[dependabot]

Bumps the nonbreaking group with 4 updates: brotli, uuid, walrus and swc_core.

Updates brotli from 9.0.0 to 9.1.0

Commits

• See full diff in compare view

Updates uuid from 1.28.0 to 1.29.0

Release notes

Sourced from uuid's releases.

v1.29.0

What's Changed

• Add versioned constructors to NonNilUuid by @​RanaPriyansh in uuid-rs/uuid#919
• Prepare for 1.29.0 release by @​KodrAus in uuid-rs/uuid#920

Full Changelog: uuid-rs/uuid@v1.28.0...v1.29.0

Commits

• 4643e60 Merge pull request #920 from uuid-rs/cargo/v1.29.0
• a3631fd prepare for 1.29.0 release
• 304913e Merge pull request #919 from RanaPriyansh/fix/non-nil-versioned-constructors-901
• d49f963 Reuse existing version tests for NonNilUuid constructors
• 2f02404 Add versioned constructors to NonNilUuid
• See full diff in compare view

Updates walrus from 0.27.2 to 0.27.3

Release notes

Sourced from walrus's releases.

0.27.3

Added

• ModuleConfig::legacy_exceptions turns off support for the legacy exception handling instructions (try, catch, catch_all, delegate and rethrow). It defaults to true, so parsing is unchanged unless it is set to false, in which case modules that use them fail validation.

Changed

• Emitting a module walks each function body once, before emission, to find its size, the locals and data segments it uses, and its ref.func targets, instead of walking every body four times for these. Emission of large modules is roughly 40% faster.
• Parsing builds LocalFunction::instruction_mapping by pushing onto a Vec instead of inserting every operator offset into a BTreeMap. The table's contents are unchanged; parsing large modules is roughly a third faster.
• Parsing skips the serial pre-scan of every function body for legacy catch handler types when the module has no tag with params and no function type with more than one result, or when ModuleConfig::legacy_exceptions is false, since the pre-scan can't register a type then.
• Parsing builds each instruction sequence on a shared scratch stack and moves it into its InstrSeq at its exact size when the block ends, rather than growing every block's Vec one push at a time.
• With the parallel feature, function bodies are parsed and emitted one function per rayon task. Walrus emits functions largest first, so splitting the function list into contiguous chunks left one thread with most of the work, both when emitting and when parsing walrus-emitted modules.

Fixed

• Parsing no longer panics with "No Try instruction found to add catch clause to" on a valid module that has a legacy try with a catch, catch_all or delegate in unreachable code.

Changelog

Sourced from walrus's changelog.

0.27.3

Released 2026-10-24.

Added

• ModuleConfig::legacy_exceptions turns off support for the legacy exception handling instructions (try, catch, catch_all, delegate and rethrow). It defaults to true, so parsing is unchanged unless it is set to false, in which case modules that use them fail validation.

Changed

• Emitting a module walks each function body once, before emission, to find its size, the locals and data segments it uses, and its ref.func targets, instead of walking every body four times for these. Emission of large modules is roughly 40% faster.
• Parsing builds LocalFunction::instruction_mapping by pushing onto a Vec instead of inserting every operator offset into a BTreeMap. The table's contents are unchanged; parsing large modules is roughly a third faster.
• Parsing skips the serial pre-scan of every function body for legacy catch handler types when the module has no tag with params and no function type with more than one result, or when ModuleConfig::legacy_exceptions is false, since the pre-scan can't register a type then.
• Parsing builds each instruction sequence on a shared scratch stack and moves it into its InstrSeq at its exact size when the block ends, rather than growing every block's Vec one push at a time.
• With the parallel feature, function bodies are parsed and emitted one function per rayon task. Walrus emits functions largest first, so splitting the function list into contiguous chunks left one thread with most of the work, both when emitting and when parsing walrus-emitted modules.

Fixed

• Parsing no longer panics with "No Try instruction found to add catch clause to" on a valid module that has a legacy try with a catch, catch_all or delegate in unreachable code.

Commits

• 80ff3de Release 0.27.3
• e4e7759 Remove wasm-bindgen-bot's merge-ready label while a review runs
• 6873dd4 Automate releases through a release PR, tagging and approved trusted publishi...
• 3bc1474 Revert "Enable wasm-bindgen-bot auto-merge on fork PR approvals"
• 0bebb07 Enable wasm-bindgen-bot auto-merge on fork PR approvals
• 37f35f1 perf: build each InstrSeq at its exact size (#328)
• adcb03e perf: skip the legacy catch pre-scan when it can't register a type (#327)
• 9d3ce34 fix: don't panic on a legacy try/catch in unreachable code (#325)
• 8ec621b perf: build instruction_mapping as a sorted Vec instead of a BTreeMap (#326)
• 0e5c8db perf: gather pre-emit facts in one IR walk per function (#330)
• Additional commits viewable in compare view

Updates swc_core from 82.1.1 to 82.2.0

Changelog

Sourced from swc_core's changelog.

[swc_core@v82.2.0] - 2026-10-21

Bug Fixes

• (es/minifier) Release utils API required by registry builds (#12582) (b5a52b9)

[swc_core@v82.1.2] - 2026-10-21

Bug Fixes

• (es/codegen) Emit space after div if rhs starts with a regex (#12544) (dddf716)

• (es/codegen) Preserve optional call type arguments (#12549) (f7bef4d)

• (es/fixer) Preserve TypeScript operand grouping (#12539) (7c4a214)

• (es/fixer) Avoid panicking on recovered parenthesized assignment targets (#12551) (ec34371)

• (es/fixer) Preserve optional chain boundaries (#12550) (01d5630)

• (es/fixer) Wrap function declarations in sloppy-mode loop bodies (#12567) (76ff943)

• (es/minifier) Preserve rest array identity when its reference runs more than once (#12546) (4768dbe)

• (es/minifier) Keep trimLeft and trimRight on string literals (#12574) (663ffb0)

• (es/minifier) Keep directive prologue when merging if returns (#12580) (fd0edaf)

• (es/minifier) Preserve new async and generator (#12558) (8f06994)

• (es/parser) Do not treat optional get/set fields as accessors (#12559) (a2fedec)

• (es/parser) Recover non-entity expressions in TypeScript heritage clauses (#12552) (48586cb)

... (truncated)

Commits

• 1744d5f chore: Publish crates with swc_core v82.2.0
• b5a52b9 fix(es/minifier): release utils API required by registry builds (#12582)
• f5e8a35 chore: Publish crates with swc_core v82.1.2
• 8f06994 fix(es/minifier): Preserve new async and generator (#12558)
• fd0edaf fix(es/minifier): keep directive prologue when merging if returns (#12580)
• ccdc3c1 fix(ts/fast-strip): preserve runtime boundaries during type erasure (#12575)
• d0dbdfa chore(ci): Ignore inapplicable Wasmtime component handle advisory (#12577)
• 76ff943 fix(es/fixer): wrap function declarations in sloppy-mode loop bodies (#12567)
• 663ffb0 fix(es/minifier): keep trimLeft and trimRight on string literals (#12574)
• 644f85a feat(es/minifier): Implement more rules for if-break (#12561)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions