
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From 7b593eb8086dcfe9012d4fa694d622f21dadb731 Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 16:58:02 -0400
+Subject: [PATCH 4/7] Stub out fast_float for bazel-supplied version
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ BUILD.bazel | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/BUILD.bazel b/BUILD.bazel
+index 0a693b7ee10..eafd9dad20c 100644
+--- a/BUILD.bazel
++++ b/BUILD.bazel
+@@ -4438,7 +4438,7 @@ v8_library(
+     ],
+     deps = [
+         ":lib_dragonbox",
+-        "//third_party/fast_float/src:fast_float",
++        "@fast_float//:fast_float",
+         ":lib_fp16",
+         ":simdutf",
+         ":v8_libbase",
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From b442d34b12dd513946f509d9db86839ce8aa4d7f Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 20:04:05 -0400
+Subject: [PATCH 5/7] Stub out vendored dependencies for bazel-sourced versions
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ BUILD.bazel | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/BUILD.bazel b/BUILD.bazel
+index eafd9dad20c..ce36666e36e 100644
+--- a/BUILD.bazel
++++ b/BUILD.bazel
+@@ -4437,10 +4437,10 @@ v8_library(
+         ":noicu/generated_torque_definitions",
+     ],
+     deps = [
+-        ":lib_dragonbox",
++        "@dragonbox//:dragonbox",
+         "@fast_float//:fast_float",
+-        ":lib_fp16",
+-        ":simdutf",
++        "@fp16//:FP16",
++        "@simdutf//:simdutf",
+         ":v8_libbase",
+         "@abseil-cpp//absl/container:btree",
+         "@abseil-cpp//absl/container:flat_hash_map",
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From e0b8f32cc057a3c0875437d5d54d012cabcab458 Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Wed, 16 Jul 2025 20:29:10 -0400
+Subject: [PATCH 6/7] Add build flags to make V8 compile with GCC
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ bazel/defs.bzl | 3 +++
+ 1 file changed, 3 insertions(+)
+
 diff --git a/bazel/defs.bzl b/bazel/defs.bzl
-index dee5e69cc4..070fadb969 100644
+index 14d7ace5e59..c7a48d4e805 100644
 --- a/bazel/defs.bzl
 +++ b/bazel/defs.bzl
-@@ -159,8 +159,21 @@ def _default_args():
-                 "DbgHelp.lib",
+@@ -117,6 +117,9 @@ def _default_args():
+                 "-Wno-implicit-int-float-conversion",
+                 "-Wno-deprecated-copy",
+                 "-Wno-non-virtual-dtor",
++                "-Wno-invalid-offsetof",
++                "-Wno-dangling-pointer",
++                "-Wno-dangling-reference",
+                 "-isystem .",
+             ],
+             "//conditions:default": [],
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
+
+From 7ce2d6bd14b338ab91a8636a8694b9ef180b2f90 Mon Sep 17 00:00:00 2001
+From: Matt Leon <mattleon@google.com>
+Date: Fri, 18 Jul 2025 17:28:42 -0400
+Subject: [PATCH 7/7] Hack out atomic simd support in V8.
+
+Atomic simdutf requires __cpp_lib_atomic_ref >= 201806, which is only
+supported in clang libc++ 19+. The version of LLVM used in Envoy as of
+2025-07-18 is libc++ 18, so this is not supported.
+
+The simdutf documentation indicates this atomic form is not tested and
+is not recommended for use:
+https://github.com/simdutf/simdutf/blob/5d1b6248f29a8ed0eb90f79be268be41730e39f8/include/simdutf/implementation.h#L3066-L3068
+
+In addition, this is in the implementation of a JS array buffer. Since
+proxy-wasm-cpp-host does not make use of JS array buffers or shared
+memory between web workers, we're stubbing it out.
+
+Mostly reverts
+https://github.com/v8/v8/commit/6d6c1e680c7b8ea5f62a76e9c3d88d3fb0a88df0.
+
+Signed-off-by: Matt Leon <mattleon@google.com>
+---
+ bazel/defs.bzl                       |  2 +-
+ src/builtins/builtins-typed-array.cc |  8 ++++++++
+ src/objects/simd.cc                  | 10 ++++++++++
+ 3 files changed, 19 insertions(+), 1 deletion(-)
+
+diff --git a/bazel/defs.bzl b/bazel/defs.bzl
+index c7a48d4e805..a73b3812882 100644
+--- a/bazel/defs.bzl
++++ b/bazel/defs.bzl
+@@ -180,7 +180,7 @@ def _default_args():
                  "Advapi32.lib",
              ],
--            "@v8//bazel/config:is_macos": ["-pthread"],
--            "//conditions:default": ["-Wl,--no-as-needed -ldl -pthread"],
-+            "@v8//bazel/config:is_macos": [
-+                "-pthread",
-+            ],
-+            "@v8//bazel/config:is_android": [
-+                "-Wl,--no-as-needed",
-+                "-ldl",
-+                "-pthread",
-+            ],
-+            "@v8//bazel/config:is_linux": [
-+                "-Wl,--no-as-needed",
-+                "-ldl",
-+                "-lrt",
-+                "-pthread",
-+            ],
-+            "//conditions:default": [],
+             "@v8//bazel/config:is_macos": ["-pthread"],
+-            "//conditions:default": ["-Wl,--no-as-needed -ldl -latomic -pthread"],
++            "//conditions:default": ["-Wl,--no-as-needed -ldl -pthread"],
          }) + select({
              ":should_add_rdynamic": ["-rdynamic"],
              "//conditions:default": [],
+diff --git a/src/builtins/builtins-typed-array.cc b/src/builtins/builtins-typed-array.cc
+index 918cb873481..bc933e8dc1d 100644
+--- a/src/builtins/builtins-typed-array.cc
++++ b/src/builtins/builtins-typed-array.cc
+@@ -520,17 +520,21 @@ simdutf::result ArrayBufferSetFromBase64(
+     DirectHandle<JSTypedArray> typed_array, size_t& output_length) {
+   output_length = array_length;
+   simdutf::result simd_result;
++#ifdef WANT_ATOMIC_REF
+   if (typed_array->buffer()->is_shared()) {
+     simd_result = simdutf::atomic_base64_to_binary_safe(
+         reinterpret_cast<const T>(input_vector), input_length,
+         reinterpret_cast<char*>(typed_array->DataPtr()), output_length,
+         alphabet, last_chunk_handling, /*decode_up_to_bad_char*/ true);
+   } else {
++#endif
+     simd_result = simdutf::base64_to_binary_safe(
+         reinterpret_cast<const T>(input_vector), input_length,
+         reinterpret_cast<char*>(typed_array->DataPtr()), output_length,
+         alphabet, last_chunk_handling, /*decode_up_to_bad_char*/ true);
++#ifdef WANT_ATOMIC_REF
+   }
++#endif
+ 
+   return simd_result;
+ }
+@@ -833,15 +837,19 @@ BUILTIN(Uint8ArrayPrototypeToBase64) {
+     // 11. Return CodePointsToString(outAscii).
+ 
+     size_t simd_result_size;
++#ifdef WANT_ATOMIC_REF
+     if (uint8array->buffer()->is_shared()) {
+       simd_result_size = simdutf::atomic_binary_to_base64(
+           std::bit_cast<const char*>(uint8array->DataPtr()), length,
+           reinterpret_cast<char*>(output->GetChars(no_gc)), alphabet);
+     } else {
++#endif
+       simd_result_size = simdutf::binary_to_base64(
+           std::bit_cast<const char*>(uint8array->DataPtr()), length,
+           reinterpret_cast<char*>(output->GetChars(no_gc)), alphabet);
++#ifdef WANT_ATOMIC_REF
+     }
++#endif
+     DCHECK_EQ(simd_result_size, output_length);
+     USE(simd_result_size);
+   }
+diff --git a/src/objects/simd.cc b/src/objects/simd.cc
+index 0ef570ceb7d..9217fa76072 100644
+--- a/src/objects/simd.cc
++++ b/src/objects/simd.cc
+@@ -477,6 +477,7 @@ void Uint8ArrayToHexSlow(const char* bytes, size_t length,
+   }
+ }
+ 
++#ifdef WANT_ATOMIC_REF
+ void AtomicUint8ArrayToHexSlow(const char* bytes, size_t length,
+                                DirectHandle<SeqOneByteString> string_output) {
+   int index = 0;
+@@ -492,6 +493,7 @@ void AtomicUint8ArrayToHexSlow(const char* bytes, size_t length,
+     index += 2;
+   }
+ }
++#endif
+ 
+ inline uint16_t ByteToHex(uint8_t byte) {
+   const uint16_t correction = (('a' - '0' - 10) << 8) + ('a' - '0' - 10);
+@@ -645,11 +647,15 @@ Tagged<Object> Uint8ArrayToHex(const char* bytes, size_t length, bool is_shared,
+   }
+ #endif
+ 
++#ifdef WANT_ATOMIC_REF
+   if (is_shared) {
+     AtomicUint8ArrayToHexSlow(bytes, length, string_output);
+   } else {
++#endif
+     Uint8ArrayToHexSlow(bytes, length, string_output);
++#ifdef WANT_ATOMIC_REF
+   }
++#endif
+   return *string_output;
+ }
+ 
+@@ -1082,12 +1088,16 @@ bool ArrayBufferFromHex(const base::Vector<T>& input_vector, bool is_shared,
+   for (uint32_t i = 0; i < output_length * 2; i += 2) {
+     result = HandleRemainingHexValues(input_vector, i);
+     if (result.has_value()) {
++#ifdef WANT_ATOMIC_REF
+       if (is_shared) {
+         std::atomic_ref<uint8_t>(buffer[index++])
+             .store(result.value(), std::memory_order_relaxed);
+       } else {
++#endif
+         buffer[index++] = result.value();
++#ifdef WANT_ATOMIC_REF
+       }
++#endif
+     } else {
+       return false;
+     }
+-- 
+2.50.0.727.gbf7dc18ff4-goog
+
diff --git a/bazel/external/wamr.BUILD b/bazel/external/wamr.BUILD
index f25b9f074..a3375e2cb 100644
--- a/bazel/external/wamr.BUILD
+++ b/bazel/external/wamr.BUILD
@@ -1,3 +1,17 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load("@rules_foreign_cc//foreign_cc:defs.bzl", "cmake")
 
 licenses(["notice"])  # Apache 2
@@ -11,18 +25,53 @@ filegroup(
 
 cmake(
     name = "wamr_lib",
-    cache_entries = {
-        "WAMR_BUILD_INTERP": "1",
-        "WAMR_BUILD_FAST_INTERP": "1",
-        "WAMR_BUILD_JIT": "0",
-        "WAMR_BUILD_LAZY_JIT": "0",
-        "WAMR_BUILD_AOT": "0",
-        "WAMR_BUILD_SIMD": "0",
-        "WAMR_BUILD_MULTI_MODULE": "1",
-        "WAMR_BUILD_LIBC_WASI": "0",
-        "WAMR_BUILD_TAIL_CALL": "1",
-    },
-    generate_args = ["-GNinja"],
+    generate_args = [
+        # disable WASI
+        "-DWAMR_BUILD_LIBC_WASI=0",
+        "-DWAMR_BUILD_LIBC_BUILTIN=0",
+        # MVP
+        "-DWAMR_BUILD_BULK_MEMORY=1",
+        "-DWAMR_BUILD_REF_TYPES=1",
+        "-DWAMR_BUILD_TAIL_CALL=1",
+        # WAMR private features
+        "-DWAMR_BUILD_MULTI_MODULE=0",
+        # Some tests have indicated that the following three factors have
+        #   a minimal impact on performance.
+        # - Get function names from name section
+        "-DWAMR_BUILD_CUSTOM_NAME_SECTION=1",
+        "-DWAMR_BUILD_LOAD_CUSTOM_SECTION=1",
+        # - Show Wasm call stack if met a trap
+        "-DWAMR_BUILD_DUMP_CALL_STACK=1",
+        # Cache module files
+        "-DWAMR_BUILD_WASM_CACHE=0",
+        "-GNinja",
+    ] + select({
+        "@proxy_wasm_cpp_host//bazel:engine_wamr_jit": [
+            "-DLLVM_DIR=$EXT_BUILD_DEPS/copy_llvm-15_0_7/llvm/lib/cmake/llvm",
+            "-DWAMR_BUILD_AOT=1",
+            "-DWAMR_BUILD_FAST_INTERP=0",
+            "-DWAMR_BUILD_INTERP=0",
+            "-DWAMR_BUILD_JIT=1",
+            "-DWAMR_BUILD_SIMD=1",
+            # linux perf. only for jit and aot
+            # "-DWAMR_BUILD_LINUX_PERF=1",
+        ],
+        "//conditions:default": [
+            "-DWAMR_BUILD_AOT=0",
+            "-DWAMR_BUILD_FAST_INTERP=1",
+            "-DWAMR_BUILD_INTERP=1",
+            "-DWAMR_BUILD_JIT=0",
+            "-DWAMR_BUILD_SIMD=0",
+        ],
+    }),
     lib_source = ":srcs",
-    out_static_libs = ["libvmlib.a"],
+    linkopts = select({
+        "@proxy_wasm_cpp_host//bazel:engine_wamr_jit": ["-ldl"],
+        "//conditions:default": [],
+    }),
+    out_static_libs = ["libiwasm.a"],
+    deps = select({
+        "@proxy_wasm_cpp_host//bazel:engine_wamr_jit": ["@llvm-15_0_7//:llvm_wamr_lib"],
+        "//conditions:default": [],
+    }),
 )
diff --git a/bazel/external/wamr_llvm.BUILD b/bazel/external/wamr_llvm.BUILD
new file mode 100644
index 000000000..6fe496145
--- /dev/null
+++ b/bazel/external/wamr_llvm.BUILD
@@ -0,0 +1,147 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_foreign_cc//foreign_cc:defs.bzl", "cmake")
+
+licenses(["notice"])  # Apache 2
+
+package(default_visibility = ["//visibility:public"])
+
+filegroup(
+    name = "srcs",
+    srcs = glob(["**"]),
+)
+
+cmake(
+    name = "llvm_wamr_lib",
+    cache_entries = {
+        # Disable both: BUILD and INCLUDE, since some of the INCLUDE
+        # targets build code instead of only generating build files.
+        "LLVM_BUILD_BENCHMARKS": "off",
+        "LLVM_INCLUDE_BENCHMARKS": "off",
+        "LLVM_BUILD_DOCS": "off",
+        "LLVM_INCLUDE_DOCS": "off",
+        "LLVM_BUILD_EXAMPLES": "off",
+        "LLVM_INCLUDE_EXAMPLES": "off",
+        "LLVM_BUILD_TESTS": "off",
+        "LLVM_INCLUDE_TESTS": "off",
+        "LLVM_BUILD_TOOLS": "off",
+        "LLVM_INCLUDE_TOOLS": "off",
+        "LLVM_ENABLE_IDE": "off",
+        "LLVM_ENABLE_LIBEDIT": "off",
+        "LLVM_ENABLE_LIBXML2": "off",
+        "LLVM_ENABLE_TERMINFO": "off",
+        "LLVM_ENABLE_ZLIB": "off",
+        "LLVM_ENABLE_ZSTD": "off",
+        "LLVM_TARGETS_TO_BUILD": "X86",
+        "CMAKE_CXX_FLAGS": "-Wno-unused-command-line-argument",
+    },
+    # `lld` doesn't work on MacOS
+    generate_args = select({
+        "@platforms//os:linux": [
+            "-GNinja",
+            "-DLLVM_USE_LINKER=lld",
+        ],
+        "//conditions:default": [
+            "-GNinja",
+        ],
+    }),
+    lib_source = ":srcs",
+    out_data_dirs = [
+        "bin",
+        "include",
+        "lib",
+        "libexec",
+        "share",
+    ],
+    out_static_libs = [
+        # How to get the library list:
+        #  build LLVM with "-DLLVM_INCLUDE_TOOLS=ON"
+        #  cd bin and run "./llvm-config --libnames"
+        "libLLVMWindowsManifest.a",
+        "libLLVMXRay.a",
+        "libLLVMLibDriver.a",
+        "libLLVMDlltoolDriver.a",
+        "libLLVMCoverage.a",
+        "libLLVMLineEditor.a",
+        "libLLVMX86Disassembler.a",
+        "libLLVMX86AsmParser.a",
+        "libLLVMX86CodeGen.a",
+        "libLLVMX86Desc.a",
+        "libLLVMX86Info.a",
+        "libLLVMOrcJIT.a",
+        "libLLVMMCJIT.a",
+        "libLLVMJITLink.a",
+        "libLLVMInterpreter.a",
+        "libLLVMExecutionEngine.a",
+        "libLLVMRuntimeDyld.a",
+        "libLLVMOrcTargetProcess.a",
+        "libLLVMOrcShared.a",
+        "libLLVMDWP.a",
+        "libLLVMSymbolize.a",
+        "libLLVMDebugInfoPDB.a",
+        "libLLVMDebugInfoGSYM.a",
+        "libLLVMOption.a",
+        "libLLVMObjectYAML.a",
+        "libLLVMMCA.a",
+        "libLLVMMCDisassembler.a",
+        "libLLVMLTO.a",
+        "libLLVMPasses.a",
+        "libLLVMCFGuard.a",
+        "libLLVMCoroutines.a",
+        "libLLVMObjCARCOpts.a",
+        "libLLVMipo.a",
+        "libLLVMVectorize.a",
+        "libLLVMLinker.a",
+        "libLLVMInstrumentation.a",
+        "libLLVMFrontendOpenMP.a",
+        "libLLVMFrontendOpenACC.a",
+        "libLLVMExtensions.a",
+        "libLLVMDWARFLinker.a",
+        "libLLVMGlobalISel.a",
+        "libLLVMMIRParser.a",
+        "libLLVMAsmPrinter.a",
+        "libLLVMDebugInfoMSF.a",
+        "libLLVMDebugInfoDWARF.a",
+        "libLLVMSelectionDAG.a",
+        "libLLVMCodeGen.a",
+        "libLLVMIRReader.a",
+        "libLLVMAsmParser.a",
+        "libLLVMInterfaceStub.a",
+        "libLLVMFileCheck.a",
+        "libLLVMFuzzMutate.a",
+        "libLLVMTarget.a",
+        "libLLVMScalarOpts.a",
+        "libLLVMInstCombine.a",
+        "libLLVMAggressiveInstCombine.a",
+        "libLLVMTransformUtils.a",
+        "libLLVMBitWriter.a",
+        "libLLVMAnalysis.a",
+        "libLLVMProfileData.a",
+        "libLLVMObject.a",
+        "libLLVMTextAPI.a",
+        "libLLVMMCParser.a",
+        "libLLVMMC.a",
+        "libLLVMDebugInfoCodeView.a",
+        "libLLVMBitReader.a",
+        "libLLVMCore.a",
+        "libLLVMRemarks.a",
+        "libLLVMBitstreamReader.a",
+        "libLLVMBinaryFormat.a",
+        "libLLVMTableGen.a",
+        "libLLVMSupport.a",
+        "libLLVMDemangle.a",
+    ],
+    working_directory = "llvm",
+)
diff --git a/bazel/external/wasm-c-api.BUILD b/bazel/external/wasm-c-api.BUILD
deleted file mode 100644
index 4946da7db..000000000
--- a/bazel/external/wasm-c-api.BUILD
+++ /dev/null
@@ -1,60 +0,0 @@
-load("@rules_cc//cc:defs.bzl", "cc_library")
-
-licenses(["notice"])  # Apache 2
-
-package(default_visibility = ["//visibility:public"])
-
-cc_library(
-    name = "wasmtime_lib",
-    hdrs = [
-        "include/wasm.h",
-    ],
-    deps = [
-        "@com_github_bytecodealliance_wasmtime//:rust_c_api",
-    ],
-)
-
-genrule(
-    name = "prefixed_wasmtime_c_api_headers",
-    srcs = [
-        "include/wasm.h",
-    ],
-    outs = [
-        "include/prefixed_wasm.h",
-    ],
-    cmd = """
-        sed -e 's/\\ wasm_/\\ wasmtime_wasm_/g' \
-            -e 's/\\*wasm_/\\*wasmtime_wasm_/g' \
-            -e 's/(wasm_/(wasmtime_wasm_/g'     \
-        $(<) >$@
-        """,
-)
-
-genrule(
-    name = "prefixed_wasmtime_c_api_lib",
-    srcs = [
-        "@com_github_bytecodealliance_wasmtime//:rust_c_api",
-    ],
-    outs = [
-        "prefixed_wasmtime_c_api.a",
-    ],
-    cmd = """
-        for symbol in $$(nm -P $(<) 2>/dev/null | grep -E ^_?wasm_ | cut -d" " -f1); do
-            echo $$symbol | sed -r 's/^(_?)(wasm_[a-z_]+)$$/\\1\\2 \\1wasmtime_\\2/' >>prefixed
-        done
-        # This should be OBJCOPY, but bazel-zig-cc doesn't define it.
-        objcopy --redefine-syms=prefixed $(<) $@
-        """,
-    toolchains = ["@bazel_tools//tools/cpp:current_cc_toolchain"],
-)
-
-cc_library(
-    name = "prefixed_wasmtime_lib",
-    srcs = [
-        ":prefixed_wasmtime_c_api_lib",
-    ],
-    hdrs = [
-        ":prefixed_wasmtime_c_api_headers",
-    ],
-    linkstatic = 1,
-)
diff --git a/bazel/external/wasmedge.BUILD b/bazel/external/wasmedge.BUILD
new file mode 100644
index 000000000..e8fba783e
--- /dev/null
+++ b/bazel/external/wasmedge.BUILD
@@ -0,0 +1,41 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_foreign_cc//foreign_cc:defs.bzl", "cmake")
+
+licenses(["notice"])  # Apache 2
+
+package(default_visibility = ["//visibility:public"])
+
+filegroup(
+    name = "srcs",
+    srcs = glob(["**"]),
+)
+
+cmake(
+    name = "wasmedge_lib",
+    cache_entries = {
+        "WASMEDGE_BUILD_AOT_RUNTIME": "Off",
+        "WASMEDGE_BUILD_SHARED_LIB": "Off",
+        "WASMEDGE_BUILD_STATIC_LIB": "On",
+        "WASMEDGE_BUILD_TOOLS": "Off",
+        "WASMEDGE_FORCE_DISABLE_LTO": "On",
+    },
+    env = {
+        "CXXFLAGS": "-Wno-error=dangling-reference -Wno-error=maybe-uninitialized -Wno-error=array-bounds= -Wno-error=deprecated-declarations -std=c++20",
+    },
+    generate_args = ["-GNinja"],
+    lib_source = ":srcs",
+    out_static_libs = ["libwasmedge.a"],
+)
diff --git a/bazel/external/wasmtime.BUILD b/bazel/external/wasmtime.BUILD
index d108e71f9..f359d9361 100644
--- a/bazel/external/wasmtime.BUILD
+++ b/bazel/external/wasmtime.BUILD
@@ -1,23 +1,93 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:defs.bzl", "cc_library")
 load("@rules_rust//rust:defs.bzl", "rust_static_library")
 
 licenses(["notice"])  # Apache 2
 
 package(default_visibility = ["//visibility:public"])
 
+cc_library(
+    name = "wasmtime_lib",
+    hdrs = [
+        "crates/c-api/include/wasm.h",
+    ],
+    deps = [
+        ":rust_c_api",
+    ],
+)
+
+genrule(
+    name = "prefixed_wasmtime_c_api_headers",
+    srcs = [
+        "crates/c-api/include/wasm.h",
+    ],
+    outs = [
+        "crates/c-api/include/prefixed_wasm.h",
+    ],
+    cmd = """
+        sed -e 's/\\ wasm_/\\ wasmtime_wasm_/g' \
+            -e 's/\\*wasm_/\\*wasmtime_wasm_/g' \
+            -e 's/(wasm_/(wasmtime_wasm_/g'     \
+        $(<) >$@
+        """,
+)
+
+genrule(
+    name = "prefixed_wasmtime_c_api_lib",
+    srcs = [
+        ":rust_c_api",
+    ],
+    outs = [
+        "prefixed_wasmtime_c_api.a",
+    ],
+    cmd = """
+        for symbol in $$(nm -P $(<) 2>/dev/null | grep -E ^_?wasm_ | cut -d" " -f1); do
+            echo $$symbol | sed -r 's/^(_?)(wasm_[a-z_]+)$$/\\1\\2 \\1wasmtime_\\2/' >>prefixed
+        done
+        # This should be OBJCOPY, but bazel-zig-cc doesn't define it.
+        objcopy --redefine-syms=prefixed $(<) $@
+        """,
+    toolchains = ["@bazel_tools//tools/cpp:current_cc_toolchain"],
+)
+
+cc_library(
+    name = "prefixed_wasmtime_lib",
+    srcs = [
+        ":prefixed_wasmtime_c_api_lib",
+    ],
+    hdrs = [
+        ":prefixed_wasmtime_c_api_headers",
+    ],
+    linkstatic = 1,
+)
+
 rust_static_library(
     name = "rust_c_api",
     srcs = glob(["crates/c-api/src/**/*.rs"]),
-    crate_features = [],
+    crate_features = ["cranelift"],
     crate_root = "crates/c-api/src/lib.rs",
-    edition = "2018",
+    edition = "2021",
     proc_macro_deps = [
-        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime:wasmtime_c_api_macros",
+        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:wasmtime-c-api-macros",
     ],
     deps = [
-        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime:anyhow",
-        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime:env_logger",
-        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime:once_cell",
+        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:anyhow",
+        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:env_logger",
+        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:once_cell",
         # buildifier: leave-alone
-        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime:wasmtime",
+        "@proxy_wasm_cpp_host//bazel/cargo/wasmtime/remote:wasmtime",
     ],
 )
diff --git a/bazel/external/wavm.BUILD b/bazel/external/wavm.BUILD
deleted file mode 100644
index b315efdea..000000000
--- a/bazel/external/wavm.BUILD
+++ /dev/null
@@ -1,28 +0,0 @@
-load("@rules_foreign_cc//foreign_cc:defs.bzl", "cmake")
-
-licenses(["notice"])  # Apache 2
-
-package(default_visibility = ["//visibility:public"])
-
-filegroup(
-    name = "srcs",
-    srcs = glob(["**"]),
-)
-
-cmake(
-    name = "wavm_lib",
-    cache_entries = {
-        "LLVM_DIR": "$EXT_BUILD_DEPS/copy_llvm/llvm/lib/cmake/llvm",
-        "WAVM_ENABLE_STATIC_LINKING": "on",
-        "WAVM_ENABLE_RELEASE_ASSERTS": "on",
-        "WAVM_ENABLE_UNWIND": "on",
-        "CMAKE_CXX_FLAGS": "-Wno-unused-command-line-argument",
-    },
-    generate_args = ["-GNinja"],
-    lib_source = ":srcs",
-    out_static_libs = [
-        "libWAVM.a",
-        "libWAVMUnwind.a",
-    ],
-    deps = ["@llvm//:llvm_lib"],
-)
diff --git a/bazel/external/wavm.patch b/bazel/external/wavm.patch
deleted file mode 100644
index a03c67c32..000000000
--- a/bazel/external/wavm.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-# Fix build with Clang 13. (https://github.com/WAVM/WAVM/pull/332)
-
-diff --git a/Lib/Platform/POSIX/ThreadPOSIX.cpp b/Lib/Platform/POSIX/ThreadPOSIX.cpp
-index e1f232f6..d3241349 100644
---- a/Lib/Platform/POSIX/ThreadPOSIX.cpp
-+++ b/Lib/Platform/POSIX/ThreadPOSIX.cpp
-@@ -173,6 +173,7 @@ WAVM_NO_ASAN static void touchStackPages(U8* minAddr, Uptr numBytesPerPage)
- 		sum += *touchAddr;
- 		if(touchAddr < minAddr + numBytesPerPage) { break; }
- 	}
-+	WAVM_SUPPRESS_UNUSED(sum);
- }
- 
- bool Platform::initThreadAndGlobalSignalsOnce()
diff --git a/bazel/repositories.bzl b/bazel/repositories.bzl
index dd1a02758..09939a706 100644
--- a/bazel/repositories.bzl
+++ b/bazel/repositories.bzl
@@ -19,6 +19,17 @@ load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
 def proxy_wasm_cpp_host_repositories():
     # Bazel extensions.
 
+    # Update platforms for crate_universe. Can remove when we update Bazel version.
+    maybe(
+        http_archive,
+        name = "platforms",
+        urls = [
+            "https://mirror.bazel.build/github.com/bazelbuild/platforms/releases/download/0.0.10/platforms-0.0.10.tar.gz",
+            "https://github.com/bazelbuild/platforms/releases/download/0.0.10/platforms-0.0.10.tar.gz",
+        ],
+        sha256 = "218efe8ee736d26a3572663b374a253c012b716d8af0c07e842e82f238a0a7ee",
+    )
+
     maybe(
         http_archive,
         name = "bazel_skylib",
@@ -29,6 +40,14 @@ def proxy_wasm_cpp_host_repositories():
         sha256 = "c6966ec828da198c5d9adbaa94c05e3a1c7f21bd012a0b29ba8ddbccb2c93b0d",
     )
 
+    maybe(
+        http_archive,
+        name = "rules_cc",
+        sha256 = "2037875b9a4456dce4a79d112a8ae885bbc4aad968e6587dca6e64f3a0900cdf",
+        strip_prefix = "rules_cc-0.0.9",
+        urls = ["https://github.com/bazelbuild/rules_cc/releases/download/0.0.9/rules_cc-0.0.9.tar.gz"],
+    )
+
     maybe(
         http_archive,
         name = "bazel_clang_tidy",
@@ -41,10 +60,18 @@ def proxy_wasm_cpp_host_repositories():
 
     maybe(
         http_archive,
-        name = "bazel-zig-cc",
-        sha256 = "ad6384b4d16ebb3e5047df6548a195e598346da84e5f320250beb9198705ac81",
-        strip_prefix = "bazel-zig-cc-v0.4.4",
-        url = "https://git.sr.ht/~motiejus/bazel-zig-cc/archive/v0.4.4.tar.gz",
+        name = "envoy_toolshed",
+        sha256 = "e2252e46e64417d5cedd9f1eb34a622bce5e13b43837e5fe051c83066b0a400b",
+        strip_prefix = "toolshed-bazel-bins-v0.1.13/bazel",
+        url = "https://github.com/envoyproxy/toolshed/archive/refs/tags/bazel-bins-v0.1.13.tar.gz",
+    )
+    maybe(
+        http_archive,
+        name = "toolchains_llvm",
+        sha256 = "b7cd301ef7b0ece28d20d3e778697a5e3b81828393150bed04838c0c52963a01",
+        strip_prefix = "toolchains_llvm-0.10.3",
+        canonical_id = "v0.10.3",
+        url = "https://github.com/grailbio/bazel-toolchain/releases/download/0.10.3/toolchains_llvm-0.10.3.tar.gz",
     )
 
     maybe(
@@ -55,42 +82,74 @@ def proxy_wasm_cpp_host_repositories():
         url = "https://github.com/bazelbuild/rules_foreign_cc/archive/0.7.1.tar.gz",
     )
 
+    maybe(
+        http_archive,
+        name = "rules_fuzzing",
+        sha256 = "3ec0eee05b243552cc4a784b30323d088bf73cb2177ddda02c827e68981933f1",
+        strip_prefix = "rules_fuzzing-0.5.2",
+        urls = ["https://github.com/bazelbuild/rules_fuzzing/archive/v0.5.2.tar.gz"],
+    )
+
     maybe(
         http_archive,
         name = "rules_python",
-        sha256 = "a30abdfc7126d497a7698c29c46ea9901c6392d6ed315171a6df5ce433aa4502",
-        strip_prefix = "rules_python-0.6.0",
-        url = "https://github.com/bazelbuild/rules_python/archive/0.6.0.tar.gz",
+        sha256 = "778aaeab3e6cfd56d681c89f5c10d7ad6bf8d2f1a72de9de55b23081b2d31618",
+        strip_prefix = "rules_python-0.34.0",
+        url = "https://github.com/bazelbuild/rules_python/releases/download/0.34.0/rules_python-0.34.0.tar.gz",
     )
 
+    # Keep at 0.42 one because https://github.com/bazelbuild/rules_rust/issues/2665
+    # manifests at 0.43
     maybe(
         http_archive,
         name = "rules_rust",
-        sha256 = "6c26af1bb98276917fcf29ea942615ab375cf9d3c52f15c27fdd176ced3ee906",
-        strip_prefix = "rules_rust-b3ddf6f096887b757ab1a661662a95d6b2699fa7",
+        integrity = "sha256-JLN47ZcAbx9wEr5Jiib4HduZATGLiDgK7oUi/fvotzU=",
         # NOTE: Update Rust version in bazel/dependencies.bzl.
-        url = "https://github.com/bazelbuild/rules_rust/archive/b3ddf6f096887b757ab1a661662a95d6b2699fa7.tar.gz",
+        url = "https://github.com/bazelbuild/rules_rust/releases/download/0.42.1/rules_rust-v0.42.1.tar.gz",
         patches = ["@proxy_wasm_cpp_host//bazel/external:rules_rust.patch"],
         patch_args = ["-p1"],
     )
 
-    # Core.
+    # Core deps. Keep them updated.
+
+    # Note: we depend on Abseil via rules_fuzzing. Remove this pin when we update that.
+    #
+    # This is the latest LTS release, which picks up:
+    # - Build fix: https://github.com/abseil/abseil-cpp/pull/1187
+    # - A bugfix found in local fuzzing:
+    #   https://github.com/abseil/abseil-cpp/commit/e7858c73279d81cbc005d9c76a385ab535520635
+    maybe(
+        http_archive,
+        name = "com_google_absl",
+        sha256 = "733726b8c3a6d39a4120d7e45ea8b41a434cdacde401cba500f14236c49b39dc",
+        strip_prefix = "abseil-cpp-20240116.2",
+        urls = ["https://github.com/abseil/abseil-cpp/archive/20240116.2.tar.gz"],
+    )
 
     maybe(
         http_archive,
         name = "boringssl",
-        # 2022-02-07 (master-with-bazel)
-        sha256 = "7dec97795a7ac7e3832228e4440ee06cceb18d3663f4580b0840e685281e28a0",
-        strip_prefix = "boringssl-eaa29f431f71b8121e1da76bcd3ddc2248238ade",
-        urls = ["https://github.com/google/boringssl/archive/eaa29f431f71b8121e1da76bcd3ddc2248238ade.tar.gz"],
+        # 2023-08-28 (master-with-bazel)
+        sha256 = "f1f421738e9ba39dd88daf8cf3096ddba9c53e2b6b41b32fff5a3ff82f4cd162",
+        strip_prefix = "boringssl-45cf810dbdbd767f09f8cb0b0fcccd342c39041f",
+        urls = ["https://github.com/google/boringssl/archive/45cf810dbdbd767f09f8cb0b0fcccd342c39041f.tar.gz"],
     )
 
     maybe(
         http_archive,
         name = "proxy_wasm_cpp_sdk",
-        sha256 = "c57de2425b5c61d7f630c5061e319b4557ae1f1c7526e5a51c33dc1299471b08",
-        strip_prefix = "proxy-wasm-cpp-sdk-fd0be8405db25de0264bdb78fae3a82668c03782",
-        urls = ["https://github.com/proxy-wasm/proxy-wasm-cpp-sdk/archive/fd0be8405db25de0264bdb78fae3a82668c03782.tar.gz"],
+        sha256 = "26c4c0f9f645de7e789dc92f113d7352ee54ac43bb93ae3a8a22945f1ce71590",
+        strip_prefix = "proxy-wasm-cpp-sdk-7465dee8b2953beebff99f6dc3720ad0c79bab99",
+        urls = ["https://github.com/proxy-wasm/proxy-wasm-cpp-sdk/archive/7465dee8b2953beebff99f6dc3720ad0c79bab99.tar.gz"],
+    )
+
+    # Compile DB dependencies.
+    maybe(
+        http_archive,
+        name = "bazel_compdb",
+        sha256 = "acd2a9eaf49272bb1480c67d99b82662f005b596a8c11739046a4220ec73c4da",
+        strip_prefix = "bazel-compilation-database-40864791135333e1446a04553b63cbe744d358d0",
+        url = "https://github.com/grailbio/bazel-compilation-database/archive/40864791135333e1446a04553b63cbe744d358d0.tar.gz",
     )
 
     # Test dependencies.
@@ -98,9 +157,9 @@ def proxy_wasm_cpp_host_repositories():
     maybe(
         http_archive,
         name = "com_google_googletest",
-        sha256 = "9dc9157a9a1551ec7a7e43daea9a694a0bb5fb8bec81235d8a1e6ef64c716dcb",
-        strip_prefix = "googletest-release-1.10.0",
-        urls = ["https://github.com/google/googletest/archive/release-1.10.0.tar.gz"],
+        sha256 = "65fab701d9829d38cb77c14acdc431d2108bfdbf8979e40eb8ae567edf10b27c",
+        strip_prefix = "googletest-1.17.0",
+        urls = ["https://github.com/google/googletest/releases/download/v1.17.0/googletest-1.17.0.tar.gz"],
     )
 
     # NullVM dependencies.
@@ -118,50 +177,89 @@ def proxy_wasm_cpp_host_repositories():
     maybe(
         git_repository,
         name = "v8",
-        # 10.0.139.6
-        commit = "1e242a567b609aa18ce46f7b04cc51fd85756b67",
+        # 13.8.258.26
+        commit = "de9d0f8b56ae61896e4d2ac577fc589efb14f87d",
         remote = "https://chromium.googlesource.com/v8/v8",
-        shallow_since = "1646671271 +0000",
-        patches = ["@proxy_wasm_cpp_host//bazel/external:v8.patch"],
+        shallow_since = "1752074621 -0400",
+        patches = [
+            "@proxy_wasm_cpp_host//bazel/external:v8.patch",
+        ],
         patch_args = ["-p1"],
+        patch_cmds = [
+            "find ./src ./include -type f -exec sed -i.bak -e 's!#include \"third_party/simdutf/simdutf.h\"!#include \"simdutf.h\"!' {} \\;",
+            "find ./src ./include -type f -exec sed -i.bak -e 's!#include \"third_party/fp16/src/include/fp16.h\"!#include \"fp16.h\"!' {} \\;",
+            "find ./src ./include -type f -exec sed -i.bak -e 's!#include \"third_party/dragonbox/src/include/dragonbox/dragonbox.h\"!#include \"dragonbox/dragonbox.h\"!' {} \\;",
+            "find ./src ./include -type f -exec sed -i.bak -e 's!#include \"third_party/fast_float/src/include/fast_float/!#include \"fast_float/!' {} \\;",
+        ],
+        repo_mapping = {
+            "@abseil-cpp": "@com_google_absl",
+        },
     )
 
-    native.bind(
-        name = "wee8",
-        actual = "@v8//:wee8",
+    maybe(
+        http_archive,
+        name = "highway",
+        sha256 = "7e0be78b8318e8bdbf6fa545d2ecb4c90f947df03f7aadc42c1967f019e63343",
+        urls = [
+            "https://github.com/google/highway/archive/refs/tags/1.2.0.tar.gz",
+        ],
+        strip_prefix = "highway-1.2.0",
     )
 
     maybe(
-        new_git_repository,
-        name = "com_googlesource_chromium_base_trace_event_common",
-        build_file = "@v8//:bazel/BUILD.trace_event_common",
-        commit = "d115b033c4e53666b535cbd1985ffe60badad082",
-        remote = "https://chromium.googlesource.com/chromium/src/base/trace_event/common.git",
-        shallow_since = "1642576054 -0800",
+        http_archive,
+        name = "fast_float",
+        sha256 = "d2a08e722f461fe699ba61392cd29e6b23be013d0f56e50c7786d0954bffcb17",
+        urls = [
+            "https://github.com/fastfloat/fast_float/archive/refs/tags/v7.0.0.tar.gz",
+        ],
+        strip_prefix = "fast_float-7.0.0",
     )
 
-    native.bind(
-        name = "base_trace_event_common",
-        actual = "@com_googlesource_chromium_base_trace_event_common//:trace_event_common",
+    maybe(
+        http_archive,
+        name = "dragonbox",
+        urls = [
+            "https://github.com/jk-jeon/dragonbox/archive/6c7c925b571d54486b9ffae8d9d18a822801cbda.zip",
+        ],
+        strip_prefix = "dragonbox-6c7c925b571d54486b9ffae8d9d18a822801cbda",
+        sha256 = "2f10448d665355b41f599e869ac78803f82f13b070ce7ef5ae7b5cceb8a178f3",
+        build_file = "@proxy_wasm_cpp_host//bazel/external:dragonbox.BUILD",
     )
 
     maybe(
-        new_git_repository,
-        name = "com_googlesource_chromium_zlib",
-        build_file = "@v8//:bazel/BUILD.zlib",
-        commit = "9538f4194f6e5eff1bd59f2396ed9d05b1a8d801",
-        remote = "https://chromium.googlesource.com/chromium/src/third_party/zlib.git",
-        shallow_since = "1644963419 -0800",
+        http_archive,
+        name = "fp16",
+        urls = [
+            "https://github.com/Maratyszcza/FP16/archive/0a92994d729ff76a58f692d3028ca1b64b145d91.zip",
+        ],
+        strip_prefix = "FP16-0a92994d729ff76a58f692d3028ca1b64b145d91",
+        sha256 = "e66e65515fa09927b348d3d584c68be4215cfe664100d01c9dbc7655a5716d70",
+        build_file = "@proxy_wasm_cpp_host//bazel/external:fp16.BUILD",
     )
 
-    native.bind(
-        name = "zlib",
-        actual = "@com_googlesource_chromium_zlib//:zlib",
+    maybe(
+        http_archive,
+        name = "simdutf",
+        sha256 = "512374f8291d3daf102ccd0ad223b1a8318358f7c1295efd4d9a3abbb8e4b6ff",
+        urls = [
+            "https://github.com/simdutf/simdutf/releases/download/v7.3.0/singleheader.zip",
+        ],
+        build_file = "@proxy_wasm_cpp_host//bazel/external:simdutf.BUILD",
+    )
+
+    maybe(
+        http_archive,
+        name = "intel_ittapi",
+        strip_prefix = "ittapi-a3911fff01a775023a06af8754f9ec1e5977dd97",
+        sha256 = "1d0dddfc5abb786f2340565c82c6edd1cff10c917616a18ce62ee0b94dbc2ed4",
+        urls = ["https://github.com/intel/ittapi/archive/a3911fff01a775023a06af8754f9ec1e5977dd97.tar.gz"],
+        build_file = "@proxy_wasm_cpp_host//bazel/external:intel_ittapi.BUILD",
     )
 
     native.bind(
-        name = "zlib_compression_utils",
-        actual = "@com_googlesource_chromium_zlib//:zlib_compression_utils",
+        name = "wee8",
+        actual = "@v8//:wee8",
     )
 
     # WAMR with dependencies.
@@ -170,10 +268,10 @@ def proxy_wasm_cpp_host_repositories():
         http_archive,
         name = "com_github_bytecodealliance_wasm_micro_runtime",
         build_file = "@proxy_wasm_cpp_host//bazel/external:wamr.BUILD",
-        # WAMR-01-18-2022
-        sha256 = "af88da144bcb5ecac417af7fd34130487f5e4792e79670f07530474b2ef43912",
-        strip_prefix = "wasm-micro-runtime-d856af6c33591815ab4c890f0606bc99ee8135ad",
-        url = "https://github.com/bytecodealliance/wasm-micro-runtime/archive/d856af6c33591815ab4c890f0606bc99ee8135ad.tar.gz",
+        # WAMR-2.4.1
+        sha256 = "ca18bbf304f47287bf43707564db63b8908dd6d0d6ac40bb39271a7144def4cc",
+        strip_prefix = "wasm-micro-runtime-WAMR-2.4.1",
+        url = "https://github.com/bytecodealliance/wasm-micro-runtime/archive/refs/tags/WAMR-2.4.1.zip",
     )
 
     native.bind(
@@ -181,61 +279,48 @@ def proxy_wasm_cpp_host_repositories():
         actual = "@com_github_bytecodealliance_wasm_micro_runtime//:wamr_lib",
     )
 
-    # Wasmtime with dependencies.
-
     maybe(
         http_archive,
-        name = "com_github_bytecodealliance_wasmtime",
-        build_file = "@proxy_wasm_cpp_host//bazel/external:wasmtime.BUILD",
-        sha256 = "dd29279e18782a4ec12a504abb16c6d989af299d238acd7983429adbd3e34e08",
-        strip_prefix = "wasmtime-0.35.1",
-        url = "https://github.com/bytecodealliance/wasmtime/archive/v0.35.1.tar.gz",
+        name = "llvm-15_0_7",
+        build_file = "@proxy_wasm_cpp_host//bazel/external:wamr_llvm.BUILD",
+        sha256 = "8b5fcb24b4128cf04df1b0b9410ce8b1a729cb3c544e6da885d234280dedeac6",
+        strip_prefix = "llvm-project-15.0.7.src",
+        url = "https://github.com/llvm/llvm-project/releases/download/llvmorg-15.0.7/llvm-project-15.0.7.src.tar.xz",
     )
 
+    # WasmEdge with dependencies.
+
     maybe(
         http_archive,
-        name = "com_github_webassembly_wasm_c_api",
-        build_file = "@proxy_wasm_cpp_host//bazel/external:wasm-c-api.BUILD",
-        sha256 = "c774044f51431429e878bd1b9e2a4e38932f861f9211df72f75e9427eb6b8d32",
-        strip_prefix = "wasm-c-api-c9d31284651b975f05ac27cee0bab1377560b87e",
-        url = "https://github.com/WebAssembly/wasm-c-api/archive/c9d31284651b975f05ac27cee0bab1377560b87e.tar.gz",
-    )
-
-    native.bind(
-        name = "wasmtime",
-        actual = "@com_github_webassembly_wasm_c_api//:wasmtime_lib",
+        name = "com_github_wasmedge_wasmedge",
+        build_file = "@proxy_wasm_cpp_host//bazel/external:wasmedge.BUILD",
+        sha256 = "7ab8a0df37c8d282ecff72d0f0bff8db63fd92df1645d5a014a9dbed4b7f9025",
+        strip_prefix = "WasmEdge-proxy-wasm-0.13.1",
+        url = "https://github.com/WasmEdge/WasmEdge/archive/refs/tags/proxy-wasm/0.13.1.tar.gz",
     )
 
     native.bind(
-        name = "prefixed_wasmtime",
-        actual = "@com_github_webassembly_wasm_c_api//:prefixed_wasmtime_lib",
+        name = "wasmedge",
+        actual = "@com_github_wasmedge_wasmedge//:wasmedge_lib",
     )
 
-    # WAVM with dependencies.
+    # Wasmtime with dependencies.
 
     maybe(
         http_archive,
-        name = "com_github_wavm_wavm",
-        build_file = "@proxy_wasm_cpp_host//bazel/external:wavm.BUILD",
-        sha256 = "bf2b2aec8a4c6a5413081c0527cb40dd16cb67e9c74a91f8a82fe1cf27a3c5d5",
-        strip_prefix = "WAVM-c8997ebf154f3b42e688e670a7d0fa045b7a32a0",
-        url = "https://github.com/WAVM/WAVM/archive/c8997ebf154f3b42e688e670a7d0fa045b7a32a0.tar.gz",
-        patches = ["@proxy_wasm_cpp_host//bazel/external:wavm.patch"],
-        patch_args = ["-p1"],
+        name = "com_github_bytecodealliance_wasmtime",
+        build_file = "@proxy_wasm_cpp_host//bazel/external:wasmtime.BUILD",
+        sha256 = "2ccb49bb3bfa4d86907ad4c80d1147aef6156c7b6e3f7f14ed02a39de9761155",
+        strip_prefix = "wasmtime-24.0.0",
+        url = "https://github.com/bytecodealliance/wasmtime/archive/v24.0.0.tar.gz",
     )
 
     native.bind(
-        name = "wavm",
-        actual = "@com_github_wavm_wavm//:wavm_lib",
+        name = "wasmtime",
+        actual = "@com_github_bytecodealliance_wasmtime//:wasmtime_lib",
     )
 
-    maybe(
-        http_archive,
-        name = "llvm",
-        build_file = "@proxy_wasm_cpp_host//bazel/external:llvm.BUILD",
-        sha256 = "7d9a8405f557cefc5a21bf5672af73903b64749d9bc3a50322239f56f34ffddf",
-        strip_prefix = "llvm-12.0.1.src",
-        url = "https://github.com/llvm/llvm-project/releases/download/llvmorg-12.0.1/llvm-12.0.1.src.tar.xz",
-        patches = ["@proxy_wasm_cpp_host//bazel/external:llvm.patch"],
-        patch_args = ["-p1"],
+    native.bind(
+        name = "prefixed_wasmtime",
+        actual = "@com_github_bytecodealliance_wasmtime//:prefixed_wasmtime_lib",
     )
diff --git a/bazel/select.bzl b/bazel/select.bzl
index eea36c888..cc4da38d1 100644
--- a/bazel/select.bzl
+++ b/bazel/select.bzl
@@ -28,7 +28,8 @@ def proxy_wasm_select_engine_v8(xs):
 
 def proxy_wasm_select_engine_wamr(xs):
     return select({
-        "@proxy_wasm_cpp_host//bazel:engine_wamr": xs,
+        "@proxy_wasm_cpp_host//bazel:engine_wamr_interp": xs,
+        "@proxy_wasm_cpp_host//bazel:engine_wamr_jit": xs,
         "@proxy_wasm_cpp_host//bazel:multiengine": xs,
         "//conditions:default": [],
     })
@@ -40,9 +41,9 @@ def proxy_wasm_select_engine_wasmtime(xs, xp):
         "//conditions:default": [],
     })
 
-def proxy_wasm_select_engine_wavm(xs):
+def proxy_wasm_select_engine_wasmedge(xs):
     return select({
-        "@proxy_wasm_cpp_host//bazel:engine_wavm": xs,
+        "@proxy_wasm_cpp_host//bazel:engine_wasmedge": xs,
         "@proxy_wasm_cpp_host//bazel:multiengine": xs,
         "//conditions:default": [],
     })
diff --git a/bazel/tsan_suppressions.txt b/bazel/tsan_suppressions.txt
new file mode 100644
index 000000000..8754c04f3
--- /dev/null
+++ b/bazel/tsan_suppressions.txt
@@ -0,0 +1,3 @@
+# False positive in V8 worker shutdown
+race:v8::platform::DefaultJobHandle::Join
+race:v8::platform::DefaultJobHandle::Cancel
diff --git a/bazel/wasm.bzl b/bazel/wasm.bzl
index 58cd84e3b..192823047 100644
--- a/bazel/wasm.bzl
+++ b/bazel/wasm.bzl
@@ -63,7 +63,7 @@ def _wasm_attrs(transition):
     return {
         "binary": attr.label(mandatory = True, cfg = transition),
         "signing_key": attr.label_list(allow_files = True),
-        "_wasmsign_tool": attr.label(default = "//bazel/cargo/wasmsign:cargo_bin_wasmsign", executable = True, cfg = "exec"),
+        "_wasmsign_tool": attr.label(default = "//bazel/cargo/wasmsign/remote:wasmsign__wasmsign", executable = True, cfg = "exec"),
         "_whitelist_function_transition": attr.label(default = "@bazel_tools//tools/whitelists/function_transition_whitelist"),
     }
 
@@ -77,7 +77,7 @@ wasi_rust_binary_rule = rule(
     attrs = _wasm_attrs(wasi_rust_transition),
 )
 
-def wasm_rust_binary(name, tags = [], wasi = False, signing_key = [], rustc_flags = [], **kwargs):
+def wasm_rust_binary(name, tags = [], wasi = False, signing_key = [], **kwargs):
     wasm_name = "_wasm_" + name.replace(".", "_")
     kwargs.setdefault("visibility", ["//visibility:public"])
 
@@ -87,11 +87,6 @@ def wasm_rust_binary(name, tags = [], wasi = False, signing_key = [], rustc_flag
         crate_type = "cdylib",
         out_binary = True,
         tags = ["manual"],
-        # Rust doesn't distribute rust-lld for Linux/s390x.
-        rustc_flags = rustc_flags + select({
-            "//bazel:linux_s390x": ["-C", "linker=/usr/bin/lld"],
-            "//conditions:default": [],
-        }),
         **kwargs
     )
 
diff --git a/include/proxy-wasm/context.h b/include/proxy-wasm/context.h
index 652b86b6e..208633acc 100644
--- a/include/proxy-wasm/context.h
+++ b/include/proxy-wasm/context.h
@@ -23,15 +23,14 @@
 #include <map>
 #include <memory>
 #include <string>
+#include <string_view>
 #include <vector>
 
+#include "include/proxy-wasm/sdk.h"
 #include "include/proxy-wasm/context_interface.h"
 
 namespace proxy_wasm {
 
-#include "proxy_wasm_common.h"
-#include "proxy_wasm_enums.h"
-
 class PluginHandleBase;
 class WasmBase;
 class WasmVm;
@@ -53,8 +52,7 @@ struct PluginBase {
              std::string_view key)
       : name_(std::string(name)), root_id_(std::string(root_id)), vm_id_(std::string(vm_id)),
         engine_(std::string(engine)), plugin_configuration_(plugin_configuration),
-        fail_open_(fail_open),
-        key_(root_id_ + "||" + plugin_configuration_ + "||" + std::string(key)),
+        fail_open_(fail_open), key_(makePluginKey(root_id, plugin_configuration, key)),
         log_prefix_(makeLogPrefix()) {}
 
   const std::string name_;
@@ -69,6 +67,8 @@ struct PluginBase {
 
 private:
   std::string makeLogPrefix() const;
+  static std::string makePluginKey(std::string_view root_id, std::string_view plugin_configuration,
+                                   std::string_view key);
 
   const std::string key_;
   const std::string log_prefix_;
@@ -150,14 +150,14 @@ class ContextBase : public RootInterface,
               const std::shared_ptr<PluginHandleBase> &plugin_handle); // Stream context.
   virtual ~ContextBase();
 
-  WasmBase *wasm() const { return wasm_; }
+  virtual WasmBase *wasm() const { return wasm_; }
   uint32_t id() const { return id_; }
   // The VM Context used for calling "malloc" has an id_ == 0.
   bool isVmContext() const { return id_ == 0; }
   // Root Contexts have the VM Context as a parent.
   bool isRootContext() const { return parent_context_id_ == 0; }
-  ContextBase *parent_context() const { return parent_context_; }
-  ContextBase *root_context() const {
+  virtual ContextBase *parent_context() const { return parent_context_; }
+  virtual ContextBase *root_context() const {
     const ContextBase *previous = this;
     ContextBase *parent = parent_context_;
     while (parent != previous) {
@@ -170,7 +170,7 @@ class ContextBase : public RootInterface,
   std::string_view log_prefix() const {
     return isRootContext() ? root_log_prefix_ : plugin_->log_prefix();
   }
-  WasmVm *wasmVm() const;
+  virtual WasmVm *wasmVm() const;
 
   // Called before deleting the context.
   virtual void destroy();
@@ -397,6 +397,13 @@ class ContextBase : public RootInterface,
   bool destroyed_ = false;
   bool stream_failed_ = false; // Set true after failStream is called in case of VM failure.
 
+  // If true, convertVmCallResultToFilterHeadersStatus() propagates
+  // FilterHeadersStatus::StopIteration unmodified to callers. If false, it
+  // translates FilterHeaderStatus::StopIteration to
+  // FilterHeadersStatus::StopAllIterationAndWatermark, which is the default
+  // behavior for v0.2.* of the Proxy-Wasm ABI.
+  bool allow_on_headers_stop_iteration_ = false;
+
 private:
   // helper functions
   FilterHeadersStatus convertVmCallResultToFilterHeadersStatus(uint64_t result);
diff --git a/include/proxy-wasm/context_interface.h b/include/proxy-wasm/context_interface.h
index 81973eed2..48fce76d9 100644
--- a/include/proxy-wasm/context_interface.h
+++ b/include/proxy-wasm/context_interface.h
@@ -25,10 +25,9 @@
 #include <memory>
 #include <vector>
 
-namespace proxy_wasm {
+#include "include/proxy-wasm/sdk.h"
 
-#include "proxy_wasm_common.h"
-#include "proxy_wasm_enums.h"
+namespace proxy_wasm {
 
 using Pairs = std::vector<std::pair<std::string_view, std::string_view>>;
 using PairsWithStringValues = std::vector<std::pair<std::string_view, std::string>>;
diff --git a/include/proxy-wasm/exports.h b/include/proxy-wasm/exports.h
index 2b3d0db74..91c51150c 100644
--- a/include/proxy-wasm/exports.h
+++ b/include/proxy-wasm/exports.h
@@ -62,36 +62,6 @@ struct RegisterForeignFunction {
 
 namespace exports {
 
-template <typename Pairs> size_t pairsSize(const Pairs &result) {
-  size_t size = 4; // number of headers
-  for (auto &p : result) {
-    size += 8;                   // size of key, size of value
-    size += p.first.size() + 1;  // null terminated key
-    size += p.second.size() + 1; // null terminated value
-  }
-  return size;
-}
-
-template <typename Pairs> void marshalPairs(const Pairs &result, char *buffer) {
-  char *b = buffer;
-  *reinterpret_cast<uint32_t *>(b) = htowasm(result.size());
-  b += sizeof(uint32_t);
-  for (auto &p : result) {
-    *reinterpret_cast<uint32_t *>(b) = htowasm(p.first.size());
-    b += sizeof(uint32_t);
-    *reinterpret_cast<uint32_t *>(b) = htowasm(p.second.size());
-    b += sizeof(uint32_t);
-  }
-  for (auto &p : result) {
-    memcpy(b, p.first.data(), p.first.size());
-    b += p.first.size();
-    *b++ = 0;
-    memcpy(b, p.second.data(), p.second.size());
-    b += p.second.size();
-    *b++ = 0;
-  }
-}
-
 // ABI functions exported from host to wasm.
 
 Word get_configuration(Word value_ptr_ptr, Word value_size_ptr);
@@ -169,14 +139,18 @@ Word wasi_unstable_fd_read(Word, Word, Word, Word);
 Word wasi_unstable_fd_seek(Word, int64_t, Word, Word);
 Word wasi_unstable_fd_close(Word);
 Word wasi_unstable_fd_fdstat_get(Word fd, Word statOut);
+Word wasi_unstable_fd_fdstat_set_flags(Word fd, Word flags);
 Word wasi_unstable_environ_get(Word, Word);
 Word wasi_unstable_environ_sizes_get(Word count_ptr, Word buf_size_ptr);
 Word wasi_unstable_args_get(Word argc_ptr, Word argv_buf_size_ptr);
 Word wasi_unstable_args_sizes_get(Word argc_ptr, Word argv_buf_size_ptr);
+Word wasi_unstable_sched_yield();
+Word wasi_unstable_poll_oneoff(Word in, Word out, Word nsubscriptions, Word nevents);
 void wasi_unstable_proc_exit(Word);
 Word wasi_unstable_clock_time_get(Word, uint64_t, Word);
 Word wasi_unstable_random_get(Word, Word);
 Word pthread_equal(Word left, Word right);
+void emscripten_notify_memory_growth(Word);
 
 // Support for embedders, not exported to Wasm.
 
@@ -199,9 +173,10 @@ Word pthread_equal(Word left, Word right);
       _f(continue_stream) _f(close_stream) _f(get_log_level)
 
 #define FOR_ALL_WASI_FUNCTIONS(_f)                                                                 \
-  _f(fd_write) _f(fd_read) _f(fd_seek) _f(fd_close) _f(fd_fdstat_get) _f(environ_get)              \
-      _f(environ_sizes_get) _f(args_get) _f(args_sizes_get) _f(clock_time_get) _f(random_get)      \
-          _f(proc_exit) _f(path_open) _f(fd_prestat_get) _f(fd_prestat_dir_name)
+  _f(fd_write) _f(fd_read) _f(fd_seek) _f(fd_close) _f(fd_fdstat_get) _f(fd_fdstat_set_flags)      \
+      _f(environ_get) _f(environ_sizes_get) _f(args_get) _f(args_sizes_get) _f(clock_time_get)     \
+          _f(random_get) _f(sched_yield) _f(poll_oneoff) _f(proc_exit) _f(path_open)               \
+              _f(fd_prestat_get) _f(fd_prestat_dir_name)
 
 // Helpers to generate a stub to pass to VM, in place of a restricted proxy-wasm capability.
 #define _CREATE_PROXY_WASM_STUB(_fn)                                                               \
diff --git a/include/proxy-wasm/limits.h b/include/proxy-wasm/limits.h
new file mode 100644
index 000000000..9b9ac1cd3
--- /dev/null
+++ b/include/proxy-wasm/limits.h
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#pragma once
+
+// Wasm memory page is always 64 KiB.
+#define PROXY_WASM_HOST_WASM_MEMORY_PAGE_SIZE_BYTES (64 * 1024)
+
+// Maximum allowed Wasm memory size.
+#ifndef PROXY_WASM_HOST_MAX_WASM_MEMORY_SIZE_BYTES
+#define PROXY_WASM_HOST_MAX_WASM_MEMORY_SIZE_BYTES (1024 * 1024 * 1024)
+#endif
+
+// Maximum allowed random_get buffer size. This value is consistent with
+// the JavaScript Crypto.getRandomValues() maximum buffer size.
+// See: https://w3c.github.io/webcrypto/#Crypto-method-getRandomValues
+#ifndef PROXY_WASM_HOST_WASI_RANDOM_GET_MAX_SIZE_BYTES
+#define PROXY_WASM_HOST_WASI_RANDOM_GET_MAX_SIZE_BYTES (64 * 1024)
+#endif
+
+// Maximum allowed size of Pairs buffer to deserialize.
+#ifndef PROXY_WASM_HOST_PAIRS_MAX_BYTES
+#define PROXY_WASM_HOST_PAIRS_MAX_BYTES (1024 * 1024)
+#endif
+
+// Maximum allowed number of pairs in a Pairs buffer to deserialize.
+#ifndef PROXY_WASM_HOST_PAIRS_MAX_COUNT
+#define PROXY_WASM_HOST_PAIRS_MAX_COUNT 1024
+#endif
diff --git a/include/proxy-wasm/null_vm.h b/include/proxy-wasm/null_vm.h
index 3a38fd990..703266df3 100644
--- a/include/proxy-wasm/null_vm.h
+++ b/include/proxy-wasm/null_vm.h
@@ -61,6 +61,9 @@ struct NullVm : public WasmVm {
 #undef _REGISTER_CALLBACK
 
   void terminate() override {}
+  bool usesWasmByteOrder() override { return false; }
+
+  void warm() override {}
 
   std::string plugin_name_;
   std::unique_ptr<NullVmPlugin> plugin_;
diff --git a/include/proxy-wasm/pairs_util.h b/include/proxy-wasm/pairs_util.h
new file mode 100644
index 000000000..019c970ba
--- /dev/null
+++ b/include/proxy-wasm/pairs_util.h
@@ -0,0 +1,64 @@
+// Copyright 2016-2019 Envoy Project Authors
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#pragma once
+
+#include <cstddef>
+#include <string>
+#include <string_view>
+#include <vector>
+
+namespace proxy_wasm {
+
+using Pairs = std::vector<std::pair<std::string_view, std::string_view>>;
+using StringPairs = std::vector<std::pair<std::string, std::string>>;
+
+class PairsUtil {
+public:
+  /**
+   * pairsSize returns the buffer size required to serialize Pairs.
+   * @param pairs Pairs to serialize.
+   * @return size of the output buffer.
+   */
+  static size_t pairsSize(const Pairs &pairs);
+
+  static size_t pairsSize(const StringPairs &stringpairs) {
+    Pairs views(stringpairs.begin(), stringpairs.end());
+    return pairsSize(views);
+  }
+
+  /**
+   * marshalPairs serializes Pairs to output buffer.
+   * @param pairs Pairs to serialize.
+   * @param buffer output buffer.
+   * @param size size of the output buffer.
+   * @return indicates whether serialization succeeded or not.
+   */
+  static bool marshalPairs(const Pairs &pairs, char *buffer, size_t size);
+
+  static bool marshalPairs(const StringPairs &stringpairs, char *buffer, size_t size) {
+    Pairs views(stringpairs.begin(), stringpairs.end());
+    return marshalPairs(views, buffer, size);
+  }
+
+  /**
+   * toPairs deserializes input buffer to Pairs.
+   * @param buffer serialized input buffer.
+   * @return deserialized Pairs or an empty instance in case of deserialization failure.
+   */
+  static Pairs toPairs(std::string_view buffer);
+};
+
+} // namespace proxy_wasm
diff --git a/include/proxy-wasm/sdk.h b/include/proxy-wasm/sdk.h
new file mode 100644
index 000000000..105854373
--- /dev/null
+++ b/include/proxy-wasm/sdk.h
@@ -0,0 +1,50 @@
+// Copyright 2016-2019 Envoy Project Authors
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#pragma once
+
+#include <string>
+#include <cstdint>
+
+namespace proxy_wasm {
+
+namespace internal {
+
+// isolate those includes to prevent ::proxy_wasm namespace pollution with std
+// namespace definitions.
+#include "proxy_wasm_common.h"
+#include "proxy_wasm_enums.h"
+
+} // namespace internal
+
+// proxy_wasm_common.h
+using WasmResult = internal::WasmResult;
+using WasmHeaderMapType = internal::WasmHeaderMapType;
+using WasmBufferType = internal::WasmBufferType;
+using WasmBufferFlags = internal::WasmBufferFlags;
+using WasmStreamType = internal::WasmStreamType;
+
+// proxy_wasm_enums.h
+using LogLevel = internal::LogLevel;
+using FilterStatus = internal::FilterStatus;
+using FilterHeadersStatus = internal::FilterHeadersStatus;
+using FilterMetadataStatus = internal::FilterMetadataStatus;
+using FilterTrailersStatus = internal::FilterTrailersStatus;
+using FilterDataStatus = internal::FilterDataStatus;
+using GrpcStatus = internal::GrpcStatus;
+using MetricType = internal::MetricType;
+using CloseType = internal::CloseType;
+
+} // namespace proxy_wasm
diff --git a/include/proxy-wasm/signature_util.h b/include/proxy-wasm/signature_util.h
index 68579dcd1..a5c9c39df 100644
--- a/include/proxy-wasm/signature_util.h
+++ b/include/proxy-wasm/signature_util.h
@@ -14,6 +14,7 @@
 
 #pragma once
 
+#include <string>
 #include <string_view>
 
 namespace proxy_wasm {
diff --git a/include/proxy-wasm/vm_id_handle.h b/include/proxy-wasm/vm_id_handle.h
index 547eca229..16ebb4bf0 100644
--- a/include/proxy-wasm/vm_id_handle.h
+++ b/include/proxy-wasm/vm_id_handle.h
@@ -15,8 +15,10 @@
 #pragma once
 
 #include <functional>
-#include <mutex>
 #include <memory>
+#include <mutex>
+#include <string>
+#include <string_view>
 #include <unordered_map>
 
 namespace proxy_wasm {
diff --git a/include/proxy-wasm/wasm.h b/include/proxy-wasm/wasm.h
index fbef823ad..9b85710bd 100644
--- a/include/proxy-wasm/wasm.h
+++ b/include/proxy-wasm/wasm.h
@@ -24,6 +24,7 @@
 #include <unordered_map>
 #include <unordered_set>
 
+#include "include/proxy-wasm/sdk.h"
 #include "include/proxy-wasm/context.h"
 #include "include/proxy-wasm/exports.h"
 #include "include/proxy-wasm/wasm_vm.h"
@@ -31,8 +32,6 @@
 
 namespace proxy_wasm {
 
-#include "proxy_wasm_common.h"
-
 class ContextBase;
 class WasmHandleBase;
 
@@ -55,18 +54,18 @@ class WasmBase : public std::enable_shared_from_this<WasmBase> {
   WasmBase(const std::shared_ptr<WasmHandleBase> &base_wasm_handle, const WasmVmFactory &factory);
   virtual ~WasmBase();
 
-  bool load(const std::string &code, bool allow_precompiled = false);
-  bool initialize();
-  void startVm(ContextBase *root_context);
-  bool configure(ContextBase *root_context, std::shared_ptr<PluginBase> plugin);
+  virtual bool load(const std::string &code, bool allow_precompiled = false);
+  virtual bool initialize();
+  virtual void startVm(ContextBase *root_context);
+  virtual bool configure(ContextBase *root_context, std::shared_ptr<PluginBase> plugin);
   // Returns the root ContextBase or nullptr if onStart returns false.
-  ContextBase *start(const std::shared_ptr<PluginBase> &plugin);
+  virtual ContextBase *start(const std::shared_ptr<PluginBase> &plugin);
 
   std::string_view vm_id() const { return vm_id_; }
   std::string_view vm_key() const { return vm_key_; }
   WasmVm *wasm_vm() const { return wasm_vm_.get(); }
-  ContextBase *vm_context() const { return vm_context_.get(); }
-  ContextBase *getRootContext(const std::shared_ptr<PluginBase> &plugin, bool allow_closed);
+  virtual ContextBase *vm_context() const { return vm_context_.get(); }
+  virtual ContextBase *getRootContext(const std::shared_ptr<PluginBase> &plugin, bool allow_closed);
   ContextBase *getContext(uint32_t id) {
     auto it = contexts_.find(id);
     if (it != contexts_.end())
@@ -314,31 +313,35 @@ class WasmBase : public std::enable_shared_from_this<WasmBase> {
   std::shared_ptr<VmIdHandle> vm_id_handle_;
 };
 
+using WasmHandleFactory = std::function<std::shared_ptr<WasmHandleBase>(std::string_view vm_id)>;
+using WasmHandleCloneFactory =
+    std::function<std::shared_ptr<WasmHandleBase>(std::shared_ptr<WasmHandleBase> wasm)>;
+
 // Handle which enables shutdown operations to run post deletion (e.g. post listener drain).
 class WasmHandleBase : public std::enable_shared_from_this<WasmHandleBase> {
 public:
   explicit WasmHandleBase(std::shared_ptr<WasmBase> wasm_base) : wasm_base_(wasm_base) {}
-  ~WasmHandleBase() {
+  virtual ~WasmHandleBase() {
     if (wasm_base_) {
       wasm_base_->startShutdown();
     }
   }
 
+  virtual bool canary(const std::shared_ptr<PluginBase> &plugin,
+                      const WasmHandleCloneFactory &clone_factory);
+
   void kill() { wasm_base_ = nullptr; }
 
   std::shared_ptr<WasmBase> &wasm() { return wasm_base_; }
 
 protected:
   std::shared_ptr<WasmBase> wasm_base_;
+  std::unordered_map<std::string, bool> plugin_canary_cache_;
 };
 
 std::string makeVmKey(std::string_view vm_id, std::string_view configuration,
                       std::string_view code);
 
-using WasmHandleFactory = std::function<std::shared_ptr<WasmHandleBase>(std::string_view vm_id)>;
-using WasmHandleCloneFactory =
-    std::function<std::shared_ptr<WasmHandleBase>(std::shared_ptr<WasmHandleBase> wasm)>;
-
 // Returns nullptr on failure (i.e. initialization of the VM fails).
 std::shared_ptr<WasmHandleBase> createWasm(const std::string &vm_key, const std::string &code,
                                            const std::shared_ptr<PluginBase> &plugin,
@@ -353,7 +356,7 @@ class PluginHandleBase : public std::enable_shared_from_this<PluginHandleBase> {
   explicit PluginHandleBase(std::shared_ptr<WasmHandleBase> wasm_handle,
                             std::shared_ptr<PluginBase> plugin)
       : plugin_(plugin), wasm_handle_(wasm_handle) {}
-  ~PluginHandleBase() {
+  virtual ~PluginHandleBase() {
     if (wasm_handle_) {
       wasm_handle_->wasm()->startShutdown(plugin_->key());
     }
@@ -370,7 +373,7 @@ class PluginHandleBase : public std::enable_shared_from_this<PluginHandleBase> {
 using PluginHandleFactory = std::function<std::shared_ptr<PluginHandleBase>(
     std::shared_ptr<WasmHandleBase> base_wasm, std::shared_ptr<PluginBase> plugin)>;
 
-// Get an existing ThreadLocal VM matching 'vm_id' or create one using 'base_wavm' by cloning or by
+// Get an existing ThreadLocal VM matching 'vm_id' or create one using 'base_wasm' by cloning or by
 // using it it as a template.
 std::shared_ptr<PluginHandleBase> getOrCreateThreadLocalPlugin(
     const std::shared_ptr<WasmHandleBase> &base_handle, const std::shared_ptr<PluginBase> &plugin,
@@ -389,7 +392,15 @@ inline void *WasmBase::allocMemory(uint64_t size, uint64_t *address) {
   if (!malloc_) {
     return nullptr;
   }
+  wasm_vm_->setRestrictedCallback(
+      true, {// logging (Proxy-Wasm)
+             "env.proxy_log",
+             // logging (stdout/stderr)
+             "wasi_unstable.fd_write", "wasi_snapshot_preview1.fd_write",
+             // time
+             "wasi_unstable.clock_time_get", "wasi_snapshot_preview1.clock_time_get"});
   Word a = malloc_(vm_context(), size);
+  wasm_vm_->setRestrictedCallback(false);
   if (!a.u64_) {
     return nullptr;
   }
diff --git a/include/proxy-wasm/wasm_api_impl.h b/include/proxy-wasm/wasm_api_impl.h
index 8bd9626ff..899af7e41 100644
--- a/include/proxy-wasm/wasm_api_impl.h
+++ b/include/proxy-wasm/wasm_api_impl.h
@@ -30,15 +30,13 @@
 #include <utility>
 #include <vector>
 
+#include "include/proxy-wasm/sdk.h"
 #include "include/proxy-wasm/exports.h"
 #include "include/proxy-wasm/word.h"
 
 namespace proxy_wasm {
 namespace null_plugin {
 
-#include "proxy_wasm_enums.h"
-#include "proxy_wasm_common.h"
-
 #define WS(_x) Word(static_cast<uint64_t>(_x))
 #define WR(_x) Word(reinterpret_cast<uint64_t>(_x))
 
diff --git a/include/proxy-wasm/wasm_vm.h b/include/proxy-wasm/wasm_vm.h
index 800348ac3..9a2f0a6a0 100644
--- a/include/proxy-wasm/wasm_vm.h
+++ b/include/proxy-wasm/wasm_vm.h
@@ -19,15 +19,16 @@
 #include <memory>
 #include <optional>
 #include <string>
+#include <string_view>
 #include <unordered_map>
+#include <unordered_set>
 #include <vector>
 
+#include "include/proxy-wasm/sdk.h"
 #include "include/proxy-wasm/word.h"
 
 namespace proxy_wasm {
 
-#include "proxy_wasm_enums.h"
-
 class ContextBase;
 
 // These are templates and its helper for constructing signatures of functions calling into Wasm
@@ -142,12 +143,25 @@ enum class AbiVersion { ProxyWasm_0_1_0, ProxyWasm_0_2_0, ProxyWasm_0_2_1, Unkno
 
 class NullPlugin;
 
+enum class FailState : int {
+  Ok = 0,
+  UnableToCreateVm = 1,
+  UnableToCloneVm = 2,
+  MissingFunction = 3,
+  UnableToInitializeCode = 4,
+  StartFailed = 5,
+  ConfigureFailed = 6,
+  RuntimeError = 7,
+};
+
 // Integrator specific WasmVm operations.
 struct WasmVmIntegration {
   virtual ~WasmVmIntegration() {}
   virtual WasmVmIntegration *clone() = 0;
   virtual proxy_wasm::LogLevel getLogLevel() = 0;
   virtual void error(std::string_view message) = 0;
+  // Allow integrations to handle specific FailStates differently.
+  virtual void error(FailState fail_state, std::string_view message) { error(message); }
   virtual void trace(std::string_view message) = 0;
   // Get a NullVm implementation of a function.
   // @param function_name is the name of the function with the implementation specific prefix.
@@ -164,17 +178,6 @@ struct WasmVmIntegration {
                                  void *ptr_to_function_return) = 0;
 };
 
-enum class FailState : int {
-  Ok = 0,
-  UnableToCreateVm = 1,
-  UnableToCloneVm = 2,
-  MissingFunction = 3,
-  UnableToInitializeCode = 4,
-  StartFailed = 5,
-  ConfigureFailed = 6,
-  RuntimeError = 7,
-};
-
 // Wasm VM instance. Provides the low level WASM interface.
 class WasmVm {
 public:
@@ -188,10 +191,9 @@ class WasmVm {
   /**
    * Whether or not the VM implementation supports cloning. Cloning is VM system dependent.
    * When a VM is configured a single VM is instantiated to check that the .wasm file is valid and
-   * to do VM system specific initialization. In the case of WAVM this is potentially ahead-of-time
-   * compilation. Then, if cloning is supported, we clone that VM for each worker, potentially
-   * copying and sharing the initialized data structures for efficiency. Otherwise we create an new
-   * VM from scratch for each worker.
+   * to do VM system specific initialization. Then, if cloning is supported, we clone that VM for
+   * each worker, potentially copying and sharing the initialized data structures for efficiency.
+   * Otherwise we create an new VM from scratch for each worker.
    * @return one of enum Cloneable with the VMs cloneability.
    */
   virtual Cloneable cloneable() = 0;
@@ -302,9 +304,17 @@ class WasmVm {
    */
   virtual void terminate() = 0;
 
+  /**
+   * Byte order flag (host or wasm).
+   * @return 'false' for a null VM and 'true' for a wasm VM.
+   */
+  virtual bool usesWasmByteOrder() = 0;
+
+  virtual void warm() {}
+
   bool isFailed() { return failed_ != FailState::Ok; }
   void fail(FailState fail_state, std::string_view message) {
-    integration()->error(message);
+    integration()->error(fail_state, message);
     failed_ = fail_state;
     for (auto &callback : fail_callbacks_) {
       callback(fail_state);
@@ -314,6 +324,16 @@ class WasmVm {
     fail_callbacks_.push_back(fail_callback);
   }
 
+  bool isHostFunctionAllowed(const std::string &name) {
+    return !restricted_callback_ || allowed_hostcalls_.find(name) != allowed_hostcalls_.end();
+  }
+
+  void setRestrictedCallback(bool restricted,
+                             std::unordered_set<std::string> allowed_hostcalls = {}) {
+    restricted_callback_ = restricted;
+    allowed_hostcalls_ = std::move(allowed_hostcalls);
+  }
+
   // Integrator operations.
   std::unique_ptr<WasmVmIntegration> &integration() { return integration_; }
   bool cmpLogLevel(proxy_wasm::LogLevel level) { return integration_->getLogLevel() <= level; }
@@ -322,6 +342,10 @@ class WasmVm {
   std::unique_ptr<WasmVmIntegration> integration_;
   FailState failed_ = FailState::Ok;
   std::vector<std::function<void(FailState)>> fail_callbacks_;
+
+private:
+  bool restricted_callback_{false};
+  std::unordered_set<std::string> allowed_hostcalls_{};
 };
 
 // Thread local state set during a call into a WASM VM so that calls coming out of the
diff --git a/include/proxy-wasm/wavm.h b/include/proxy-wasm/wasmedge.h
similarity index 94%
rename from include/proxy-wasm/wavm.h
rename to include/proxy-wasm/wasmedge.h
index 1ebbe8397..f0b2141ce 100644
--- a/include/proxy-wasm/wavm.h
+++ b/include/proxy-wasm/wasmedge.h
@@ -21,6 +21,6 @@
 
 namespace proxy_wasm {
 
-std::unique_ptr<WasmVm> createWavmVm();
+std::unique_ptr<WasmVm> createWasmEdgeVm();
 
 } // namespace proxy_wasm
diff --git a/include/proxy-wasm/word.h b/include/proxy-wasm/word.h
index 559471eb8..bc0d23a8c 100644
--- a/include/proxy-wasm/word.h
+++ b/include/proxy-wasm/word.h
@@ -17,18 +17,18 @@
 
 #include <iostream>
 
-namespace proxy_wasm {
+#include "include/proxy-wasm/sdk.h"
 
-#include "proxy_wasm_common.h"
+namespace proxy_wasm {
 
 // Use byteswap functions only when compiling for big-endian platforms.
 #if defined(__BYTE_ORDER__) && defined(__ORDER_BIG_ENDIAN__) &&                                    \
     __BYTE_ORDER__ == __ORDER_BIG_ENDIAN__
-#define htowasm(x) __builtin_bswap32(x)
-#define wasmtoh(x) __builtin_bswap32(x)
+#define htowasm(x, vm_uses_wasm_byte_order) ((vm_uses_wasm_byte_order) ? __builtin_bswap32(x) : (x))
+#define wasmtoh(x, vm_uses_wasm_byte_order) ((vm_uses_wasm_byte_order) ? __builtin_bswap32(x) : (x))
 #else
-#define htowasm(x) (x)
-#define wasmtoh(x) (x)
+#define htowasm(x, vm_uses_wasm_byte_order) (x)
+#define wasmtoh(x, vm_uses_wasm_byte_order) (x)
 #endif
 
 // Represents a Wasm-native word-sized datum. On 32-bit VMs, the high bits are always zero.
diff --git a/src/bytecode_util.cc b/src/bytecode_util.cc
index 3c5f768f2..70a373e01 100644
--- a/src/bytecode_util.cc
+++ b/src/bytecode_util.cc
@@ -14,6 +14,10 @@
 
 #include "include/proxy-wasm/bytecode_util.h"
 
+#if !defined(_MSC_VER)
+#include <cxxabi.h>
+#endif
+
 #include <cstring>
 
 namespace proxy_wasm {
@@ -44,15 +48,18 @@ bool BytecodeUtil::getAbiVersion(std::string_view bytecode, proxy_wasm::AbiVersi
       return false;
     }
     if (section_type == 7 /* export section */) {
+      const char *section_end = pos + section_len;
       uint32_t export_vector_size = 0;
-      if (!parseVarint(pos, end, export_vector_size) || pos + export_vector_size > end) {
+      if (!parseVarint(pos, section_end, export_vector_size) ||
+          pos + export_vector_size > section_end) {
         return false;
       }
       // Search thourgh exports.
       for (uint32_t i = 0; i < export_vector_size; i++) {
         // Parse name of the export.
         uint32_t export_name_size = 0;
-        if (!parseVarint(pos, end, export_name_size) || pos + export_name_size > end) {
+        if (!parseVarint(pos, section_end, export_name_size) ||
+            pos + export_name_size > section_end) {
           return false;
         }
         const auto *const name_begin = pos;
@@ -61,7 +68,7 @@ bool BytecodeUtil::getAbiVersion(std::string_view bytecode, proxy_wasm::AbiVersi
           return false;
         }
         // Check if it is a function type export
-        if (*pos++ == 0x00) {
+        if (*pos++ == 0x00 /* function */) {
           const std::string export_name = {name_begin, export_name_size};
           // Check the name of the function.
           if (export_name == "proxy_abi_version_0_1_0") {
@@ -110,24 +117,25 @@ bool BytecodeUtil::getCustomSection(std::string_view bytecode, std::string_view
     }
     if (section_type == 0) {
       // Custom section.
-      const auto *const section_data_start = pos;
+      const char *section_end = pos + section_len;
       uint32_t section_name_len = 0;
-      if (!BytecodeUtil::parseVarint(pos, end, section_name_len) || pos + section_name_len > end) {
+      if (!BytecodeUtil::parseVarint(pos, section_end, section_name_len) ||
+          pos + section_name_len > section_end) {
         return false;
       }
       if (section_name_len == name.size() && ::memcmp(pos, name.data(), section_name_len) == 0) {
         pos += section_name_len;
-        ret = {pos, static_cast<size_t>(section_data_start + section_len - pos)};
+        ret = {pos, static_cast<size_t>(section_end - pos)};
         return true;
       }
-      pos = section_data_start + section_len;
+      pos = section_end;
     } else {
       // Skip other sections.
       pos += section_len;
     }
   }
   return true;
-};
+}
 
 bool BytecodeUtil::getFunctionNameIndex(std::string_view bytecode,
                                         std::unordered_map<uint32_t, std::string> &ret) {
@@ -165,7 +173,16 @@ bool BytecodeUtil::getFunctionNameIndex(std::string_view bytecode,
           if (!parseVarint(pos, end, func_name_size) || pos + func_name_size > end) {
             return false;
           }
-          ret.insert({func_index, std::string(pos, func_name_size)});
+          auto func_name = std::string(pos, func_name_size);
+#if !defined(_MSC_VER)
+          int status;
+          char *data = abi::__cxa_demangle(func_name.c_str(), nullptr, nullptr, &status);
+          if (data != nullptr) {
+            func_name = std::string(data);
+            ::free(data);
+          }
+#endif
+          ret.insert({func_index, func_name});
           pos += func_name_size;
         }
         if (start + subsection_size != pos) {
@@ -229,16 +246,32 @@ bool BytecodeUtil::getStrippedSource(std::string_view bytecode, std::string &ret
 
 bool BytecodeUtil::parseVarint(const char *&pos, const char *end, uint32_t &ret) {
   uint32_t shift = 0;
+  uint32_t total = 0;
+  uint32_t v;
   char b;
-  do {
+  while (pos < end) {
     if (pos + 1 > end) {
+      // overread
       return false;
     }
     b = *pos++;
-    ret += (b & 0x7f) << shift;
+    v = (b & 0x7f);
+    if (shift == 28 && v > 3) {
+      // overflow
+      return false;
+    }
+    total += v << shift;
+    if ((b & 0x80) == 0) {
+      ret = total;
+      return true;
+    }
     shift += 7;
-  } while ((b & 0x80) != 0);
-  return ret != static_cast<uint32_t>(-1);
+    if (shift > 28) {
+      // overflow
+      return false;
+    }
+  }
+  return false;
 }
 
 } // namespace proxy_wasm
diff --git a/src/context.cc b/src/context.cc
index 29037ae43..d8dbc9a2a 100644
--- a/src/context.cc
+++ b/src/context.cc
@@ -22,6 +22,7 @@
 
 #include "include/proxy-wasm/context.h"
 #include "include/proxy-wasm/wasm.h"
+#include "src/hash.h"
 #include "src/shared_data.h"
 #include "src/shared_queue.h"
 
@@ -85,6 +86,11 @@ std::string PluginBase::makeLogPrefix() const {
   return prefix;
 }
 
+std::string PluginBase::makePluginKey(std::string_view root_id,
+                                      std::string_view plugin_configuration, std::string_view key) {
+  return Sha256String({root_id, "||", plugin_configuration, "||", key});
+}
+
 ContextBase::ContextBase() : parent_context_(this) {}
 
 ContextBase::ContextBase(WasmBase *wasm) : wasm_(wasm), parent_context_(this) {
@@ -487,10 +493,12 @@ FilterHeadersStatus ContextBase::convertVmCallResultToFilterHeadersStatus(uint64
       result > static_cast<uint64_t>(FilterHeadersStatus::StopAllIterationAndWatermark)) {
     return FilterHeadersStatus::StopAllIterationAndWatermark;
   }
-  if (result == static_cast<uint64_t>(FilterHeadersStatus::StopIteration)) {
-    // Always convert StopIteration (pause processing headers, but continue processing body)
-    // to StopAllIterationAndWatermark (pause all processing), since the former breaks all
-    // assumptions about HTTP processing.
+  if (result == static_cast<uint64_t>(FilterHeadersStatus::StopIteration) &&
+      !allow_on_headers_stop_iteration_) {
+    // Default behavior for Proxy-Wasm 0.2.* ABI is to translate StopIteration
+    // (pause processing headers, but continue processing body) to
+    // StopAllIterationAndWatermark (pause all processing), as described in
+    // https://github.com/proxy-wasm/proxy-wasm-cpp-host/issues/143.
     return FilterHeadersStatus::StopAllIterationAndWatermark;
   }
   return static_cast<FilterHeadersStatus>(result);
diff --git a/src/exports.cc b/src/exports.cc
index c203946b8..25ca06c9d 100644
--- a/src/exports.cc
+++ b/src/exports.cc
@@ -13,6 +13,8 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 //
+#include "include/proxy-wasm/limits.h"
+#include "include/proxy-wasm/pairs_util.h"
 #include "include/proxy-wasm/wasm.h"
 
 #include <openssl/rand.h>
@@ -57,55 +59,6 @@ RegisterForeignFunction::RegisterForeignFunction(const std::string &name, WasmFo
 
 namespace exports {
 
-namespace {
-
-Pairs toPairs(std::string_view buffer) {
-  Pairs result;
-  const char *b = buffer.data();
-  if (buffer.size() < sizeof(uint32_t)) {
-    return {};
-  }
-  auto size = wasmtoh(*reinterpret_cast<const uint32_t *>(b));
-  b += sizeof(uint32_t);
-  if (sizeof(uint32_t) + size * 2 * sizeof(uint32_t) > buffer.size()) {
-    return {};
-  }
-  result.resize(size);
-  for (uint32_t i = 0; i < size; i++) {
-    result[i].first = std::string_view(nullptr, wasmtoh(*reinterpret_cast<const uint32_t *>(b)));
-    b += sizeof(uint32_t);
-    result[i].second = std::string_view(nullptr, wasmtoh(*reinterpret_cast<const uint32_t *>(b)));
-    b += sizeof(uint32_t);
-  }
-  for (auto &p : result) {
-    p.first = std::string_view(b, p.first.size());
-    b += p.first.size() + 1;
-    p.second = std::string_view(b, p.second.size());
-    b += p.second.size() + 1;
-  }
-  return result;
-}
-
-template <typename Pairs>
-bool getPairs(ContextBase *context, const Pairs &result, uint64_t ptr_ptr, uint64_t size_ptr) {
-  if (result.empty()) {
-    return context->wasm()->copyToPointerSize("", ptr_ptr, size_ptr);
-  }
-  uint64_t size = pairsSize(result);
-  uint64_t ptr = 0;
-  char *buffer = static_cast<char *>(context->wasm()->allocMemory(size, &ptr));
-  marshalPairs(result, buffer);
-  if (!context->wasmVm()->setWord(ptr_ptr, Word(ptr))) {
-    return false;
-  }
-  if (!context->wasmVm()->setWord(size_ptr, Word(size))) {
-    return false;
-  }
-  return true;
-}
-
-} // namespace
-
 // General ABI.
 
 Word set_property(Word key_ptr, Word key_size, Word value_ptr, Word value_size) {
@@ -199,7 +152,7 @@ Word send_local_response(Word response_code, Word response_code_details_ptr,
   if (!details || !body || !additional_response_header_pairs) {
     return WasmResult::InvalidMemoryAccess;
   }
-  auto additional_headers = toPairs(additional_response_header_pairs.value());
+  auto additional_headers = PairsUtil::toPairs(additional_response_header_pairs.value());
   context->sendLocalResponse(response_code, body.value(), std::move(additional_headers),
                              grpc_status, details.value());
   context->wasm()->stopNextIteration(true);
@@ -434,7 +387,25 @@ Word get_header_map_pairs(Word type, Word ptr_ptr, Word size_ptr) {
   if (result != WasmResult::Ok) {
     return result;
   }
-  if (!getPairs(context, pairs, ptr_ptr, size_ptr)) {
+  if (pairs.empty()) {
+    if (!context->wasm()->copyToPointerSize("", ptr_ptr, size_ptr)) {
+      return WasmResult::InvalidMemoryAccess;
+    }
+    return WasmResult::Ok;
+  }
+  uint64_t size = PairsUtil::pairsSize(pairs);
+  uint64_t ptr = 0;
+  char *buffer = static_cast<char *>(context->wasm()->allocMemory(size, &ptr));
+  if (buffer == nullptr) {
+    return WasmResult::InvalidMemoryAccess;
+  }
+  if (!PairsUtil::marshalPairs(pairs, buffer, size)) {
+    return WasmResult::InvalidMemoryAccess;
+  }
+  if (!context->wasmVm()->setWord(ptr_ptr, Word(ptr))) {
+    return WasmResult::InvalidMemoryAccess;
+  }
+  if (!context->wasmVm()->setWord(size_ptr, Word(size))) {
     return WasmResult::InvalidMemoryAccess;
   }
   return WasmResult::Ok;
@@ -450,7 +421,7 @@ Word set_header_map_pairs(Word type, Word ptr, Word size) {
     return WasmResult::InvalidMemoryAccess;
   }
   return context->setHeaderMapPairs(static_cast<WasmHeaderMapType>(type.u64_),
-                                    toPairs(data.value()));
+                                    PairsUtil::toPairs(data.value()));
 }
 
 Word get_header_map_size(Word type, Word result_ptr) {
@@ -484,13 +455,21 @@ Word get_buffer_bytes(Word type, Word start, Word length, Word ptr_ptr, Word siz
     return WasmResult::BadArgument;
   }
   // Don't overread.
-  if (start + length > buffer->size()) {
+  if (start > buffer->size()) {
+    length = 0;
+  } else if (start + length > buffer->size()) {
     length = buffer->size() - start;
   }
-  if (length > 0) {
-    return buffer->copyTo(context->wasm(), start, length, ptr_ptr, size_ptr);
+  if (length == 0) {
+    if (!context->wasmVm()->setWord(ptr_ptr, Word(0))) {
+      return WasmResult::InvalidMemoryAccess;
+    }
+    if (!context->wasmVm()->setWord(size_ptr, Word(0))) {
+      return WasmResult::InvalidMemoryAccess;
+    }
+    return WasmResult::Ok;
   }
-  return WasmResult::Ok;
+  return buffer->copyTo(context->wasm(), start, length, ptr_ptr, size_ptr);
 }
 
 Word get_buffer_status(Word type, Word length_ptr, Word flags_ptr) {
@@ -540,8 +519,8 @@ Word http_call(Word uri_ptr, Word uri_size, Word header_pairs_ptr, Word header_p
   if (!uri || !body || !header_pairs || !trailer_pairs) {
     return WasmResult::InvalidMemoryAccess;
   }
-  auto headers = toPairs(header_pairs.value());
-  auto trailers = toPairs(trailer_pairs.value());
+  auto headers = PairsUtil::toPairs(header_pairs.value());
+  auto trailers = PairsUtil::toPairs(trailer_pairs.value());
   uint32_t token = 0;
   // NB: try to write the token to verify the memory before starting the async
   // operation.
@@ -610,7 +589,7 @@ Word grpc_call(Word service_ptr, Word service_size, Word service_name_ptr, Word
     return WasmResult::InvalidMemoryAccess;
   }
   uint32_t token = 0;
-  auto initial_metadata = toPairs(initial_metadata_pairs.value());
+  auto initial_metadata = PairsUtil::toPairs(initial_metadata_pairs.value());
   auto result = context->grpcCall(service.value(), service_name.value(), method_name.value(),
                                   initial_metadata, request.value(),
                                   std::chrono::milliseconds(timeout_milliseconds), &token);
@@ -636,7 +615,7 @@ Word grpc_stream(Word service_ptr, Word service_size, Word service_name_ptr, Wor
     return WasmResult::InvalidMemoryAccess;
   }
   uint32_t token = 0;
-  auto initial_metadata = toPairs(initial_metadata_pairs.value());
+  auto initial_metadata = PairsUtil::toPairs(initial_metadata_pairs.value());
   auto result = context->grpcStream(service.value(), service_name.value(), method_name.value(),
                                     initial_metadata, &token);
   if (result != WasmResult::Ok) {
@@ -667,6 +646,9 @@ Word grpc_send(Word token, Word message_ptr, Word message_size, Word end_stream)
   return context->grpcSend(token, message.value(), end_stream != 0U);
 }
 
+// WASIp1 typings in comments sourced from
+// https://github.com/WebAssembly/wasi-libc/blob/446cb3f1aa21f9b1a1eab372f82d65d19003e924/libc-bottom-half/headers/public/wasi/api.h
+
 // __wasi_errno_t path_open(__wasi_fd_t fd, __wasi_lookupflags_t dirflags, const char *path,
 // size_t path_len, __wasi_oflags_t oflags, __wasi_rights_t fs_rights_base, __wasi_rights_t
 // fs_rights_inheriting, __wasi_fdflags_t fdflags, __wasi_fd_t *retptr0)
@@ -714,8 +696,9 @@ Word writevImpl(Word fd, Word iovs, Word iovs_len, Word *nwritten_ptr) {
     }
     const auto *iovec = reinterpret_cast<const uint32_t *>(memslice.value().data());
     if (iovec[1] != 0U /* buf_len */) {
-      memslice = context->wasmVm()->getMemory(wasmtoh(iovec[0]) /* buf */,
-                                              wasmtoh(iovec[1]) /* buf_len */);
+      const auto buf = wasmtoh(iovec[0], context->wasmVm()->usesWasmByteOrder());
+      const auto buf_len = wasmtoh(iovec[1], context->wasmVm()->usesWasmByteOrder());
+      memslice = context->wasmVm()->getMemory(buf, buf_len);
       if (!memslice) {
         return 21; // __WASI_EFAULT
       }
@@ -796,6 +779,13 @@ Word wasi_unstable_fd_fdstat_get(Word fd, Word statOut) {
   return 0; // __WASI_ESUCCESS
 }
 
+// __wasi_errno_t __wasi_fd_fdstat_set_flags(__wasi_fd_t fd, __wasi_fdflags_t flags)
+Word wasi_unstable_fd_fdstat_set_flags(Word /*fd*/, Word /*flags*/) {
+  // Flags that can be specified: append, dsync, nonblock, rsync, and sync. Proxy-wasm only supports
+  // STDOUT and STDERR, but none of these flags have any effect in Proxy-Wasm.
+  return 52; // __WASI_ERRNO_ENOSYS
+}
+
 // __wasi_errno_t __wasi_environ_get(char **environ, char *environ_buf);
 Word wasi_unstable_environ_get(Word environ_array_ptr, Word environ_buf) {
   auto *context = contextOrEffectiveContext();
@@ -884,6 +874,12 @@ Word wasi_unstable_clock_time_get(Word clock_id, uint64_t /*precision*/,
 
 // __wasi_errno_t __wasi_random_get(uint8_t *buf, size_t buf_len);
 Word wasi_unstable_random_get(Word result_buf_ptr, Word buf_len) {
+  if (buf_len > PROXY_WASM_HOST_WASI_RANDOM_GET_MAX_SIZE_BYTES) {
+    return 28; // __WASI_EINVAL
+  }
+  if (buf_len == 0) {
+    return 0; // __WASI_ESUCCESS
+  }
   auto *context = contextOrEffectiveContext();
   std::vector<uint8_t> random(buf_len);
   RAND_bytes(random.data(), random.size());
@@ -893,6 +889,21 @@ Word wasi_unstable_random_get(Word result_buf_ptr, Word buf_len) {
   return 0; // __WASI_ESUCCESS
 }
 
+// __wasi_errno_t __wasi_sched_yield()
+Word wasi_unstable_sched_yield() {
+  // Per POSIX man pages, it is valid to return success if the calling thread is the only thread in
+  // the highest priority list. This is vacuously true for wasm without threads. There are no valid
+  // error cases defined.
+  return 0; // __WASI_ESUCCESS
+}
+
+// __wasi_errno_t __wasi_poll_oneoff(const __wasi_subscription_t *in, __wasi_event_t *out,
+// __wasi_size_t nsubscriptions, __wasi_size_t *nevents)
+Word wasi_unstable_poll_oneoff(Word /*in*/, Word /*out*/, Word /*nsubscriptions*/,
+                               Word /*nevents_ptr*/) {
+  return 52; // __WASI_ERRNO_ENOSYS
+}
+
 // void __wasi_proc_exit(__wasi_exitcode_t rval);
 void wasi_unstable_proc_exit(Word /*exit_code*/) {
   auto *context = contextOrEffectiveContext();
@@ -901,6 +912,8 @@ void wasi_unstable_proc_exit(Word /*exit_code*/) {
 
 Word pthread_equal(Word left, Word right) { return static_cast<uint64_t>(left == right); }
 
+void emscripten_notify_memory_growth(Word /*memory_index*/) {}
+
 Word set_tick_period_milliseconds(Word period_milliseconds) {
   TimerToken token = 0;
   return contextOrEffectiveContext()->setTimerPeriod(std::chrono::milliseconds(period_milliseconds),
diff --git a/src/hash.cc b/src/hash.cc
new file mode 100644
index 000000000..f2d1ded13
--- /dev/null
+++ b/src/hash.cc
@@ -0,0 +1,54 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "src/hash.h"
+
+#include <string>
+#include <vector>
+
+#include <openssl/sha.h>
+
+namespace proxy_wasm {
+
+namespace {
+
+std::string BytesToHex(const std::vector<uint8_t> &bytes) {
+  static const char *const hex = "0123456789ABCDEF";
+  std::string result;
+  result.reserve(bytes.size() * 2);
+  for (auto byte : bytes) {
+    result.push_back(hex[byte >> 4]);
+    result.push_back(hex[byte & 0xf]);
+  }
+  return result;
+}
+
+} // namespace
+
+std::vector<uint8_t> Sha256(const std::vector<std::string_view> &parts) {
+  uint8_t sha256[SHA256_DIGEST_LENGTH];
+  SHA256_CTX sha_ctx;
+  SHA256_Init(&sha_ctx);
+  for (auto part : parts) {
+    SHA256_Update(&sha_ctx, part.data(), part.size());
+  }
+  SHA256_Final(sha256, &sha_ctx);
+  return std::vector<uint8_t>(std::begin(sha256), std::end(sha256));
+}
+
+std::string Sha256String(const std::vector<std::string_view> &parts) {
+  return BytesToHex(Sha256(parts));
+}
+
+} // namespace proxy_wasm
\ No newline at end of file
diff --git a/src/hash.h b/src/hash.h
new file mode 100644
index 000000000..40d03e9d4
--- /dev/null
+++ b/src/hash.h
@@ -0,0 +1,27 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#pragma once
+
+#include <string>
+#include <vector>
+
+#include <openssl/sha.h>
+
+namespace proxy_wasm {
+
+std::vector<uint8_t> Sha256(const std::vector<std::string_view> &parts);
+std::string Sha256String(const std::vector<std::string_view> &parts);
+
+} // namespace proxy_wasm
diff --git a/src/null/null_plugin.cc b/src/null/null_plugin.cc
index 0f74496a2..689225687 100644
--- a/src/null/null_plugin.cc
+++ b/src/null/null_plugin.cc
@@ -26,7 +26,6 @@
 #include <utility>
 #include <vector>
 
-#include "include/proxy-wasm/null_plugin.h"
 #include "include/proxy-wasm/null_vm.h"
 #include "include/proxy-wasm/wasm.h"
 
diff --git a/src/pairs_util.cc b/src/pairs_util.cc
new file mode 100644
index 000000000..b8121882f
--- /dev/null
+++ b/src/pairs_util.cc
@@ -0,0 +1,205 @@
+// Copyright 2016-2019 Envoy Project Authors
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "include/proxy-wasm/pairs_util.h"
+
+#include <cstdint>
+#include <cstring>
+#include <string_view>
+#include <vector>
+
+#include "include/proxy-wasm/exports.h"
+#include "include/proxy-wasm/limits.h"
+#include "include/proxy-wasm/word.h"
+
+namespace proxy_wasm {
+
+namespace {
+
+// Read trivially copyable type from char buffer and return value. Does not
+// check if char buffer is large enough to contain instance of `T`.
+template <typename T> inline T unalignedLoad(const char *buffer) {
+  // Checking for undefined behaviour wrt std::memcpy.
+  static_assert(std::is_trivially_copyable_v<T>,
+                "type must be trivially copyable to use std::memcpy");
+  T result;
+  // Use std::memcpy to get around strict type aliasing rules.
+  std::memcpy(&result, buffer, sizeof(T));
+
+  return result;
+}
+
+} // namespace
+
+using Sizes = std::vector<std::pair<uint32_t, uint32_t>>;
+
+size_t PairsUtil::pairsSize(const Pairs &pairs) {
+  size_t size = sizeof(uint32_t); // number of headers
+  for (const auto &p : pairs) {
+    size += 2 * sizeof(uint32_t); // size of name, size of value
+    size += p.first.size() + 1;   // NULL-terminated name
+    size += p.second.size() + 1;  // NULL-terminated value
+  }
+  return size;
+}
+
+bool PairsUtil::marshalPairs(const Pairs &pairs, char *buffer, size_t size) {
+  if (buffer == nullptr) {
+    return false;
+  }
+
+  char *pos = buffer;
+  const char *end = buffer + size;
+
+  // Write number of pairs.
+  uint32_t num_pairs =
+      htowasm(pairs.size(), contextOrEffectiveContext() != nullptr
+                                ? contextOrEffectiveContext()->wasmVm()->usesWasmByteOrder()
+                                : false);
+  if (pos + sizeof(uint32_t) > end) {
+    return false;
+  }
+  ::memcpy(pos, &num_pairs, sizeof(uint32_t));
+  pos += sizeof(uint32_t);
+
+  for (const auto &p : pairs) {
+    // Write name length.
+    uint32_t name_len =
+        htowasm(p.first.size(), contextOrEffectiveContext() != nullptr
+                                    ? contextOrEffectiveContext()->wasmVm()->usesWasmByteOrder()
+                                    : false);
+    if (pos + sizeof(uint32_t) > end) {
+      return false;
+    }
+    ::memcpy(pos, &name_len, sizeof(uint32_t));
+    pos += sizeof(uint32_t);
+
+    // Write value length.
+    uint32_t value_len =
+        htowasm(p.second.size(), contextOrEffectiveContext() != nullptr
+                                     ? contextOrEffectiveContext()->wasmVm()->usesWasmByteOrder()
+                                     : false);
+    if (pos + sizeof(uint32_t) > end) {
+      return false;
+    }
+    ::memcpy(pos, &value_len, sizeof(uint32_t));
+    pos += sizeof(uint32_t);
+  }
+
+  for (const auto &p : pairs) {
+    // Write name.
+    if (pos + p.first.size() + 1 > end) {
+      return false;
+    }
+    ::memcpy(pos, p.first.data(), p.first.size());
+    pos += p.first.size();
+    *pos++ = '\0'; // NULL-terminated string.
+
+    // Write value.
+    if (pos + p.second.size() + 1 > end) {
+      return false;
+    }
+    ::memcpy(pos, p.second.data(), p.second.size());
+    pos += p.second.size();
+    *pos++ = '\0'; // NULL-terminated string.
+  }
+
+  return pos == end;
+}
+
+Pairs PairsUtil::toPairs(std::string_view buffer) {
+  if (buffer.data() == nullptr || buffer.size() > PROXY_WASM_HOST_PAIRS_MAX_BYTES) {
+    return {};
+  }
+
+  const char *pos = buffer.data();
+  const char *end = buffer.data() + buffer.size();
+
+  // Read number of pairs.
+  if (pos + sizeof(uint32_t) > end) {
+    return {};
+  }
+
+  // clang complains that this is unused when the wasmtoh macro drops its
+  // second argument on non-big-endian platforms.
+  [[maybe_unused]] const bool uses_wasm_byte_order =
+      contextOrEffectiveContext() != nullptr &&
+      contextOrEffectiveContext()->wasmVm()->usesWasmByteOrder();
+  uint32_t num_pairs = wasmtoh(unalignedLoad<uint32_t>(pos), uses_wasm_byte_order);
+  pos += sizeof(uint32_t);
+
+  // Check if we're not going to exceed the limit.
+  if (num_pairs > PROXY_WASM_HOST_PAIRS_MAX_COUNT) {
+    return {};
+  }
+  if (pos + num_pairs * 2 * sizeof(uint32_t) > end) {
+    return {};
+  }
+
+  Sizes sizes;
+  sizes.resize(num_pairs);
+
+  for (auto &s : sizes) {
+    // Read name length.
+    if (pos + sizeof(uint32_t) > end) {
+      return {};
+    }
+    s.first = wasmtoh(unalignedLoad<uint32_t>(pos), uses_wasm_byte_order);
+    pos += sizeof(uint32_t);
+
+    // Read value length.
+    if (pos + sizeof(uint32_t) > end) {
+      return {};
+    }
+    s.second = wasmtoh(unalignedLoad<uint32_t>(pos), uses_wasm_byte_order);
+    pos += sizeof(uint32_t);
+  }
+
+  Pairs pairs;
+  pairs.resize(num_pairs);
+
+  for (uint32_t i = 0; i < num_pairs; i++) {
+    auto &s = sizes[i];
+    auto &p = pairs[i];
+
+    // Don't overread.
+    if (pos + s.first + 1 > end) {
+      return {};
+    }
+    p.first = std::string_view(pos, s.first);
+    pos += s.first;
+    if (*pos++ != '\0') { // NULL-terminated string.
+      return {};
+    }
+
+    // Don't overread.
+    if (pos + s.second + 1 > end) {
+      return {};
+    }
+    p.second = std::string_view(pos, s.second);
+    pos += s.second;
+    if (*pos++ != '\0') { // NULL-terminated string.
+      return {};
+    }
+  }
+
+  if (pos != end) {
+    return {};
+  }
+
+  return pairs;
+}
+
+} // namespace proxy_wasm
diff --git a/src/signature_util.cc b/src/signature_util.cc
index a8f29363b..46b9d3333 100644
--- a/src/signature_util.cc
+++ b/src/signature_util.cc
@@ -86,7 +86,7 @@ bool SignatureUtil::verifySignature(std::string_view bytecode, std::string &mess
 
   uint32_t alg_id;
   std::memcpy(&alg_id, payload.data(), sizeof(uint32_t));
-  alg_id = wasmtoh(alg_id);
+  alg_id = wasmtoh(alg_id, true);
 
   if (alg_id != 2) {
     message = "Signature has a wrong alg_id (want: 2, is: " + std::to_string(alg_id) + ")";
diff --git a/src/v8/v8.cc b/src/v8/v8.cc
index dea883252..f5a73b130 100644
--- a/src/v8/v8.cc
+++ b/src/v8/v8.cc
@@ -26,6 +26,10 @@
 #include <utility>
 #include <vector>
 
+#include "include/proxy-wasm/limits.h"
+
+#include "absl/strings/str_format.h"
+#include "include/v8-initialization.h"
 #include "include/v8-version.h"
 #include "include/v8.h"
 #include "src/wasm/c-api.h"
@@ -39,7 +43,13 @@ wasm::Engine *engine() {
   static wasm::own<wasm::Engine> engine;
 
   std::call_once(init, []() {
+    // Disable the Liftoff compiler to force optimized JIT up-front.
+    std::string args = absl::StrFormat("--wasm_max_mem_pages=%u --no-liftoff",
+                                       PROXY_WASM_HOST_MAX_WASM_MEMORY_SIZE_BYTES /
+                                           PROXY_WASM_HOST_WASM_MEMORY_PAGE_SIZE_BYTES);
+    ::v8::V8::SetFlagsFromString(args.c_str(), args.size());
     ::v8::V8::EnableWebAssemblyTrapHandler(true);
+
     engine = wasm::Engine::make();
   });
 
@@ -95,8 +105,13 @@ class V8 : public WasmVm {
 #undef _GET_MODULE_FUNCTION
 
   void terminate() override;
+  bool usesWasmByteOrder() override { return true; }
+
+  void warm() override;
 
 private:
+  wasm::own<wasm::Trap> trap(std::string message);
+
   std::string getFailMessage(std::string_view function_name, wasm::own<wasm::Trap> trap);
 
   template <typename... Args>
@@ -115,6 +130,9 @@ class V8 : public WasmVm {
   void getModuleFunctionImpl(std::string_view function_name,
                              std::function<R(ContextBase *, Args...)> *function);
 
+  // Initialize the V8 engine and store if necessary.
+  void initStore();
+
   wasm::own<wasm::Store> store_;
   wasm::own<wasm::Module> module_;
   wasm::own<wasm::Shared<wasm::Module>> shared_module_;
@@ -131,20 +149,20 @@ class V8 : public WasmVm {
 
 static std::string printValue(const wasm::Val &value) {
   switch (value.kind()) {
-  case wasm::I32:
+  case wasm::ValKind::I32:
     return std::to_string(value.get<uint32_t>());
-  case wasm::I64:
+  case wasm::ValKind::I64:
     return std::to_string(value.get<uint64_t>());
-  case wasm::F32:
+  case wasm::ValKind::F32:
     return std::to_string(value.get<float>());
-  case wasm::F64:
+  case wasm::ValKind::F64:
     return std::to_string(value.get<double>());
   default:
     return "unknown";
   }
 }
 
-static std::string printValues(const wasm::Val values[], size_t size) {
+static std::string printValues(const wasm::vec<wasm::Val> &values, size_t size) {
   if (size == 0) {
     return "";
   }
@@ -161,17 +179,17 @@ static std::string printValues(const wasm::Val values[], size_t size) {
 
 static const char *printValKind(wasm::ValKind kind) {
   switch (kind) {
-  case wasm::I32:
+  case wasm::ValKind::I32:
     return "i32";
-  case wasm::I64:
+  case wasm::ValKind::I64:
     return "i64";
-  case wasm::F32:
+  case wasm::ValKind::F32:
     return "f32";
-  case wasm::F64:
+  case wasm::ValKind::F64:
     return "f64";
-  case wasm::ANYREF:
-    return "anyref";
-  case wasm::FUNCREF:
+  case wasm::ValKind::EXTERNREF:
+    return "externref";
+  case wasm::ValKind::FUNCREF:
     return "funcref";
   default:
     return "unknown";
@@ -220,11 +238,11 @@ template <typename T> wasm::Val makeVal(T t) { return wasm::Val::make(t); }
 template <> wasm::Val makeVal(Word t) { return wasm::Val::make(static_cast<uint32_t>(t.u64_)); }
 
 template <typename T> constexpr auto convertArgToValKind();
-template <> constexpr auto convertArgToValKind<Word>() { return wasm::I32; };
-template <> constexpr auto convertArgToValKind<uint32_t>() { return wasm::I32; };
-template <> constexpr auto convertArgToValKind<int64_t>() { return wasm::I64; };
-template <> constexpr auto convertArgToValKind<uint64_t>() { return wasm::I64; };
-template <> constexpr auto convertArgToValKind<double>() { return wasm::F64; };
+template <> constexpr auto convertArgToValKind<Word>() { return wasm::ValKind::I32; };
+template <> constexpr auto convertArgToValKind<uint32_t>() { return wasm::ValKind::I32; };
+template <> constexpr auto convertArgToValKind<int64_t>() { return wasm::ValKind::I64; };
+template <> constexpr auto convertArgToValKind<uint64_t>() { return wasm::ValKind::I64; };
+template <> constexpr auto convertArgToValKind<double>() { return wasm::ValKind::F64; };
 
 template <typename T, std::size_t... I>
 constexpr auto convertArgsTupleToValTypesImpl(std::index_sequence<I...> /*comptime*/) {
@@ -251,9 +269,16 @@ template <typename T, typename U> constexpr T convertValTypesToArgsTuple(const U
 
 // V8 implementation.
 
+void V8::initStore() {
+  if (store_ != nullptr) {
+    return;
+  }
+  store_ = wasm::Store::make(engine());
+}
+
 bool V8::load(std::string_view bytecode, std::string_view precompiled,
               const std::unordered_map<uint32_t, std::string> &function_names) {
-  store_ = wasm::Store::make(engine());
+  initStore();
   if (store_ == nullptr) {
     return false;
   }
@@ -334,7 +359,8 @@ bool V8::link(std::string_view /*debug_name*/) {
   assert(module_ != nullptr);
 
   const auto import_types = module_.get()->imports();
-  std::vector<const wasm::Extern *> imports;
+  wasm::vec<wasm::Extern *> imports =
+      wasm::vec<wasm::Extern *>::make_uninitialized(import_types.size());
 
   for (size_t i = 0; i < import_types.size(); i++) {
     std::string_view module(import_types[i]->module().get(), import_types[i]->module().size());
@@ -343,7 +369,7 @@ bool V8::link(std::string_view /*debug_name*/) {
 
     switch (import_type->kind()) {
 
-    case wasm::EXTERN_FUNC: {
+    case wasm::ExternKind::FUNC: {
       auto it = host_functions_.find(std::string(module) + "." + std::string(name));
       if (it == host_functions_.end()) {
         fail(FailState::UnableToInitializeCode,
@@ -363,10 +389,10 @@ bool V8::link(std::string_view /*debug_name*/) {
                  printValTypes(func->type()->results()));
         return false;
       }
-      imports.push_back(func);
+      imports[i] = func;
     } break;
 
-    case wasm::EXTERN_GLOBAL: {
+    case wasm::ExternKind::GLOBAL: {
       // TODO(PiotrSikora): add support when/if needed.
       fail(FailState::UnableToInitializeCode,
            "Failed to load Wasm module due to a missing import: " + std::string(module) + "." +
@@ -374,7 +400,7 @@ bool V8::link(std::string_view /*debug_name*/) {
       return false;
     } break;
 
-    case wasm::EXTERN_MEMORY: {
+    case wasm::ExternKind::MEMORY: {
       assert(memory_ == nullptr);
       auto type = wasm::MemoryType::make(import_type->memory()->limits());
       if (type == nullptr) {
@@ -384,10 +410,10 @@ bool V8::link(std::string_view /*debug_name*/) {
       if (memory_ == nullptr) {
         return false;
       }
-      imports.push_back(memory_.get());
+      imports[i] = memory_.get();
     } break;
 
-    case wasm::EXTERN_TABLE: {
+    case wasm::ExternKind::TABLE: {
       assert(table_ == nullptr);
       auto type =
           wasm::TableType::make(wasm::ValType::make(import_type->table()->element()->kind()),
@@ -399,16 +425,12 @@ bool V8::link(std::string_view /*debug_name*/) {
       if (table_ == nullptr) {
         return false;
       }
-      imports.push_back(table_.get());
+      imports[i] = table_.get();
     } break;
     }
   }
 
-  if (import_types.size() != imports.size()) {
-    return false;
-  }
-
-  instance_ = wasm::Instance::make(store_.get(), module_.get(), imports.data());
+  instance_ = wasm::Instance::make(store_.get(), module_.get(), imports);
   if (instance_ == nullptr) {
     fail(FailState::UnableToInitializeCode, "Failed to create new Wasm instance");
     return false;
@@ -426,16 +448,16 @@ bool V8::link(std::string_view /*debug_name*/) {
 
     switch (export_type->kind()) {
 
-    case wasm::EXTERN_FUNC: {
+    case wasm::ExternKind::FUNC: {
       assert(export_item->func() != nullptr);
       module_functions_.insert_or_assign(std::string(name), export_item->func()->copy());
     } break;
 
-    case wasm::EXTERN_GLOBAL: {
+    case wasm::ExternKind::GLOBAL: {
       // TODO(PiotrSikora): add support when/if needed.
     } break;
 
-    case wasm::EXTERN_MEMORY: {
+    case wasm::ExternKind::MEMORY: {
       assert(export_item->memory() != nullptr);
       assert(memory_ == nullptr);
       memory_ = exports[i]->memory()->copy();
@@ -444,7 +466,7 @@ bool V8::link(std::string_view /*debug_name*/) {
       }
     } break;
 
-    case wasm::EXTERN_TABLE: {
+    case wasm::ExternKind::TABLE: {
       // TODO(PiotrSikora): add support when/if needed.
     } break;
     }
@@ -457,6 +479,10 @@ uint64_t V8::getMemorySize() { return memory_->data_size(); }
 
 std::optional<std::string_view> V8::getMemory(uint64_t pointer, uint64_t size) {
   assert(memory_ != nullptr);
+  // Make sure we're operating in a wasm32 memory space.
+  if (pointer > UINT32_MAX || size > UINT32_MAX || pointer + size > UINT32_MAX) {
+    return std::nullopt;
+  }
   if (pointer + size > memory_->data_size()) {
     return std::nullopt;
   }
@@ -465,6 +491,10 @@ std::optional<std::string_view> V8::getMemory(uint64_t pointer, uint64_t size) {
 
 bool V8::setMemory(uint64_t pointer, uint64_t size, const void *data) {
   assert(memory_ != nullptr);
+  // Make sure we're operating in a wasm32 memory space.
+  if (pointer > UINT32_MAX || size > UINT32_MAX || pointer + size > UINT32_MAX) {
+    return false;
+  }
   if (pointer + size > memory_->data_size()) {
     return false;
   }
@@ -474,25 +504,37 @@ bool V8::setMemory(uint64_t pointer, uint64_t size, const void *data) {
 
 bool V8::getWord(uint64_t pointer, Word *word) {
   constexpr auto size = sizeof(uint32_t);
+  // Make sure we're operating in a wasm32 memory space.
+  if (pointer > UINT32_MAX || pointer + size > UINT32_MAX) {
+    return false;
+  }
   if (pointer + size > memory_->data_size()) {
     return false;
   }
   uint32_t word32;
   ::memcpy(&word32, memory_->data() + pointer, size);
-  word->u64_ = wasmtoh(word32);
+  word->u64_ = wasmtoh(word32, true);
   return true;
 }
 
 bool V8::setWord(uint64_t pointer, Word word) {
   constexpr auto size = sizeof(uint32_t);
+  // Make sure we're operating in a wasm32 memory space.
+  if (pointer > UINT32_MAX || pointer + size > UINT32_MAX) {
+    return false;
+  }
   if (pointer + size > memory_->data_size()) {
     return false;
   }
-  uint32_t word32 = htowasm(word.u32());
+  uint32_t word32 = htowasm(word.u32(), true);
   ::memcpy(memory_->data() + pointer, &word32, size);
   return true;
 }
 
+wasm::own<wasm::Trap> V8::trap(std::string message) {
+  return wasm::Trap::make(store_.get(), wasm::Message::make(std::move(message)));
+}
+
 template <typename... Args>
 void V8::registerHostFunctionImpl(std::string_view module_name, std::string_view function_name,
                                   void (*function)(Args...)) {
@@ -502,13 +544,17 @@ void V8::registerHostFunctionImpl(std::string_view module_name, std::string_view
                                    convertArgsTupleToValTypes<std::tuple<>>());
   auto func = wasm::Func::make(
       store_.get(), type.get(),
-      [](void *data, const wasm::Val params[], wasm::Val /*results*/[]) -> wasm::own<wasm::Trap> {
+      [](void *data, const wasm::vec<wasm::Val> &params,
+         wasm::vec<wasm::Val> & /*results*/) -> wasm::own<wasm::Trap> {
         auto *func_data = reinterpret_cast<FuncData *>(data);
         const bool log = func_data->vm_->cmpLogLevel(LogLevel::trace);
         if (log) {
           func_data->vm_->integration()->trace("[vm->host] " + func_data->name_ + "(" +
                                                printValues(params, sizeof...(Args)) + ")");
         }
+        if (!func_data->vm_->isHostFunctionAllowed(func_data->name_)) {
+          return dynamic_cast<V8 *>(func_data->vm_)->trap("restricted_callback");
+        }
         auto args = convertValTypesToArgsTuple<std::tuple<Args...>>(params);
         auto function = reinterpret_cast<void (*)(Args...)>(func_data->raw_func_);
         std::apply(function, args);
@@ -535,13 +581,17 @@ void V8::registerHostFunctionImpl(std::string_view module_name, std::string_view
                                    convertArgsTupleToValTypes<std::tuple<R>>());
   auto func = wasm::Func::make(
       store_.get(), type.get(),
-      [](void *data, const wasm::Val params[], wasm::Val results[]) -> wasm::own<wasm::Trap> {
+      [](void *data, const wasm::vec<wasm::Val> &params,
+         wasm::vec<wasm::Val> &results) -> wasm::own<wasm::Trap> {
         auto *func_data = reinterpret_cast<FuncData *>(data);
         const bool log = func_data->vm_->cmpLogLevel(LogLevel::trace);
         if (log) {
           func_data->vm_->integration()->trace("[vm->host] " + func_data->name_ + "(" +
                                                printValues(params, sizeof...(Args)) + ")");
         }
+        if (!func_data->vm_->isHostFunctionAllowed(func_data->name_)) {
+          return dynamic_cast<V8 *>(func_data->vm_)->trap("restricted_callback");
+        }
         auto args = convertValTypesToArgsTuple<std::tuple<Args...>>(params);
         auto function = reinterpret_cast<R (*)(Args...)>(func_data->raw_func_);
         R rvalue = std::apply(function, args);
@@ -586,20 +636,21 @@ void V8::getModuleFunctionImpl(std::string_view function_name,
     const bool log = cmpLogLevel(LogLevel::trace);
     SaveRestoreContext saved_context(context);
     wasm::own<wasm::Trap> trap = nullptr;
+    wasm::vec<wasm::Val> results = wasm::vec<wasm::Val>::make_uninitialized();
 
     // Workaround for MSVC++ not supporting zero-sized arrays.
     if constexpr (sizeof...(args) > 0) {
-      wasm::Val params[] = {makeVal(args)...};
+      wasm::vec<wasm::Val> params = wasm::vec<wasm::Val>::make(makeVal(args)...);
       if (log) {
         integration()->trace("[host->vm] " + std::string(function_name) + "(" +
                              printValues(params, sizeof...(Args)) + ")");
       }
-      trap = func->call(params, nullptr);
+      trap = func->call(params, results);
     } else {
       if (log) {
         integration()->trace("[host->vm] " + std::string(function_name) + "()");
       }
-      trap = func->call(nullptr, nullptr);
+      trap = func->call(wasm::vec<wasm::Val>::make_uninitialized(), results);
     }
 
     if (trap) {
@@ -636,12 +687,12 @@ void V8::getModuleFunctionImpl(std::string_view function_name,
   *function = [func, function_name, this](ContextBase *context, Args... args) -> R {
     const bool log = cmpLogLevel(LogLevel::trace);
     SaveRestoreContext saved_context(context);
-    wasm::Val results[1];
+    wasm::vec<wasm::Val> results = wasm::vec<wasm::Val>::make_uninitialized(1);
     wasm::own<wasm::Trap> trap = nullptr;
 
     // Workaround for MSVC++ not supporting zero-sized arrays.
     if constexpr (sizeof...(args) > 0) {
-      wasm::Val params[] = {makeVal(args)...};
+      wasm::vec<wasm::Val> params = wasm::vec<wasm::Val>::make(makeVal(args)...);
       if (log) {
         integration()->trace("[host->vm] " + std::string(function_name) + "(" +
                              printValues(params, sizeof...(Args)) + ")");
@@ -651,7 +702,7 @@ void V8::getModuleFunctionImpl(std::string_view function_name,
       if (log) {
         integration()->trace("[host->vm] " + std::string(function_name) + "()");
       }
-      trap = func->call(nullptr, results);
+      trap = func->call(wasm::vec<wasm::Val>::make_uninitialized(), results);
     }
 
     if (trap) {
@@ -671,11 +722,10 @@ void V8::terminate() {
   auto *store_impl = reinterpret_cast<wasm::StoreImpl *>(store_.get());
   auto *isolate = store_impl->isolate();
   isolate->TerminateExecution();
-  while (isolate->IsExecutionTerminating()) {
-    std::this_thread::yield();
-  }
 }
 
+void V8::warm() { initStore(); }
+
 std::string V8::getFailMessage(std::string_view function_name, wasm::own<wasm::Trap> trap) {
   auto message = "Function: " + std::string(function_name) + " failed: ";
   message += std::string(trap->message().get(), trap->message().size());
diff --git a/src/wamr/types.h b/src/wamr/types.h
index f6e516881..7252c5c3d 100644
--- a/src/wamr/types.h
+++ b/src/wamr/types.h
@@ -21,6 +21,7 @@ using WasmEnginePtr = common::CSmartPtr<wasm_engine_t, wasm_engine_delete>;
 using WasmFuncPtr = common::CSmartPtr<wasm_func_t, wasm_func_delete>;
 using WasmStorePtr = common::CSmartPtr<wasm_store_t, wasm_store_delete>;
 using WasmModulePtr = common::CSmartPtr<wasm_module_t, wasm_module_delete>;
+using WasmSharedModulePtr = common::CSmartPtr<wasm_shared_module_t, wasm_shared_module_delete>;
 using WasmMemoryPtr = common::CSmartPtr<wasm_memory_t, wasm_memory_delete>;
 using WasmTablePtr = common::CSmartPtr<wasm_table_t, wasm_table_delete>;
 using WasmInstancePtr = common::CSmartPtr<wasm_instance_t, wasm_instance_delete>;
diff --git a/src/wamr/wamr.cc b/src/wamr/wamr.cc
index 93cae4d58..8eef73590 100644
--- a/src/wamr/wamr.cc
+++ b/src/wamr/wamr.cc
@@ -56,10 +56,11 @@ class Wamr : public WasmVm {
   Wamr() = default;
 
   std::string_view getEngineName() override { return "wamr"; }
-  std::string_view getPrecompiledSectionName() override { return ""; }
+  // must use the exact name given by test-tools/append-aot-to-wasm/append_aot_to_wasm.py
+  std::string_view getPrecompiledSectionName() override { return "wamr-aot"; }
 
-  Cloneable cloneable() override { return Cloneable::NotCloneable; }
-  std::unique_ptr<WasmVm> clone() override { return nullptr; }
+  Cloneable cloneable() override { return Cloneable::CompiledBytecode; }
+  std::unique_ptr<WasmVm> clone() override;
 
   bool load(std::string_view bytecode, std::string_view precompiled,
             const std::unordered_map<uint32_t, std::string> &function_names) override;
@@ -87,6 +88,9 @@ class Wamr : public WasmVm {
 #undef _GET_MODULE_FUNCTION
 
   void terminate() override {}
+  bool usesWasmByteOrder() override { return true; }
+
+  void warm() override;
 
 private:
   template <typename... Args>
@@ -105,8 +109,12 @@ class Wamr : public WasmVm {
   void getModuleFunctionImpl(std::string_view function_name,
                              std::function<R(ContextBase *, Args...)> *function);
 
+  // Initialize the Wamr store if necessary.
+  void initStore();
+
   WasmStorePtr store_;
   WasmModulePtr module_;
+  WasmSharedModulePtr shared_module_;
   WasmInstancePtr instance_;
 
   WasmMemoryPtr memory_;
@@ -116,24 +124,79 @@ class Wamr : public WasmVm {
   std::unordered_map<std::string, WasmFuncPtr> module_functions_;
 };
 
-bool Wamr::load(std::string_view bytecode, std::string_view /*precompiled*/,
-                const std::unordered_map<uint32_t, std::string> & /*function_names*/) {
+void Wamr::initStore() {
+  if (store_ != nullptr) {
+    return;
+  }
   store_ = wasm_store_new(engine());
+}
+
+bool Wamr::load(std::string_view bytecode, std::string_view precompiled,
+                const std::unordered_map<uint32_t, std::string> & /*function_names*/) {
+  initStore();
   if (store_ == nullptr) {
     return false;
   }
 
-  WasmByteVec vec;
-  wasm_byte_vec_new(vec.get(), bytecode.size(), bytecode.data());
+  wasm_byte_vec_t binary = {0};
+  if (precompiled.empty()) {
+    binary.size = bytecode.size();
+    binary.data = const_cast<char *>(bytecode.data());
+    binary.num_elems = bytecode.size();
+    binary.size_of_elem = sizeof(byte_t);
+    binary.lock = nullptr;
+  } else {
+    // skip leading paddings
+    auto padding_count = static_cast<uint8_t>(precompiled[0]);
+    precompiled.remove_prefix(padding_count + 1);
+
+    binary.size = precompiled.size();
+    binary.data = const_cast<char *>(precompiled.data());
+    binary.num_elems = precompiled.size();
+    binary.size_of_elem = sizeof(byte_t);
+    binary.lock = nullptr;
+  }
 
-  module_ = wasm_module_new(store_.get(), vec.get());
+  module_ = wasm_module_new(store_.get(), &binary);
   if (module_ == nullptr) {
     return false;
   }
 
+  shared_module_ = wasm_module_share(module_.get());
+  if (shared_module_ == nullptr) {
+    return false;
+  }
+
   return true;
 }
 
+std::unique_ptr<WasmVm> Wamr::clone() {
+  assert(module_ != nullptr);
+
+  auto vm = std::make_unique<Wamr>();
+  if (vm == nullptr) {
+    return nullptr;
+  }
+
+  vm->store_ = wasm_store_new(engine());
+  if (vm->store_ == nullptr) {
+    return nullptr;
+  }
+
+  vm->module_ = wasm_module_obtain(vm->store_.get(), shared_module_.get());
+  if (vm->module_ == nullptr) {
+    return nullptr;
+  }
+
+  auto *integration_clone = integration()->clone();
+  if (integration_clone == nullptr) {
+    return nullptr;
+  }
+  vm->integration().reset(integration_clone);
+
+  return vm;
+}
+
 static bool equalValTypes(const wasm_valtype_vec_t *left, const wasm_valtype_vec_t *right) {
   if (left->size != right->size) {
     return false;
@@ -188,8 +251,8 @@ static const char *printValKind(wasm_valkind_t kind) {
     return "f32";
   case WASM_F64:
     return "f64";
-  case WASM_ANYREF:
-    return "anyref";
+  case WASM_EXTERNREF:
+    return "externref";
   case WASM_FUNCREF:
     return "funcref";
   default:
@@ -225,9 +288,15 @@ bool Wamr::link(std::string_view /*debug_name*/) {
     const wasm_name_t *name_ptr = wasm_importtype_name(import_types.get()->data[i]);
     const wasm_externtype_t *extern_type = wasm_importtype_type(import_types.get()->data[i]);
 
-    std::string_view module_name(module_name_ptr->data, module_name_ptr->size);
-    std::string_view name(name_ptr->data, name_ptr->size);
-    assert(name_ptr->size > 0);
+    if (std::strlen(name_ptr->data) == 0) {
+      fail(FailState::UnableToInitializeCode, std::string("The name field of import_types[") +
+                                                  std::to_string(i) + std::string("] is empty"));
+      return false;
+    }
+
+    std::string_view module_name(module_name_ptr->data);
+    std::string_view name(name_ptr->data);
+
     switch (wasm_externtype_kind(extern_type)) {
     case WASM_EXTERN_FUNC: {
       auto it = host_functions_.find(std::string(module_name) + "." + std::string(name));
@@ -296,7 +365,7 @@ bool Wamr::link(std::string_view /*debug_name*/) {
     return false;
   }
 
-  wasm_extern_vec_t imports_vec = {imports.size(), imports.data()};
+  wasm_extern_vec_t imports_vec = {imports.size(), imports.data(), imports.size()};
   instance_ = wasm_instance_new(store_.get(), module_.get(), &imports_vec, nullptr);
   if (instance_ == nullptr) {
     fail(FailState::UnableToInitializeCode, "Failed to create new Wasm instance");
@@ -310,17 +379,15 @@ bool Wamr::link(std::string_view /*debug_name*/) {
   wasm_instance_exports(instance_.get(), exports.get());
 
   for (size_t i = 0; i < export_types.get()->size; i++) {
-    const wasm_externtype_t *exp_extern_type = wasm_exporttype_type(export_types.get()->data[i]);
     wasm_extern_t *actual_extern = exports.get()->data[i];
 
     wasm_externkind_t kind = wasm_extern_kind(actual_extern);
-    assert(kind == wasm_externtype_kind(exp_extern_type));
+    assert(kind == wasm_externtype_kind(wasm_exporttype_type(export_types.get()->data[i])));
     switch (kind) {
     case WASM_EXTERN_FUNC: {
       WasmFuncPtr func = wasm_func_copy(wasm_extern_as_func(actual_extern));
       const wasm_name_t *name_ptr = wasm_exporttype_name(export_types.get()->data[i]);
-      module_functions_.insert_or_assign(std::string(name_ptr->data, name_ptr->size),
-                                         std::move(func));
+      module_functions_.insert_or_assign(std::string(name_ptr->data), std::move(func));
     } break;
     case WASM_EXTERN_GLOBAL: {
       // TODO(mathetake): add support when/if needed.
@@ -368,7 +435,7 @@ bool Wamr::getWord(uint64_t pointer, Word *word) {
 
   uint32_t word32;
   ::memcpy(&word32, wasm_memory_data(memory_.get()) + pointer, size);
-  word->u64_ = wasmtoh(word32);
+  word->u64_ = wasmtoh(word32, true);
   return true;
 }
 
@@ -377,7 +444,7 @@ bool Wamr::setWord(uint64_t pointer, Word word) {
   if (pointer + size > wasm_memory_data_size(memory_.get())) {
     return false;
   }
-  uint32_t word32 = htowasm(word.u32());
+  uint32_t word32 = htowasm(word.u32(), true);
   ::memcpy(wasm_memory_data(memory_.get()) + pointer, &word32, size);
   return true;
 }
@@ -578,9 +645,9 @@ void Wamr::getModuleFunctionImpl(std::string_view function_name,
     if (trap) {
       WasmByteVec error_message;
       wasm_trap_message(trap.get(), error_message.get());
+      std::string message(error_message.get()->data); // NULL-terminated
       fail(FailState::RuntimeError,
-           "Function: " + std::string(function_name) + " failed:\n" +
-               std::string(error_message.get()->data, error_message.get()->size));
+           "Function: " + std::string(function_name) + " failed: " + message);
       return;
     }
     if (log) {
@@ -628,9 +695,9 @@ void Wamr::getModuleFunctionImpl(std::string_view function_name,
     if (trap) {
       WasmByteVec error_message;
       wasm_trap_message(trap.get(), error_message.get());
+      std::string message(error_message.get()->data); // NULL-terminated
       fail(FailState::RuntimeError,
-           "Function: " + std::string(function_name) + " failed:\n" +
-               std::string(error_message.get()->data, error_message.get()->size));
+           "Function: " + std::string(function_name) + " failed: " + message);
       return R{};
     }
     R ret = convertValueTypeToArg<R>(results.data[0]);
@@ -642,6 +709,8 @@ void Wamr::getModuleFunctionImpl(std::string_view function_name,
   };
 };
 
+void Wamr::warm() { initStore(); }
+
 } // namespace wamr
 
 std::unique_ptr<WasmVm> createWamrVm() { return std::make_unique<wamr::Wamr>(); }
diff --git a/src/wasm.cc b/src/wasm.cc
index 3c0473e87..a1b4c1836 100644
--- a/src/wasm.cc
+++ b/src/wasm.cc
@@ -23,54 +23,75 @@
 #include <limits>
 #include <memory>
 #include <mutex>
+#include <queue>
 #include <string>
 #include <unordered_map>
 #include <utility>
 
-#include <openssl/sha.h>
-
 #include "include/proxy-wasm/bytecode_util.h"
 #include "include/proxy-wasm/signature_util.h"
 #include "include/proxy-wasm/vm_id_handle.h"
+#include "src/hash.h"
 
 namespace proxy_wasm {
 
 namespace {
 
-// Map from Wasm Key to the local Wasm instance.
+// Map from Wasm key to the thread-local Wasm instance.
 thread_local std::unordered_map<std::string, std::weak_ptr<WasmHandleBase>> local_wasms;
+// Wasm key queue to track stale entries in `local_wasms`.
+thread_local std::queue<std::string> local_wasms_keys;
+
+// Map from plugin key to the thread-local plugin instance.
 thread_local std::unordered_map<std::string, std::weak_ptr<PluginHandleBase>> local_plugins;
+// Plugin key queue to track stale entries in `local_plugins`.
+thread_local std::queue<std::string> local_plugins_keys;
+
+// Check no more than `MAX_LOCAL_CACHE_GC_CHUNK_SIZE` cache entries at a time during stale entries
+// cleanup.
+const size_t MAX_LOCAL_CACHE_GC_CHUNK_SIZE = 64;
+
 // Map from Wasm Key to the base Wasm instance, using a pointer to avoid the initialization fiasco.
 std::mutex base_wasms_mutex;
 std::unordered_map<std::string, std::weak_ptr<WasmHandleBase>> *base_wasms = nullptr;
 
-std::vector<uint8_t> Sha256(const std::vector<std::string_view> &parts) {
-  uint8_t sha256[SHA256_DIGEST_LENGTH];
-  SHA256_CTX sha_ctx;
-  SHA256_Init(&sha_ctx);
-  for (auto part : parts) {
-    SHA256_Update(&sha_ctx, part.data(), part.size());
-  }
-  SHA256_Final(sha256, &sha_ctx);
-  return std::vector<uint8_t>(std::begin(sha256), std::end(sha256));
+void cacheLocalWasm(const std::string &key, const std::shared_ptr<WasmHandleBase> &wasm_handle) {
+  local_wasms[key] = wasm_handle;
+  local_wasms_keys.emplace(key);
 }
 
-std::string BytesToHex(const std::vector<uint8_t> &bytes) {
-  static const char *const hex = "0123456789ABCDEF";
-  std::string result;
-  result.reserve(bytes.size() * 2);
-  for (auto byte : bytes) {
-    result.push_back(hex[byte >> 4]);
-    result.push_back(hex[byte & 0xf]);
+void cacheLocalPlugin(const std::string &key,
+                      const std::shared_ptr<PluginHandleBase> &plugin_handle) {
+  local_plugins[key] = plugin_handle;
+  local_plugins_keys.emplace(key);
+}
+
+template <class T>
+void removeStaleLocalCacheEntries(std::unordered_map<std::string, std::weak_ptr<T>> &cache,
+                                  std::queue<std::string> &keys) {
+  auto num_keys_to_check = std::min(MAX_LOCAL_CACHE_GC_CHUNK_SIZE, keys.size());
+  for (size_t i = 0; i < num_keys_to_check; i++) {
+    std::string key(keys.front());
+    keys.pop();
+
+    const auto it = cache.find(key);
+    if (it == cache.end()) {
+      continue;
+    }
+
+    if (it->second.expired()) {
+      cache.erase(it);
+    } else {
+      keys.push(std::move(key));
+    }
   }
-  return result;
 }
 
 } // namespace
 
 std::string makeVmKey(std::string_view vm_id, std::string_view vm_configuration,
                       std::string_view code) {
-  return BytesToHex(Sha256({vm_id, vm_configuration, code}));
+  return Sha256String({vm_id, "||", vm_configuration, "||", code});
 }
 
 class WasmBase::ShutdownHandle {
@@ -89,6 +110,7 @@ void WasmBase::registerCallbacks() {
       &ConvertFunctionWordToUint32<decltype(exports::_fn),                                         \
                                    exports::_fn>::convertFunctionWordToUint32)
   _REGISTER(pthread_equal);
+  _REGISTER(emscripten_notify_memory_growth);
 #undef _REGISTER
 
   // Register the capability with the VM if it has been allowed, otherwise register a stub.
@@ -354,6 +376,30 @@ ContextBase *WasmBase::getRootContext(const std::shared_ptr<PluginBase> &plugin,
 }
 
 void WasmBase::startVm(ContextBase *root_context) {
+  // wasi_snapshot_preview1.clock_time_get
+  wasm_vm_->setRestrictedCallback(
+      true, {// emscripten
+             "env.emscripten_notify_memory_growth",
+             // logging (Proxy-Wasm)
+             "env.proxy_log",
+             // logging (stdout/stderr)
+             "wasi_unstable.fd_write", "wasi_snapshot_preview1.fd_write",
+             // args
+             "wasi_unstable.args_sizes_get", "wasi_snapshot_preview1.args_sizes_get",
+             "wasi_unstable.args_get", "wasi_snapshot_preview1.args_get",
+             // environment variables
+             "wasi_unstable.environ_sizes_get", "wasi_snapshot_preview1.environ_sizes_get",
+             "wasi_unstable.environ_get", "wasi_snapshot_preview1.environ_get",
+             // preopened files/directories
+             "wasi_unstable.fd_prestat_get", "wasi_snapshot_preview1.fd_prestat_get",
+             "wasi_unstable.fd_prestat_dir_name", "wasi_snapshot_preview1.fd_prestat_dir_name",
+             // time
+             "wasi_unstable.clock_time_get", "wasi_snapshot_preview1.clock_time_get",
+             // random
+             "wasi_unstable.random_get", "wasi_snapshot_preview1.random_get",
+             // Go runtime initialization
+             "wasi_unstable.fd_fdstat_get", "wasi_snapshot_preview1.fd_fdstat_get",
+             "wasi_unstable.fd_fdstat_set_flags", "wasi_snapshot_preview1.fd_fdstat_set_flags"});
   if (_initialize_) {
     // WASI reactor.
     _initialize_(root_context);
@@ -369,6 +415,7 @@ void WasmBase::startVm(ContextBase *root_context) {
     // WASI command.
     _start_(root_context);
   }
+  wasm_vm_->setRestrictedCallback(false);
 }
 
 bool WasmBase::configure(ContextBase *root_context, std::shared_ptr<PluginBase> plugin) {
@@ -446,6 +493,41 @@ void WasmBase::finishShutdown() {
   }
 }
 
+bool WasmHandleBase::canary(const std::shared_ptr<PluginBase> &plugin,
+                            const WasmHandleCloneFactory &clone_factory) {
+  if (this->wasm() == nullptr) {
+    return false;
+  }
+  auto it = plugin_canary_cache_.find(plugin->key());
+  if (it != plugin_canary_cache_.end()) {
+    return it->second;
+  }
+  auto configuration_canary_handle = clone_factory(shared_from_this());
+  if (!configuration_canary_handle) {
+    this->wasm()->fail(FailState::UnableToCloneVm, "Failed to clone Base Wasm");
+    return false;
+  }
+  if (!configuration_canary_handle->wasm()->initialize()) {
+    configuration_canary_handle->wasm()->fail(FailState::UnableToInitializeCode,
+                                              "Failed to initialize Wasm code");
+    return false;
+  }
+  auto *root_context = configuration_canary_handle->wasm()->start(plugin);
+  if (root_context == nullptr) {
+    configuration_canary_handle->wasm()->fail(FailState::StartFailed, "Failed to start base Wasm");
+    return false;
+  }
+  if (!configuration_canary_handle->wasm()->configure(root_context, plugin)) {
+    configuration_canary_handle->wasm()->fail(FailState::ConfigureFailed,
+                                              "Failed to configure base Wasm plugin");
+    plugin_canary_cache_[plugin->key()] = false;
+    return false;
+  }
+  configuration_canary_handle->kill();
+  plugin_canary_cache_[plugin->key()] = true;
+  return true;
+}
+
 std::shared_ptr<WasmHandleBase> createWasm(const std::string &vm_key, const std::string &code,
                                            const std::shared_ptr<PluginBase> &plugin,
                                            const WasmHandleFactory &factory,
@@ -464,57 +546,43 @@ std::shared_ptr<WasmHandleBase> createWasm(const std::string &vm_key, const std:
         base_wasms->erase(it);
       }
     }
-    if (wasm_handle) {
-      return wasm_handle;
-    }
-    wasm_handle = factory(vm_key);
     if (!wasm_handle) {
-      return nullptr;
+      // If no cached base_wasm, creates a new base_wasm, loads the code and initializes it.
+      wasm_handle = factory(vm_key);
+      if (!wasm_handle) {
+        return nullptr;
+      }
+      if (!wasm_handle->wasm()->load(code, allow_precompiled)) {
+        wasm_handle->wasm()->fail(FailState::UnableToInitializeCode, "Failed to load Wasm code");
+        return nullptr;
+      }
+      if (!wasm_handle->wasm()->initialize()) {
+        wasm_handle->wasm()->fail(FailState::UnableToInitializeCode,
+                                  "Failed to initialize Wasm code");
+        return nullptr;
+      }
+      (*base_wasms)[vm_key] = wasm_handle;
     }
-    (*base_wasms)[vm_key] = wasm_handle;
   }
 
-  if (!wasm_handle->wasm()->load(code, allow_precompiled)) {
-    wasm_handle->wasm()->fail(FailState::UnableToInitializeCode, "Failed to load Wasm code");
-    return nullptr;
-  }
-  if (!wasm_handle->wasm()->initialize()) {
-    wasm_handle->wasm()->fail(FailState::UnableToInitializeCode, "Failed to initialize Wasm code");
-    return nullptr;
-  }
-  auto configuration_canary_handle = clone_factory(wasm_handle);
-  if (!configuration_canary_handle) {
-    wasm_handle->wasm()->fail(FailState::UnableToCloneVm, "Failed to clone Base Wasm");
-    return nullptr;
-  }
-  if (!configuration_canary_handle->wasm()->initialize()) {
-    wasm_handle->wasm()->fail(FailState::UnableToInitializeCode, "Failed to initialize Wasm code");
-    return nullptr;
-  }
-  auto *root_context = configuration_canary_handle->wasm()->start(plugin);
-  if (root_context == nullptr) {
-    configuration_canary_handle->wasm()->fail(FailState::StartFailed, "Failed to start base Wasm");
-    return nullptr;
-  }
-  if (!configuration_canary_handle->wasm()->configure(root_context, plugin)) {
-    configuration_canary_handle->wasm()->fail(FailState::ConfigureFailed,
-                                              "Failed to configure base Wasm plugin");
+  // Either creating new one or reusing the existing one, apply canary for each plugin.
+  if (!wasm_handle->canary(plugin, clone_factory)) {
     return nullptr;
   }
-  configuration_canary_handle->kill();
   return wasm_handle;
 };
 
 std::shared_ptr<WasmHandleBase> getThreadLocalWasm(std::string_view vm_key) {
   auto it = local_wasms.find(std::string(vm_key));
-  if (it == local_wasms.end()) {
-    return nullptr;
-  }
-  auto wasm = it->second.lock();
-  if (!wasm) {
-    local_wasms.erase(std::string(vm_key));
+  if (it != local_wasms.end()) {
+    auto wasm = it->second.lock();
+    if (wasm) {
+      return wasm;
+    }
+    local_wasms.erase(it);
   }
-  return wasm;
+  removeStaleLocalCacheEntries(local_wasms, local_wasms_keys);
+  return nullptr;
 }
 
 static std::shared_ptr<WasmHandleBase>
@@ -528,9 +596,9 @@ getOrCreateThreadLocalWasm(const std::shared_ptr<WasmHandleBase> &base_handle,
     if (wasm_handle) {
       return wasm_handle;
     }
-    // Remove stale entry.
-    local_wasms.erase(vm_key);
+    local_wasms.erase(it);
   }
+  removeStaleLocalCacheEntries(local_wasms, local_wasms_keys);
   // Create and initialize new thread-local WasmVM.
   auto wasm_handle = clone_factory(base_handle);
   if (!wasm_handle) {
@@ -542,7 +610,7 @@ getOrCreateThreadLocalWasm(const std::shared_ptr<WasmHandleBase> &base_handle,
     base_handle->wasm()->fail(FailState::UnableToInitializeCode, "Failed to initialize Wasm code");
     return nullptr;
   }
-  local_wasms[vm_key] = wasm_handle;
+  cacheLocalWasm(vm_key, wasm_handle);
   wasm_handle->wasm()->wasm_vm()->addFailCallback([vm_key](proxy_wasm::FailState fail_state) {
     if (fail_state == proxy_wasm::FailState::RuntimeError) {
       // If VM failed, erase the entry so that:
@@ -565,9 +633,9 @@ std::shared_ptr<PluginHandleBase> getOrCreateThreadLocalPlugin(
     if (plugin_handle) {
       return plugin_handle;
     }
-    // Remove stale entry.
-    local_plugins.erase(key);
+    local_plugins.erase(it);
   }
+  removeStaleLocalCacheEntries(local_plugins, local_plugins_keys);
   // Get thread-local WasmVM.
   auto wasm_handle = getOrCreateThreadLocalWasm(base_handle, clone_factory);
   if (!wasm_handle) {
@@ -585,7 +653,7 @@ std::shared_ptr<PluginHandleBase> getOrCreateThreadLocalPlugin(
     return nullptr;
   }
   auto plugin_handle = plugin_factory(wasm_handle, plugin);
-  local_plugins[key] = plugin_handle;
+  cacheLocalPlugin(key, plugin_handle);
   wasm_handle->wasm()->wasm_vm()->addFailCallback([key](proxy_wasm::FailState fail_state) {
     if (fail_state == proxy_wasm::FailState::RuntimeError) {
       // If VM failed, erase the entry so that:
@@ -607,4 +675,24 @@ void clearWasmCachesForTesting() {
   }
 }
 
+std::vector<std::string> staleLocalPluginsKeysForTesting() {
+  std::vector<std::string> keys;
+  for (const auto &kv : local_plugins) {
+    if (kv.second.expired()) {
+      keys.push_back(kv.first);
+    }
+  }
+  return keys;
+}
+
+std::vector<std::string> staleLocalWasmsKeysForTesting() {
+  std::vector<std::string> keys;
+  for (const auto &kv : local_wasms) {
+    if (kv.second.expired()) {
+      keys.push_back(kv.first);
+    }
+  }
+  return keys;
+}
+
 } // namespace proxy_wasm
diff --git a/src/wasm.h b/src/wasm.h
new file mode 100644
index 000000000..882dbcd99
--- /dev/null
+++ b/src/wasm.h
@@ -0,0 +1,25 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#pragma once
+
+#include <string>
+#include <vector>
+
+namespace proxy_wasm {
+
+std::vector<std::string> staleLocalWasmsKeysForTesting();
+std::vector<std::string> staleLocalPluginsKeysForTesting();
+
+} // namespace proxy_wasm
diff --git a/src/wasmedge/types.h b/src/wasmedge/types.h
new file mode 100644
index 000000000..b6cd21952
--- /dev/null
+++ b/src/wasmedge/types.h
@@ -0,0 +1,29 @@
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "src/common/types.h"
+#include "wasmedge/wasmedge.h"
+
+namespace proxy_wasm::WasmEdge {
+
+using WasmEdgeStorePtr = common::CSmartPtr<WasmEdge_StoreContext, WasmEdge_StoreDelete>;
+using WasmEdgeVMPtr = common::CSmartPtr<WasmEdge_VMContext, WasmEdge_VMDelete>;
+using WasmEdgeLoaderPtr = common::CSmartPtr<WasmEdge_LoaderContext, WasmEdge_LoaderDelete>;
+using WasmEdgeValidatorPtr = common::CSmartPtr<WasmEdge_ValidatorContext, WasmEdge_ValidatorDelete>;
+using WasmEdgeExecutorPtr = common::CSmartPtr<WasmEdge_ExecutorContext, WasmEdge_ExecutorDelete>;
+using WasmEdgeASTModulePtr = common::CSmartPtr<WasmEdge_ASTModuleContext, WasmEdge_ASTModuleDelete>;
+using WasmEdgeModulePtr =
+    common::CSmartPtr<WasmEdge_ModuleInstanceContext, WasmEdge_ModuleInstanceDelete>;
+
+} // namespace proxy_wasm::WasmEdge
diff --git a/src/wasmedge/wasmedge.cc b/src/wasmedge/wasmedge.cc
new file mode 100644
index 000000000..30fe78f5e
--- /dev/null
+++ b/src/wasmedge/wasmedge.cc
@@ -0,0 +1,630 @@
+// Copyright 2016-2019 Envoy Project Authors
+// Copyright 2020 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "include/proxy-wasm/wasmedge.h"
+#include "include/proxy-wasm/wasm_vm.h"
+#include "src/wasmedge/types.h"
+
+#include "wasmedge/wasmedge.h"
+
+#include <algorithm>
+#include <array>
+#include <cassert>
+#include <cstring>
+#include <iomanip>
+#include <memory>
+#include <optional>
+#include <sstream>
+#include <string>
+#include <string_view>
+#include <unordered_map>
+#include <unordered_set>
+#include <utility>
+#include <vector>
+
+namespace proxy_wasm {
+namespace WasmEdge {
+
+// Helper templates to make values.
+template <typename T> WasmEdge_Value makeVal(T t);
+template <> WasmEdge_Value makeVal<Word>(Word t) {
+  return WasmEdge_ValueGenI32(static_cast<int32_t>(t.u64_));
+}
+template <> WasmEdge_Value makeVal(uint32_t t) {
+  return WasmEdge_ValueGenI32(static_cast<int32_t>(t));
+}
+template <> WasmEdge_Value makeVal(uint64_t t) {
+  return WasmEdge_ValueGenI64(static_cast<int64_t>(t));
+}
+template <> WasmEdge_Value makeVal(double t) { return WasmEdge_ValueGenF64(t); }
+
+// Helper function to print values.
+std::string printValue(const WasmEdge_Value &value) {
+  switch (value.Type) {
+  case WasmEdge_ValType_I32:
+    return std::to_string(WasmEdge_ValueGetI32(value));
+  case WasmEdge_ValType_I64:
+    return std::to_string(WasmEdge_ValueGetI64(value));
+  case WasmEdge_ValType_F32:
+    return std::to_string(WasmEdge_ValueGetF32(value));
+  case WasmEdge_ValType_F64:
+    return std::to_string(WasmEdge_ValueGetF64(value));
+  default:
+    return "unknown";
+  }
+}
+
+std::string printValues(const WasmEdge_Value *values, size_t size) {
+  if (size == 0) {
+    return "";
+  }
+
+  std::string s;
+  for (size_t i = 0; i < size; i++) {
+    if (i != 0U) {
+      s.append(", ");
+    }
+    s.append(printValue(values[i]));
+  }
+  return s;
+}
+
+// Helper function to print valtype.
+const char *printValType(WasmEdge_ValType kind) {
+  switch (kind) {
+  case WasmEdge_ValType_I32:
+    return "i32";
+  case WasmEdge_ValType_I64:
+    return "i64";
+  case WasmEdge_ValType_F32:
+    return "f32";
+  case WasmEdge_ValType_F64:
+    return "f64";
+  case WasmEdge_ValType_ExternRef:
+    return "anyref";
+  case WasmEdge_ValType_FuncRef:
+    return "funcref";
+  default:
+    return "unknown";
+  }
+}
+
+// Helper function to print valtype array.
+std::string printValTypes(const WasmEdge_ValType *types, size_t size) {
+  if (size == 0) {
+    return "void";
+  }
+
+  std::string s;
+  s.reserve(size * 8 /* max size + " " */ - 1);
+  for (size_t i = 0; i < size; i++) {
+    if (i != 0U) {
+      s.append(" ");
+    }
+    s.append(printValType(types[i]));
+  }
+  return s;
+}
+
+template <typename T> struct ConvertWordType {
+  using type = T; // NOLINT(readability-identifier-naming)
+};
+template <> struct ConvertWordType<Word> {
+  using type = uint32_t; // NOLINT(readability-identifier-naming)
+};
+
+// Helper templates to convert arg to valtype.
+template <typename T> enum WasmEdge_ValType convArgToValType();
+template <> enum WasmEdge_ValType convArgToValType<Word>() { return WasmEdge_ValType_I32; }
+template <> enum WasmEdge_ValType convArgToValType<uint32_t>() { return WasmEdge_ValType_I32; }
+template <> enum WasmEdge_ValType convArgToValType<int64_t>() { return WasmEdge_ValType_I64; }
+template <> enum WasmEdge_ValType convArgToValType<uint64_t>() { return WasmEdge_ValType_I64; }
+template <> enum WasmEdge_ValType convArgToValType<double>() { return WasmEdge_ValType_F64; }
+
+// Helper templates to convert valtype to arg.
+template <typename T> T convValTypeToArg(WasmEdge_Value val);
+template <> uint32_t convValTypeToArg<uint32_t>(WasmEdge_Value val) {
+  return static_cast<uint32_t>(WasmEdge_ValueGetI32(val));
+}
+template <> Word convValTypeToArg<Word>(WasmEdge_Value val) { return WasmEdge_ValueGetI32(val); }
+template <> int64_t convValTypeToArg<int64_t>(WasmEdge_Value val) {
+  return WasmEdge_ValueGetI64(val);
+}
+template <> uint64_t convValTypeToArg<uint64_t>(WasmEdge_Value val) {
+  return static_cast<uint64_t>(WasmEdge_ValueGetI64(val));
+}
+template <> double convValTypeToArg<double>(WasmEdge_Value val) {
+  return WasmEdge_ValueGetF64(val);
+}
+
+// Helper templates to convert valtypes to args tuple.
+template <typename T, std::size_t... I>
+constexpr T convValTypesToArgsTupleImpl(const WasmEdge_Value *arr,
+                                        std::index_sequence<I...> /*comptime*/) {
+  return std::make_tuple(
+      convValTypeToArg<typename ConvertWordType<std::tuple_element_t<I, T>>::type>(arr[I])...);
+}
+
+template <typename T, typename Is = std::make_index_sequence<std::tuple_size<T>::value>>
+constexpr T convValTypesToArgsTuple(const WasmEdge_Value *arr) {
+  return convValTypesToArgsTupleImpl<T>(arr, Is());
+}
+
+// Helper templates to convert args tuple to valtypes.
+template <typename T, std::size_t... I>
+uint32_t convArgsTupleToValTypesImpl(std::vector<enum WasmEdge_ValType> &types,
+                                     std::index_sequence<I...> /*comptime*/) {
+  auto size = std::tuple_size<T>::value;
+  if (size > 0) {
+    auto ps = std::array<enum WasmEdge_ValType, std::tuple_size<T>::value>{
+        convArgToValType<typename std::tuple_element<I, T>::type>()...};
+    types.resize(size);
+    std::copy_n(ps.data(), size, types.data());
+  }
+  return size;
+}
+
+template <typename T, typename Is = std::make_index_sequence<std::tuple_size<T>::value>>
+uint32_t convArgsTupleToValTypes(std::vector<enum WasmEdge_ValType> &types) {
+  return convArgsTupleToValTypesImpl<T>(types, Is());
+}
+
+// Helper templates to create WasmEdge_FunctionTypeContext.
+template <typename R, typename T> WasmEdge_FunctionTypeContext *newWasmEdgeFuncType() {
+  std::vector<enum WasmEdge_ValType> params;
+  std::vector<enum WasmEdge_ValType> returns;
+  uint32_t param_nums = convArgsTupleToValTypes<T>(params);
+  uint32_t return_nums = convArgsTupleToValTypes<std::tuple<R>>(returns);
+  auto *ftype = WasmEdge_FunctionTypeCreate(params.data(), param_nums, returns.data(), return_nums);
+  return ftype;
+}
+
+template <typename T> WasmEdge_FunctionTypeContext *newWasmEdgeFuncType() {
+  std::vector<enum WasmEdge_ValType> params;
+  uint32_t param_nums = convArgsTupleToValTypes<T>(params);
+  auto *ftype = WasmEdge_FunctionTypeCreate(params.data(), param_nums, nullptr, 0);
+  return ftype;
+}
+
+struct HostFuncData {
+  HostFuncData(const std::string_view modname, const std::string_view name)
+      : modname_(modname), name_(name), callback_(nullptr), raw_func_(nullptr), vm_(nullptr) {}
+  ~HostFuncData() = default;
+
+  std::string modname_, name_;
+  WasmEdge_HostFunc_t callback_;
+  void *raw_func_;
+  WasmVm *vm_;
+};
+
+using HostFuncDataPtr = std::unique_ptr<HostFuncData>;
+
+struct HostModuleData {
+  HostModuleData(const std::string_view modname) {
+    cxt_ = WasmEdge_ModuleInstanceCreate(WasmEdge_StringWrap(modname.data(), modname.length()));
+  }
+  ~HostModuleData() { WasmEdge_ModuleInstanceDelete(cxt_); }
+
+  WasmEdge_ModuleInstanceContext *cxt_;
+};
+
+using HostModuleDataPtr = std::unique_ptr<HostModuleData>;
+
+class WasmEdge : public WasmVm {
+public:
+  WasmEdge() {
+    store_ = nullptr;
+    ast_module_ = nullptr;
+    module_ = nullptr;
+    memory_ = nullptr;
+  }
+
+  std::string_view getEngineName() override { return "wasmedge"; }
+  std::string_view getPrecompiledSectionName() override { return ""; }
+
+  Cloneable cloneable() override { return Cloneable::NotCloneable; }
+  std::unique_ptr<WasmVm> clone() override { return nullptr; }
+
+  bool load(std::string_view bytecode, std::string_view precompiled,
+            const std::unordered_map<uint32_t, std::string> &function_names) override;
+  bool link(std::string_view debug_name) override;
+  uint64_t getMemorySize() override;
+  std::optional<std::string_view> getMemory(uint64_t pointer, uint64_t size) override;
+  bool setMemory(uint64_t pointer, uint64_t size, const void *data) override;
+  bool getWord(uint64_t pointer, Word *word) override;
+  bool setWord(uint64_t pointer, Word word) override;
+  size_t getWordSize() override { return sizeof(uint32_t); };
+
+#define _REGISTER_HOST_FUNCTION(T)                                                                 \
+  void registerCallback(std::string_view module_name, std::string_view function_name, T,           \
+                        typename ConvertFunctionTypeWordToUint32<T>::type f) override {            \
+    registerHostFunctionImpl(module_name, function_name, f);                                       \
+  };
+  FOR_ALL_WASM_VM_IMPORTS(_REGISTER_HOST_FUNCTION)
+#undef _REGISTER_HOST_FUNCTION
+
+#define _GET_MODULE_FUNCTION(T)                                                                    \
+  void getFunction(std::string_view function_name, T *f) override {                                \
+    getModuleFunctionImpl(function_name, f);                                                       \
+  };
+  FOR_ALL_WASM_VM_EXPORTS(_GET_MODULE_FUNCTION)
+#undef _GET_MODULE_FUNCTION
+
+  void warm() override;
+
+private:
+  template <typename... Args>
+  void registerHostFunctionImpl(std::string_view module_name, std::string_view function_name,
+                                void (*function)(Args...));
+
+  template <typename R, typename... Args>
+  void registerHostFunctionImpl(std::string_view module_name, std::string_view function_name,
+                                R (*function)(Args...));
+
+  template <typename... Args>
+  void getModuleFunctionImpl(std::string_view function_name,
+                             std::function<void(ContextBase *, Args...)> *function);
+
+  template <typename R, typename... Args>
+  void getModuleFunctionImpl(std::string_view function_name,
+                             std::function<R(ContextBase *, Args...)> *function);
+
+  void terminate() override {}
+  bool usesWasmByteOrder() override { return true; }
+
+  // Initialize the WasmEdge store if necessary.
+  void initStore();
+
+  WasmEdgeLoaderPtr loader_;
+  WasmEdgeValidatorPtr validator_;
+  WasmEdgeExecutorPtr executor_;
+  WasmEdgeStorePtr store_;
+  WasmEdgeASTModulePtr ast_module_;
+  WasmEdgeModulePtr module_;
+  WasmEdge_MemoryInstanceContext *memory_;
+
+  std::unordered_map<std::string, HostFuncDataPtr> host_functions_;
+  std::unordered_map<std::string, HostModuleDataPtr> host_modules_;
+  std::unordered_set<std::string> module_functions_;
+};
+
+bool WasmEdge::load(std::string_view bytecode, std::string_view /*precompiled*/,
+                    const std::unordered_map<uint32_t, std::string> & /*function_names*/) {
+  initStore();
+  WasmEdge_ASTModuleContext *mod = nullptr;
+  WasmEdge_Result res = WasmEdge_LoaderParseFromBuffer(
+      loader_.get(), &mod, reinterpret_cast<const uint8_t *>(bytecode.data()), bytecode.size());
+  if (!WasmEdge_ResultOK(res)) {
+    return false;
+  }
+  res = WasmEdge_ValidatorValidate(validator_.get(), mod);
+  if (!WasmEdge_ResultOK(res)) {
+    WasmEdge_ASTModuleDelete(mod);
+    return false;
+  }
+  ast_module_ = mod;
+  return true;
+}
+
+void WasmEdge::initStore() {
+  if (store_ != nullptr) {
+    return;
+  }
+  loader_ = WasmEdge_LoaderCreate(nullptr);
+  validator_ = WasmEdge_ValidatorCreate(nullptr);
+  executor_ = WasmEdge_ExecutorCreate(nullptr, nullptr);
+  store_ = WasmEdge_StoreCreate();
+}
+
+bool WasmEdge::link(std::string_view /*debug_name*/) {
+  assert(ast_module_ != nullptr);
+
+  // Create store and register imports.
+  initStore();
+  if (store_ == nullptr) {
+    return false;
+  }
+  WasmEdge_Result res;
+  for (auto &&it : host_modules_) {
+    res = WasmEdge_ExecutorRegisterImport(executor_.get(), store_.get(), it.second->cxt_);
+    if (!WasmEdge_ResultOK(res)) {
+      fail(FailState::UnableToInitializeCode,
+           std::string("Failed to link Wasm module due to import: ") + it.first);
+      return false;
+    }
+  }
+  // Instantiate module.
+  WasmEdge_ModuleInstanceContext *mod = nullptr;
+  res = WasmEdge_ExecutorInstantiate(executor_.get(), &mod, store_.get(), ast_module_.get());
+  if (!WasmEdge_ResultOK(res)) {
+    fail(FailState::UnableToInitializeCode,
+         std::string("Failed to link Wasm module: ") + std::string(WasmEdge_ResultGetMessage(res)));
+    return false;
+  }
+  // Get the function and memory exports.
+  uint32_t memory_num = WasmEdge_ModuleInstanceListMemoryLength(mod);
+  if (memory_num > 0) {
+    WasmEdge_String name;
+    WasmEdge_ModuleInstanceListMemory(mod, &name, 1);
+    memory_ = WasmEdge_ModuleInstanceFindMemory(mod, name);
+    if (memory_ == nullptr) {
+      WasmEdge_ModuleInstanceDelete(mod);
+      return false;
+    }
+  }
+  uint32_t func_num = WasmEdge_ModuleInstanceListFunctionLength(mod);
+  if (func_num > 0) {
+    std::vector<WasmEdge_String> names(func_num);
+    WasmEdge_ModuleInstanceListFunction(mod, &names[0], func_num);
+    for (auto i = 0; i < func_num; i++) {
+      module_functions_.insert(std::string(names[i].Buf, names[i].Length));
+    }
+  }
+  module_ = mod;
+  return true;
+}
+
+uint64_t WasmEdge::getMemorySize() {
+  if (memory_ != nullptr) {
+    return 65536ULL * WasmEdge_MemoryInstanceGetPageSize(memory_);
+  }
+  return 0;
+}
+
+std::optional<std::string_view> WasmEdge::getMemory(uint64_t pointer, uint64_t size) {
+  char *ptr = reinterpret_cast<char *>(WasmEdge_MemoryInstanceGetPointer(memory_, pointer, size));
+  if (ptr == nullptr) {
+    return std::nullopt;
+  }
+  return std::string_view(ptr, size);
+}
+
+bool WasmEdge::setMemory(uint64_t pointer, uint64_t size, const void *data) {
+  auto res = WasmEdge_MemoryInstanceSetData(memory_, reinterpret_cast<const uint8_t *>(data),
+                                            pointer, size);
+  return WasmEdge_ResultOK(res);
+}
+
+bool WasmEdge::getWord(uint64_t pointer, Word *word) {
+  constexpr auto size = sizeof(uint32_t);
+  uint32_t word32;
+  auto res =
+      WasmEdge_MemoryInstanceGetData(memory_, reinterpret_cast<uint8_t *>(&word32), pointer, size);
+  if (WasmEdge_ResultOK(res)) {
+    word->u64_ = word32;
+    return true;
+  }
+  return false;
+}
+
+bool WasmEdge::setWord(uint64_t pointer, Word word) {
+  constexpr auto size = sizeof(uint32_t);
+  uint32_t word32 = word.u32();
+  auto res =
+      WasmEdge_MemoryInstanceSetData(memory_, reinterpret_cast<uint8_t *>(&word32), pointer, size);
+  return WasmEdge_ResultOK(res);
+}
+
+template <typename... Args>
+void WasmEdge::registerHostFunctionImpl(std::string_view module_name,
+                                        std::string_view function_name, void (*function)(Args...)) {
+  auto it = host_modules_.find(std::string(module_name));
+  if (it == host_modules_.end()) {
+    host_modules_.emplace(module_name, std::make_unique<HostModuleData>(module_name));
+    it = host_modules_.find(std::string(module_name));
+  }
+
+  auto data = std::make_unique<HostFuncData>(module_name, function_name);
+  auto *func_type = newWasmEdgeFuncType<std::tuple<Args...>>();
+  data->vm_ = this;
+  data->raw_func_ = reinterpret_cast<void *>(function);
+  data->callback_ = [](void *data, const WasmEdge_CallingFrameContext * /*CallFrameCxt*/,
+                       const WasmEdge_Value *Params,
+                       WasmEdge_Value * /*Returns*/) -> WasmEdge_Result {
+    auto *func_data = reinterpret_cast<HostFuncData *>(data);
+    const bool log = func_data->vm_->cmpLogLevel(LogLevel::trace);
+    if (log) {
+      func_data->vm_->integration()->trace("[vm->host] " + func_data->modname_ + "." +
+                                           func_data->name_ + "(" +
+                                           printValues(Params, sizeof...(Args)) + ")");
+    }
+    auto args = convValTypesToArgsTuple<std::tuple<Args...>>(Params);
+    auto fn = reinterpret_cast<void (*)(Args...)>(func_data->raw_func_);
+    std::apply(fn, args);
+    if (log) {
+      func_data->vm_->integration()->trace("[vm<-host] " + func_data->modname_ + "." +
+                                           func_data->name_ + " return: void");
+    }
+    return WasmEdge_Result_Success;
+  };
+
+  auto *hostfunc_cxt = WasmEdge_FunctionInstanceCreate(func_type, data->callback_, data.get(), 0);
+  WasmEdge_FunctionTypeDelete(func_type);
+  if (hostfunc_cxt == nullptr) {
+    fail(FailState::MissingFunction, "Failed to allocate host function instance");
+    return;
+  }
+
+  WasmEdge_ModuleInstanceAddFunction(
+      it->second->cxt_, WasmEdge_StringWrap(function_name.data(), function_name.length()),
+      hostfunc_cxt);
+  host_functions_.insert_or_assign(std::string(module_name) + "." + std::string(function_name),
+                                   std::move(data));
+}
+
+template <typename R, typename... Args>
+void WasmEdge::registerHostFunctionImpl(std::string_view module_name,
+                                        std::string_view function_name, R (*function)(Args...)) {
+  auto it = host_modules_.find(std::string(module_name));
+  if (it == host_modules_.end()) {
+    host_modules_.emplace(module_name, std::make_unique<HostModuleData>(module_name));
+    it = host_modules_.find(std::string(module_name));
+  }
+
+  auto data = std::make_unique<HostFuncData>(module_name, function_name);
+  auto *func_type = newWasmEdgeFuncType<R, std::tuple<Args...>>();
+  data->vm_ = this;
+  data->raw_func_ = reinterpret_cast<void *>(function);
+  data->callback_ = [](void *data, const WasmEdge_CallingFrameContext * /*CallFrameCxt*/,
+                       const WasmEdge_Value *Params, WasmEdge_Value *Returns) -> WasmEdge_Result {
+    auto *func_data = reinterpret_cast<HostFuncData *>(data);
+    const bool log = func_data->vm_->cmpLogLevel(LogLevel::trace);
+    if (log) {
+      func_data->vm_->integration()->trace("[vm->host] " + func_data->modname_ + "." +
+                                           func_data->name_ + "(" +
+                                           printValues(Params, sizeof...(Args)) + ")");
+    }
+    auto args = convValTypesToArgsTuple<std::tuple<Args...>>(Params);
+    auto fn = reinterpret_cast<R (*)(Args...)>(func_data->raw_func_);
+    R res = std::apply(fn, args);
+    Returns[0] = makeVal<R>(res);
+    if (log) {
+      func_data->vm_->integration()->trace("[vm<-host] " + func_data->modname_ + "." +
+                                           func_data->name_ + " return: " + std::to_string(res));
+    }
+    return WasmEdge_Result_Success;
+  };
+
+  auto *hostfunc_cxt = WasmEdge_FunctionInstanceCreate(func_type, data->callback_, data.get(), 0);
+  WasmEdge_FunctionTypeDelete(func_type);
+  if (hostfunc_cxt == nullptr) {
+    fail(FailState::MissingFunction, "Failed to allocate host function instance");
+    return;
+  }
+
+  WasmEdge_ModuleInstanceAddFunction(
+      it->second->cxt_, WasmEdge_StringWrap(function_name.data(), function_name.length()),
+      hostfunc_cxt);
+  host_functions_.insert_or_assign(std::string(module_name) + "." + std::string(function_name),
+                                   std::move(data));
+}
+
+template <typename... Args>
+void WasmEdge::getModuleFunctionImpl(std::string_view function_name,
+                                     std::function<void(ContextBase *, Args...)> *function) {
+  auto *func_cxt = WasmEdge_ModuleInstanceFindFunction(
+      module_.get(), WasmEdge_StringWrap(function_name.data(), function_name.length()));
+  if (!func_cxt) {
+    *function = nullptr;
+    return;
+  }
+
+  std::vector<enum WasmEdge_ValType> exp_args;
+  std::vector<enum WasmEdge_ValType> exp_returns;
+  convArgsTupleToValTypes<std::tuple<Args...>>(exp_args);
+  convArgsTupleToValTypes<std::tuple<>>(exp_returns);
+  const auto *functype_cxt = WasmEdge_FunctionInstanceGetFunctionType(func_cxt);
+  std::vector<enum WasmEdge_ValType> act_args(
+      WasmEdge_FunctionTypeGetParametersLength(functype_cxt));
+  std::vector<enum WasmEdge_ValType> act_returns(
+      WasmEdge_FunctionTypeGetReturnsLength(functype_cxt));
+  WasmEdge_FunctionTypeGetParameters(functype_cxt, act_args.data(), act_args.size());
+  WasmEdge_FunctionTypeGetReturns(functype_cxt, act_returns.data(), act_returns.size());
+
+  if (exp_args != act_args || exp_returns != act_returns) {
+    fail(FailState::UnableToInitializeCode,
+         "Bad function signature for: " + std::string(function_name) +
+             ", want: " + printValTypes(exp_args.data(), exp_args.size()) + " -> " +
+             printValTypes(exp_returns.data(), exp_returns.size()) +
+             ", but the module exports: " + printValTypes(act_args.data(), act_args.size()) +
+             " -> " + printValTypes(act_returns.data(), act_returns.size()));
+    return;
+  }
+
+  *function = [function_name, func_cxt, this](ContextBase *context, Args... args) -> void {
+    WasmEdge_Value params[] = {makeVal(args)...};
+    const bool log = cmpLogLevel(LogLevel::trace);
+    if (log) {
+      integration()->trace("[host->vm] " + std::string(function_name) + "(" +
+                           printValues(params, sizeof...(Args)) + ")");
+    }
+    SaveRestoreContext saved_context(context);
+    WasmEdge_Result res =
+        WasmEdge_ExecutorInvoke(executor_.get(), func_cxt, params, sizeof...(Args), nullptr, 0);
+    if (!WasmEdge_ResultOK(res)) {
+      fail(FailState::RuntimeError, "Function: " + std::string(function_name) +
+                                        " failed: " + WasmEdge_ResultGetMessage(res));
+      return;
+    }
+    if (log) {
+      integration()->trace("[host<-vm] " + std::string(function_name) + " return: void");
+    }
+  };
+}
+
+template <typename R, typename... Args>
+void WasmEdge::getModuleFunctionImpl(std::string_view function_name,
+                                     std::function<R(ContextBase *, Args...)> *function) {
+  auto *func_cxt = WasmEdge_ModuleInstanceFindFunction(
+      module_.get(), WasmEdge_StringWrap(function_name.data(), function_name.length()));
+  if (!func_cxt) {
+    *function = nullptr;
+    return;
+  }
+
+  std::vector<enum WasmEdge_ValType> exp_args;
+  std::vector<enum WasmEdge_ValType> exp_returns;
+  convArgsTupleToValTypes<std::tuple<Args...>>(exp_args);
+  convArgsTupleToValTypes<std::tuple<R>>(exp_returns);
+  const auto *functype_cxt = WasmEdge_FunctionInstanceGetFunctionType(func_cxt);
+  std::vector<enum WasmEdge_ValType> act_args(
+      WasmEdge_FunctionTypeGetParametersLength(functype_cxt));
+  std::vector<enum WasmEdge_ValType> act_returns(
+      WasmEdge_FunctionTypeGetReturnsLength(functype_cxt));
+  WasmEdge_FunctionTypeGetParameters(functype_cxt, act_args.data(), act_args.size());
+  WasmEdge_FunctionTypeGetReturns(functype_cxt, act_returns.data(), act_returns.size());
+
+  if (exp_args != act_args || exp_returns != act_returns) {
+    fail(FailState::UnableToInitializeCode,
+         "Bad function signature for: " + std::string(function_name) +
+             ", want: " + printValTypes(exp_args.data(), exp_args.size()) + " -> " +
+             printValTypes(exp_returns.data(), exp_returns.size()) +
+             ", but the module exports: " + printValTypes(act_args.data(), act_args.size()) +
+             " -> " + printValTypes(act_returns.data(), act_returns.size()));
+    return;
+  }
+
+  *function = [function_name, func_cxt, this](ContextBase *context, Args... args) -> R {
+    WasmEdge_Value params[] = {makeVal(args)...};
+    WasmEdge_Value results[1];
+    const bool log = cmpLogLevel(LogLevel::trace);
+    if (log) {
+      integration()->trace("[host->vm] " + std::string(function_name) + "(" +
+                           printValues(params, sizeof...(Args)) + ")");
+    }
+    SaveRestoreContext saved_context(context);
+    WasmEdge_Result res =
+        WasmEdge_ExecutorInvoke(executor_.get(), func_cxt, params, sizeof...(Args), results, 1);
+    if (!WasmEdge_ResultOK(res)) {
+      fail(FailState::RuntimeError, "Function: " + std::string(function_name) +
+                                        " failed: " + WasmEdge_ResultGetMessage(res));
+      return R{};
+    }
+    R ret = convValTypeToArg<R>(results[0]);
+    if (log) {
+      integration()->trace("[host<-vm] " + std::string(function_name) +
+                           " return: " + std::to_string(ret));
+    }
+    return ret;
+  };
+}
+
+void WasmEdge::warm() { initStore(); }
+
+} // namespace WasmEdge
+
+std::unique_ptr<WasmVm> createWasmEdgeVm() { return std::make_unique<WasmEdge::WasmEdge>(); }
+
+} // namespace proxy_wasm
diff --git a/src/wasmtime/types.h b/src/wasmtime/types.h
index 4ab725c04..14fe75053 100644
--- a/src/wasmtime/types.h
+++ b/src/wasmtime/types.h
@@ -13,7 +13,7 @@
 // limitations under the License.
 
 #include "src/common/types.h"
-#include "include/wasm.h"
+#include "crates/c-api/include/wasm.h"
 
 namespace proxy_wasm::wasmtime {
 
diff --git a/src/wasmtime/wasmtime.cc b/src/wasmtime/wasmtime.cc
index 06f4f0e3c..a72a0361d 100644
--- a/src/wasmtime/wasmtime.cc
+++ b/src/wasmtime/wasmtime.cc
@@ -26,7 +26,7 @@
 
 #include "src/wasmtime/types.h"
 
-#include "include/wasm.h"
+#include "crates/c-api/include/wasm.h"
 
 namespace proxy_wasm {
 namespace wasmtime {
@@ -80,6 +80,9 @@ class Wasmtime : public WasmVm {
   };
   FOR_ALL_WASM_VM_EXPORTS(_GET_MODULE_FUNCTION)
 #undef _GET_MODULE_FUNCTION
+
+  void warm() override;
+
 private:
   template <typename... Args>
   void registerHostFunctionImpl(std::string_view module_name, std::string_view function_name,
@@ -98,6 +101,10 @@ class Wasmtime : public WasmVm {
                              std::function<R(ContextBase *, Args...)> *function);
 
   void terminate() override {}
+  bool usesWasmByteOrder() override { return true; }
+
+  // Initialize the Wasmtime store if necessary.
+  void initStore();
 
   WasmStorePtr store_;
   WasmModulePtr module_;
@@ -110,9 +117,16 @@ class Wasmtime : public WasmVm {
   std::unordered_map<std::string, WasmFuncPtr> module_functions_;
 };
 
+void Wasmtime::initStore() {
+  if (store_ != nullptr) {
+    return;
+  }
+  store_ = wasm_store_new(engine());
+}
+
 bool Wasmtime::load(std::string_view bytecode, std::string_view /*precompiled*/,
                     const std::unordered_map<uint32_t, std::string> & /*function_names*/) {
-  store_ = wasm_store_new(engine());
+  initStore();
   if (store_ == nullptr) {
     return false;
   }
@@ -214,8 +228,8 @@ static const char *printValKind(wasm_valkind_t kind) {
     return "f32";
   case WASM_F64:
     return "f64";
-  case WASM_ANYREF:
-    return "anyref";
+  case WASM_EXTERNREF:
+    return "externref";
   case WASM_FUNCREF:
     return "funcref";
   default:
@@ -394,7 +408,7 @@ bool Wasmtime::getWord(uint64_t pointer, Word *word) {
 
   uint32_t word32;
   ::memcpy(&word32, wasm_memory_data(memory_.get()) + pointer, size);
-  word->u64_ = wasmtoh(word32);
+  word->u64_ = wasmtoh(word32, true);
   return true;
 }
 
@@ -403,7 +417,7 @@ bool Wasmtime::setWord(uint64_t pointer, Word word) {
   if (pointer + size > wasm_memory_data_size(memory_.get())) {
     return false;
   }
-  uint32_t word32 = htowasm(word.u32());
+  uint32_t word32 = htowasm(word.u32(), true);
   ::memcpy(wasm_memory_data(memory_.get()) + pointer, &word32, size);
   return true;
 }
@@ -616,9 +630,9 @@ void Wasmtime::getModuleFunctionImpl(std::string_view function_name,
     if (trap) {
       WasmByteVec error_message;
       wasm_trap_message(trap.get(), error_message.get());
+      std::string message(error_message.get()->data); // NULL-terminated
       fail(FailState::RuntimeError,
-           "Function: " + std::string(function_name) + " failed:\n" +
-               std::string(error_message.get()->data, error_message.get()->size));
+           "Function: " + std::string(function_name) + " failed: " + message);
       return;
     }
     if (log) {
@@ -678,9 +692,9 @@ void Wasmtime::getModuleFunctionImpl(std::string_view function_name,
     if (trap) {
       WasmByteVec error_message;
       wasm_trap_message(trap.get(), error_message.get());
+      std::string message(error_message.get()->data); // NULL-terminated
       fail(FailState::RuntimeError,
-           "Function: " + std::string(function_name) + " failed:\n" +
-               std::string(error_message.get()->data, error_message.get()->size));
+           "Function: " + std::string(function_name) + " failed: " + message);
       return R{};
     }
     R ret = convertValueTypeToArg<R>(results.data[0]);
@@ -692,6 +706,8 @@ void Wasmtime::getModuleFunctionImpl(std::string_view function_name,
   };
 };
 
+void Wasmtime::warm() { initStore(); }
+
 } // namespace wasmtime
 
 std::unique_ptr<WasmVm> createWasmtimeVm() { return std::make_unique<wasmtime::Wasmtime>(); }
diff --git a/src/wavm/wavm.cc b/src/wavm/wavm.cc
deleted file mode 100644
index 1041b7fa7..000000000
--- a/src/wavm/wavm.cc
+++ /dev/null
@@ -1,491 +0,0 @@
-// Copyright 2016-2019 Envoy Project Authors
-// Copyright 2020 Google LLC
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-#include "include/proxy-wasm/wavm.h"
-#include "include/proxy-wasm/wasm_vm.h"
-
-#include <cstdlib>
-#include <iomanip>
-#include <iostream>
-#include <map>
-#include <memory>
-#include <optional>
-#include <sstream>
-#include <unordered_map>
-#include <utility>
-#include <vector>
-
-#include "WAVM/IR/Module.h"
-#include "WAVM/IR/Operators.h"
-#include "WAVM/IR/Types.h"
-#include "WAVM/IR/Validate.h"
-#include "WAVM/IR/Value.h"
-#include "WAVM/Inline/Assert.h"
-#include "WAVM/Inline/BasicTypes.h"
-#include "WAVM/Inline/Errors.h"
-#include "WAVM/Inline/Hash.h"
-#include "WAVM/Inline/HashMap.h"
-#include "WAVM/Inline/IndexMap.h"
-#include "WAVM/Inline/IntrusiveSharedPtr.h"
-#include "WAVM/Platform/Mutex.h"
-#include "WAVM/Platform/Thread.h"
-#include "WAVM/Runtime/Intrinsics.h"
-#include "WAVM/Runtime/Linker.h"
-#include "WAVM/Runtime/Runtime.h"
-#include "WAVM/RuntimeABI/RuntimeABI.h"
-#include "WAVM/WASM/WASM.h"
-#include "WAVM/WASTParse/WASTParse.h"
-
-#ifdef NDEBUG
-#define ASSERT(_x) _x
-#else
-#define ASSERT(_x)                                                                                 \
-  do {                                                                                             \
-    if (!_x)                                                                                       \
-      ::exit(1);                                                                                   \
-  } while (0)
-#endif
-
-using namespace WAVM;
-using namespace WAVM::IR;
-
-namespace WAVM::IR {
-template <> constexpr ValueType inferValueType<proxy_wasm::Word>() { return ValueType::i32; }
-} // namespace WAVM::IR
-
-namespace proxy_wasm {
-
-// Forward declarations.
-template <typename... Args>
-void getFunctionWavm(WasmVm *vm, std::string_view function_name,
-                     std::function<void(ContextBase *, Args...)> *function);
-template <typename R, typename... Args>
-void getFunctionWavm(WasmVm *vm, std::string_view function_name,
-                     std::function<R(ContextBase *, Args...)> *function);
-template <typename R, typename... Args>
-void registerCallbackWavm(WasmVm *vm, std::string_view module_name, std::string_view function_name,
-                          R (*function)(Args...));
-
-namespace Wavm {
-
-struct Wavm;
-
-namespace {
-
-#define CALL_WITH_CONTEXT(_x, _context, _wavm)                                                     \
-  do {                                                                                             \
-    try {                                                                                          \
-      SaveRestoreContext _saved_context(static_cast<ContextBase *>(_context));                     \
-      WAVM::Runtime::catchRuntimeExceptions(                                                       \
-          [&] { _x; },                                                                             \
-          [&](WAVM::Runtime::Exception *exception) {                                               \
-            _wavm->fail(FailState::RuntimeError, getFailMessage(function_name, exception));        \
-            throw std::exception();                                                                \
-          });                                                                                      \
-    } catch (...) {                                                                                \
-    }                                                                                              \
-  } while (0)
-
-std::string getFailMessage(std::string_view function_name, WAVM::Runtime::Exception *exception) {
-  std::string message = "Function: " + std::string(function_name) +
-                        " failed: " + WAVM::Runtime::describeExceptionType(exception->type) +
-                        "\nProxy-Wasm plugin in-VM backtrace:\n";
-  std::vector<std::string> callstack_descriptions =
-      WAVM::Runtime::describeCallStack(exception->callStack);
-
-  // Since the first frame is on host and useless for developers, e.g.: `host!envoy+112901013`
-  // we start with index 1 here
-  for (size_t i = 1; i < callstack_descriptions.size(); i++) {
-    std::ostringstream oss;
-    std::string description = callstack_descriptions[i];
-    if (description.find("wasm!") == std::string::npos) {
-      // end of WASM's call stack
-      break;
-    }
-    oss << std::setw(3) << std::setfill(' ') << std::to_string(i);
-    message += oss.str() + ": " + description + "\n";
-  }
-
-  WAVM::Runtime::destroyException(exception);
-  return message;
-}
-
-struct WasmUntaggedValue : public WAVM::IR::UntaggedValue {
-  WasmUntaggedValue() = default;
-  WasmUntaggedValue(I32 inI32) { i32 = inI32; }
-  WasmUntaggedValue(I64 inI64) { i64 = inI64; }
-  WasmUntaggedValue(U32 inU32) { u32 = inU32; }
-  WasmUntaggedValue(Word w) { u32 = static_cast<U32>(w.u64_); }
-  WasmUntaggedValue(U64 inU64) { u64 = inU64; }
-  WasmUntaggedValue(F32 inF32) { f32 = inF32; }
-  WasmUntaggedValue(F64 inF64) { f64 = inF64; }
-};
-
-class RootResolver : public WAVM::Runtime::Resolver {
-public:
-  RootResolver(WAVM::Runtime::Compartment * /*compartment*/, WasmVm *vm) : vm_(vm) {}
-
-  ~RootResolver() override { module_name_to_instance_map_.clear(); }
-
-  bool resolve(const std::string &module_name, const std::string &export_name, ExternType type,
-               WAVM::Runtime::Object *&out_object) override {
-    auto *named_instance = module_name_to_instance_map_.get(module_name);
-    if (named_instance != nullptr) {
-      out_object = getInstanceExport(*named_instance, export_name);
-      if (out_object != nullptr) {
-        if (!isA(out_object, type)) {
-          vm_->fail(FailState::UnableToInitializeCode,
-                    "Failed to load WASM module due to a type mismatch in an import: " +
-                        std::string(module_name) + "." + export_name + " " +
-                        asString(WAVM::Runtime::getExternType(out_object)) +
-                        " but was expecting type: " + asString(type));
-          return false;
-        }
-        return true;
-      }
-    }
-    for (auto *r : resolvers_) {
-      if (r->resolve(module_name, export_name, type, out_object)) {
-        return true;
-      }
-    }
-    vm_->fail(FailState::MissingFunction,
-              "Failed to load Wasm module due to a missing import: " + std::string(module_name) +
-                  "." + std::string(export_name) + " " + asString(type));
-    return false;
-  }
-
-  HashMap<std::string, WAVM::Runtime::Instance *> &moduleNameToInstanceMap() {
-    return module_name_to_instance_map_;
-  }
-
-  void addResolver(WAVM::Runtime::Resolver *r) { resolvers_.push_back(r); }
-
-private:
-  WasmVm *vm_;
-  HashMap<std::string, WAVM::Runtime::Instance *> module_name_to_instance_map_{};
-  std::vector<WAVM::Runtime::Resolver *> resolvers_{};
-};
-
-const uint64_t WasmPageSize = 1 << 16;
-
-} // namespace
-
-template <typename T> struct NativeWord { using type = T; };
-template <> struct NativeWord<Word> { using type = uint32_t; };
-
-template <typename T> typename NativeWord<T>::type ToNative(const T &t) { return t; }
-template <> typename NativeWord<Word>::type ToNative(const Word &t) { return t.u32(); }
-
-struct PairHash {
-  template <typename T, typename U> std::size_t operator()(const std::pair<T, U> &x) const {
-    return std::hash<T>()(x.first) + std::hash<U>()(x.second);
-  }
-};
-
-struct Wavm : public WasmVm {
-  Wavm() = default;
-  ~Wavm() override;
-
-  // WasmVm
-  std::string_view getEngineName() override { return "wavm"; }
-  Cloneable cloneable() override { return Cloneable::InstantiatedModule; };
-  std::unique_ptr<WasmVm> clone() override;
-  bool load(std::string_view bytecode, std::string_view precompiled,
-            const std::unordered_map<uint32_t, std::string> &function_names) override;
-  bool link(std::string_view debug_name) override;
-  uint64_t getMemorySize() override;
-  std::optional<std::string_view> getMemory(uint64_t pointer, uint64_t size) override;
-  bool setMemory(uint64_t pointer, uint64_t size, const void *data) override;
-  bool getWord(uint64_t pointer, Word *data) override;
-  bool setWord(uint64_t pointer, Word data) override;
-  size_t getWordSize() override { return sizeof(uint32_t); };
-  std::string_view getPrecompiledSectionName() override;
-
-#define _GET_FUNCTION(_T)                                                                          \
-  void getFunction(std::string_view function_name, _T *f) override {                               \
-    getFunctionWavm(this, function_name, f);                                                       \
-  };
-  FOR_ALL_WASM_VM_EXPORTS(_GET_FUNCTION)
-#undef _GET_FUNCTION
-
-#define _REGISTER_CALLBACK(_T)                                                                     \
-  void registerCallback(std::string_view module_name, std::string_view function_name, _T,          \
-                        typename ConvertFunctionTypeWordToUint32<_T>::type f) override {           \
-    registerCallbackWavm(this, module_name, function_name, f);                                     \
-  };
-  FOR_ALL_WASM_VM_IMPORTS(_REGISTER_CALLBACK)
-#undef _REGISTER_CALLBACK
-
-  void terminate() override {}
-
-  IR::Module ir_module_;
-  WAVM::Runtime::ModuleRef module_ = nullptr;
-  WAVM::Runtime::GCPointer<WAVM::Runtime::Instance> module_instance_;
-  WAVM::Runtime::Memory *memory_{};
-  WAVM::Runtime::GCPointer<WAVM::Runtime::Compartment> compartment_;
-  WAVM::Runtime::GCPointer<WAVM::Runtime::Context> context_;
-  std::map<std::string, Intrinsics::Module> intrinsic_modules_{};
-  std::map<std::string, WAVM::Runtime::GCPointer<WAVM::Runtime::Instance>>
-      intrinsic_module_instances_{};
-  std::vector<std::unique_ptr<Intrinsics::Function>> host_functions_{};
-  uint8_t *memory_base_ = nullptr;
-};
-
-Wavm::~Wavm() {
-  module_instance_ = nullptr;
-  context_ = nullptr;
-  intrinsic_module_instances_.clear();
-  intrinsic_modules_.clear();
-  host_functions_.clear();
-  if (compartment_ != nullptr) {
-    ASSERT(tryCollectCompartment(std::move(compartment_)));
-  }
-}
-
-std::unique_ptr<WasmVm> Wavm::clone() {
-  auto wavm = std::make_unique<Wavm>();
-  if (wavm == nullptr) {
-    return nullptr;
-  }
-
-  wavm->compartment_ = WAVM::Runtime::cloneCompartment(compartment_);
-  if (wavm->compartment_ == nullptr) {
-    return nullptr;
-  }
-
-  wavm->context_ = WAVM::Runtime::cloneContext(context_, wavm->compartment_);
-  if (wavm->context_ == nullptr) {
-    return nullptr;
-  }
-
-  wavm->memory_ = WAVM::Runtime::remapToClonedCompartment(memory_, wavm->compartment_);
-  wavm->memory_base_ = WAVM::Runtime::getMemoryBaseAddress(wavm->memory_);
-  wavm->module_instance_ =
-      WAVM::Runtime::remapToClonedCompartment(module_instance_, wavm->compartment_);
-
-  for (auto &p : intrinsic_module_instances_) {
-    wavm->intrinsic_module_instances_.emplace(
-        p.first, WAVM::Runtime::remapToClonedCompartment(p.second, wavm->compartment_));
-  }
-
-  auto *integration_clone = integration()->clone();
-  if (integration_clone == nullptr) {
-    return nullptr;
-  }
-  wavm->integration().reset(integration_clone);
-
-  return wavm;
-}
-
-bool Wavm::load(std::string_view bytecode, std::string_view precompiled,
-                const std::unordered_map<uint32_t, std::string> & /*function_names*/) {
-  compartment_ = WAVM::Runtime::createCompartment();
-  if (compartment_ == nullptr) {
-    return false;
-  }
-
-  context_ = WAVM::Runtime::createContext(compartment_);
-  if (context_ == nullptr) {
-    return false;
-  }
-
-  if (!WASM::loadBinaryModule(reinterpret_cast<const unsigned char *>(bytecode.data()),
-                              bytecode.size(), ir_module_)) {
-    return false;
-  }
-
-  if (!precompiled.empty()) {
-    module_ = WAVM::Runtime::loadPrecompiledModule(
-        ir_module_, {precompiled.data(), precompiled.data() + precompiled.size()});
-    if (module_ == nullptr) {
-      return false;
-    }
-
-  } else {
-    module_ = WAVM::Runtime::compileModule(ir_module_);
-    if (module_ == nullptr) {
-      return false;
-    }
-  }
-
-  return true;
-}
-
-bool Wavm::link(std::string_view debug_name) {
-  RootResolver rootResolver(compartment_, this);
-  for (auto &p : intrinsic_modules_) {
-    auto *instance = Intrinsics::instantiateModule(compartment_, {&intrinsic_modules_[p.first]},
-                                                   std::string(p.first));
-    if (instance == nullptr) {
-      return false;
-    }
-    intrinsic_module_instances_.emplace(p.first, instance);
-    rootResolver.moduleNameToInstanceMap().set(p.first, instance);
-  }
-
-  WAVM::Runtime::LinkResult link_result = linkModule(ir_module_, rootResolver);
-  if (!link_result.missingImports.empty()) {
-    for (auto &i : link_result.missingImports) {
-      integration()->error("Missing Wasm import " + i.moduleName + " " + i.exportName);
-    }
-    fail(FailState::MissingFunction, "Failed to load Wasm module due to a missing import(s)");
-    return false;
-  }
-
-  module_instance_ = instantiateModule(
-      compartment_, module_, std::move(link_result.resolvedImports), std::string(debug_name));
-  if (module_instance_ == nullptr) {
-    return false;
-  }
-
-  memory_ = getDefaultMemory(module_instance_);
-  if (memory_ == nullptr) {
-    return false;
-  }
-
-  memory_base_ = WAVM::Runtime::getMemoryBaseAddress(memory_);
-
-  return true;
-}
-
-uint64_t Wavm::getMemorySize() { return WAVM::Runtime::getMemoryNumPages(memory_) * WasmPageSize; }
-
-std::optional<std::string_view> Wavm::getMemory(uint64_t pointer, uint64_t size) {
-  auto memory_num_bytes = WAVM::Runtime::getMemoryNumPages(memory_) * WasmPageSize;
-  if (pointer + size > memory_num_bytes) {
-    return std::nullopt;
-  }
-  return std::string_view(reinterpret_cast<char *>(memory_base_ + pointer), size);
-}
-
-bool Wavm::setMemory(uint64_t pointer, uint64_t size, const void *data) {
-  auto memory_num_bytes = WAVM::Runtime::getMemoryNumPages(memory_) * WasmPageSize;
-  if (pointer + size > memory_num_bytes) {
-    return false;
-  }
-  auto *p = reinterpret_cast<char *>(memory_base_ + pointer);
-  memcpy(p, data, size);
-  return true;
-}
-
-bool Wavm::getWord(uint64_t pointer, Word *data) {
-  auto memory_num_bytes = WAVM::Runtime::getMemoryNumPages(memory_) * WasmPageSize;
-  if (pointer + sizeof(uint32_t) > memory_num_bytes) {
-    return false;
-  }
-  auto *p = reinterpret_cast<char *>(memory_base_ + pointer);
-  uint32_t data32;
-  memcpy(&data32, p, sizeof(uint32_t));
-  data->u64_ = wasmtoh(data32);
-  return true;
-}
-
-bool Wavm::setWord(uint64_t pointer, Word data) {
-  uint32_t data32 = htowasm(data.u32());
-  return setMemory(pointer, sizeof(uint32_t), &data32);
-}
-
-std::string_view Wavm::getPrecompiledSectionName() { return "wavm.precompiled_object"; }
-
-} // namespace Wavm
-
-std::unique_ptr<WasmVm> createWavmVm() { return std::make_unique<proxy_wasm::Wavm::Wavm>(); }
-
-template <typename R, typename... Args>
-IR::FunctionType inferHostFunctionType(R (*/*func*/)(Args...)) {
-  return IR::FunctionType(IR::inferResultType<R>(), IR::TypeTuple({IR::inferValueType<Args>()...}),
-                          IR::CallingConvention::c);
-}
-
-using namespace Wavm;
-
-template <typename R, typename... Args>
-void registerCallbackWavm(WasmVm *vm, std::string_view module_name, std::string_view function_name,
-                          R (*f)(Args...)) {
-  auto *wavm = dynamic_cast<proxy_wasm::Wavm::Wavm *>(vm);
-  wavm->host_functions_.emplace_back(new Intrinsics::Function(
-      &wavm->intrinsic_modules_[std::string(module_name)], function_name.data(),
-      reinterpret_cast<void *>(f), inferHostFunctionType(f)));
-}
-
-template <typename R, typename... Args>
-IR::FunctionType inferStdFunctionType(std::function<R(ContextBase *, Args...)> * /*func*/) {
-  return IR::FunctionType(IR::inferResultType<R>(), IR::TypeTuple({IR::inferValueType<Args>()...}));
-}
-
-static bool checkFunctionType(WAVM::Runtime::Function *f, IR::FunctionType t) {
-  return getFunctionType(f) == t;
-}
-
-template <typename R, typename... Args>
-void getFunctionWavm(WasmVm *vm, std::string_view function_name,
-                     std::function<R(ContextBase *, Args...)> *function) {
-  auto *wavm = dynamic_cast<proxy_wasm::Wavm::Wavm *>(vm);
-  auto *f =
-      asFunctionNullable(getInstanceExport(wavm->module_instance_, std::string(function_name)));
-  if (!f) {
-    f = asFunctionNullable(getInstanceExport(wavm->module_instance_, std::string(function_name)));
-  }
-  if (!f) {
-    *function = nullptr;
-    return;
-  }
-  if (!checkFunctionType(f, inferStdFunctionType(function))) {
-    *function = nullptr;
-    wavm->fail(FailState::UnableToInitializeCode,
-               "Bad function signature for: " + std::string(function_name));
-    return;
-  }
-  *function = [wavm, f, function_name](ContextBase *context, Args... args) -> R {
-    WasmUntaggedValue values[] = {args...};
-    WasmUntaggedValue return_value;
-    CALL_WITH_CONTEXT(
-        invokeFunction(wavm->context_, f, getFunctionType(f), &values[0], &return_value), context,
-        wavm);
-    if (wavm->isFailed()) {
-      return 0;
-    }
-    return static_cast<uint32_t>(return_value.i32);
-  };
-}
-
-template <typename... Args>
-void getFunctionWavm(WasmVm *vm, std::string_view function_name,
-                     std::function<void(ContextBase *, Args...)> *function) {
-  auto *wavm = dynamic_cast<proxy_wasm::Wavm::Wavm *>(vm);
-  auto *f =
-      asFunctionNullable(getInstanceExport(wavm->module_instance_, std::string(function_name)));
-  if (!f) {
-    f = asFunctionNullable(getInstanceExport(wavm->module_instance_, std::string(function_name)));
-  }
-  if (!f) {
-    *function = nullptr;
-    return;
-  }
-  if (!checkFunctionType(f, inferStdFunctionType(function))) {
-    *function = nullptr;
-    wavm->fail(FailState::UnableToInitializeCode,
-               "Bad function signature for: " + std::string(function_name));
-    return;
-  }
-  *function = [wavm, f, function_name](ContextBase *context, Args... args) {
-    WasmUntaggedValue values[] = {args...};
-    CALL_WITH_CONTEXT(invokeFunction(wavm->context_, f, getFunctionType(f), &values[0]), context,
-                      wavm);
-  };
-}
-
-} // namespace proxy_wasm
diff --git a/test/BUILD b/test/BUILD
index 3bdd69f24..97e70558a 100644
--- a/test/BUILD
+++ b/test/BUILD
@@ -1,5 +1,20 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load("@proxy_wasm_cpp_host//bazel:select.bzl", "proxy_wasm_select_engine_null")
-load("@rules_cc//cc:defs.bzl", "cc_library", "cc_test")
+load("@rules_cc//cc:defs.bzl", "cc_library")
+load("//bazel:cc_defs.bzl", "cc_test")
 
 licenses(["notice"])  # Apache 2
 
@@ -52,11 +67,12 @@ cc_test(
 
 cc_test(
     name = "runtime_test",
+    timeout = "long",
     srcs = ["runtime_test.cc"],
     data = [
         "//test/test_data:callback.wasm",
         "//test/test_data:clock.wasm",
-        "//test/test_data:infinite_loop.wasm",
+        "//test/test_data:resource_limits.wasm",
         "//test/test_data:trap.wasm",
     ],
     linkstatic = 1,
@@ -74,8 +90,10 @@ cc_test(
     data = [
         "//test/test_data:clock.wasm",
         "//test/test_data:env.wasm",
+        "//test/test_data:random.wasm",
     ],
     linkstatic = 1,
+    shard_count = 8,
     deps = [
         ":utility_lib",
         "//:lib",
@@ -89,6 +107,52 @@ cc_test(
     srcs = ["wasm_test.cc"],
     data = [
         "//test/test_data:abi_export.wasm",
+        "//test/test_data:canary_check.wasm",
+    ],
+    linkstatic = 1,
+    deps = [
+        ":utility_lib",
+        "//:lib",
+        "@com_google_googletest//:gtest",
+        "@com_google_googletest//:gtest_main",
+    ],
+)
+
+cc_test(
+    name = "logging_test",
+    srcs = ["logging_test.cc"],
+    data = [
+        "//test/test_data:http_logging.wasm",
+    ],
+    linkstatic = 1,
+    deps = [
+        ":utility_lib",
+        "//:lib",
+        "@com_google_googletest//:gtest",
+        "@com_google_googletest//:gtest_main",
+    ],
+)
+
+cc_test(
+    name = "stop_iteration_test",
+    srcs = ["stop_iteration_test.cc"],
+    data = [
+        "//test/test_data:stop_iteration.wasm",
+    ],
+    linkstatic = 1,
+    deps = [
+        ":utility_lib",
+        "//:lib",
+        "@com_google_googletest//:gtest",
+        "@com_google_googletest//:gtest_main",
+    ],
+)
+
+cc_test(
+    name = "security_test",
+    srcs = ["security_test.cc"],
+    data = [
+        "//test/test_data:bad_malloc.wasm",
     ],
     linkstatic = 1,
     deps = [
@@ -134,6 +198,7 @@ cc_test(
 
 cc_test(
     name = "wasm_vm_test",
+    timeout = "long",
     srcs = ["wasm_vm_test.cc"],
     data = [
         "//test/test_data:abi_export.wasm",
@@ -147,6 +212,17 @@ cc_test(
     ],
 )
 
+cc_test(
+    name = "pairs_util_test",
+    srcs = ["pairs_util_test.cc"],
+    linkstatic = 1,
+    deps = [
+        "//:lib",
+        "@com_google_googletest//:gtest",
+        "@com_google_googletest//:gtest_main",
+    ],
+)
+
 cc_library(
     name = "utility_lib",
     testonly = True,
diff --git a/test/exports_test.cc b/test/exports_test.cc
index 40e0359d1..026019c03 100644
--- a/test/exports_test.cc
+++ b/test/exports_test.cc
@@ -89,5 +89,73 @@ TEST_P(TestVm, Clock) {
   EXPECT_TRUE(context->isLogged("realtime: "));
 }
 
+TEST_P(TestVm, RandomZero) {
+  auto source = readTestWasmFile("random.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  WasmCallVoid<1> run;
+  wasm.wasm_vm()->getFunction("run", &run);
+  ASSERT_TRUE(run != nullptr);
+  run(wasm.vm_context(), Word{0});
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogged("random_get(0) succeeded."));
+}
+
+TEST_P(TestVm, RandomSmall) {
+  auto source = readTestWasmFile("random.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  WasmCallVoid<1> run;
+  wasm.wasm_vm()->getFunction("run", &run);
+  ASSERT_TRUE(run != nullptr);
+  run(wasm.vm_context(), Word{32});
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogged("random_get(32) succeeded."));
+}
+
+TEST_P(TestVm, RandomLarge) {
+  auto source = readTestWasmFile("random.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  WasmCallVoid<1> run;
+  wasm.wasm_vm()->getFunction("run", &run);
+  ASSERT_TRUE(run != nullptr);
+  run(wasm.vm_context(), Word{64 * 1024});
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogged("random_get(65536) succeeded."));
+}
+
+TEST_P(TestVm, RandomTooLarge) {
+  auto source = readTestWasmFile("random.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  WasmCallVoid<1> run;
+  wasm.wasm_vm()->getFunction("run", &run);
+  ASSERT_TRUE(run != nullptr);
+  run(wasm.vm_context(), Word{65 * 1024});
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogged("random_get(66560) failed."));
+}
+
 } // namespace
 } // namespace proxy_wasm
diff --git a/test/fuzz/BUILD b/test/fuzz/BUILD
new file mode 100644
index 000000000..2221f6367
--- /dev/null
+++ b/test/fuzz/BUILD
@@ -0,0 +1,47 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("//bazel:cc_defs.bzl", "cc_fuzz_test")
+
+licenses(["notice"])  # Apache 2
+
+package(default_visibility = ["//visibility:public"])
+
+filegroup(
+    name = "corpus_bytecode",
+    srcs = glob(["corpus_bytecode/**"]),
+)
+
+cc_fuzz_test(
+    name = "bytecode_util_fuzzer",
+    srcs = ["bytecode_util_fuzzer.cc"],
+    corpus = [":corpus_bytecode"],
+    deps = [
+        "//:lib",
+    ],
+)
+
+filegroup(
+    name = "corpus_pairs",
+    srcs = glob(["corpus_pairs/**"]),
+)
+
+cc_fuzz_test(
+    name = "pairs_util_fuzzer",
+    srcs = ["pairs_util_fuzzer.cc"],
+    corpus = [":corpus_pairs"],
+    deps = [
+        "//:lib",
+    ],
+)
diff --git a/test/fuzz/bytecode_util_fuzzer.cc b/test/fuzz/bytecode_util_fuzzer.cc
new file mode 100644
index 000000000..b77d9423b
--- /dev/null
+++ b/test/fuzz/bytecode_util_fuzzer.cc
@@ -0,0 +1,41 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "include/proxy-wasm/bytecode_util.h"
+
+#include <string>
+
+namespace proxy_wasm {
+namespace {
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+  auto bytecode = std::string_view(reinterpret_cast<const char *>(data), size);
+
+  AbiVersion version;
+  BytecodeUtil::getAbiVersion(bytecode, version);
+
+  std::string_view custom_section;
+  BytecodeUtil::getCustomSection(bytecode, "precompiled", custom_section);
+
+  std::string stripped_source;
+  BytecodeUtil::getStrippedSource(bytecode, stripped_source);
+
+  std::unordered_map<uint32_t, std::string> function_names;
+  BytecodeUtil::getFunctionNameIndex(bytecode, function_names);
+
+  return 0;
+}
+
+} // namespace
+} // namespace proxy_wasm
diff --git a/test/fuzz/corpus_bytecode/crash-10198e96614e9ff7ca6dae581f4f7f13143257d7 b/test/fuzz/corpus_bytecode/crash-10198e96614e9ff7ca6dae581f4f7f13143257d7
new file mode 100644
index 000000000..a8e688a41
Binary files /dev/null and b/test/fuzz/corpus_bytecode/crash-10198e96614e9ff7ca6dae581f4f7f13143257d7 differ
diff --git a/test/fuzz/corpus_bytecode/crash-6d94d1b10bc8dabc467a8e4a9a7105f62c81ff4c b/test/fuzz/corpus_bytecode/crash-6d94d1b10bc8dabc467a8e4a9a7105f62c81ff4c
new file mode 100644
index 000000000..81aa8f42e
Binary files /dev/null and b/test/fuzz/corpus_bytecode/crash-6d94d1b10bc8dabc467a8e4a9a7105f62c81ff4c differ
diff --git a/test/fuzz/corpus_bytecode/crash-8cff35e5a0f9722df891fd1f05ca6dc2bd3d42aa b/test/fuzz/corpus_bytecode/crash-8cff35e5a0f9722df891fd1f05ca6dc2bd3d42aa
new file mode 100644
index 000000000..63b0377d5
Binary files /dev/null and b/test/fuzz/corpus_bytecode/crash-8cff35e5a0f9722df891fd1f05ca6dc2bd3d42aa differ
diff --git a/test/fuzz/corpus_bytecode/crash-9718722528a7c015ef3852490a6c67649bda70c0 b/test/fuzz/corpus_bytecode/crash-9718722528a7c015ef3852490a6c67649bda70c0
new file mode 100644
index 000000000..c5eb9dd06
Binary files /dev/null and b/test/fuzz/corpus_bytecode/crash-9718722528a7c015ef3852490a6c67649bda70c0 differ
diff --git a/test/fuzz/corpus_bytecode/crash-ed7193f661f04a66a13facee4d25709e6f479d3d b/test/fuzz/corpus_bytecode/crash-ed7193f661f04a66a13facee4d25709e6f479d3d
new file mode 100644
index 000000000..30e3f1ae1
Binary files /dev/null and b/test/fuzz/corpus_bytecode/crash-ed7193f661f04a66a13facee4d25709e6f479d3d differ
diff --git a/test/fuzz/corpus_pairs/crash-0bf4371e72f7ae83f9c5bf3e2485531cdcaaaa04 b/test/fuzz/corpus_pairs/crash-0bf4371e72f7ae83f9c5bf3e2485531cdcaaaa04
new file mode 100644
index 000000000..7be804a26
Binary files /dev/null and b/test/fuzz/corpus_pairs/crash-0bf4371e72f7ae83f9c5bf3e2485531cdcaaaa04 differ
diff --git a/test/fuzz/pairs_util_fuzzer.cc b/test/fuzz/pairs_util_fuzzer.cc
new file mode 100644
index 000000000..84e7ca0f1
--- /dev/null
+++ b/test/fuzz/pairs_util_fuzzer.cc
@@ -0,0 +1,47 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "include/proxy-wasm/pairs_util.h"
+
+#include <cstdint>
+#include <cstring>
+
+namespace proxy_wasm {
+namespace {
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+  auto input = std::string_view(reinterpret_cast<const char *>(data), size);
+
+  auto pairs = PairsUtil::toPairs(input);
+
+  if (!pairs.empty()) {
+    // Verify that non-empty Pairs serializes back to the same bytes.
+    auto new_size = PairsUtil::pairsSize(pairs);
+    if (new_size != size) {
+      __builtin_trap();
+    }
+    std::vector<char> new_data(new_size);
+    if (!PairsUtil::marshalPairs(pairs, new_data.data(), new_data.size())) {
+      __builtin_trap();
+    }
+    if (::memcmp(new_data.data(), data, size) != 0) {
+      __builtin_trap();
+    }
+  }
+
+  return 0;
+}
+
+} // namespace
+} // namespace proxy_wasm
diff --git a/test/logging_test.cc b/test/logging_test.cc
new file mode 100644
index 000000000..e4cbdcdca
--- /dev/null
+++ b/test/logging_test.cc
@@ -0,0 +1,69 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "gtest/gtest.h"
+#include "include/proxy-wasm/wasm.h"
+#include "test/utility.h"
+
+namespace proxy_wasm {
+
+INSTANTIATE_TEST_SUITE_P(WasmEngines, TestVm, testing::ValuesIn(getWasmEngines()),
+                         [](const testing::TestParamInfo<std::string> &info) {
+                           return info.param;
+                         });
+
+// TestVm is parameterized for each engine and creates a VM on construction.
+TEST_P(TestVm, HttpLogging) {
+  // Read the wasm source.
+  auto source = readTestWasmFile("http_logging.wasm");
+  ASSERT_FALSE(source.empty());
+
+  // Create a WasmBase and load the plugin.
+  auto wasm = std::make_shared<TestWasm>(std::move(vm_));
+  ASSERT_TRUE(wasm->load(source, /*allow_precompiled=*/false));
+  ASSERT_TRUE(wasm->initialize());
+
+  // Create a plugin.
+  const auto plugin = std::make_shared<PluginBase>(
+      /*name=*/"test", /*root_id=*/"", /*vm_id=*/"",
+      /*engine=*/wasm->wasm_vm()->getEngineName(), /*plugin_config=*/"",
+      /*fail_open=*/false, /*key=*/"");
+
+  // Create root context, call onStart().
+  ContextBase *root_context = wasm->start(plugin);
+  ASSERT_TRUE(root_context != nullptr);
+
+  // On the root context, call onConfigure().
+  ASSERT_TRUE(wasm->configure(root_context, plugin));
+
+  // Create a stream context.
+  {
+    auto wasm_handle = std::make_shared<WasmHandleBase>(wasm);
+    auto plugin_handle = std::make_shared<PluginHandleBase>(wasm_handle, plugin);
+    auto stream_context = TestContext(wasm.get(), root_context->id(), plugin_handle);
+    stream_context.onCreate();
+    EXPECT_TRUE(stream_context.isLogged("onCreate called"));
+    stream_context.onRequestHeaders(/*headers=*/0, /*end_of_stream=*/false);
+    EXPECT_TRUE(stream_context.isLogged("onRequestHeaders called"));
+    stream_context.onResponseHeaders(/*headers=*/0, /*end_of_stream=*/false);
+    EXPECT_TRUE(stream_context.isLogged("onResponseHeaders called"));
+    stream_context.onDone();
+    EXPECT_TRUE(stream_context.isLogged("onDone called"));
+    stream_context.onDelete();
+    EXPECT_TRUE(stream_context.isLogged("onDelete called"));
+  }
+  EXPECT_FALSE(wasm->isFailed());
+}
+
+} // namespace proxy_wasm
diff --git a/test/null_vm_test.cc b/test/null_vm_test.cc
index 774c685d3..5bb862f96 100644
--- a/test/null_vm_test.cc
+++ b/test/null_vm_test.cc
@@ -73,4 +73,10 @@ TEST_F(BaseVmTest, NullVmStartup) {
   EXPECT_NE(test_null_vm_plugin, nullptr);
 }
 
+TEST_F(BaseVmTest, ByteOrder) {
+  auto wasm_vm = createNullVm();
+  EXPECT_TRUE(wasm_vm->load("test_null_vm_plugin", {}, {}));
+  EXPECT_FALSE(wasm_vm->usesWasmByteOrder());
+}
+
 } // namespace proxy_wasm
diff --git a/test/pairs_util_test.cc b/test/pairs_util_test.cc
new file mode 100644
index 000000000..3f9fcd965
--- /dev/null
+++ b/test/pairs_util_test.cc
@@ -0,0 +1,33 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "include/proxy-wasm/pairs_util.h"
+#include "gtest/gtest.h"
+
+namespace proxy_wasm {
+
+TEST(PairsUtilTest, EncodeDecode) {
+  proxy_wasm::Pairs pairs1;
+  std::string data1("some_data");
+  auto size_str = std::to_string(data1.size());
+  pairs1.push_back({data1, size_str});
+  std::vector<char> buffer(PairsUtil::pairsSize(pairs1));
+  EXPECT_TRUE(PairsUtil::marshalPairs(pairs1, buffer.data(), buffer.size()));
+  auto pairs2 = PairsUtil::toPairs(std::string_view(buffer.data(), buffer.size()));
+  EXPECT_EQ(pairs2.size(), pairs1.size());
+  EXPECT_EQ(pairs2[0].first, pairs1[0].first);
+  EXPECT_EQ(pairs2[0].second, pairs1[0].second);
+}
+
+} // namespace proxy_wasm
diff --git a/test/runtime_test.cc b/test/runtime_test.cc
index ccce3df69..2e9080978 100644
--- a/test/runtime_test.cc
+++ b/test/runtime_test.cc
@@ -19,6 +19,7 @@
 #include <thread>
 
 #include "include/proxy-wasm/context.h"
+#include "include/proxy-wasm/limits.h"
 #include "include/proxy-wasm/wasm.h"
 
 #include "test/utility.h"
@@ -52,12 +53,6 @@ TEST_P(TestVm, BadSignature) {
 }
 
 TEST_P(TestVm, StraceLogLevel) {
-  if (engine_ == "wavm") {
-    // TODO(mathetake): strace is yet to be implemented for WAVM.
-    // See https://github.com/proxy-wasm/proxy-wasm-cpp-host/issues/120.
-    return;
-  }
-
   auto source = readTestWasmFile("clock.wasm");
   ASSERT_FALSE(source.empty());
   auto wasm = TestWasm(std::move(vm_));
@@ -86,7 +81,7 @@ TEST_P(TestVm, TerminateExecution) {
   if (engine_ != "v8") {
     return;
   }
-  auto source = readTestWasmFile("infinite_loop.wasm");
+  auto source = readTestWasmFile("resource_limits.wasm");
   ASSERT_FALSE(source.empty());
   auto wasm = TestWasm(std::move(vm_));
   ASSERT_TRUE(wasm.load(source, false));
@@ -107,8 +102,38 @@ TEST_P(TestVm, TerminateExecution) {
   // Check integration logs.
   auto *host = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
   EXPECT_TRUE(host->isErrorLogged("Function: infinite_loop failed"));
+  EXPECT_TRUE(host->isErrorLogged("TerminationException"));
+}
+
+TEST_P(TestVm, WasmMemoryLimit) {
+  // TODO(PiotrSikora): enforce memory limits in other engines.
+  if (engine_ != "v8") {
+    return;
+  }
+  auto source = readTestWasmFile("resource_limits.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  WasmCallVoid<0> infinite_memory;
+  wasm.wasm_vm()->getFunction("infinite_memory", &infinite_memory);
+  ASSERT_TRUE(infinite_memory != nullptr);
+  infinite_memory(wasm.vm_context());
+
+  EXPECT_GE(wasm.wasm_vm()->getMemorySize(), PROXY_WASM_HOST_MAX_WASM_MEMORY_SIZE_BYTES * 0.95);
+  EXPECT_LE(wasm.wasm_vm()->getMemorySize(), PROXY_WASM_HOST_MAX_WASM_MEMORY_SIZE_BYTES);
+
+  // Check integration logs.
+  auto *host = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
+  EXPECT_TRUE(host->isErrorLogged("Function: infinite_memory failed"));
+  // Trap message
+  EXPECT_TRUE(host->isErrorLogged("unreachable"));
+  // Backtrace
   if (engine_ == "v8") {
-    EXPECT_TRUE(host->isErrorLogged("Uncaught Error: termination_exception"));
+    EXPECT_TRUE(host->isErrorLogged("Proxy-Wasm plugin in-VM backtrace:"));
+    EXPECT_TRUE(host->isErrorLogged("rg_oom"));
+    EXPECT_TRUE(host->isErrorLogged(" - alloc::alloc::handle_alloc_error"));
   }
 }
 
@@ -127,20 +152,17 @@ TEST_P(TestVm, Trap) {
   // Check integration logs.
   auto *host = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
   EXPECT_TRUE(host->isErrorLogged("Function: trigger failed"));
+  // Trap message
+  EXPECT_TRUE(host->isErrorLogged("unreachable"));
+  // Backtrace
   if (engine_ == "v8") {
-    EXPECT_TRUE(host->isErrorLogged("Uncaught RuntimeError: unreachable"));
     EXPECT_TRUE(host->isErrorLogged("Proxy-Wasm plugin in-VM backtrace:"));
+    EXPECT_TRUE(host->isErrorLogged(" - std::panicking::begin_panic"));
     EXPECT_TRUE(host->isErrorLogged(" - trigger"));
   }
 }
 
 TEST_P(TestVm, Trap2) {
-  if (engine_ == "wavm") {
-    // TODO(mathetake): Somehow WAVM exits with 'munmap_chunk(): invalid pointer' on unidentified
-    // build condition in 'libstdc++ abi::__cxa_demangle' originally from
-    // WAVM::Runtime::describeCallStack. Needs further investigation.
-    return;
-  }
   auto source = readTestWasmFile("trap.wasm");
   ASSERT_FALSE(source.empty());
   auto wasm = TestWasm(std::move(vm_));
@@ -155,9 +177,12 @@ TEST_P(TestVm, Trap2) {
   // Check integration logs.
   auto *host = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
   EXPECT_TRUE(host->isErrorLogged("Function: trigger2 failed"));
+  // Trap message
+  EXPECT_TRUE(host->isErrorLogged("unreachable"));
+  // Backtrace
   if (engine_ == "v8") {
-    EXPECT_TRUE(host->isErrorLogged("Uncaught RuntimeError: unreachable"));
     EXPECT_TRUE(host->isErrorLogged("Proxy-Wasm plugin in-VM backtrace:"));
+    EXPECT_TRUE(host->isErrorLogged(" - std::panicking::begin_panic"));
     EXPECT_TRUE(host->isErrorLogged(" - trigger2"));
   }
 }
diff --git a/test/security_test.cc b/test/security_test.cc
new file mode 100644
index 000000000..a077e4ae6
--- /dev/null
+++ b/test/security_test.cc
@@ -0,0 +1,106 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "gtest/gtest.h"
+
+#include <memory>
+#include <string>
+
+#include "include/proxy-wasm/context.h"
+#include "include/proxy-wasm/wasm.h"
+
+#include "test/utility.h"
+
+namespace proxy_wasm {
+
+INSTANTIATE_TEST_SUITE_P(WasmEngines, TestVm, testing::ValuesIn(getWasmEngines()),
+                         [](const testing::TestParamInfo<std::string> &info) {
+                           return info.param;
+                         });
+
+TEST_P(TestVm, MallocNoHostcalls) {
+  if (engine_ != "v8") {
+    return;
+  }
+  auto source = readTestWasmFile("bad_malloc.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  uint64_t ptr = 0;
+  void *result = wasm.allocMemory(0x1000, &ptr);
+  EXPECT_NE(result, nullptr);
+  EXPECT_FALSE(wasm.isFailed());
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogEmpty());
+  // Check integration logs.
+  auto *integration = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
+  EXPECT_FALSE(integration->isErrorLogged("Function: proxy_on_memory_allocate failed"));
+  EXPECT_FALSE(integration->isErrorLogged("restricted_callback"));
+}
+
+TEST_P(TestVm, MallocWithLog) {
+  if (engine_ != "v8") {
+    return;
+  }
+  auto source = readTestWasmFile("bad_malloc.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  uint64_t ptr = 0;
+  // 0xAAAA => hostcall to proxy_log (allowed).
+  void *result = wasm.allocMemory(0xAAAA, &ptr);
+  EXPECT_NE(result, nullptr);
+  EXPECT_FALSE(wasm.isFailed());
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogged("this is fine"));
+  // Check integration logs.
+  auto *integration = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
+  EXPECT_FALSE(integration->isErrorLogged("Function: proxy_on_memory_allocate failed"));
+  EXPECT_FALSE(integration->isErrorLogged("restricted_callback"));
+}
+
+TEST_P(TestVm, MallocWithHostcall) {
+  if (engine_ != "v8") {
+    return;
+  }
+  auto source = readTestWasmFile("bad_malloc.wasm");
+  ASSERT_FALSE(source.empty());
+  auto wasm = TestWasm(std::move(vm_));
+  ASSERT_TRUE(wasm.load(source, false));
+  ASSERT_TRUE(wasm.initialize());
+
+  uint64_t ptr = 0;
+  // 0xBBBB => hostcall to proxy_done (not allowed).
+  void *result = wasm.allocMemory(0xBBBB, &ptr);
+  EXPECT_EQ(result, nullptr);
+  EXPECT_TRUE(wasm.isFailed());
+
+  // Check application logs.
+  auto *context = dynamic_cast<TestContext *>(wasm.vm_context());
+  EXPECT_TRUE(context->isLogEmpty());
+  // Check integration logs.
+  auto *integration = dynamic_cast<TestIntegration *>(wasm.wasm_vm()->integration().get());
+  EXPECT_TRUE(integration->isErrorLogged("Function: proxy_on_memory_allocate failed"));
+  EXPECT_TRUE(integration->isErrorLogged("restricted_callback"));
+}
+
+} // namespace proxy_wasm
diff --git a/test/stop_iteration_test.cc b/test/stop_iteration_test.cc
new file mode 100644
index 000000000..9ff443f24
--- /dev/null
+++ b/test/stop_iteration_test.cc
@@ -0,0 +1,81 @@
+// Copyright 2025 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "gtest/gtest.h"
+#include "include/proxy-wasm/wasm.h"
+#include "test/utility.h"
+
+namespace proxy_wasm {
+
+INSTANTIATE_TEST_SUITE_P(WasmEngines, TestVm, testing::ValuesIn(getWasmEngines()),
+                         [](const testing::TestParamInfo<std::string> &info) {
+                           return info.param;
+                         });
+
+// TestVm is parameterized for each engine and creates a VM on construction.
+TEST_P(TestVm, AllowOnHeadersStopIteration) {
+  // Read the wasm source.
+  auto source = readTestWasmFile("stop_iteration.wasm");
+  ASSERT_FALSE(source.empty());
+
+  // Create a WasmBase and load the plugin.
+  auto wasm = std::make_shared<TestWasm>(std::move(vm_));
+  ASSERT_TRUE(wasm->load(source, /*allow_precompiled=*/false));
+  ASSERT_TRUE(wasm->initialize());
+
+  // Create a plugin.
+  const auto plugin = std::make_shared<PluginBase>(
+      /*name=*/"test", /*root_id=*/"", /*vm_id=*/"",
+      /*engine=*/wasm->wasm_vm()->getEngineName(), /*plugin_config=*/"",
+      /*fail_open=*/false, /*key=*/"");
+
+  // Create root context, call onStart() and onConfigure()
+  ContextBase *root_context = wasm->start(plugin);
+  ASSERT_TRUE(root_context != nullptr);
+  ASSERT_TRUE(wasm->configure(root_context, plugin));
+
+  auto wasm_handle = std::make_shared<WasmHandleBase>(wasm);
+  auto plugin_handle = std::make_shared<PluginHandleBase>(wasm_handle, plugin);
+
+  // By default, stream context onRequestHeaders and onResponseHeaders
+  // translates FilterHeadersStatus::StopIteration to
+  // FilterHeadersStatus::StopAllIterationAndWatermark.
+  {
+    auto stream_context = TestContext(wasm.get(), root_context->id(), plugin_handle);
+    stream_context.onCreate();
+    EXPECT_EQ(stream_context.onRequestHeaders(/*headers=*/0, /*end_of_stream=*/false),
+              FilterHeadersStatus::StopAllIterationAndWatermark);
+    EXPECT_EQ(stream_context.onResponseHeaders(/*headers=*/0, /*end_of_stream=*/false),
+              FilterHeadersStatus::StopAllIterationAndWatermark);
+    stream_context.onDone();
+    stream_context.onDelete();
+  }
+  ASSERT_FALSE(wasm->isFailed());
+
+  // Create a stream context that propagates FilterHeadersStatus::StopIteration.
+  {
+    auto stream_context = TestContext(wasm.get(), root_context->id(), plugin_handle);
+    stream_context.set_allow_on_headers_stop_iteration(true);
+    stream_context.onCreate();
+    EXPECT_EQ(stream_context.onRequestHeaders(/*headers=*/0, /*end_of_stream=*/false),
+              FilterHeadersStatus::StopIteration);
+    EXPECT_EQ(stream_context.onResponseHeaders(/*headers=*/0, /*end_of_stream=*/false),
+              FilterHeadersStatus::StopIteration);
+    stream_context.onDone();
+    stream_context.onDelete();
+  }
+  ASSERT_FALSE(wasm->isFailed());
+}
+
+} // namespace proxy_wasm
diff --git a/test/test_data/BUILD b/test/test_data/BUILD
index 83f781f00..e5ecd439e 100644
--- a/test/test_data/BUILD
+++ b/test/test_data/BUILD
@@ -1,4 +1,19 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 load("@proxy_wasm_cpp_host//bazel:wasm.bzl", "wasm_rust_binary")
+load("@proxy_wasm_cpp_sdk//bazel:defs.bzl", "proxy_wasm_cc_binary")
 
 licenses(["notice"])  # Apache 2
 
@@ -27,6 +42,11 @@ wasm_rust_binary(
     ],
 )
 
+wasm_rust_binary(
+    name = "bad_malloc.wasm",
+    srcs = ["bad_malloc.rs"],
+)
+
 wasm_rust_binary(
     name = "callback.wasm",
     srcs = ["callback.rs"],
@@ -38,8 +58,8 @@ wasm_rust_binary(
 )
 
 wasm_rust_binary(
-    name = "infinite_loop.wasm",
-    srcs = ["infinite_loop.rs"],
+    name = "resource_limits.wasm",
+    srcs = ["resource_limits.rs"],
 )
 
 wasm_rust_binary(
@@ -53,3 +73,24 @@ wasm_rust_binary(
     srcs = ["clock.rs"],
     wasi = True,
 )
+
+wasm_rust_binary(
+    name = "random.wasm",
+    srcs = ["random.rs"],
+    wasi = True,
+)
+
+proxy_wasm_cc_binary(
+    name = "canary_check.wasm",
+    srcs = ["canary_check.cc"],
+)
+
+proxy_wasm_cc_binary(
+    name = "http_logging.wasm",
+    srcs = ["http_logging.cc"],
+)
+
+proxy_wasm_cc_binary(
+    name = "stop_iteration.wasm",
+    srcs = ["stop_iteration.cc"],
+)
diff --git a/test/test_data/bad_malloc.rs b/test/test_data/bad_malloc.rs
new file mode 100644
index 000000000..43c60da02
--- /dev/null
+++ b/test/test_data/bad_malloc.rs
@@ -0,0 +1,47 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+use std::mem::MaybeUninit;
+
+extern "C" {
+    fn proxy_log(level: u32, message_data: *const u8, message_size: usize) -> u32;
+    fn proxy_done() -> u32;
+}
+
+#[no_mangle]
+pub extern "C" fn proxy_abi_version_0_2_0() {}
+
+#[no_mangle]
+pub extern "C" fn proxy_on_memory_allocate(size: usize) -> *mut u8 {
+    let mut vec: Vec<MaybeUninit<u8>> = Vec::with_capacity(size);
+    unsafe {
+        vec.set_len(size);
+    }
+    match size {
+        0xAAAA => {
+            let message = "this is fine";
+            unsafe {
+                proxy_log(0, message.as_ptr(), message.len());
+            }
+        }
+        0xBBBB => {
+            unsafe {
+                proxy_done();
+            }
+        }
+        _ => {}
+    }
+    let slice = vec.into_boxed_slice();
+    Box::into_raw(slice) as *mut u8
+}
diff --git a/test/test_data/canary_check.cc b/test/test_data/canary_check.cc
new file mode 100644
index 000000000..38cf8b410
--- /dev/null
+++ b/test/test_data/canary_check.cc
@@ -0,0 +1,52 @@
+// Copyright 2021 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include <string>
+#include <string_view>
+#include <unordered_map>
+
+#include "proxy_wasm_intrinsics.h"
+
+class CanaryCheckRootContext1 : public RootContext {
+public:
+  explicit CanaryCheckRootContext1(uint32_t id, std::string_view root_id)
+      : RootContext(id, root_id) {}
+  bool onConfigure(size_t s) override {
+    LOG_TRACE("onConfigure: root_id_1");
+    return s != 0;
+  }
+};
+
+class CanaryCheckContext : public Context {
+public:
+  explicit CanaryCheckContext(uint32_t id, RootContext *root) : Context(id, root) {}
+};
+
+class CanaryCheckRootContext2 : public RootContext {
+public:
+  explicit CanaryCheckRootContext2(uint32_t id, std::string_view root_id)
+      : RootContext(id, root_id) {}
+  bool onConfigure(size_t s) override {
+    LOG_TRACE("onConfigure: root_id_2");
+    return s != 0;
+  }
+};
+
+static RegisterContextFactory register_CanaryCheckContext1(CONTEXT_FACTORY(CanaryCheckContext),
+                                                           ROOT_FACTORY(CanaryCheckRootContext1),
+                                                           "root_id_1");
+
+static RegisterContextFactory register_CanaryCheckContext2(CONTEXT_FACTORY(CanaryCheckContext),
+                                                           ROOT_FACTORY(CanaryCheckRootContext2),
+                                                           "root_id_2");
diff --git a/test/test_data/http_logging.cc b/test/test_data/http_logging.cc
new file mode 100644
index 000000000..e25b410c2
--- /dev/null
+++ b/test/test_data/http_logging.cc
@@ -0,0 +1,37 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "proxy_wasm_intrinsics.h"
+
+class LoggingContext : public Context {
+public:
+  explicit LoggingContext(uint32_t id, RootContext *root) : Context(id, root) {}
+
+  void onCreate() override { LOG_INFO("onCreate called"); }
+  void onDelete() override { LOG_INFO("onDelete called"); }
+  void onDone() override { LOG_INFO("onDone called"); }
+
+  FilterHeadersStatus onRequestHeaders(uint32_t headers, bool end_of_stream) override {
+    LOG_INFO("onRequestHeaders called");
+    return FilterHeadersStatus::Continue;
+  }
+
+  FilterHeadersStatus onResponseHeaders(uint32_t headers, bool end_of_stream) override {
+    LOG_INFO("onResponseHeaders called");
+    return FilterHeadersStatus::Continue;
+  }
+};
+
+static RegisterContextFactory register_StaticContext(CONTEXT_FACTORY(LoggingContext),
+                                                     ROOT_FACTORY(RootContext));
diff --git a/test/test_data/random.rs b/test/test_data/random.rs
new file mode 100644
index 000000000..271434bb7
--- /dev/null
+++ b/test/test_data/random.rs
@@ -0,0 +1,38 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#[no_mangle]
+pub extern "C" fn proxy_abi_version_0_2_0() {}
+
+#[no_mangle]
+pub extern "C" fn proxy_on_memory_allocate(_: usize) -> *mut u8 {
+    std::ptr::null_mut()
+}
+
+// TODO(PiotrSikora): switch to "getrandom" crate.
+pub mod wasi_snapshot_preview1 {
+    #[link(wasm_import_module = "wasi_snapshot_preview1")]
+    extern "C" {
+        pub fn random_get(buf: *mut u8, buf_len: usize) -> u16;
+    }
+}
+
+#[no_mangle]
+pub extern "C" fn run(size: usize) {
+    let mut buf: Vec<u8> = Vec::with_capacity(size);
+    match unsafe { wasi_snapshot_preview1::random_get(buf.as_mut_ptr(), size) } {
+        0 => println!("random_get({}) succeeded.", size),
+        _ => println!("random_get({}) failed.", size),
+    }
+}
diff --git a/test/test_data/infinite_loop.rs b/test/test_data/resource_limits.rs
similarity index 85%
rename from test/test_data/infinite_loop.rs
rename to test/test_data/resource_limits.rs
index 371443e68..4b1d2789e 100644
--- a/test/test_data/infinite_loop.rs
+++ b/test/test_data/resource_limits.rs
@@ -27,3 +27,11 @@ pub extern "C" fn infinite_loop() {
         _count += 1;
     }
 }
+
+#[no_mangle]
+pub extern "C" fn infinite_memory() {
+    let mut vec = Vec::new();
+    loop {
+       vec.push(Vec::<u32>::with_capacity(16384));
+    }
+}
diff --git a/test/test_data/stop_iteration.cc b/test/test_data/stop_iteration.cc
new file mode 100644
index 000000000..55594285f
--- /dev/null
+++ b/test/test_data/stop_iteration.cc
@@ -0,0 +1,31 @@
+// Copyright 2025 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#include "proxy_wasm_intrinsics.h"
+
+class StopIterationContext : public Context {
+public:
+  explicit StopIterationContext(uint32_t id, RootContext *root) : Context(id, root) {}
+
+  FilterHeadersStatus onRequestHeaders(uint32_t headers, bool end_of_stream) override {
+    return FilterHeadersStatus::StopIteration;
+  }
+
+  FilterHeadersStatus onResponseHeaders(uint32_t headers, bool end_of_stream) override {
+    return FilterHeadersStatus::StopIteration;
+  }
+};
+
+static RegisterContextFactory register_StaticContext(CONTEXT_FACTORY(StopIterationContext),
+                                                     ROOT_FACTORY(RootContext));
diff --git a/test/utility.cc b/test/utility.cc
index 1686a0e14..7bdf9d2ad 100644
--- a/test/utility.cc
+++ b/test/utility.cc
@@ -16,22 +16,23 @@
 
 namespace proxy_wasm {
 
+std::string TestContext::global_log_;
+
 std::vector<std::string> getWasmEngines() {
   std::vector<std::string> engines = {
 #if defined(PROXY_WASM_HOST_ENGINE_V8)
-    "v8",
+      "v8",
 #endif
 #if defined(PROXY_WASM_HOST_ENGINE_WAMR)
-    "wamr",
+      "wamr",
 #endif
-#if defined(PROXY_WASM_HOST_ENGINE_WASMTIME)
-    "wasmtime",
+#if defined(PROXY_WASM_HOST_ENGINE_WASMEDGE)
+      "wasmedge",
 #endif
-#if defined(PROXY_WASM_HOST_ENGINE_WAVM)
-    "wavm",
+#if defined(PROXY_WASM_HOST_ENGINE_WASMTIME)
+      "wasmtime",
 #endif
-    ""
-  };
+      ""};
   engines.pop_back();
   return engines;
 }
diff --git a/test/utility.h b/test/utility.h
index d5d2d2f42..0eb743037 100644
--- a/test/utility.h
+++ b/test/utility.h
@@ -27,12 +27,12 @@
 #if defined(PROXY_WASM_HOST_ENGINE_V8)
 #include "include/proxy-wasm/v8.h"
 #endif
-#if defined(PROXY_WASM_HOST_ENGINE_WAVM)
-#include "include/proxy-wasm/wavm.h"
-#endif
 #if defined(PROXY_WASM_HOST_ENGINE_WASMTIME)
 #include "include/proxy-wasm/wasmtime.h"
 #endif
+#if defined(PROXY_WASM_HOST_ENGINE_WASMEDGE)
+#include "include/proxy-wasm/wasmedge.h"
+#endif
 #if defined(PROXY_WASM_HOST_ENGINE_WAMR)
 #include "include/proxy-wasm/wamr.h"
 #endif
@@ -88,16 +88,37 @@ class TestIntegration : public WasmVmIntegration {
 class TestContext : public ContextBase {
 public:
   TestContext(WasmBase *wasm) : ContextBase(wasm) {}
+  TestContext(WasmBase *wasm, const std::shared_ptr<PluginBase> &plugin)
+      : ContextBase(wasm, plugin) {}
+  TestContext(WasmBase *wasm, uint32_t parent_context_id,
+              std::shared_ptr<PluginHandleBase> &plugin_handle)
+      : ContextBase(wasm, parent_context_id, plugin_handle) {}
 
   WasmResult log(uint32_t /*log_level*/, std::string_view message) override {
-    log_ += std::string(message) + "\n";
+    auto new_log = std::string(message) + "\n";
+    log_ += new_log;
+    global_log_ += new_log;
     return WasmResult::Ok;
   }
 
+  WasmResult getProperty(std::string_view path, std::string *result) override {
+    if (path == "plugin_root_id") {
+      *result = root_id_;
+      return WasmResult::Ok;
+    }
+    return unimplemented();
+  }
+
   bool isLogEmpty() { return log_.empty(); }
 
   bool isLogged(std::string_view message) { return log_.find(message) != std::string::npos; }
 
+  static bool isGlobalLogged(std::string_view message) {
+    return global_log_.find(message) != std::string::npos;
+  }
+
+  static void resetGlobalLog() { global_log_ = ""; }
+
   uint64_t getCurrentTimeNanoseconds() override {
     return std::chrono::duration_cast<std::chrono::nanoseconds>(
                std::chrono::system_clock::now().time_since_epoch())
@@ -109,54 +130,69 @@ class TestContext : public ContextBase {
         .count();
   }
 
+  void set_allow_on_headers_stop_iteration(bool allow) { allow_on_headers_stop_iteration_ = allow; }
+
 private:
   std::string log_;
+  static std::string global_log_;
 };
 
 class TestWasm : public WasmBase {
 public:
-  TestWasm(std::unique_ptr<WasmVm> wasm_vm, std::unordered_map<std::string, std::string> envs = {})
-      : WasmBase(std::move(wasm_vm), "", "", "", std::move(envs), {}) {}
+  TestWasm(std::unique_ptr<WasmVm> wasm_vm, std::unordered_map<std::string, std::string> envs = {},
+           std::string_view vm_id = "", std::string_view vm_configuration = "",
+           std::string_view vm_key = "")
+      : WasmBase(std::move(wasm_vm), vm_id, vm_configuration, vm_key, std::move(envs), {}) {}
+
+  TestWasm(const std::shared_ptr<WasmHandleBase> &base_wasm_handle, const WasmVmFactory &factory)
+      : WasmBase(base_wasm_handle, factory) {}
 
   ContextBase *createVmContext() override { return new TestContext(this); };
+
+  ContextBase *createRootContext(const std::shared_ptr<PluginBase> &plugin) override {
+    return new TestContext(this, plugin);
+  }
 };
 
 class TestVm : public testing::TestWithParam<std::string> {
 public:
   TestVm() {
     engine_ = GetParam();
-    vm_ = newVm();
+    vm_ = makeVm(engine_);
   }
 
-  std::unique_ptr<proxy_wasm::WasmVm> newVm() {
+  static std::unique_ptr<proxy_wasm::WasmVm> makeVm(const std::string &engine) {
     std::unique_ptr<proxy_wasm::WasmVm> vm;
-    if (engine_.empty()) {
+    if (engine.empty()) {
       ADD_FAILURE() << "engine must not be empty";
 #if defined(PROXY_WASM_HOST_ENGINE_V8)
-    } else if (engine_ == "v8") {
+    } else if (engine == "v8") {
       vm = proxy_wasm::createV8Vm();
 #endif
-#if defined(PROXY_WASM_HOST_ENGINE_WAVM)
-    } else if (engine_ == "wavm") {
-      vm = proxy_wasm::createWavmVm();
-#endif
 #if defined(PROXY_WASM_HOST_ENGINE_WASMTIME)
-    } else if (engine_ == "wasmtime") {
+    } else if (engine == "wasmtime") {
       vm = proxy_wasm::createWasmtimeVm();
 #endif
+#if defined(PROXY_WASM_HOST_ENGINE_WASMEDGE)
+    } else if (engine == "wasmedge") {
+      vm = proxy_wasm::createWasmEdgeVm();
+#endif
 #if defined(PROXY_WASM_HOST_ENGINE_WAMR)
-    } else if (engine_ == "wamr") {
+    } else if (engine == "wamr") {
       vm = proxy_wasm::createWamrVm();
 #endif
     } else {
-      ADD_FAILURE() << "compiled without support for the requested \"" << engine_ << "\" engine";
+      ADD_FAILURE() << "compiled without support for the requested \"" << engine << "\" engine";
     }
     vm->integration() = std::make_unique<TestIntegration>();
     return vm;
-  };
+  }
 
   std::unique_ptr<proxy_wasm::WasmVm> vm_;
   std::string engine_;
 };
 
+// TODO: remove when #412 is fixed.
+GTEST_ALLOW_UNINSTANTIATED_PARAMETERIZED_TEST(TestVm);
+
 } // namespace proxy_wasm
diff --git a/test/wasm_test.cc b/test/wasm_test.cc
index 51026b559..2a3e60cc4 100644
--- a/test/wasm_test.cc
+++ b/test/wasm_test.cc
@@ -14,10 +14,14 @@
 
 #include "include/proxy-wasm/wasm.h"
 
+#include <unordered_set>
+
 #include "gtest/gtest.h"
 
 #include "test/utility.h"
 
+#include "src/wasm.h"
+
 namespace proxy_wasm {
 
 INSTANTIATE_TEST_SUITE_P(WasmEngines, TestVm, testing::ValuesIn(getWasmEngines()),
@@ -41,7 +45,7 @@ TEST_P(TestVm, GetOrCreateThreadLocalWasmFailCallbacks) {
   // Define callbacks.
   WasmHandleFactory wasm_handle_factory =
       [this, vm_id, vm_config](std::string_view vm_key) -> std::shared_ptr<WasmHandleBase> {
-    auto base_wasm = std::make_shared<WasmBase>(newVm(), vm_id, vm_config, vm_key,
+    auto base_wasm = std::make_shared<WasmBase>(makeVm(engine_), vm_id, vm_config, vm_key,
                                                 std::unordered_map<std::string, std::string>{},
                                                 AllowedCapabilitiesMap{});
     return std::make_shared<WasmHandleBase>(base_wasm);
@@ -50,8 +54,8 @@ TEST_P(TestVm, GetOrCreateThreadLocalWasmFailCallbacks) {
   WasmHandleCloneFactory wasm_handle_clone_factory =
       [this](const std::shared_ptr<WasmHandleBase> &base_wasm_handle)
       -> std::shared_ptr<WasmHandleBase> {
-    auto wasm = std::make_shared<WasmBase>(base_wasm_handle,
-                                           [this]() -> std::unique_ptr<WasmVm> { return newVm(); });
+    auto wasm = std::make_shared<WasmBase>(
+        base_wasm_handle, [this]() -> std::unique_ptr<WasmVm> { return makeVm(engine_); });
     return std::make_shared<WasmHandleBase>(wasm);
   };
 
@@ -113,4 +117,211 @@ TEST_P(TestVm, GetOrCreateThreadLocalWasmFailCallbacks) {
   ASSERT_NE(thread_local_plugin3->wasm(), thread_local_plugin2->wasm());
 }
 
+// Tests the canary is always applied when making a call `createWasm`
+TEST_P(TestVm, AlwaysApplyCanary) {
+  // Use different root_id, but the others are the same
+  const auto *const plugin_name = "plugin_name";
+
+  const std::string root_ids[2] = {"root_id_1", "root_id_2"};
+  const std::string vm_ids[2] = {"vm_id_1", "vm_id_2"};
+  const std::string vm_configs[2] = {"vm_config_1", "vm_config_2"};
+  const std::string plugin_configs[3] = {"plugin_config_1", "plugin_config_2",
+                                         /* raising the error */ ""};
+  const std::string plugin_keys[2] = {"plugin_key_1", "plugin_key_2"};
+  const auto fail_open = false;
+
+  // Define common callbacks
+  auto canary_count = 0;
+  WasmHandleCloneFactory wasm_handle_clone_factory_for_canary =
+      [&canary_count, this](const std::shared_ptr<WasmHandleBase> &base_wasm_handle)
+      -> std::shared_ptr<WasmHandleBase> {
+    auto wasm = std::make_shared<TestWasm>(
+        base_wasm_handle, [this]() -> std::unique_ptr<WasmVm> { return makeVm(engine_); });
+    canary_count++;
+    return std::make_shared<WasmHandleBase>(wasm);
+  };
+
+  PluginHandleFactory plugin_handle_factory =
+      [](const std::shared_ptr<WasmHandleBase> &base_wasm,
+         const std::shared_ptr<PluginBase> &plugin) -> std::shared_ptr<PluginHandleBase> {
+    return std::make_shared<PluginHandleBase>(base_wasm, plugin);
+  };
+
+  // Read the minimal loadable binary.
+  auto source = readTestWasmFile("canary_check.wasm");
+
+  WasmHandleFactory wasm_handle_factory_baseline =
+      [this, vm_ids, vm_configs](std::string_view vm_key) -> std::shared_ptr<WasmHandleBase> {
+    auto base_wasm =
+        std::make_shared<TestWasm>(makeVm(engine_), std::unordered_map<std::string, std::string>(),
+                                   vm_ids[0], vm_configs[0], vm_key);
+    return std::make_shared<WasmHandleBase>(base_wasm);
+  };
+
+  // Create a baseline plugin.
+  const auto plugin_baseline = std::make_shared<PluginBase>(
+      plugin_name, root_ids[0], vm_ids[0], engine_, plugin_configs[0], fail_open, plugin_keys[0]);
+
+  const auto vm_key_baseline = makeVmKey(vm_ids[0], vm_configs[0], "common_code");
+  // Create a base Wasm by createWasm.
+  auto wasm_handle_baseline =
+      createWasm(vm_key_baseline, source, plugin_baseline, wasm_handle_factory_baseline,
+                 wasm_handle_clone_factory_for_canary, false);
+  ASSERT_TRUE(wasm_handle_baseline && wasm_handle_baseline->wasm());
+
+  // Check if it ran for baseline root context
+  EXPECT_TRUE(TestContext::isGlobalLogged("onConfigure: " + root_ids[0]));
+  // For each create Wasm, canary should be done.
+  EXPECT_EQ(canary_count, 1);
+
+  bool first = true;
+  std::unordered_set<std::shared_ptr<WasmHandleBase>> reference_holder;
+
+  for (const auto &root_id : root_ids) {
+    for (const auto &vm_id : vm_ids) {
+      for (const auto &vm_config : vm_configs) {
+        for (const auto &plugin_key : plugin_keys) {
+          for (const auto &plugin_config : plugin_configs) {
+            canary_count = 0;
+            TestContext::resetGlobalLog();
+            WasmHandleFactory wasm_handle_factory_comp =
+                [this, vm_id,
+                 vm_config](std::string_view vm_key) -> std::shared_ptr<WasmHandleBase> {
+              auto base_wasm = std::make_shared<TestWasm>(
+                  makeVm(engine_), std::unordered_map<std::string, std::string>(), vm_id, vm_config,
+                  vm_key);
+              return std::make_shared<WasmHandleBase>(base_wasm);
+            };
+            const auto plugin_comp = std::make_shared<PluginBase>(
+                plugin_name, root_id, vm_id, engine_, plugin_config, fail_open, plugin_key);
+            const auto vm_key = makeVmKey(vm_id, vm_config, "common_code");
+            // Create a base Wasm by createWasm.
+            auto wasm_handle_comp =
+                createWasm(vm_key, source, plugin_comp, wasm_handle_factory_comp,
+                           wasm_handle_clone_factory_for_canary, false);
+            // Validate that canarying is cached for the first baseline plugin variant.
+            if (first) {
+              first = false;
+              EXPECT_EQ(canary_count, 0);
+            } else {
+              // For each create Wasm, canary should be done.
+              EXPECT_EQ(canary_count, 1);
+              EXPECT_TRUE(TestContext::isGlobalLogged("onConfigure: " + root_id));
+            }
+
+            if (plugin_config.empty()) {
+              // canary_check.wasm should raise the error at `onConfigure` in canary when the
+              // `plugin_config` is empty string.
+              EXPECT_EQ(wasm_handle_comp, nullptr);
+              continue;
+            }
+
+            ASSERT_TRUE(wasm_handle_comp && wasm_handle_comp->wasm());
+            // Keep the reference of wasm_handle_comp in order to utilize the WasmHandleBase
+            // cache of createWasm. If we don't keep the reference, WasmHandleBase and VM will be
+            // destroyed for each iteration.
+            reference_holder.insert(wasm_handle_comp);
+
+            // Wasm VM is unique for vm_key.
+            if (vm_key == vm_key_baseline) {
+              EXPECT_EQ(wasm_handle_baseline->wasm(), wasm_handle_comp->wasm());
+            } else {
+              EXPECT_NE(wasm_handle_baseline->wasm(), wasm_handle_comp->wasm());
+            }
+
+            // plugin->key() is unique for root_id + plugin_config + plugin_key.
+            // plugin->key() is used as an identifier of local-specific plugins as well.
+            if (root_id == root_ids[0] && plugin_config == plugin_configs[0] &&
+                plugin_key == plugin_keys[0]) {
+              EXPECT_EQ(plugin_baseline->key(), plugin_comp->key());
+            } else {
+              EXPECT_NE(plugin_baseline->key(), plugin_comp->key());
+            }
+          }
+        }
+      }
+    }
+  }
+}
+
+// Check that there are no stale thread-local cache keys (eventually)
+TEST_P(TestVm, CleanupThreadLocalCacheKeys) {
+  const auto *const plugin_name = "plugin_name";
+  const auto *const root_id = "root_id";
+  const auto *const vm_id = "vm_id";
+  const auto *const vm_config = "vm_config";
+  const auto *const plugin_config = "plugin_config";
+  const auto fail_open = false;
+
+  WasmHandleFactory wasm_handle_factory =
+      [this, vm_id, vm_config](std::string_view vm_key) -> std::shared_ptr<WasmHandleBase> {
+    auto base_wasm = std::make_shared<WasmBase>(makeVm(engine_), vm_id, vm_config, vm_key,
+                                                std::unordered_map<std::string, std::string>{},
+                                                AllowedCapabilitiesMap{});
+    return std::make_shared<WasmHandleBase>(base_wasm);
+  };
+
+  WasmHandleCloneFactory wasm_handle_clone_factory =
+      [this](const std::shared_ptr<WasmHandleBase> &base_wasm_handle)
+      -> std::shared_ptr<WasmHandleBase> {
+    auto wasm = std::make_shared<WasmBase>(
+        base_wasm_handle, [this]() -> std::unique_ptr<WasmVm> { return makeVm(engine_); });
+    return std::make_shared<WasmHandleBase>(wasm);
+  };
+
+  PluginHandleFactory plugin_handle_factory =
+      [](const std::shared_ptr<WasmHandleBase> &base_wasm,
+         const std::shared_ptr<PluginBase> &plugin) -> std::shared_ptr<PluginHandleBase> {
+    return std::make_shared<PluginHandleBase>(base_wasm, plugin);
+  };
+
+  // Read the minimal loadable binary.
+  auto source = readTestWasmFile("abi_export.wasm");
+
+  // Simulate a plugin lifetime.
+  const auto plugin1 = std::make_shared<PluginBase>(plugin_name, root_id, vm_id, engine_,
+                                                    plugin_config, fail_open, "plugin_1");
+  auto base_wasm_handle1 =
+      createWasm("vm_1", source, plugin1, wasm_handle_factory, wasm_handle_clone_factory, false);
+  ASSERT_TRUE(base_wasm_handle1 && base_wasm_handle1->wasm());
+
+  auto local_plugin1 = getOrCreateThreadLocalPlugin(
+      base_wasm_handle1, plugin1, wasm_handle_clone_factory, plugin_handle_factory);
+  ASSERT_TRUE(local_plugin1 && local_plugin1->plugin());
+  local_plugin1.reset();
+
+  auto stale_plugins_keys = staleLocalPluginsKeysForTesting();
+  EXPECT_EQ(1, stale_plugins_keys.size());
+
+  // Now we create another plugin with a slightly different key and expect that there are no stale
+  // thread-local cache entries.
+  const auto plugin2 = std::make_shared<PluginBase>(plugin_name, root_id, vm_id, engine_,
+                                                    plugin_config, fail_open, "plugin_2");
+  auto local_plugin2 = getOrCreateThreadLocalPlugin(
+      base_wasm_handle1, plugin2, wasm_handle_clone_factory, plugin_handle_factory);
+  ASSERT_TRUE(local_plugin2 && local_plugin2->plugin());
+
+  stale_plugins_keys = staleLocalPluginsKeysForTesting();
+  EXPECT_TRUE(stale_plugins_keys.empty());
+
+  // Trigger deletion of the thread-local WasmVM cloned from base_wasm_handle1 by freeing objects
+  // referencing it.
+  local_plugin2.reset();
+
+  auto stale_wasms_keys = staleLocalWasmsKeysForTesting();
+  EXPECT_EQ(1, stale_wasms_keys.size());
+
+  // Create another base WASM handle and invoke WASM thread-local cache key cleanup.
+  auto base_wasm_handle2 =
+      createWasm("vm_2", source, plugin2, wasm_handle_factory, wasm_handle_clone_factory, false);
+  ASSERT_TRUE(base_wasm_handle2 && base_wasm_handle2->wasm());
+
+  auto local_plugin3 = getOrCreateThreadLocalPlugin(
+      base_wasm_handle2, plugin2, wasm_handle_clone_factory, plugin_handle_factory);
+  ASSERT_TRUE(local_plugin3 && local_plugin3->plugin());
+
+  stale_wasms_keys = staleLocalWasmsKeysForTesting();
+  EXPECT_TRUE(stale_wasms_keys.empty());
+}
+
 } // namespace proxy_wasm
diff --git a/test/wasm_vm_test.cc b/test/wasm_vm_test.cc
index d29437c9b..346fe2a07 100644
--- a/test/wasm_vm_test.cc
+++ b/test/wasm_vm_test.cc
@@ -30,13 +30,44 @@ INSTANTIATE_TEST_SUITE_P(WasmEngines, TestVm, testing::ValuesIn(getWasmEngines()
                            return info.param;
                          });
 
+TEST_P(TestVm, Init) {
+  auto time1 = std::chrono::steady_clock::now();
+  vm_->warm();
+  auto time2 = std::chrono::steady_clock::now();
+  vm_->warm();
+  auto time3 = std::chrono::steady_clock::now();
+
+  auto cold = std::chrono::duration_cast<std::chrono::nanoseconds>(time2 - time1).count();
+  auto warm = std::chrono::duration_cast<std::chrono::nanoseconds>(time3 - time2).count();
+
+  std::cout << "[" << engine_ << "] \"cold\" engine time: " << cold << "ns" << std::endl;
+  std::cout << "[" << engine_ << "] \"warm\" engine time: " << warm << "ns" << std::endl;
+
+  // Default warm time in nanoseconds.
+  int warm_time_ns_limit = 10000;
+
+#if defined(__linux__) && defined(__s390x__)
+  // Linux 390x is significantly slower, so we use a more lenient limit.
+  warm_time_ns_limit = 75000;
+#endif
+
+  // Verify that getting a "warm" engine takes less than 10us.
+  EXPECT_LE(warm, warm_time_ns_limit);
+
+  // Verify that getting a "warm" engine takes at least 50x less time than getting a "cold" one.
+  // We skip NullVM because warm() is a noop.
+  if (engine_ == "null") {
+    std::cout << "Skipping warm() performance assertions for NullVM." << std::endl;
+    return;
+  }
+  EXPECT_LE(warm * 50, cold);
+}
+
 TEST_P(TestVm, Basic) {
-  if (engine_ == "wamr") {
+  if (engine_ == "wasmedge") {
     EXPECT_EQ(vm_->cloneable(), proxy_wasm::Cloneable::NotCloneable);
-  } else if (engine_ == "wasmtime" || engine_ == "v8") {
+  } else if (engine_ == "wasmtime" || engine_ == "v8" || engine_ == "wamr") {
     EXPECT_EQ(vm_->cloneable(), proxy_wasm::Cloneable::CompiledBytecode);
-  } else if (engine_ == "wavm") {
-    EXPECT_EQ(vm_->cloneable(), proxy_wasm::Cloneable::InstantiatedModule);
   } else {
     FAIL();
   }
@@ -53,7 +84,8 @@ TEST_P(TestVm, Memory) {
   ASSERT_TRUE(vm_->getWord(0x2000, &word));
   ASSERT_EQ(100, word.u64_);
 
-  uint32_t data[2] = {htowasm(static_cast<uint32_t>(-1)), htowasm(200)};
+  uint32_t data[2] = {htowasm(static_cast<uint32_t>(-1), vm_->usesWasmByteOrder()),
+                      htowasm(200, vm_->usesWasmByteOrder())};
   ASSERT_TRUE(vm_->setMemory(0x200, sizeof(int32_t) * 2, static_cast<void *>(data)));
   ASSERT_TRUE(vm_->getWord(0x200, &word));
   ASSERT_EQ(-1, static_cast<int32_t>(word.u64_));
@@ -90,14 +122,10 @@ TEST_P(TestVm, Clone) {
 
 #if defined(__linux__) && defined(__x86_64__)
 
-TEST_P(TestVm, CloneUntilOutOfMemory) {
+TEST_P(TestVm, DISABLED_CloneUntilOutOfMemory) {
   if (vm_->cloneable() == proxy_wasm::Cloneable::NotCloneable) {
     return;
   }
-  if (engine_ == "wavm") {
-    // TODO(PiotrSikora): Figure out why this fails on the CI.
-    return;
-  }
 
   auto source = readTestWasmFile("abi_export.wasm");
   ASSERT_TRUE(vm_->load(source, {}, {}));
diff --git a/tools/gen_compilation_database.py b/tools/gen_compilation_database.py
new file mode 100755
index 000000000..bff3d82d5
--- /dev/null
+++ b/tools/gen_compilation_database.py
@@ -0,0 +1,79 @@
+#!/usr/bin/env python3
+
+# Copyright 2016-2019 Envoy Project Authors
+# Copyright 2020 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import argparse
+import json
+import os
+import shlex
+import subprocess
+from pathlib import Path
+
+# This is copied from https://github.com/envoyproxy/envoy and remove unnecessary code.
+
+# This method is equivalent to https://github.com/grailbio/bazel-compilation-database/blob/master/generate.py
+def generate_compilation_database(args):
+    # We need to download all remote outputs for generated source code. This option lives here to override those
+    # specified in bazelrc.
+    bazel_startup_options = shlex.split(os.environ.get("BAZEL_STARTUP_OPTION_LIST", ""))
+    bazel_options = shlex.split(os.environ.get("BAZEL_BUILD_OPTION_LIST", "")) + [
+        "--remote_download_outputs=all",
+    ]
+
+    source_dir_targets = args.bazel_targets
+
+    subprocess.check_call(["bazel", *bazel_startup_options, "build"] + bazel_options + [
+        "--aspects=@bazel_compdb//:aspects.bzl%compilation_database_aspect",
+        "--output_groups=compdb_files,header_files"
+    ] + source_dir_targets)
+
+    execroot = subprocess.check_output(
+        ["bazel", *bazel_startup_options, "info", *bazel_options,
+         "execution_root"]).decode().strip()
+
+    db_entries = []
+    for db in Path(execroot).glob('**/*.compile_commands.json'):
+        db_entries.extend(json.loads(db.read_text()))
+
+    def replace_execroot_marker(db_entry):
+        if 'directory' in db_entry and db_entry['directory'] == '__EXEC_ROOT__':
+            db_entry['directory'] = execroot
+        if 'command' in db_entry:
+            db_entry['command'] = (
+                db_entry['command'].replace('-isysroot __BAZEL_XCODE_SDKROOT__', ''))
+        return db_entry
+
+    return list(map(replace_execroot_marker, db_entries))
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description='Generate JSON compilation database')
+    parser.add_argument('--include_external', action='https://github.com/store_true')
+    parser.add_argument('--include_genfiles', action='https://github.com/store_true')
+    parser.add_argument('--include_headers', action='https://github.com/store_true')
+    parser.add_argument('--include_all', action='https://github.com/store_true')
+    parser.add_argument(
+        '--system-clang',
+        action='https://github.com/store_true',
+        help=
+        'Use `clang++` instead of the bazel wrapper for commands. This may help if `clangd` cannot find/run the tools.'
+    )
+    parser.add_argument('bazel_targets', nargs='*', default=[])
+
+    args = parser.parse_args()
+    db = generate_compilation_database(args)
+
+    with open("compile_commands.json", "w") as db_file:
+        json.dump(db, db_file, indent=2)