Bump clvmr from 0.17.7 to 0.18.0

[dependabot]

Bumps clvmr from 0.17.7 to 0.18.0.

Release notes

Sourced from clvmr's releases.

0.18.0

What's Changed

• make sure the generated test cases are up-to-date by @​arvidn in Chia-Network/clvm_rs#779
• add build feature that disable fast-path optimizations in operators by @​arvidn in Chia-Network/clvm_rs#780
• prepare test_ops() to support more flags by @​arvidn in Chia-Network/clvm_rs#783
• minor simplification of op_sha256 by @​arvidn in Chia-Network/clvm_rs#784
• [CHIA-3823] 2026 serde format by @​richardkiss in Chia-Network/clvm_rs#708
• Fix benchmarks to exclude allocator-reset setup time from measurements by @​richardkiss in Chia-Network/clvm_rs#789
• [CHIA-4249] limit nesting depth of softfork in mempool mode by @​arvidn in Chia-Network/clvm_rs#794
• make modpow also honor the LIMITS flag by @​arvidn in Chia-Network/clvm_rs#799
• Upgrades by @​arvidn in Chia-Network/clvm_rs#801
• Update Managed Files by @​ChiaAutomation in Chia-Network/clvm_rs#800
• LIMITS have activated by @​arvidn in Chia-Network/clvm_rs#803
• bump version to 0.18.0 by @​arvidn in Chia-Network/clvm_rs#804

Full Changelog: Chia-Network/clvm_rs@0.17.7...0.18.0

Commits

• 15bad6b Merge pull request #804 from Chia-Network/bump-0.18.0
• 9e4784d bump version to 0.18.0
• 42a05f5 Merge pull request #803 from Chia-Network/limits-have-activated
• 68e3bd4 Merge branch 'main' into limits-have-activated
• 963ff71 Update Managed Files (#800)
• d6c4938 fix modpow fuzzer to tolerate failing on inputs too large
• 70386b2 update fuzzer to tolerate failures because of large inputs
• 7afb3ab fix run-program.py expectation of error messages
• d35aa68 update benchmark to work with LIMITS
• c14226a update test_large_operand to work with LIMITS being enabled
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
Upgrades the core CLVM interpreter used for run/brun/compile paths; LIMITS activation and mempool rule changes can alter which programs succeed or fail compared to 0.17.x.

Overview
Updates the clvmr dependency from 0.17.7 to 0.18.0 in Cargo.toml and refreshes the lockfile checksum; the pre-eval feature flag is unchanged.

This pulls in upstream CLVM runtime changes—notably activated LIMITS, mempool softfork nesting depth caps, and modpow honoring limits—so program execution and validation in this repo’s compiler/REPL tooling will follow the new semantics without any local Rust changes.

^{Reviewed by Cursor Bugbot for commit 21382c4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​clvmr@​0.18.0

View full report