Bump the rust group across 1 directory with 10 updates by dependabot[bot] · Pull Request #18 · suthat/owlwarden

dependabot · 2026-09-01T11:13:57Z

Bumps the rust group with 9 updates in the / directory:

Package	From	To
async-trait	`0.1.91`	`0.1.92`
thiserror	`2.0.19`	`2.0.20`
wasmtime	`36.0.14`	`38.0.4`
wat	`1.255.0`	`1.258.0`
anstream	`0.6.21`	`1.0.0`
sha2	`0.10.9`	`0.11.0`
futures-executor	`0.3.33`	`0.3.34`
napi-derive	`3.6.2`	`3.6.3`
napi-build	`2.4.0`	`2.4.1`

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

Resolve double_must_use clippy lint in generated code (#303)

Commits

82e7e9e Release 0.1.92
9a35cb8 Merge pull request #303 from dtolnay/mustuse
875ceec Resolve double_must_use clippy lint
62993a5 Raise minimum tested compiler to rust 1.88
See full diff in compare view

Updates thiserror from 2.0.19 to 2.0.20

Release notes

Sourced from thiserror's releases.

2.0.20

Suppress redundant_field_names clippy lint in generated code (#454)

Commits

b1d5db5 Release 2.0.20
c4c3ebd Merge pull request #454 from dtolnay/clippy
2266152 Suppress redundant_field_names clippy lint
2901cfd Raise minimum tested compiler to rust 1.88
aa9d91f Update ui tests for version 2.0.19
See full diff in compare view

Updates wasmtime from 36.0.14 to 38.0.4

Release notes

Sourced from wasmtime's releases.

v38.0.4

38.0.4

Released 2025-11-11.

Fixed

Prevent using shared memories with Memory. CVE-2025-64345

v38.0.3

38.0.3

Released 2025-10-24.

Fixed

Fix possible host crash with host-to-wasm component intrinsics CVE-2025-62711

v38.0.2: Release Wasmtime 38.0.2 (#11903)

38.0.2

Released 2025-10-21.

Changed

This repository is attempting to start out using GitHub's "Immutable Releases" feature with this release, and this'll be the first release, assuming all goes well, that has this enabled. #11901

Fixed

Fix compatibility with the Go runtime on Windows for exceptions. #11892

v38.0.1

38.0.1

Released 2025-10-20.

Fixed

Fixed some automation that went wrong with the 38.0.0 release.

v37.0.3

37.0.3

... (truncated)

Changelog

Sourced from wasmtime's changelog.

38.0.4

Released 2025-11-11.

Fixed

Prevent using shared memories with Memory. CVE-2025-64345

38.0.3

Released 2025-10-24.

Fixed

Fix possible host crash with host-to-wasm component intrinsics CVE-2025-62711

38.0.2

Released 2025-10-21.

Changed

This repository is attempting to start out using GitHub's "Immutable Releases" feature with this release, and this'll be the first release, assuming all goes well, that has this enabled. #11901

Fixed

Fix compatibility with the Go runtime on Windows for exceptions. #11892

38.0.1

Released 2025-10-20.

Fixed

Fixed some automation that went wrong with the 38.0.0 release.

... (truncated)

Commits

4c22e15 Release Wasmtime 38.0.4 (#12024)
9ebb693 [38.0.x] Prevent using shared memories with Memory (#12020)
05566cc Work around naked-function-plus-LTO issue (#11960) (#11972)
e7eb46b Pin beta Rust used in CI (#11969)
d9dc16b Release Wasmtime 38.0.3 (#11934)
c3d448c Use generic array-to-wasm trampolines for components (#11933)
e8b8a72 Fix release script (#11906) (#11914)
b27d62c Release Wasmtime 38.0.2 (#11903)
7c142a6 Attempt to use github immutable releases (#11902)
aba7144 Fix compatibility with the Go runtime on Windows for exceptions (#11892) (#11...
Additional commits viewable in compare view

Updates wat from 1.255.0 to 1.258.0

Release notes

Sourced from wat's releases.

v1.258.0

What's Changed

Document that --realloc-via-memory-grow only affects adapters by @Lstarsky0 in bytecodealliance/wasm-tools#2613

fix: remap type indices of {stream,future}.cancel-{read,write} by @rvolosatovs in bytecodealliance/wasm-tools#2615

Remove post-return hooks, adjust sync task hooks by @alexcrichton in bytecodealliance/wasm-tools#2619

Add wasip3 compat to wit-dylib by @alexcrichton in bytecodealliance/wasm-tools#2617

Rebuild libdl.so without __wasi_init_tp import by @alexcrichton in bytecodealliance/wasm-tools#2616

Release wasm-tools 1.258.0 by @github-actions[bot] in bytecodealliance/wasm-tools#2620

Full Changelog: bytecodealliance/wasm-tools@v1.257.1...v1.258.0

v1.257.1

What's Changed

Restore the default for component new --merge-imports-based-on-semver by @Lstarsky0 in bytecodealliance/wasm-tools#2611

Release wasm-tools 1.257.1 by @github-actions[bot] in bytecodealliance/wasm-tools#2612

New Contributors

@Lstarsky0 made their first contribution in bytecodealliance/wasm-tools#2611

Full Changelog: bytecodealliance/wasm-tools@v1.257.0...v1.257.1

v1.257.0

What's Changed

Enable wide-arithmetic/compact-imports by default by @alexcrichton in bytecodealliance/wasm-tools#2593

Adjust TLS scheme for wasip3 to be more toolchain-agnostic by @alexcrichton in bytecodealliance/wasm-tools#2596

Fix name conflicts with init-task wrappers by @alexcrichton in bytecodealliance/wasm-tools#2595

add map support to wit-dylib by @dicej in bytecodealliance/wasm-tools#2594

Use u64 to track file offsets instead of usize by @WorldSEnder in bytecodealliance/wasm-tools#2573

Refactor configuration of wit-component builders by @alexcrichton in bytecodealliance/wasm-tools#2597

Add an option to encode components with return_call_ref by @alexcrichton in bytecodealliance/wasm-tools#2598

Support importing memory in the main module in wit-component by @alexcrichton in bytecodealliance/wasm-tools#2599

Add a way to have wasm-tools compose print no output by @alexcrichton in bytecodealliance/wasm-tools#2601

Consolidate generated modules in wit-component into one by @alexcrichton in bytecodealliance/wasm-tools#2600

Fold the TLS get/set module into the shim module by @alexcrichton in bytecodealliance/wasm-tools#2604

Generalize __wasm_init_task to a "task hook" by @alexcrichton in bytecodealliance/wasm-tools#2603

Use __wasm_task_hook for realloc options by @alexcrichton in bytecodealliance/wasm-tools#2605

Expand wit-component's heuristic for context slot 1 by @alexcrichton in bytecodealliance/wasm-tools#2609

Fall back to cabi_realloc in the main module by @alexcrichton in bytecodealliance/wasm-tools#2606

Release wasm-tools 1.257.0 by @github-actions[bot] in bytecodealliance/wasm-tools#2610

Full Changelog: bytecodealliance/wasm-tools@v1.256.0...v1.257.0

v1.256.0

What's Changed

Import a data symbol for libdl.so by @alexcrichton in bytecodealliance/wasm-tools#2588

feat(wit-parser): add more -not-found variants to ResolveErrorKind by @mkatychev in bytecodealliance/wasm-tools#2589

Release to OCI registry by @andreaTP in bytecodealliance/wasm-tools#2587

Implement new handling of TLS base/symbols by @alexcrichton in bytecodealliance/wasm-tools#2590

... (truncated)

Commits

5c6d31c Release wasm-tools 1.258.0 (#2620)
242aaa7 Rebuild libdl.so without __wasi_init_tp import (#2616)
43baa25 Add wasip3 compat to wit-dylib (#2617)
0a2c043 Remove post-return hooks, adjust sync task hooks (#2619)
a7ef477 fix: remap type indices of {stream,future}.cancel-{read,write} (#2615)
ef6cb38 Document that --realloc-via-memory-grow only affects adapters (#2613)
3ef3cef Release wasm-tools 1.257.1 (#2612)
f278423 Restore the default for component new --merge-imports-based-on-semver (#2611)
4a81bc1 Release wasm-tools 1.257.0 (#2610)
77f1b54 Fall back to cabi_realloc in the main module (#2606)
Additional commits viewable in compare view

Updates anstream from 0.6.21 to 1.0.0

Commits

3048fe7 chore: Release
028ff0d Merge pull request #293 from epage/template
f1823a9 chore: Update from _rust template
6d0d36b chore(ci): Clean up previous branch in case it was leaked
30b3b14 chore(ci): Fix how rustfmt jobs run
74f4be6 chore(ci): Fix name of clippy::empty_enums
e0d98b6 chore(deps): Update Rust Stable to v1.93 (#292)
24c5c99 chore(deps): Update Rust Stable to v1.93 (#42)
ad7697d chore(ci): Automatic update from template (#40)
b65c345 chore: Update prek hooks (#41)
Additional commits viewable in compare view

Updates sha2 from 0.10.9 to 0.11.0

Commits

ffe0939 Release sha2 0.11.0 (#806)
8991b65 Use the standard order of the [package] section fields (#807)
3d2bc57 sha2: refactor backends (#802)
faa55fb sha3: bump keccak to v0.2 (#803)
d3e6489 sha3 v0.11.0-rc.9 (#801)
bbf6f51 sha2: tweak backend docs (#800)
155dbbf sha3: add default value for the DS generic parameter on TurboShake128/256...
ed514f2 Use published version of keccak v0.2 (#799)
702bcd8 Migrate to closure-based keccak (#796)
827c043 sha3 v0.11.0-rc.8 (#794)
Additional commits viewable in compare view

Updates futures-executor from 0.3.33 to 0.3.34

Release notes

Sourced from futures-executor's releases.

0.3.34

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Changelog

Sourced from futures-executor's changelog.

0.3.34 - 2026-08-11

Preserve cloned waker identity. (#3032)

Updato syn to 3. (#3028)

Commits

705e6b5 Release 0.3.34
616dac7 compat: Inline RawWaker clone function
4176369 Inline remaining RawWaker clone functions
f17a895 Fix cloned FuturesUnordered waker identity
51d62ad macro: bump syn to v3 (#3028)
9e26177 ci: Reduce timeout-minutes
b2d0983 tsan: Enable Adaptive Delay
f733d0e Miri: Ignore compat tests
e5def2f Rename default branch to main
See full diff in compare view

Updates napi from 3.12.0 to 3.5.0

Commits

3923008 chore: release (#2977)
52c0da5 fix(napi): memory leak in PromiseRaw cleanup callback (#2995)
606ff62 feat(sys): use libloading to load napi symbols at runtime on all platform (#2...
4828b9d chore(deps): update cross-platform-actions/action action to v0.30.0 (#2993)
31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
edd419a chore(deps): lock file maintenance (#2989)
8173c22 chore(deps): update dependency @rollup/plugin-commonjs to v29 (#2983)
bfc3cae ci: change armv7-lts to armv7-22 (#2984)
a62b9f2 chore(deps): update dependency @rollup/plugin-alias to v6 (#2982)
dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
Additional commits viewable in compare view

Updates napi-derive from 3.6.2 to 3.6.3

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.6.3

Other

updated the following local packages: napi-derive-backend

Commits

956e452 chore: release (#3448)
73048f5 chore(release): publish
61fae8a fix(napi): stop unloading addons with live native code, preserve non-Error re...
93e86ce chore(release): publish
2c90599 fix(cli): support npm 12 pack output (#3449)
360b1ec fix(wasi): avoid randomness during module registration (#3447)
b648c40 build(deps): bump nanoid from 3.3.16 to 3.3.18 (#3446)
ffda4ef chore(deps): update dependency js-yaml to v4.3.1 [security] (#3445)
387b0dc feat(cli): size WASI browser worker pools from navigator.hardwareConcurrency ...
61e4346 build(deps): bump fast-uri from 3.1.4 to 3.1.5 (#3440)
Additional commits viewable in compare view

Updates napi-build from 2.4.0 to 2.4.1

Release notes

Sourced from napi-build's releases.

napi-build-v2.4.1

Fixed

(napi) stop unloading addons with live native code, preserve non-Error rejections, and add the wasm teardown barrier (#3423)

Commits

956e452 chore: release (#3448)
73048f5 chore(release): publish
61fae8a fix(napi): stop unloading addons with live native code, preserve non-Error re...
93e86ce chore(release): publish
2c90599 fix(cli): support npm 12 pack output (#3449)
360b1ec fix(wasi): avoid randomness during module registration (#3447)
b648c40 build(deps): bump nanoid from 3.3.16 to 3.3.18 (#3446)
ffda4ef chore(deps): update dependency js-yaml to v4.3.1 [security] (#3445)
387b0dc feat(cli): size WASI browser worker pools from navigator.hardwareConcurrency ...
61e4346 build(deps): bump fast-uri from 3.1.4 to 3.1.5 (#3440)
Additional commits viewable in compare view

Bumps the rust group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [async-trait](https://github.com/dtolnay/async-trait) | `0.1.91` | `0.1.92` | | [thiserror](https://github.com/dtolnay/thiserror) | `2.0.19` | `2.0.20` | | [wasmtime](https://github.com/bytecodealliance/wasmtime) | `36.0.14` | `38.0.4` | | [wat](https://github.com/bytecodealliance/wasm-tools) | `1.255.0` | `1.258.0` | | [anstream](https://github.com/rust-cli/anstyle) | `0.6.21` | `1.0.0` | | [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` | | [futures-executor](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` | | [napi-derive](https://github.com/napi-rs/napi-rs) | `3.6.2` | `3.6.3` | | [napi-build](https://github.com/napi-rs/napi-rs) | `2.4.0` | `2.4.1` | Updates `async-trait` from 0.1.91 to 0.1.92 - [Release notes](https://github.com/dtolnay/async-trait/releases) - [Commits](dtolnay/async-trait@0.1.91...0.1.92) Updates `thiserror` from 2.0.19 to 2.0.20 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](dtolnay/thiserror@2.0.19...2.0.20) Updates `wasmtime` from 36.0.14 to 38.0.4 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v38.0.4/RELEASES.md) - [Commits](bytecodealliance/wasmtime@v36.0.14...v38.0.4) Updates `wat` from 1.255.0 to 1.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](bytecodealliance/wasm-tools@v1.255.0...v1.258.0) Updates `anstream` from 0.6.21 to 1.0.0 - [Commits](rust-cli/anstyle@anstream-v0.6.21...anstream-v1.0.0) Updates `sha2` from 0.10.9 to 0.11.0 - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) Updates `futures-executor` from 0.3.33 to 0.3.34 - [Release notes](https://github.com/rust-lang/futures-rs/releases) - [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md) - [Commits](rust-lang/futures-rs@0.3.33...0.3.34) Updates `napi` from 3.12.0 to 3.5.0 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-v3.12.0...napi-v3.5.0) Updates `napi-derive` from 3.6.2 to 3.6.3 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-derive-v3.6.2...napi-derive-v3.6.3) Updates `napi-build` from 2.4.0 to 2.4.1 - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-build-v2.4.0...napi-build-v2.4.1) --- updated-dependencies: - dependency-name: anstream dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust - dependency-name: async-trait dependency-version: 0.1.92 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: futures-executor dependency-version: 0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: napi dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: napi-build dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: napi-derive dependency-version: 3.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust - dependency-name: thiserror dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: wasmtime dependency-version: 38.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust - dependency-name: wat dependency-version: 1.258.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T11:12:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 1, 2026

dependabot Bot changed the title ~~Bump the rust group with 10 updates~~ Bump the rust group across 1 directory with 10 updates Sep 1, 2026

dependabot Bot force-pushed the dependabot/cargo/rust-8a7fcfd2c5 branch from f3e2d1d to f492626 Compare September 1, 2026 17:12

dependabot Bot closed this Oct 1, 2026

dependabot Bot deleted the dependabot/cargo/rust-8a7fcfd2c5 branch October 1, 2026 11:12

Navigation Menu

Repository navigation

Bump the rust group across 1 directory with 10 updates - #18

Bump the rust group across 1 directory with 10 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-8a7fcfd2c5

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.1.92

2.0.20

v38.0.4

38.0.4

Fixed

v38.0.3

38.0.3

Fixed

v38.0.2: Release Wasmtime 38.0.2 (#11903)

38.0.2

Changed

Fixed

v38.0.1

38.0.1

Fixed

v37.0.3

37.0.3

38.0.4

Fixed

38.0.3

Fixed

38.0.2

Changed

Fixed

38.0.1

Fixed

v1.258.0

What's Changed

v1.257.1

What's Changed

New Contributors

v1.257.0

What's Changed

v1.256.0

What's Changed

0.3.34

0.3.34 - 2026-08-11

napi-derive-v3.6.3

Other

napi-build-v2.4.1

Fixed

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading