Merge branch 'main' into dependabot/cargo/wasmparser-0.253.0

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -39,12 +39,12 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
+        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
+        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
         with:
           category: "/language:${{ matrix.language }}"

Cargo.lock

@@ -19,9 +19,9 @@ path = "src/bin/tw.rs"
 # Pinned to match typed-wasm-verify's wasmparser line exactly; the wasm
 # tooling 0.x series ships API breaks on minor bumps, so keep producer
 # and verifier on the same locked version.
-wasm-encoder = "=0.252.0"
+wasm-encoder = "=0.253.0"
 # WAT (text wasm) rendering for `tw build --emit wat` (Phase 1 deliverable 4, #125).
-wasmprinter = "=0.252.0"
+wasmprinter = "=0.253.0"
 # The producer reuses the verifier's own carrier encoders so the emitted
 # typedwasm.regions / typedwasm.access-sites bytes cannot drift from the
 # decoder the verifier runs. `unstable-l2` gates those encoders.

crates/typed-wasm-codegen/Cargo.toml

@@ -50,4 +50,4 @@ wasmparser = "=0.253.0"
 thiserror = "2"
 
 [dev-dependencies]
-wasm-encoder = "=0.252.0"
+wasm-encoder = "=0.253.0"