chore(deps): bump the rust-dependencies group across 1 directory with 8 updates

[dependabot]

Bumps the rust-dependencies group with 7 updates in the / directory:

Package	From	To
js-sys	0.3.98	0.3.103
memchr	2.8.0	2.8.3
napi	3.9.0	3.11.0
napi-derive	3.5.6	3.6.1
smallvec	1.15.1	1.15.2
insta	1.47.2	1.48.0
napi-build	2.3.2	2.4.0

Updates js-sys from 0.3.98 to 0.3.103

Commits

• See full diff in compare view

Updates memchr from 2.8.0 to 2.8.3

Commits

• 5fdb40c 2.8.3
• 922c7b5 memchr: let compiler know that indexes returned by memchr fns are in bounds
• e21e9fb arch: add unsafe to internal routines
• 581faf0 rebar: update memchr version
• a61ac1a 2.8.2
• a08bf90 arch: fix undefined behavior in lower level (but public) APIs
• b41293b rebar: update memchr to latest
• 87467c9 impl: remove unnecessary clones in into_owned impls
• ff7dca7 2.8.1
• 016878a target: fix aarch64_be endianness bug
• Additional commits viewable in compare view

Updates napi from 3.9.0 to 3.11.0

Release notes

Sourced from napi's releases.

napi-v3.11.0

Added

• unforgeable #[napi] class identity via Node object type tags (#3405)
• (napi) add pluggable async runtime backend (#3352)

Fixed

• (napi) release JsDeferred tsfn on null-env teardown drain (#3404 follow-up) (#3408)
• (napi) guard JsDeferred against env teardown (#3404)
• (napi) register the async runtime env cleanup hook per registration (#3400)

Other

• (napi) share tracing callsite (#3409)

napi-v3.10.5

Fixed

• (napi) release FunctionRef off the JS thread via the custom-GC TSFN (#3394)

napi-v3.10.4

Fixed

• (cli) align build and project configuration (#3387)

Other

• (readme) point sponsors image at napi.rs/sponsors.svg (#3379)

napi-v3.10.3

Fixed

• (napi) preserve the JS error object when cloning an Error off-thread (#3375)

napi-v3.10.2

Fixed

• (napi) keep message and cause when cloning a JS-exception Error off-thread (#3373)

napi-v3.10.1

Fixed

• (napi) release Error's exception reference via the custom GC when dropped off-thread. (#3370)
• (napi) stop ref exception object in ThreadsafeFunction sync-throw path on wasm targets (#3369)

Other

• (napi) share class accessor trampolines (#3364)
• optimize object field raw property access (#3365)

... (truncated)

Commits

• 679eb79 chore: release (#3401)
• 762a0e3 chore(release): publish
• 587ae14 perf(napi): share tracing callsite (#3409)
• 02d8ccd fix(napi): release JsDeferred tsfn on null-env teardown drain (#3404 follow-u...
• b635204 fix(napi): guard JsDeferred against env teardown (#3404)
• 729ebed feat: unforgeable #[napi] class identity via Node object type tags (#3405)
• 0a4681d fix(cli): don't force-build crates whose optional napi-derive dependency is d...
• 392ec40 chore(deps): update dependency c8 to v12 (#3403)
• d618d7e feat(napi): add pluggable async runtime backend (#3352)
• 1817ed2 fix(napi): register the async runtime env cleanup hook per registration (#3400)
• Additional commits viewable in compare view

Updates napi-derive from 3.5.6 to 3.6.1

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.6.1

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.6.0

Added

• unforgeable #[napi] class identity via Node object type tags (#3405)

napi-derive-v3.5.10

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.9

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.8

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.7

Other

• updated the following local packages: napi-derive-backend

Commits

• 58bd87f chore: release (#3414)
• 9da8723 chore(release): publish
• 8d22196 chore(deps): update dependency oxc-parser to ^0.142.0 (#3422)
• abc30fb build(deps): bump postcss from 8.5.17 to 8.5.23 (#3421)
• 5542139 build(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 (#3418)
• dc4ee8c build(deps): bump fast-uri from 3.1.3 to 3.1.4 (#3419)
• 050d985 feat(async-runtime): drain-linger surface + lock-free scheduler internals (#3...
• e0b8708 chore(deps): update dependency oxc-parser to ^0.141.0 (#3417)
• fc84940 chore(deps): update actions/setup-node action to v7 (#3413)
• ee598db build(deps): bump protobufjs from 7.6.4 to 7.6.5 (#3410)
• Additional commits viewable in compare view

Updates smallvec from 1.15.1 to 1.15.2

Release notes

Sourced from smallvec's releases.

v1.15.2

What's Changed

• Exclude development script from cargo packaging by @​weiznich in servo/rust-smallvec#397
• Fix use-after-free in DrainFilter::keep_rest for SmallVec with capacity 0 by @​Shnatsel in servo/rust-smallvec#407
• Work around rustc 1.93 perf regression with MaybeUninit by @​glandium in servo/rust-smallvec#410

New Contributors

• @​Shnatsel made their first contribution in servo/rust-smallvec#407
• @​glandium made their first contribution in servo/rust-smallvec#410

Full Changelog: servo/rust-smallvec@v1.15.1...v1.15.2

Commits

• c469051 Bump version.
• 9fe422b Fix Windows CI.
• 51b965f Work around rustc 1.93 perf regression with MaybeUninit
• 9da26a5 Fix use-after-free in DrainFilter::keep_rest for zero-capacity SmallVecs
• 79184f1 Add Miri test for use-after-free in DrainFilter::keep_rest
• f59fb36 Merge pull request #397 from GiGainfosystems/exclude_scripts
• 28b6ed7 Exclude development script
• See full diff in compare view

Updates wasm-bindgen from 0.2.121 to 0.2.126

Release notes

Sourced from wasm-bindgen's releases.

0.2.126

Changed

• Emscripten output now hoists every clean export (free functions, classes, enums, plus their finalization registries and string-enum tables) out of the $initBindgen init closure into its own top-level addToLibrary symbol and self-registers it into EXPORTED_FUNCTIONS. emscripten then emits the clean API (add, Counter, ...) as named ESM exports under -sMODULARIZE=instance and as Module.<name> properties (via each symbol's __postset) in factory mode, with no extra sidecar files. Namespaced exports are reached through their namespace root (e.g. app), assembled in the root symbol's __postset. User module/inline-js imports are now wired as addToLibrary shims (they were previously dropped, since emcc resolves imports only against env), and their ESM-imported bindings are __wbg_-prefixed to avoid colliding with emcc runtime names such as Module/HEAP8. #5210

Fixed

• The descriptor interpreter now follows emscripten invoke_* trampolines. emscripten's exception/longjmp lowering rewrites direct calls into indirect calls through the function table wrapped in imported invoke_*(fnptr, ..args) helpers, including the describe helpers a descriptor function must reach. The interpreter resolves fnptr against the reconstructed function table, forwards the trailing arguments, and evaluates the surrounding "did it throw?" control flow (if/else, loop, br_table), so descriptors are interpreted correctly on emscripten builds with unwinding/longjmp enabled. #5215

• Relaxed alignment requirement for 8-byte types. #5204

0.2.125

Added

• Added the --force-enable-abort-handler CLI flag, which emits the hard-abort detection and set_on_abort machinery on panic=abort builds. With panic=unwind this machinery is generated automatically; the flag does nothing there. #5191

Changed

• Made the internal __wbindgen_destroy_closure export private in the Rust API. #5196

0.2.123

Added

• Added the maxAge attribute to the CookieInit dictionary in web-sys,

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.126

Changed

• Emscripten output now hoists every clean export (free functions, classes, enums, plus their finalization registries and string-enum tables) out of the $initBindgen init closure into its own top-level addToLibrary symbol and self-registers it into EXPORTED_FUNCTIONS. emscripten then emits the clean API (add, Counter, ...) as named ESM exports under -sMODULARIZE=instance and as Module.<name> properties (via each symbol's __postset) in factory mode, with no extra sidecar files. Namespaced exports are reached through their namespace root (e.g. app), assembled in the root symbol's __postset. User module/inline-js imports are now wired as addToLibrary shims (they were previously dropped, since emcc resolves imports only against env), and their ESM-imported bindings are __wbg_-prefixed to avoid colliding with emcc runtime names such as Module/HEAP8. #5210

Fixed

• The descriptor interpreter now follows emscripten invoke_* trampolines. emscripten's exception/longjmp lowering rewrites direct calls into indirect calls through the function table wrapped in imported invoke_*(fnptr, ..args) helpers, including the describe helpers a descriptor function must reach. The interpreter resolves fnptr against the reconstructed function table, forwards the trailing arguments, and evaluates the surrounding "did it throw?" control flow (if/else, loop, br_table), so descriptors are interpreted correctly on emscripten builds with unwinding/longjmp enabled. #5215

• Relaxed alignment requirement for 8-byte types. #5204

• Fixed compilation with (feature = "std", panic = "unwind", target_feature = "atomics") and prevented a Task leak when a future unwinds out of poll (via a Rust panic or a foreign JS exception) in both the single-threaded and multi-threaded executors. #5214

• Headless Chrome/Edge tests now surface the WebDriver's own error message when session creation fails (e.g. a chromedriver/Chrome version mismatch) instead of a confusing http status: 404. #5211

Removed

0.2.125

Added

• Added the --force-enable-abort-handler CLI flag, which emits the hard-abort

... (truncated)

Commits

• 21ac804 Release 0.2.126
• b111cbe Follow emscripten invoke_* trampolines in the descriptor interpreter (#5215)
• 5dc7131 Hoist emscripten exports into top-level library symbols (#5210)
• 7f013c3 build(deps): bump actions/checkout in the github-actions group (#5212)
• d37fcef Relaxed alignment requirement for 8-byte types. (#5204)
• 6ff7f1c Release 0.2.125 (#5200)
• 1ae2b88 Release 0.2.124 (#5199)
• 197f576 Wrapped fatal JS Error in panic=abort + abort handlers path (#5198)
• 9f77521 build(deps): bump codecov/codecov-action (#5187)
• 18c4e33 Fix flaky abort-handler CLI tests by isolating build dirs (#5197)
• Additional commits viewable in compare view

Updates insta from 1.47.2 to 1.48.0

Release notes

Sourced from insta's releases.

1.48.0

Release Notes

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Install cargo-insta 1.48.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-installer.ps1 | iex"

Download cargo-insta 1.48.0

File	Platform	Checksum
cargo-insta-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-insta-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-insta-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-insta-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-insta-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Changelog

Sourced from insta's changelog.

1.48.0

• Add strip_ansi_escape_codes setting which removes ANSI escape sequences (color codes, cursor movement, etc.) from snapshot content before comparison. Requires the filters feature. #899 (@​pierluigilenoci)
• Add opt-in support for YAML literal blocks for multiline strings in snapshot metadata fields such as description and expression. Set INSTA_YAML_BLOCK_STYLE=1 to enable. #851 (@​ivov)
• Setting CI=true normally makes cargo insta test behave as though --check was passed. Explicit snapshot handling options such as --accept now take precedence over this environment variable, allowing users to override this behavior if they want to. #924
• Fix cargo insta test --profile being forwarded to nextest as the nextest profile instead of the cargo build profile; it now translates to --cargo-profile for the nextest runner. Add --nextest-profile to select the nextest profile. #910
• Fix cargo insta pending-snapshots printing unusable \\?\-prefixed paths on Windows. The --snapshot filter now also accepts partial paths: any trailing path suffix of the snapshot file matches, so a bare --snapshot my_test.snap works. #904
• Accepting a binary snapshot no longer fails with os error 2 when its data file is missing (e.g. gitignored and not committed). #914

Commits

• 7f23d2e Release 1.48.0 (#925)
• ee9cae1 Allow CI=true to be overridden by an explicitly passed --accept CLI flag ...
• 043cf82 fix: translate --profile to --cargo-profile for nextest (#913)
• 9c77f13 test: cover deep-wildcard redaction through arrays (#915)
• 362f432 Fix --snapshot filter on Windows; allow partial paths (#904)
• a436836 fix: tolerate a missing binary snapshot data file (#914)
• bf5fcdf fix: regenerate Cargo.lock and guard it with --locked in CI (#912)
• a761a9c feat: Support YAML literal blocks for multiline strings (#851)
• f9633f3 ci: pin check-minver to nightly-2026-04-25 (#905)
• c7b98b8 feat: add strip_ansi_escape_codes setting (#899)
• See full diff in compare view

Updates napi-build from 2.3.2 to 2.4.0

Release notes

Sourced from napi-build's releases.

napi-build-v2.4.0

Added

• (cli) support non-threaded WASI targets (#3353)

Commits

• 58bd87f chore: release (#3414)
• 9da8723 chore(release): publish
• 8d22196 chore(deps): update dependency oxc-parser to ^0.142.0 (#3422)
• abc30fb build(deps): bump postcss from 8.5.17 to 8.5.23 (#3421)
• 5542139 build(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 (#3418)
• dc4ee8c build(deps): bump fast-uri from 3.1.3 to 3.1.4 (#3419)
• 050d985 feat(async-runtime): drain-linger surface + lock-free scheduler internals (#3...
• e0b8708 chore(deps): update dependency oxc-parser to ^0.141.0 (#3417)
• fc84940 chore(deps): update actions/setup-node action to v7 (#3413)
• ee598db build(deps): bump protobufjs from 7.6.4 to 7.6.5 (#3410)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions