Skip to content

chore(deps): update dependency wasm-bindgen/wasm-pack to v0.15.0#94

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/wasm-bindgen-wasm-pack-0.x
Open

chore(deps): update dependency wasm-bindgen/wasm-pack to v0.15.0#94
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/wasm-bindgen-wasm-pack-0.x

Conversation

@renovate

@renovate renovate Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
wasm-bindgen/wasm-pack minor 0.13.10.15.0

Release Notes

wasm-bindgen/wasm-pack (wasm-bindgen/wasm-pack)

v0.15.0

Compare Source

  • ✨ Features

    • Add wasm64-unknown-unknown target support - audreyt, pull/1553

      Parameterizes the target triple in cargo_build_wasm() and cargo_build_wasm_tests(), extracts --target from extra options, adds --enable-memory64 to wasm-opt args for wasm64 targets, and dynamically constructs the CARGO_TARGET_*_RUNNER env var from the target triple.

    • Add --panic-unwind flag to build and test commands - guybedford, pull/1572

    • Move wasm-pack-template into the repo - guybedford, pull/1573

      Vendors the project template directly into this repository so wasm-pack new no longer depends on a separate external template repo.

  • 🤕 Fixes

    • Replace deprecated binary-install and add release auto-publish - guybedford, pull/1579

      The 0.14.0 npm package shipped with the old drager/wasm-pack release URL and was never republished after the repository moved, so npm install -g wasm-pack failed with a 404. This inlines the install/run logic into npm/binary.js, drops the deprecated binary-install dependency (which pulled in unmaintained rimraf@3, glob@7, inflight, and tar@6), promotes tar to a real dependency, and adds release workflow automation so the npm package no longer requires a manual npm publish.

    • Make init.sh POSIX-compatible and stop mangling $VERSION - guybedford, pull/1578

    • Add trailing newline in package.json - joaofreires, pull/1162

    • Fix dragerwasm-bindgen in URLs - akesling, pull/1571

  • 🛠️ Maintenance

    • Bump follow-redirects from 1.15.11 to 1.16.0 in /npm - [dependabot], pull/1565

    • Bump rustls-webpki from 0.103.9 to 0.103.13 - [dependabot], pull/1570

    • Bump brace-expansion from 1.1.12 to 1.1.14 in /npm - [dependabot], pull/1574

    • Bump tar from 0.4.44 to 0.4.45 - [dependabot], pull/1559

    • Bump time from 0.3.45 to 0.3.47 - [dependabot], pull/1549

    • Bump minimatch from 3.1.2 to 3.1.5 in /npm - [dependabot], pull/1555

  • 📖 Documentation

    • Update documentation and references to the new GitHub repo - [qinyuhang], pull/1567

    • Fix typo in prerequisites documentation - pRizz, pull/1545

v0.14.0

Compare Source

  • ✨ Features

    • Support arbitrary wasm targets (WASI support) - RReverser, pull/1524

      Allows building for targets other than wasm32-unknown-unknown, enabling WASI and other custom wasm targets.

    • macOS ARM (aarch64-apple-darwin) build support - kaleidawave, pull/1529

      Adds native Apple Silicon support in release builds and NPM package.

    • Allow --split-linked-modules flag for wasm-bindgen - codeart1st, pull/1443

    • Custom build profile support - rafaelbeckel, pull/1428

      Allows using custom cargo profiles via --profile.

  • 🤕 Fixes

  • 🛠️ Maintenance

    • Update dependencies to latest versions - [drager], pull/1536

    • Security workflow permissions fixes - [drager]

    • Bump ring from 0.17.8 to 0.17.14 - dependabot, pull/1516

    • Bump brace-expansion from 1.1.11 to 1.1.12 in /npm - dependabot, pull/1515

    • Bump rustls from 0.23.16 to 0.23.18 - dependabot, pull/1451

    • Fix tar vulnerability (CVE-2026-23745) in npm package

      Override tar dependency to ^7.5.3 to fix arbitrary file overwrite and symlink poisoning vulnerability (GHSA-8qq5-rm4j-mr97).

    • Fix axios vulnerabilities in npm package

      Override axios dependency to ^0.30.0 to fix SSRF/credential leakage via absolute URL and XSRF-TOKEN leakage (CSRF) vulnerabilities.

  • 📖 Documentation


Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/wasm-bindgen-wasm-pack-0.x branch from 008a208 to 2602911 Compare June 15, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants