Skip to content

chore(deps): Bump the wit group across 1 directory with 3 updates#190

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/wit-5ef946679a
Closed

chore(deps): Bump the wit group across 1 directory with 3 updates#190
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/wit-5ef946679a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the wit group with 3 updates in the / directory: wit-bindgen-core, wit-component and wit-bindgen.

Updates wit-bindgen-core from 0.53.1 to 0.56.0

Release notes

Sourced from wit-bindgen-core's releases.

v0.56.0

What's Changed

New Contributors

Full Changelog: bytecodealliance/wit-bindgen@v0.55.0...v0.56.0

v0.55.0

What's Changed

New Contributors

Full Changelog: bytecodealliance/wit-bindgen@v0.54.0...v0.55.0

v0.54.0

What's Changed

New Contributors

... (truncated)

Commits

Updates wit-component from 0.245.1 to 0.246.2

Commits

Updates wit-bindgen from 0.53.1 to 0.56.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 20, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 20, 2026 19:29
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 20, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 20, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​wit-bindgen@​0.53.1 ⏵ 0.56.07910093100100
Updatedcargo/​wit-bindgen-core@​0.53.1 ⏵ 0.56.010010093100100
Updatedcargo/​wit-component@​0.245.1 ⏵ 0.246.29710093100100

View full report

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 20, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Low
Environment variable access: cargo macro-string

Location: Package overview

From: ?cargo/wit-bindgen@0.56.0cargo/macro-string@0.2.0

ℹ Read more on: This package | This alert | What is environment variable access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should be clear about which environment variables they access, and care should be taken to ensure they only access environment variables they claim to.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/macro-string@0.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Bumps the wit group with 3 updates in the / directory: [wit-bindgen-core](https://github.com/bytecodealliance/wit-bindgen), [wit-component](https://github.com/bytecodealliance/wasm-tools) and [wit-bindgen](https://github.com/bytecodealliance/wit-bindgen).


Updates `wit-bindgen-core` from 0.53.1 to 0.56.0
- [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases)
- [Commits](bytecodealliance/wit-bindgen@v0.53.1...v0.56.0)

Updates `wit-component` from 0.245.1 to 0.246.2
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wit-bindgen` from 0.53.1 to 0.56.0
- [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases)
- [Commits](bytecodealliance/wit-bindgen@v0.53.1...v0.56.0)

---
updated-dependencies:
- dependency-name: wit-bindgen-core
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
- dependency-name: wit-component
  dependency-version: 0.246.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
- dependency-name: wit-bindgen
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/wit-5ef946679a branch from 5b52905 to b3599db Compare April 20, 2026 23:04
arcjet-rei added a commit that referenced this pull request Apr 21, 2026
…persedes #190) (#192)

* chore(deps): Bump the wit group across 1 directory with 3 updates

Bumps the wit group with 3 updates in the / directory: [wit-bindgen-core](https://github.com/bytecodealliance/wit-bindgen), [wit-component](https://github.com/bytecodealliance/wasm-tools) and [wit-bindgen](https://github.com/bytecodealliance/wit-bindgen).


Updates `wit-bindgen-core` from 0.53.1 to 0.56.0
- [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases)
- [Commits](bytecodealliance/wit-bindgen@v0.53.1...v0.56.0)

Updates `wit-component` from 0.245.1 to 0.246.2
- [Release notes](https://github.com/bytecodealliance/wasm-tools/releases)
- [Commits](https://github.com/bytecodealliance/wasm-tools/commits)

Updates `wit-bindgen` from 0.53.1 to 0.56.0
- [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases)
- [Commits](bytecodealliance/wit-bindgen@v0.53.1...v0.56.0)

---
updated-dependencies:
- dependency-name: wit-bindgen-core
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
- dependency-name: wit-component
  dependency-version: 0.246.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
- dependency-name: wit-bindgen
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: wit
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: handle new Instruction variants introduced by wit-bindgen-core 0.56

wit-bindgen-core 0.56 added map<K,V> support, introducing MapLower,
MapLift, IterMapKey, IterMapValue, and GuestDeallocateMap variants to
Instruction. Gravity's match is intentionally exhaustive so that new
upstream variants break the build rather than silently producing wrong
Go.

GuestDeallocateMap joins the existing "gravity doesn't generate the
Guest code" group. The four Map lower/lift/iter variants todo!() until
gravity grows Go map codegen.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@arcjet-rei arcjet-rei closed this Apr 21, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 21, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/cargo/wit-5ef946679a branch April 21, 2026 21:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant