fix(deps): update rust dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
flate2	build-dependencies	patch	1.1.9 → 1.1.10
indexmap	dependencies	patch	2.14.0 → 2.14.1
napi	dependencies	patch	3.12.1 → 3.12.2
oxc_allocator (source)	dependencies	minor	0.144.0 → 0.147.0
oxc_codegen (source)	dependencies	minor	0.144.0 → 0.147.0
oxc_minifier (source)	dependencies	minor	0.144.0 → 0.147.0
oxc_parser	dependencies	minor	0.144.0 → 0.147.0
oxc_resolver	dependencies	patch	11.24.2 → 11.24.3
oxc_span	dependencies	minor	0.144.0 → 0.147.0
wasi-preview1-component-adapter-provider	dependencies	patch	47.0.3 → 47.0.4
wasmtime	workspace.dependencies	patch	47.0.3 → 47.0.4
wasmtime-wasi	workspace.dependencies	patch	47.0.3 → 47.0.4
wasmtime-wizer	dependencies	patch	47.0.3 → 47.0.4
wit-bindgen	dependencies	minor	0.60 → 0.61
wit-component (source)	dependencies	minor	0.256 → 0.258
wit-dylib (source)	dependencies	minor	0.256 → 0.258
wit-parser (source)	workspace.dependencies	minor	0.256 → 0.258

---

Release Notes

rust-lang/flate2-rs (flate2)

v1.1.10

Compare Source

What's Changed

• feat: reuse zlib's decoder buffer by @​Vaiz in #​532
• feat: add reset method for read::GzDecoder and buffered::GzDecoder by @​Vaiz in #​534
• Drop cloudflare-zlib by @​kornelski in #​539
• Add a wrapper for the Crc struct by @​MikkelPaulson in #​540
• Bump miniz_oxide to 0.9 by @​oscargus in #​543
• Upgrade miniz_oxide and add unit tests of the different flush kinds by @​fintelia in #​498
• Fix infinite loop in writing gzip header/footer by @​Shnatsel in #​547
• test: generate corrupt gzip fixture at runtime by @​nanookclaw in #​550
• Reject oversized gzip extra fields by @​Byron in #​553
• Reject incomplete deflate streams at EOF by @​Guflly in #​556
• Include README.md in a private module by @​bushrat011899 in #​562
• Add no_std support using nightly alloc_io by @​bushrat011899 in #​559
• Update get_mut() documentation to make clear how 'inner` can be used by @​Byron in #​558

New Contributors

• @​Vaiz made their first contribution in #​532
• @​MikkelPaulson made their first contribution in #​540
• @​oscargus made their first contribution in #​543
• @​nanookclaw made their first contribution in #​550
• @​Guflly made their first contribution in #​556
• @​bushrat011899 made their first contribution in #​562

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

indexmap-rs/indexmap (indexmap)

v2.14.1

Compare Source

• Simplify comparisons where Equivalent isn't needed (Q = K).
• Unify index assertions for bounds checks.
• Fix (or expect) clippy lints.

napi-rs/napi-rs (napi)

v3.12.2

Compare Source

Fixed

• (napi) memory safety in PromiseRaw callbacks and AbortSignal conversion (#​3458)

oxc-project/oxc-resolver (oxc_resolver)

v11.24.3

Compare Source

🚜 Refactor

• normalize fixture directory names (#​1329) (by @​Boshen)

📚 Documentation

• update sponsor section (#​1311) (by @​Boshen)

Contributors

• @​Boshen
• @​renovate[bot]
• @​20jasper

bytecodealliance/wasmtime (wasi-preview1-component-adapter-provider)

v47.0.4

Compare Source

47.0.4

Released 2026-08-20

Fixed

• Guest controlled-size host heap allocation through WASIp3 streams.
  GHSA-x84v-gj2h-g759

• Filesystem sandbox escape when paths or symlinks contain trailing slashes.
  GHSA-vqjp-4c8c-hfgg

bytecodealliance/wit-bindgen (wit-bindgen)

v0.61.1

Compare Source

What's Changed

• Don't force link cabi_realloc on non-Wasm builds. by @​QuantumSegfault in #​1697
• Release wit-bindgen 0.61.1 by @​github-actions[bot] in #​1698

Full Changelog: bytecodealliance/wit-bindgen@v0.61.0...v0.61.1

v0.61.0

Compare Source

What's Changed

• Change cabi_realloc gates to WASIp1-only by @​alexcrichton in #​1663
• Compact MoonBit async task state storage by @​peter-jerry-ye in #​1665
• Optimize MoonBit primitive stream buffering by @​peter-jerry-ye in #​1664
• ci: run WASIp3 threading tests against wasmtime dev by @​yordis in #​1669
• Targeted Attribute Injection by @​wilfreddenton in #​1656
• Fix Markdown docs with source-like syntax by @​subotac in #​1673
• fix(rust): fully qualify Option and Result types by @​scothis in #​1676
• fix(rust): restore cabi_realloc for wasm32-unknown-unknown by @​scothis in #​1677
• Fix tests on Rust nightly by @​alexcrichton in #​1679
• feat: update go bindings to pass go vet by @​asteurer in #​1670
• markdown: don't nest a link inside a link by @​Lstarsky0 in #​1689
• Prepare tests to run on WASIp3 by @​alexcrichton in #​1688
• Fix more compat with nightly rust, more wasip3 fixes by @​alexcrichton in #​1691
• D guest bindings generator by @​QuantumSegfault in #​1561
• Add a --locked job to CI by @​alexcrichton in #​1692
• Rework method chaining system of Rust generator by @​QuantumSegfault in #​1602
• Bump wasm-tools dependencies by @​alexcrichton in #​1693
• Unconditionally link wasip3 C-based intrinsics by @​alexcrichton in #​1695
• Release wit-bindgen 0.61.0 by @​github-actions[bot] in #​1694

New Contributors

• @​wilfreddenton made their first contribution in #​1656
• @​subotac made their first contribution in #​1673
• @​Lstarsky0 made their first contribution in #​1689

Full Changelog: bytecodealliance/wit-bindgen@v0.60.0...v0.61.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.