[renovate]

This PR contains the following updates:

Package	Type	Update	Change
clap	workspace.dependencies	patch	4.6.4 → 4.6.6
napi	dependencies	minor	3.11.0 → 3.12.1
napi-build	build-dependencies	minor	2.3.2 → 2.4.1
napi-derive	dependencies	patch	3.6.0 → 3.6.3
oxc_allocator (source)	dependencies	minor	0.141.0 → 0.144.0
oxc_codegen (source)	dependencies	minor	0.141.0 → 0.144.0
oxc_minifier (source)	dependencies	minor	0.141.0 → 0.144.0
oxc_parser (source)	dependencies	minor	0.141.0 → 0.144.0
oxc_span (source)	dependencies	minor	0.141.0 → 0.144.0
rquickjs	dependencies	patch	0.12.1 → 0.12.2
ureq	build-dependencies	minor	3.3.0 → 3.4.0
wasi-preview1-component-adapter-provider	dependencies	patch	47.0.2 → 47.0.3
wasmtime	workspace.dependencies	patch	47.0.2 → 47.0.3
wasmtime-wasi	workspace.dependencies	patch	47.0.2 → 47.0.3
wasmtime-wizer	dependencies	patch	47.0.2 → 47.0.3
wit-component (source)	dependencies	minor	0.254 → 0.256
wit-dylib (source)	dependencies	minor	0.254 → 0.256
wit-parser (source)	workspace.dependencies	minor	0.254 → 0.256

---

Release Notes

clap-rs/clap (clap)

v4.6.6

Compare Source

v4.6.5

Compare Source

napi-rs/napi-rs (napi)

v3.12.1

Compare Source

Fixed

• (napi) stop unloading addons with live native code, preserve non-Error rejections, and add the wasm teardown barrier (#​3423)
• (wasi) avoid randomness during module registration (#​3447)

v3.12.0

Compare Source

Added

• (cli) support non-threaded WASI targets (#​3353)

DelSkayn/rquickjs (rquickjs)

v0.12.2

Compare Source

Added

• Added TypedArray<U8Clamped> support for Uint8ClampedArray, obtainable via TypedArray::from_object and matched by is_typed_array like other typed array classes

Fixed

• Fixed rquickjs-sys host build failing during cross-compilation by reusing bundled bindings for the host target instead of running bindgen with a mismatched libclang #709

algesten/ureq (ureq)

v3.4.0

Compare Source

• Seal RequestExt (technically breaking) #​1189
  • Send canonical Basic authentication scheme to CONNECT proxies #​1185
  • Establish target TLS through HTTPS CONNECT proxies #​1183
  • Update rustls-platform-verifier to 0.7.0 #​1174
  • Fix pooled connections never aging out according to max_idle_age #​1172
  • Strip brackets from IPv6-literal hosts before TLS SNI/ServerName #​1171
  • RequestExt::middleware_config for conf inside middleware #​1169

bytecodealliance/wasmtime (wasi-preview1-component-adapter-provider)

v47.0.3

Compare Source

47.0.3

Released 2026-07-31.

Fixed

• Stores can mix up type indices between engines.
  GHSA-hgjw-h833-99q9

• Preemption and traps during bulk operations enable breaking internal VM state.
  GHSA-2hw9-mc66-jc2q

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.