Skip to content

chore(deps): update dependency wasm-pack to ^0.14.0#857

Merged
keithamus merged 1 commit intomainfrom
renovate/minor-0.14-dependencies
Feb 2, 2026
Merged

chore(deps): update dependency wasm-pack to ^0.14.0#857
keithamus merged 1 commit intomainfrom
renovate/minor-0.14-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 2, 2026

This PR contains the following updates:

Package Change Age Confidence
wasm-pack ^0.13.1^0.14.0 age confidence

Release Notes

drager/wasm-pack (wasm-pack)

v0.14.0

Compare Source

  • ✨ Features

    • Support arbitrary wasm targets (WASI support) - RReverser, pull/1524

      Allows building for targets other than wasm32-unknown-unknown, enabling WASI and other custom wasm targets.

    • macOS ARM (aarch64-apple-darwin) build support - kaleidawave, pull/1529

      Adds native Apple Silicon support in release builds and NPM package.

    • Allow --split-linked-modules flag for wasm-bindgen - codeart1st, pull/1443

    • Custom build profile support - rafaelbeckel, pull/1428

      Allows using custom cargo profiles via --profile.

  • 🤕 Fixes

  • 🛠️ Maintenance

    • Update dependencies to latest versions - [drager], pull/1536

    • Security workflow permissions fixes - [drager]

    • Bump ring from 0.17.8 to 0.17.14 - dependabot, pull/1516

    • Bump brace-expansion from 1.1.11 to 1.1.12 in /npm - dependabot, pull/1515

    • Bump rustls from 0.23.16 to 0.23.18 - dependabot, pull/1451

    • Fix tar vulnerability (CVE-2026-23745) in npm package

      Override tar dependency to ^7.5.3 to fix arbitrary file overwrite and symlink poisoning vulnerability (GHSA-8qq5-rm4j-mr97).

    • Fix axios vulnerabilities in npm package

      Override axios dependency to ^0.30.0 to fix SSRF/credential leakage via absolute URL and XSRF-TOKEN leakage (CSRF) vulnerabilities.

  • 📖 Documentation


Configuration

📅 Schedule: Branch creation - "before 9am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from keithamus as a code owner February 2, 2026 08:41
Copy link
Copy Markdown

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All CI jobs have passed. Approving. (Build jobs were skipped - no Rust files changed)

@keithamus keithamus merged commit 6da5a3e into main Feb 2, 2026
12 checks passed
@keithamus keithamus deleted the renovate/minor-0.14-dependencies branch February 2, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant