build(deps): bump the dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dependencies group with 4 updates in the / directory: magnus, bytes, wit-component and wasm-compose.

Updates magnus from 0.8.2 to 0.9.0

Release notes

Sourced from magnus's releases.

0.9.0

Magnus 0.9.0 adds a handful of features and fixes, otherwise it is largely compatible with 0.8.

Magnus is a Rust library providing a high-level easy-to-use interface to the C API of the Ruby programming language. Magnus lets you write Ruby extension libraries (or 'gems') in Rust, or embed Ruby in your Rust program.

New Features

The debug module implements functions from Ruby's debug.h header, including Ruby::profile_frames, Ruby::debug_inspector_open, Ruby::tracepoint_new, and Ruby::postponed_job_preregister.

Conversions for C strings with Ruby::str_from_c_str, RString::to_c_string, and implementations of IntoRString for &CStr, IntoValue for &CStr, and TryConvert for CString.

RString::modify_expand to grow the capacity of a Ruby string.

RTypedData::as_ptr/typed_data::Obj::as_ptr to get the raw pointer to Rust data that has been wrapped as a Ruby object.

API changes

Minimum supported Rust version is now 1.85.

The supported Ruby versions are now 4.0, 3.4, 3.3, and 3.2. Magnus will compile with Ruby 3.1, but tests are no longer run for Ruby 3.1. Small patches will be accepted for Ruby 3.1 compatibility. Magnus will no longer compile with Ruby 2.7 and 3.0. As of the time of this release Magnus works with the unreleased Ruby 4.1. It is possible that changes in this unreleased version of Ruby may break compatibility before the release of 4.1.

Magnus is no longer tested on macOS Intel, though it should still compile and patches will be accepted for macOS Intel compatibility.

The 'old-api' feature, which previously disabled deprecation warnings for the old api (largely the ability to create Ruby objects with associated functions, like RArray::new) now enables/disables the old api, with deprecation warnings no longer optional. The old api will be removed entirely in the next (0.10.0) version of Magnus.

Ruby::define_global_function now returns Result<(), Error> rather than ().

RArray::each, has been removed, use ary.into_iter() or ary.enumeratorize(\"each\", ()) instead.

RStruct::get and RStruct::set have been removed. While they had a small performance benefit they posed a compatibility hazard with future versions of Ruby. They should be easily swapped for the directly compatible RStruct::aref and RStruct::aset.

The data_type_builder! and r_string! macros have been deprecated in favour of functions taking &'static CStr now that C-string literals are available in Rust. See the changelog for more details and other deprecations.

---

See the changelog for all the changes.

Thanks

@​ankane for support for conversions to/from CString and &CStr @​gjtorikian for a fix for compiling with the musl C standard library on 32-bit systems @​pboling for a fix for the future Ruby 4.1 release

Changelog

Sourced from magnus's changelog.

[0.9.0] - 2026-09-22

Added

• Ruby::profile_frames to collect a lightweight backtrace for profiling.
• Thread::profile_frames to collect a lightweight backtrace for profiling a specific thread.
• Ruby::debug_inspector_open to acquire a DebugInspector struct that gives access to the current frame's self, class, binding, and instruction sequence.
• Ruby::tracepoint_new and TracePoint to access Ruby's TracePoint api.
• Ruby::postponed_job_preregister and PostponedJobHandle::trigger to register and trigger postponed jobs that can be triggered from non-Ruby threads/without the GVL to be run later from a Ruby thread with the GVL.
• Conversions for C strings with Ruby::str_from_c_str, RString::to_c_string, and implementations of IntoRString for &CStr, IntoValue for &CStr, and TryConvert for CString.
• RString::modify_expand to grow the capacity of a Ruby string.
• RTypedData::as_ptr/typed_data::Obj::as_ptr to get the raw pointer to Rust data wrapped as a Ruby object.

Changed

• Minimum supported Rust version is now 1.85.
• Magnus will no longer compile with Ruby 2.7 and 3.0
• 'old-api' feature, which previously disabled deprecation warnings for the old api now enables/disables the old api, with deprecation warnings no longer optional.
• Ruby::define_global_function now returns Result<(), Error> rather than ().
• Ruby::get no longer caches the GVL state of the current thread.

Deprecated

• The data_type_builder! macro. Please use DataTypeBuilder::<Example>::new(c\"example\") instead.
• The r_string! macro. Please use Ruby::utf8_str_new_static(c\"example\") instead.
• gc::register_mark_object. Please use Ruby::gc_register_mark_object instead.
• gc::register_address. Please use Ruby::gc_register_address instead.
• gc::unregister_address. Please use Ruby::gc_unregister_address instead.
• IntoValue::into_value_unchecked, IntoRString::into_r_string_unchecked, IntoSymbol::into_symbol_unchecked, and IntoId::into_id_unchecked. Please use the _with variant passing &Ruby::get_unchecked(), e.g. "example".into_r_string_with(&Ruby::get_unchecked()).

Removed

• RArray::each, use ary.into_iter() or ary.enumeratorize(\"each\", ()) instead.
• RStruct::get/RStruct::set, use RStruct::aref/RStruct::aset instead.

Fixed

• Fixed error compiling on 32-bit musl platforms (e.g. arm-linux-musl).

Security

Commits

• 4cd3e9d update changelog for 0.9.0 release
• da562cc remove redundant homepage in Cargo.toml
• 7ae0c5e TypedData::as_ptr
• 9042b82 add RString::modify_expand
• 347b986 protect call to rb_define_global_function
• 94114ec protect call to rb_define_variable
• f6a6b55 docs improvements
• 53ad446 update changelog for c-string conversions
• 4af78a1 fix compilation error for Ruby 3.1
• 21f1e7a update function index and changelog for TracePoint additions
• Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• 91402ce Release bytes v1.12.0 (#831)
• 2256e6d chore: add safety comments on unsafe blocks (#827)
• 245adff Pass vtable data by value (#826)
• 00cc5ff Implement BytesMut::extend_from_within (#818)
• 5b79d31 Merge tag 'v1.11.1'
• 804ee6d Make try_unsplit method public (#746)
• fd426ca Exclude development scripts from published package (#810)
• b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
• Additional commits viewable in compare view

Updates wit-component from 0.244.0 to 0.259.0

Commits

• See full diff in compare view

Updates wasm-compose from 0.219.2 to 0.243.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions