fix(deps): update rust-wasm-bindgen monorepo

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
wasm-bindgen (source)	dependencies	patch	=0.2.126 → =0.2.128
wasm-bindgen-futures (source)	dependencies	patch	=0.4.76 → =0.4.78
wasm-bindgen-test	dev-dependencies	patch	0.3.76 → 0.3.78

---

Release Notes

wasm-bindgen/wasm-bindgen (wasm-bindgen)

v0.2.128

Compare Source

Added

• Added OffscreenCanvas overloads for the WebGL texImage2D, texSubImage2D,
  texImage3D and texSubImage3D functions, matching the TexImageSource
  typedef in the WebGL specification.
  #​5312

• Added --split-debug-info to the CLI. This option extracts the DWARF debug
  info to a separate *_bg.debug.wasm file. Use --debug-info-url to set
  the recorded URL for the debug info. #​5279

• Added #[wasm_bindgen(experimental_generic_mono)] for imported functions,
  which binds a generic import once per monomorphisation instead of erasing
  its type parameters to JsValue. It can be applied to an individual import
  or to a whole extern "C" block, which every generic function in the block
  then inherits. Each instantiation gets its own descriptor, so arguments and
  return values are marshalled at their concrete types (a u32 crosses as a
  number, a String as a string) rather than being boxed. Trait bounds,
  where predicates (including higher-ranked ones), associated-type
  projections, lifetime parameters, argument-position impl Trait, raw
  callbacks with owned generic inputs and returns, async, catch, and
  slice_to_array are all supported; see
  the guide
  for the supported surface and the shapes that are rejected. The attribute
  is experimental and may change as it stabilizes.
  #​5230
  #​5272
  #​5314

• Added the experimental, sealed JsStringLike marker trait — implemented for
  String/&str (and js_sys::JsString/&js_sys::JsString in js-sys) —
  as a bound for experimental_generic_mono imports that accept any string
  shape at its native wire format.

• #[wasm_bindgen(experimental_generic_mono)] now supports class-level generic
  parameters: an imported type that is itself generic (type Holder<T>),
  used as a method receiver (this: &Holder<T>), or as the return type of a
  constructor or self-returning static method (fn new<T>(value: T) -> Holder<T>). See Class-level generics
  in the guide.
  #​5290

• A generic imported type used as a method receiver or a constructor's return
  type may now carry concrete generic arguments (this: &Holder<u32>,
  this: &Holder<u32, T>). The arguments are re-emitted as written, so the
  generated method hangs off impl Holder<u32> rather than the class's own
  parameter defaults.
  #​5290

• Added experimental JSPI (JS Promise Integration) support: using it emits a
  compiler warning noting the experimental status.
  Supports #[wasm_bindgen(jspi)] on exports (sync or async), within which
  a #[wasm_bindgen(suspending)] import call can suspend to the JS event
  loop until its Promise settles. js_sys::futures::jspi_block_on_promise
  also suspends on any Promise inside a synchronous function, while
  spawn_local is context-aware: tasks spawned from within a JSPI context
  support synchronous JSPI suspensions throughout their call trees.
  Compatible with catch (rejections as Err), async, and
  panic=unwind.
  #​5193

• Added a --ts-typed-array-buffers CLI flag to declare owned typed-array
  return values (e.g. Vec<u8>) as Uint8Array<ArrayBuffer> in generated
  TypeScript, since they are always copied into a fresh, non-shared
  ArrayBuffer. Requires TypeScript 5.7+.
  #​5263

Changed

• Export shim symbols are now mangled with a per-crate hash, so identically
  named exports from different crates (or two versions of one crate) no
  longer fail the link with duplicate-symbol errors; the CLI restores the
  canonical names in the final module. Same-named #[wasm_bindgen(private)]
  structs/enums now coexist (numbered Name, Name2, ... internally in the
  generated bindings), while genuinely conflicting public exports are
  reported as a wasm-bindgen error instead of a wasm-ld failure. Requires
  matching wasm-bindgen and CLI versions (schema bump).
  #​2247

• Setting js_namespace on both an extern "C" block and an item inside it
  is now a hard error. Nested paths must be written in a single attribute,
  e.g. js_namespace = ["a", "b"]. The previous behavior silently dropped
  the block-level namespace.
  #​4324

• Changed WebGPU setImmediates APIs to take immutable u8 slice.
  #​5289

• Changed Web Bluetooth writeValue / writeValueWithResponse /
  writeValueWithoutResponse and WebUSB controlTransferOut / transferOut
  / isochronousTransferOut APIs to take immutable u8 slices.
  #​5309

• Emscripten glue no longer reads wasmExports['name'] inline inside inner
  functions. It now references the asmjs-mangled identifiers emcc's own
  top-level assignWasmExports receiving code binds for every wasm export
  (e.g. ___wbindgen_malloc, ___wbindgen_externrefs), which are the
  canonical DCE-graph pairs: wasm-metadce keeps exactly the exports the
  included glue uses (previously internal exports and the externref table
  could be stripped or left unrenamed by the import/export minifier at -O2,
  breaking at runtime). Hoisted classes are now emitted as =-prefixed
  string value snippets so jsifier declares them as
  export var Class = class Class {...} instead of an export class
  declaration, which crashes emcc's acorn-optimizer under
  -sMODULARIZE=instance.

Fixed

• C-style #[wasm_bindgen] enums in Vec<T> / Box<[T]> now generate
  TypeScript and JSDoc as EnumName[] instead of any[].
  #​5321

• Fixed js-sys failing to compile with no_std and the
  futures-core-03-stream feature enabled, since the feature unconditionally
  pulled in futures-util/std. The std feature of futures-util is now only
  enabled by the js-sys std feature.
  #​5322

• The thread-bootstrap transform is now skipped in Emscripten mode, where the
  Emscripten runtime owns pthread startup and TLS. It previously ran on any
  module with shared memory and aborted the build (failed to find __wasm_init_tls), since Emscripten's linker had already consumed the
  synthetic symbols it looks for.
  #​5315

• Fixed conflicting deprecation messages on web-sys dictionary fields that
  are themselves deprecated: the deprecated builder-style method no longer
  points at an equally-deprecated setter, and the WebAuthn fields removed from
  the specification (such as PublicKeyCredentialRpEntity's icon) now state
  why they are deprecated.
  #​5302

• #[wasm_bindgen] on a struct now reports an actionable error when the path
  to the wasm_bindgen crate cannot be resolved (e.g. when wasm-bindgen is
  only a transitive dependency through web-sys), instead of a confusing
  recursion limit error.
  #​5295

• Fixed js_namespace exports missing from the bundler target's entry module
  re-export list, making namespaces unreachable when importing the package.
  #​5267

• The CLI now reports an actionable error when the __wasm_bindgen_unstable
  custom section is missing from a module that still contains wasm-bindgen
  shims (e.g. stripped by llvm-objcopy --strip-all, which removes all custom
  sections since LLVM 23), instead of the confusing
  import of `X` doesn't have an adapter listed.
  #​5268

• The generated &T handle conversions (IntoWasmAbi/OptionIntoWasmAbi) for
  an imported type with lifetime parameters (type Holder<'a, T>) no longer
  reuse 'a for the reference itself. Previously the impl header declared only
  a fresh 'a plus the type's type parameters, so a type whose lifetime was
  not literally named 'a failed with E0261 against generated code, and one
  that was named 'a had its lifetime forced to unify with the borrow of
  &self — surfacing as E0521 whenever a generic method also had to resolve
  through the same impl.
  #​5290

• An inline lifetime bound on a generic import (fn f<'a: 'b, 'b, T>(..)) is no
  longer dropped from the generated wrapper. Previously the bound was lost while
  the generated shim still declared it, so calling the import failed with
  "lifetime may not live long enough" reported against generated code.
  #​5290

• A type-parameter default on a #[wasm_bindgen(experimental_generic_mono)] import is no
  longer silently ignored. It has no meaning there (every instantiation gets its
  own shim, so there is no single one to default) and rustc's own
  invalid_type_param_default lint cannot see it, since nothing of the original
  signature survives expansion; it is now rejected with the same
  defaults for generic parameters are not allowed here diagnostic rustc gives.
  Defaults on the type-erasure generic path are unaffected, where they remain
  meaningful.
  #​5290

• Fix js-sys wasm64 build with atomics feature.
  #​5274

• Declare initSync in the generated TypeScript definitions for
  --target no-modules, matching the wasm_bindgen.initSync function that
  the JS output already exposes.
  #​5284

• Removed the last panicking code paths from externref table management:
  RefCell::borrow_mut() embedded panic location data (including the source
  path string) in .rodata of optimized builds, which not even wasm-opt
  could remove.
  #​5292

• Fix --no-modules-global being ignored: the custom global name is now used
  for the generated JS binding and TypeScript declarations, and the name is
  validated as a JS identifier.
  #​5286

v0.2.127

Compare Source

Added

• Navigation API
  to web-sys #​5247

• Added riscv64gc-unknown-linux-gnu release artifacts.
  #​5265

• Added JsNullable<T>, modeling WebIDL nullable types (T | null). Both
  null and undefined are treated as absent, per WebIDL's ECMAScript
  conversion rules; the canonical empty value produced from Rust is null.
  web-sys now uses JsNullable<T> instead of JsOption<T> for nullable
  types nested inside generics (e.g. Promise<GpuError?> from
  GPUDevice.popErrorScope()), fixing spec-defined null resolutions being
  treated as present values under JsOption<T>'s strict undefined-only
  semantics. JsNullable<T> participates in the same upcast lattice as
  JsOption<T> (including contravariant closure argument casts), and
  additionally upcasts from Null and from JsOption<T> itself. Imported
  extern types now also upcast into JsOption<JsValue> and
  JsNullable<JsValue>, so catch-all nullable closures can be used where a
  typed callback is expected.
  #​5234

• Added experimental JSPI (JS Promise Integration) support: using it emits a
  compiler warning noting the experimental status.
  Supports #[wasm_bindgen(jspi)] on exports (sync or async), within which
  a #[wasm_bindgen(suspending)] import call can suspend to the JS event
  loop until its Promise settles. js_sys::futures::jspi_block_on_promise
  also suspends on any Promise inside a synchronous function, while
  spawn_local is context-aware: tasks spawned from within a JSPI context
  support synchronous JSPI suspensions throughout their call trees.
  Compatible with catch (rejections as Err), async, and
  panic=unwind.
  #​5193

Changed

• Emscripten output now marks public exports (free functions, classes, enums,
  and namespace roots) with the __export: true and __force: true symbol
  attributes on their addToLibrary entries, instead of mutating
  EXPORTED_FUNCTIONS and pushing to extraLibraryFuncs at library-load time.
  The $initBindgen init closure is kept via __force: true, and private
  symbols (including namespace leaves) carry neither attribute — they remain
  reachable through __deps. Requires an emscripten with __export/__force
  symbol-attribute support.

• Updated WebGPU bindings to the August 2026 spec, including the new
  GPUCommandEncoder::copy_buffer_to_buffer overloads and setImmediates.
  #​5246

• Unstable API overload names now elide name tokens shared by every overload
  variant: LockManager::request_with_callback is now request, and
  request_with_options_and_callback is now request_with_options.
  #​5246

Fixed

• The name property of the JS error thrown for panic=unwind is now set from
  a string literal instead of PanicError.name, so it survives minification.
  #​5260

• Fixed Emscripten builds using pthreads failing to link.
  #​5254

• __wbg_load in web targets now throws a clear error including the HTTP
  status and URL when given a non-ok fetch Response, instead of surfacing a
  misleading MIME-type or Wasm-magic-number error.
  #​5256

• Restored __stack_pointer when an exception unwinds out of a wasm export,
  preventing repeated panic = "unwind" calls from leaking shadow-stack frames
  until the shadow stack is exhausted and calls trap. Node reports
  memory access out of bounds; poisoned instances can instead report
  Module terminated.
  #​5244

• slice_to_array on a &mut slice (which silently discarded JS's writes) or
  on a slice with a generic element type is now a compile error, and strings
  and arrays received by JS (e.g. a Vec<String> return value) no longer make
  a redundant copy of the freshly built value.
  #​5261

• Fixed async imports with non-JS-handle resolved types (e.g.
  async fn f() -> u32;) silently producing garbage since 0.2.109: the
  descriptor named the resolved type instead of the Promise handle that
  actually crosses the ABI.
  #5249

• Fixed catch imports returning i64/u64 throwing a TypeError (and
  panicking in __wbindgen_exn_store) when the JS import throws, since the
  handleError catch path returned undefined which cannot be converted to
  a Wasm i64.
  #​5238

• js_namespace is now part of an imported function's and imported static's
  generated shim name. Two imports with identical Rust signatures that differed
  only in their js_namespace hashed to the same __wbg_<name>_<hash>
  symbol, so they were treated as one binding and one of the two call sites
  silently invoked the wrong JS value.
  #​5250

• Macro hygiene fixes - slice_to_array now works in #![no_std] crates.
  Generated code no longer names core or std unqualified.
  #​5251

• Fixed length prefixes in descriptor strings to count chars rather than
  UTF-8 bytes, so non-ASCII names in js_name/typescript_type no longer
  panic the CLI or mis-bind the generated bindings.
  #​5248

• Fixed threaded Wasm memory layout to reserve wasm-bindgen's internal thread
  page after the module's original initial memory instead of at __heap_base,
  avoiding overlap with allocators that resolve __heap_base/__heap_end at
  link time and treat that range as preexisting heap space.
  #​5225

• Emscripten output now reaches wasm exports through emscripten's wasmExports
  object using bracket (string-literal) access (wasmExports['__wbindgen_start'])
  instead of a local wasm alias with dot access. wasmExports['name'] is the
  form emcc's DCE graph roots and its import/export minifier renames in the JS
  and the wasm together, so the glue now survives and stays consistent under
  -O3/-Os (previously the export names were minified without updating the JS
  call sites, e.g. __wbindgen_start is not defined).

• The emscripten detection marker static is no longer leaked as public API.
  #​5220
  #​5222

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.