chore(deps): Bump the wit group across 1 directory with 3 updates by dependabot[bot] · Pull Request #202 · arcjet/gravity

dependabot · 2026-06-08T21:34:11Z

Bumps the wit group with 3 updates in the / directory: wit-bindgen-core, wit-component and wit-bindgen.

Updates wit-bindgen-core from 0.57.1 to 0.61.1

Release notes

Sourced from wit-bindgen-core's releases.

v0.61.1

What's Changed

Don't force link cabi_realloc on non-Wasm builds. by @QuantumSegfault in bytecodealliance/wit-bindgen#1697

Release wit-bindgen 0.61.1 by @github-actions[bot] in bytecodealliance/wit-bindgen#1698

Full Changelog: bytecodealliance/wit-bindgen@v0.61.0...v0.61.1

v0.61.0

What's Changed

Change cabi_realloc gates to WASIp1-only by @alexcrichton in bytecodealliance/wit-bindgen#1663

Compact MoonBit async task state storage by @peter-jerry-ye in bytecodealliance/wit-bindgen#1665

Optimize MoonBit primitive stream buffering by @peter-jerry-ye in bytecodealliance/wit-bindgen#1664

ci: run WASIp3 threading tests against wasmtime dev by @yordis in bytecodealliance/wit-bindgen#1669

Targeted Attribute Injection by @wilfreddenton in bytecodealliance/wit-bindgen#1656

Fix Markdown docs with source-like syntax by @subotac in bytecodealliance/wit-bindgen#1673

fix(rust): fully qualify Option and Result types by @scothis in bytecodealliance/wit-bindgen#1676

fix(rust): restore cabi_realloc for wasm32-unknown-unknown by @scothis in bytecodealliance/wit-bindgen#1677

Fix tests on Rust nightly by @alexcrichton in bytecodealliance/wit-bindgen#1679

feat: update go bindings to pass go vet by @asteurer in bytecodealliance/wit-bindgen#1670

markdown: don't nest a link inside a link by @Lstarsky0 in bytecodealliance/wit-bindgen#1689

Prepare tests to run on WASIp3 by @alexcrichton in bytecodealliance/wit-bindgen#1688

Fix more compat with nightly rust, more wasip3 fixes by @alexcrichton in bytecodealliance/wit-bindgen#1691

D guest bindings generator by @QuantumSegfault in bytecodealliance/wit-bindgen#1561

Add a --locked job to CI by @alexcrichton in bytecodealliance/wit-bindgen#1692

Rework method chaining system of Rust generator by @QuantumSegfault in bytecodealliance/wit-bindgen#1602

Bump wasm-tools dependencies by @alexcrichton in bytecodealliance/wit-bindgen#1693

Unconditionally link wasip3 C-based intrinsics by @alexcrichton in bytecodealliance/wit-bindgen#1695

Release wit-bindgen 0.61.0 by @github-actions[bot] in bytecodealliance/wit-bindgen#1694

New Contributors

@wilfreddenton made their first contribution in bytecodealliance/wit-bindgen#1656

@subotac made their first contribution in bytecodealliance/wit-bindgen#1673

@Lstarsky0 made their first contribution in bytecodealliance/wit-bindgen#1689

Full Changelog: bytecodealliance/wit-bindgen@v0.60.0...v0.61.0

v0.60.0

What's Changed

Add support for named implements in Go by @jfleitz in bytecodealliance/wit-bindgen#1657

refactor(moonbit): a possibly better async implementation for wasi p3 by @peter-jerry-ye in bytecodealliance/wit-bindgen#1659

chore(deps): update wasmparser/wasm-encoder/etc deps to .254. by @vados-cosmonic in bytecodealliance/wit-bindgen#1661

Release wit-bindgen 0.60.0 by @github-actions[bot] in bytecodealliance/wit-bindgen#1662

New Contributors

@jfleitz made their first contribution in bytecodealliance/wit-bindgen#1657

Full Changelog: bytecodealliance/wit-bindgen@v0.59.0...v0.60.0

v0.59.0

... (truncated)

Commits

0b0069d Release wit-bindgen 0.61.1 (#1698)
8cde5ce Don't force link cabi_realloc on non-Wasm builds. (#1697)
e5cbca3 Release wit-bindgen 0.61.0 (#1694)
17d9bfa Unconditionally link wasip3 C-based intrinsics (#1695)
4f831f2 Bump wasm-tools dependencies (#1693)
d4001ab Rework method chaining system of Rust generator (#1602)
8ee0a9d Add a --locked job to CI (#1692)
084407c D guest bindings generator (#1561)
df9b033 Fix more compat with nightly rust, more wasip3 fixes (#1691)
b119e28 Prepare tests to run on WASIp3 (#1688)
Additional commits viewable in compare view

Updates wit-component from 0.246.2 to 0.247.0

Commits

See full diff in compare view

Updates wit-bindgen from 0.56.0 to 0.57.1

Commits

2e00369 Release wit-bindgen 0.57.1 (#1596)
f2c3e9f Remove async feature of wit-bindgen-rust-macros (#1595)
8e9087b Release wit-bindgen 0.57.0 (#1593)
50cdab6 Perform some CI/dependency maintenance (#1594)
2f767a5 Remove dependency on std for async feature (#1591)
be1402f Add --enable-method-chaining for the Rust generator. (#1586)
See full diff in compare view

socket-security · 2026-06-08T21:34:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/wit-bindgen-core@0.56.0 ⏵ 0.61.1

View full report

dependabot · 2026-08-06T21:58:16Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

socket-security · 2026-08-24T21:35:07Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: cargo `unicode-ident` under Unicode-3.0 License: Unicode-3.0 - the applicable license policy does not allow this license (4) (unicode-ident-1.0.24/Cargo.toml) License: Unicode-3.0 - the applicable license policy does not allow this license (4) (unicode-ident-1.0.24/Cargo.toml) License: Unicode-3.0 - The applicable license policy does not permit this license (5) (unicode-ident-1.0.24/LICENSE-UNICODE) From: `?` → `cargo/trycmd@1.2.0` → `cargo/wit-component@0.247.0` → `cargo/wit-bindgen@0.57.1` → `cargo/wit-bindgen-core@0.61.1` → `cargo/genco@0.19.0` → `cargo/unicode-ident@1.0.24` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore cargo/unicode-ident@1.0.24`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Bumps the wit group with 3 updates in the / directory: [wit-bindgen-core](https://github.com/bytecodealliance/wit-bindgen), [wit-component](https://github.com/bytecodealliance/wasm-tools) and [wit-bindgen](https://github.com/bytecodealliance/wit-bindgen). Updates `wit-bindgen-core` from 0.57.1 to 0.61.1 - [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases) - [Commits](bytecodealliance/wit-bindgen@v0.57.1...v0.61.1) Updates `wit-component` from 0.246.2 to 0.247.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `wit-bindgen` from 0.56.0 to 0.57.1 - [Release notes](https://github.com/bytecodealliance/wit-bindgen/releases) - [Commits](bytecodealliance/wit-bindgen@v0.56.0...v0.57.1) --- updated-dependencies: - dependency-name: wit-bindgen dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wit - dependency-name: wit-bindgen-core dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wit - dependency-name: wit-component dependency-version: 0.246.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wit ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 8, 2026

dependabot Bot requested a review from a team as a code owner June 8, 2026 21:34

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 8, 2026

dependabot Bot force-pushed the dependabot/cargo/wit-8aaf2024c5 branch from b2365ac to 0d74a15 Compare August 24, 2026 21:34

dependabot Bot force-pushed the dependabot/cargo/wit-8aaf2024c5 branch from 0d74a15 to 7055872 Compare September 3, 2026 21:33

Navigation Menu

Uh oh!

chore(deps): Bump the wit group across 1 directory with 3 updates - #202

chore(deps): Bump the wit group across 1 directory with 3 updates#202
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/wit-8aaf2024c5

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 8, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 6, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.61.1

What's Changed

v0.61.0

What's Changed

New Contributors

v0.60.0

What's Changed

New Contributors

v0.59.0

Uh oh!

socket-security Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Aug 6, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading

socket-security Bot commented Jun 8, 2026 •

edited

Loading

socket-security Bot commented Aug 24, 2026 •

edited

Loading