[dependabot]

Bumps the cargo group with 1 update: wasm-bindgen.

Updates wasm-bindgen from 0.2.129 to 0.2.130

Release notes

Sourced from wasm-bindgen's releases.

0.2.130

Added

• A borrowed number, bool, char or borrowed string crosses by copy, so &f64, &Option<T>, &Nullable<T>, Option<&f64> and Option<&Nullable<T>> are argument types, and an experimental_generic_mono import taking &T accepts T = f64, Option<f64> or Nullable<String>, as std's contains(&T) does. #5436

• Added a rejection type parameter to js_sys::Promise<T, E = JsValue>, mirrored on JsFuture<T, E>, PromiseState<T, E> and PromiseWithResolvers<T, E>. Awaiting a Promise<T, E> yields Result<T, E>, converting the rejection reason as an E the same unchecked way the fulfilled value is converted as a T. Both parameters are covariant under Upcast; catch, then_with_reject and the withResolvers reject function receive an E; all_tuple / all_settled_tuple carry a shared E through; and under js_sys_unstable_apis, Promise::new, Promise::reject and Promise::any are typed on the rejection too, any as AggregateError. The default keeps existing Promise<T> code unchanged. PromiseWithResolvers<T, E> is invariant in both, since its resolve and reject functions take them, and JsFuture<T, E> is UnwindSafe whenever T and E are. #5426

• Added the --js-string-builtins CLI flag, importing static_string constants as JS String Builtins string constants from wasm:js/string-constants instead of defining them in the JS glue. With reference types, static_string constants now occupy fixed externref table slots filled in when the module is instantiated, so cloning and dropping them is free and never calls into JS. #5401

• Added Nullable<T>, re-exported as js_sys::Nullable, for a T | null value at the JS boundary, as Option<T> is for T | undefined, with Option<Nullable<T>> for T | null | undefined. Both are accepted wherever Option<T> is, for every T and in every position: JS null is Nullable::Null and is sent back as null, while undefined into a plain Nullable<T> goes to T's own conversion. A plain Option<T> still reads both undefined and null as None and writes None as undefined; the Option layer of Option<Nullable<T>> treats only undefined as None, since null has to reach the Nullable layer. Option<T> converts from and into Nullable<T>, and JsNullable<T> converts from both and into Option<Nullable<T>> for T: JsGeneric. The API follows Option's, including ok_or, and_then, filter, as_deref, take, replace and IntoIterator, and --cfg wasm_bindgen_unstable_try_trait enables ? on nightly. NullableIntoWasmAbi / NullableFromWasmAbi carry Nullable<T>'s null for every T, and are supertraits of JsStringLike and the js-sys

... (truncated)

Changelog

Sourced from wasm-bindgen's changelog.

0.2.130

Added

• A borrowed number, bool, char or borrowed string crosses by copy, so &f64, &Option<T>, &Nullable<T>, Option<&f64> and Option<&Nullable<T>> are argument types, and an experimental_generic_mono import taking &T accepts T = f64, Option<f64> or Nullable<String>, as std's contains(&T) does. #5436

• Added a rejection type parameter to js_sys::Promise<T, E = JsValue>, mirrored on JsFuture<T, E>, PromiseState<T, E> and PromiseWithResolvers<T, E>. Awaiting a Promise<T, E> yields Result<T, E>, converting the rejection reason as an E the same unchecked way the fulfilled value is converted as a T. Both parameters are covariant under Upcast; catch, then_with_reject and the withResolvers reject function receive an E; all_tuple / all_settled_tuple carry a shared E through; and under js_sys_unstable_apis, Promise::new, Promise::reject and Promise::any are typed on the rejection too, any as AggregateError. The default keeps existing Promise<T> code unchanged. PromiseWithResolvers<T, E> is invariant in both, since its resolve and reject functions take them, and JsFuture<T, E> is UnwindSafe whenever T and E are. #5426

• Added the --js-string-builtins CLI flag, importing static_string constants as JS String Builtins string constants from wasm:js/string-constants instead of defining them in the JS glue. With reference types, static_string constants now occupy fixed externref table slots filled in when the module is instantiated, so cloning and dropping them is free and never calls into JS. #5401

• Added Nullable<T>, re-exported as js_sys::Nullable, for a T | null value at the JS boundary, as Option<T> is for T | undefined, with Option<Nullable<T>> for T | null | undefined. Both are accepted wherever Option<T> is, for every T and in every position: JS null is Nullable::Null and is sent back as null, while undefined into a plain Nullable<T> goes to T's own conversion. A plain Option<T> still reads both undefined and null as None and writes None as undefined; the Option layer of Option<Nullable<T>> treats only undefined as None, since null has to reach the Nullable layer. Option<T> converts from and into Nullable<T>, and JsNullable<T> converts from both and into Option<Nullable<T>> for T: JsGeneric. The API follows Option's, including ok_or, and_then, filter, as_deref, take, replace and IntoIterator, and --cfg wasm_bindgen_unstable_try_trait enables ? on nightly. NullableIntoWasmAbi / NullableFromWasmAbi carry Nullable<T>'s null

... (truncated)

Commits

• c93b8ae Release 0.2.130 (#5418)
• f4f4d33 Rework the js-sys Temporal bindings against the final specification (#5402)
• 7e9536a Fill in the upcasts between Rust carriers, optional carriers and JS values (#...
• 50dd6a0 Fix UpcastFrom soundness via lifetime-faithful ErasableGeneric repr (#5178)
• 5a9fbdf Borrowed scalars and optionals cross by copy, so a mono &T import takes any e...
• 4bc5371 Check wasm-bindgen-bot auto-merge when do not land is removed (#5430)
• edc57f8 Loosen the JsGeneric bounds on js-sys Function slots and type-level positions...
• b2e142f Share one in-flight initialization across concurrent __wbg_init calls (#5429)
• 1859ca8 Add a rejection type parameter to js_sys::Promise<T, E> (#5426)
• bc6df41 Remove the strict Option cfg so Option<T> reads null as None again (#5428)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: eb0ff1c0-98a5-4b4b-b5b4-4383b836f193

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-07T00:55:27.655177Z	706ab55	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud