Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps wasmtime from 39.0.1 to 40.0.0.

Release notes

Sourced from wasmtime's releases.

v40.0.0

40.0.0

Released 2025-12-20.

Added

  • WASIp3 support for wasi:http now implements Response::from_http to convert from standard Rust types to WASI types. #12063

  • Cranelift now supports a "patchable" ABI which has a maximum number of arguments and clobbers no registers. This is paired as well with a new patchable_call instruction which supports being turned into NOPs at runtime. #12061 #12101

Changed

  • Support for the WebAssembly threads proposal is now classified as tier 2 by default. Additionally creation of SharedMemory is disabled by deafult behind a new config knob/CLI flag. #12036

  • A variety of peephole-style optimizations have been added to Cranelift's optimization passes. #11994 #11995 #11996 #11997 #11998 #11999 #12000 #12006 #12008

  • Component host functions have been slightly optimized to remove an Arc clone and reduce contention. #11987

  • Support for component-model-async has been updated to account for the changes specified in WebAssembly/component-model#578. This means that historical binaries using WASIp3, for example, are no longer valid. Recompilation of historical components will be required and source-level changes may also be required in some circumstances. #12031 #12043

  • The UnsyncBoxBody type is now used everywhere in wasmtime-wasi-http instead of just in the wasip3 support.

... (truncated)

Changelog

Sourced from wasmtime's changelog.

41.0.0

Unreleased.

Added

Changed


Release notes for previous releases of Wasmtime can be found on the respective release branches of the Wasmtime repository.

... (truncated)

Commits
  • 0807b00 Release Wasmtime 40.0.0 (#12192)
  • fadd22a [40.0.0] trap on blocking call in sync task before return (#12144)
  • c242041 Add release notes (#12132)
  • ac3358b Fix various broken links in docs. (#12125)
  • 058a9bc Components: implement exception-tag translation in core module types. (#12122)
  • 54826c0 Update wasm-tools/wit-bindgen dependencies (#12121)
  • 245580e Cranelift: support fuzzing patchable_call. (#12118)
  • 1d73897 Use core::convert::Infallible instead of our own Uninhabited type (#12115)
  • 9a6aa39 Revert "Cranelift: Reassociate long and narrow chains of operations into shal...
  • 91abf8c trap on read from and write to intra-component stream/future (#12117)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 5, 2026
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0068f1a611

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

serde_json = "1.0"
metrics = "0.24"
wasmtime = { version = "39.0.1", features = ["cache", "cranelift"] }
wasmtime = { version = "40.0.0", features = ["cache", "cranelift"] }

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep wasmtime/wasmtime-wasi versions in sync

Compiling crates/runtime uses wasmtime and wasmtime_wasi together (e.g., passing a wasmtime::Linker into wasmtime_wasi::p1::add_to_linker_sync in crates/runtime/src/runtime.rs). With wasmtime bumped to 40.0.0 but wasmtime-wasi still pinned to 39.0.1, Cargo resolves two different wasmtime versions, so the Linker types don’t match and this fails to compile when building the runtime crate. Please update wasmtime-wasi to 40.0.0 (or keep wasmtime at 39.0.1) to preserve type compatibility.

Useful? React with 👍 / 👎.

@dependabot dependabot bot force-pushed the dependabot/cargo/wasmtime-40.0.0 branch 4 times, most recently from 7b10420 to 9e552a6 Compare January 6, 2026 19:00
Bumps [wasmtime](https://github.com/bytecodealliance/wasmtime) from 39.0.1 to 40.0.0.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/main/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v39.0.1...v40.0.0)

---
updated-dependencies:
- dependency-name: wasmtime
  dependency-version: 40.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/wasmtime-40.0.0 branch from 9e552a6 to 862fb9c Compare January 11, 2026 17:20
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 12, 2026

Superseded by #145.

@dependabot dependabot bot closed this Jan 12, 2026
@dependabot dependabot bot deleted the dependabot/cargo/wasmtime-40.0.0 branch January 12, 2026 03:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant