chore(deps): bump wasmtime from 39.0.1 to 41.0.1

[dependabot]

Bumps wasmtime from 39.0.1 to 41.0.1.

Release notes

Sourced from wasmtime's releases.

v41.0.1

41.0.1

Released 2026-01-26.

Fixed

• Fixed a bug in lowering of f64.copysign on x86-64 whereby when combined with an f64.load, the resulting machine code could read 16 bytes rather than 8 bytes. This could result in a segfault when Wasmtime is configured without signals-based traps.

v41.0.0

41.0.0

Released 2026-01-20.

Added

• Support for {Future,Stream}Any in the component model has improved. #12142

• Wasmtime has initial support for breakpoints and single-stepping with the debug feature for guest programs. #12133

• Wasmtime has begun adding a new Error type which is similar to anyhow::Error but supports gracefully handling OOM. Wasmtime still uses anyhow::Error but this will change in the future to wasmtime::Error which will be a distinct type. #12163

• An initial top-level crate for async-debugging guest programs has been added. #12183

Changed

• Cranelift now optimizes redundant select + icmp instructions. #12135

• Synchronous component model functions can no longer block before returning. This implements a change in the upstream specification to the upcoming async support in the component model which places stricter restrictions on non-async functions and their ability to perform blocking operations. #12043

• Frame iteration in debug mode now visits all activations which enables seeing all frames from recursive wasm calls. #12176

... (truncated)

Changelog

Sourced from wasmtime's changelog.

41.0.1

Released 2026-01-26.

Fixed

• Fixed a bug in lowering of f64.copysign on x86-64 whereby when combined with an f64.load, the resulting machine code could read 16 bytes rather than 8 bytes. This could result in a segfault when Wasmtime is configured without signals-based traps.

---

41.0.0

Released 2026-01-20.

Added

• Support for {Future,Stream}Any in the component model has improved. #12142

• Wasmtime has initial support for breakpoints and single-stepping with the debug feature for guest programs. #12133

• Wasmtime has begun adding a new Error type which is similar to anyhow::Error but supports gracefully handling OOM. Wasmtime still uses anyhow::Error but this will change in the future to wasmtime::Error which will be a distinct type. #12163

• An initial top-level crate for async-debugging guest programs has been added. #12183

Changed

• Cranelift now optimizes redundant select + icmp instructions. #12135

• Synchronous component model functions can no longer block before returning. This implements a change in the upstream specification to the upcoming async support in the component model which places stricter restrictions on non-async functions and their ability to perform blocking operations. #12043

• Frame iteration in debug mode now visits all activations which enables seeing all frames from recursive wasm calls. #12176

... (truncated)

Commits

• c30fce8 Release Wasmtime 41.0.1 (#12434)
• 799585f [41.0] Backport Cranelift: x64: fix incorrect load-sinking in copysign oper...
• 3c47640 Add vets for wasmtime-internal-debugger (#12376) (#12389)
• 3dda916 Release Wasmtime 41.0.0 (#12373)
• 309028e [41.0.0] Backport update to WASI 0.3.0-rc-2026-01-06 (#12344)
• 4a67a85 Cranelift: x64: fix user-controlled recursion in cmp emission. (#12333) (#12342)
• 1db4911 Fix ISLE icmp optimization rules for vector inputs (#12335) (#12340)
• 7e98de5 x64: Fix lowering rules for shld (#12321) (#12323)
• 9379396 Insert veneers on arm64 in cranelift-jit where necessary (#12239) (#12320)
• 9656606 Fix Module::image_range to include non-text part of module. (#12302) (#12307)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0c9364dd72

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Align wasmtime-wasi version with wasmtime

The runtime crate now depends on wasmtime = 41.0.1 while keeping wasmtime-wasi = 39.0.1. wasmtime-wasi re-exports/accepts wasmtime types (e.g., WasiCtxBuilder and linker helpers), and the runtime code uses wasmtime::{Engine, Linker, Store} alongside wasmtime_wasi APIs (crates/runtime/src/runtime.rs), so Cargo will compile two different wasmtime versions and the types will not unify. That yields compile-time type mismatches when passing a 41.x Store/Linker into 39.x wasmtime-wasi APIs. Bumping wasmtime-wasi to the matching 41.x line (or pinning both to 39.x) avoids the build break.

Useful? React with 👍 / 👎.

[dependabot]

Superseded by #160.