deps(wasm): bump the all group across 1 directory with 11 updates

[dependabot]

Bumps the all group with 11 updates in the /core/wren-core-wasm directory:

Package	From	To
object_store	0.13.2	0.14.1
arrow	58.1.0	59.1.0
parquet	58.1.0	59.1.0
tokio	1.51.1	1.53.0
bytes	1.11.1	1.12.1
serde	1.0.228	1.0.229
serde_json	1.0.149	1.0.150
chrono	0.4.44	0.4.45
log	0.4.29	0.4.33
async-trait	0.1.89	0.1.91
hashbrown	0.17.0	0.17.1

Updates object_store from 0.13.2 to 0.14.1

Release notes

Sourced from object_store's releases.

object_store v0.14.1

Changelog

v0.14.1 (2026-07-10)

Full Changelog

Implemented enhancements:

• Cache Azure user delegation key for SAS signing #800
• Add deregister to ObjectStoreRegistry #795
• Support for S3 dual-stack endpoints #779
• Coalesce contiguous ranges in LocalFileSystem::get_ranges #778
• Support for HF Storage Buckets #706

Fixed bugs:

• Clippy failing on main #798
• Upgrade quick-xml to resolve RUSTSEC-2026-0194 and RUSTSEC-2026-0195 #786
• InMemory and LocalFileSystem return unquoted ETags, violating RFC 9110 #769

Closed issues:

• Bump quick-xml to 0.41.0 for RustSec advisories #787

Merged pull requests:

• Pin Rust toolchain to 1.97.0 and fix clippy #799 (alamb)
• chore: reduce lock hold time in DefaultObjectStoreRegistry::deregister #792 (kszucs)
• Do not explicitly add Host header when making requests with S3Builder #790 (ntjohnson1)
• impl HttpError::new_boxed to provide user with ability to ctor from already boxed error #789 (DoumanAsh)

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.14.0 (2026-06-18)

Full Changelog

Breaking changes:

• refactor!: remove cloud feature alias #751 (kevinjqliu)
• Add Extensions in *Result objects #743 (criccomini)
• Make reqwest optional #724 (awesterb)
• Pluggable Crypto / Update reqwest 0.13 #707 (goffrie)
• Add CRC64NVME checksum support #633 (kdn36)

Implemented enhancements:

• Support PutMultipartOptions for MultipartStore::create_multipart #745
• Supporting CPKs for Azure Blob Requests #741
• Support Extensions in *Result objects #740
• Implement Signer on PrefixStore #738
• Make reqwest optional #723
• Expose azure::split_sas for custom SAS credential providers #720
• GCS: support bearer-token auth in parse_url_opts without bypassing default option handling #716
• Custom credentials for signing cannot be provided to GCP stores #698
• Read timeouts are not supported #680
• AWS_REQUEST_PAYER="requester" vs Boolean #668
• Reliable file writes for LocalFileSystem: explicit close error checking and opt-in sync #661
• infer use_fabric_endpoint based on URI containing "dfs.fabric.microsoft.com" #658
• Support CRC checksum #611
• Change crypto provider from ring to aws-rust-lc #413

... (truncated)

Commits

• c7316d2 Update version to 0.14.1 and add CHANGELOG (#794)
• c66dd12 Cache Azure user delegation key for SAS signing (#781)
• 7a7deea Do not explicitly add Host header when making requests with S3Builder (#790)
• 19be0b1 Update release process to use RC tags (#796)
• e3b8561 Add automatic GitHub release workflow (#797)
• e64e8e3 Pin Rust toolchain to 1.97.0 and fix clippy useless_borrows_in_formatting (#799)
• 18102f3 impl HttpError::new_boxed to provide user with ability to ctor from already b...
• 7e854ef fix(aws): recognize S3 dual-stack endpoints in URL parsing (#780)
• 09adc41 Reduce lock hold time in DefaultObjectStoreRegistry::deregister (#792)
• c2048e0 feat: add deregister to ObjectStoreRegistry (#784)
• Additional commits viewable in compare view

Updates arrow from 58.1.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates parquet from 58.1.0 to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates tokio from 1.51.1 to 1.53.0

Release notes

Sourced from tokio's releases.

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

• fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
• metrics: add task schedule latency metric (#7986)
• net: add SocketAddr methods to Unix sockets (#8144)

Changed

• io: add #[inline] to IO trait impls for in-memory types (#8242)
• net: implement UCred::pid on FreeBSD (#8086)
• net: support Nuttx target os (#8259)
• signal: refactor global variables on Windows (#8231)
• sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
• taskdump: support taskdumps on s390x (#8192)
• time: add #[track_caller] to timeout_at() (#8077)
• time: consolidate mutex locks on spurious poll (#8124)
• time: defer waker clone on spurious poll (#8107)
• time: move lazy-registration state into Sleep (#8132)
• tracing: remove unnecessary span clone (#8126)

Fixed

• io: do not treat zero-length reads as EOF in Chain (#8251)
• net: use getpeereid for QNX peer credentials (#8270)
• runtime: avoid illegal state in FastRand (#8078)
• sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
• taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
• time: avoid stack overflow in runtime constructor (#8093)
• time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

• fs: use io-uring for fs::try_exists (#8080)
• fs: use io-uring for renaming files (#7800)
• rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

• docs: clarify cancel safety wording (#8181)
• fs: clarify create_dir_all succeeds if path exists (#8149)
• io: add warning about stdout reordering with multiple handles (#8276)
• net: document pipe try_read*/try_write* readiness behavior (#8032)
• runtime: document interaction with fork() (#8202)
• sync: clarify broadcast lagging semantics (#8239)
• sync: document memory ordering guarantees for Semaphore (#8119)
• task: explain why yield_now defers its waker (#8254)
• time: add panic docs to timeout_at() (#8077)

... (truncated)

Commits

• be689a3 chore: prepare Tokio v1.53.0 (#8294)
• 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
• f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
• efdba5f chore: prepare Tokio v1.52.4 (#8289)
• b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
• 7bcd2d3 taskdump: remove crate disambiguators from output (#8288)
• f84b209 chore: prepare Tokio v1.51.4 (#8286)
• eacb98e runtime: don't skip the driver when before_park schedules work (#8222)
• 5e16ee0 task: avoid replacing the JoinQueue waker in try_join_next (#8279)
• 88212ab sync: document memory ordering guarantees for Semaphore (#8119)
• Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

• Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

• Add BytesMut::extend_from_within() (#818)
• Add BytesMut::try_unsplit() (#746)

Fixed

• Fix panic in get_int if nbytes is zero (#806)

Changed

• Pass vtable data by value (#826)
• Exclude development scripts from published package (#810)

Documented

• Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)

Commits

• 76c0fbb Release bytes v1.12.1 (#838)
• 924c82b Handle unwinding from Box::new (#837)
• 91402ce Release bytes v1.12.0 (#831)
• 2256e6d chore: add safety comments on unsafe blocks (#827)
• 245adff Pass vtable data by value (#826)
• 00cc5ff Implement BytesMut::extend_from_within (#818)
• 5b79d31 Merge tag 'v1.11.1'
• 804ee6d Make try_unsplit method public (#746)
• fd426ca Exclude development scripts from published package (#810)
• b4ed70d Add test for copy_to_bytes() -> BytesMut avoiding clone (#809)
• Additional commits viewable in compare view

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

• Update to syn 3

Commits

• 7fc3b4c Release 1.0.229
• 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
• 6dec3b7 Update to syn 3
• cfe6692 Resolve mut_mut pedantic clippy lint
• 1023d07 Update actions/upload-artifact@v6 -> v7
• dd682c2 Update actions/checkout@v6 -> v7
• 5f0f18b Update ui test suite to nightly-2026-06-01
• 63a1498 Regenerate stderr with trybuild normalization fixes
• fa7da4a Fix unused_features warning
• 6b1a178 Unpin CI miri toolchain
• Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

• Reject non-string enum object keys (#1324, thanks @​puneetdixit200)

Commits

• a1ae73a Release 1.0.150
• 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
• 2037b63 Reject non-string enum object keys
• 5d30df6 Resolve manual_assert_eq pedantic clippy lint
• dc8003a Raise required compiler for preserve_order feature to 1.85
• a42fa98 Unpin CI miri toolchain
• 684a60e Pin CI miri to nightly-2026-02-11
• 7c7da33 Raise required compiler to Rust 1.71
• acf4850 Simplify Number::is_f64
• 6b8ceab Resolve unnecessary_map_or clippy lint
• Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

• fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @​SAY-5 in chronotope/chrono#1787
• tz_data: fix tzdata locations on Android by @​caruschalalamove in chronotope/chrono#1789

Commits

• 1703382 Prepare 0.4.45 release
• 881f9ab tz_data: fix tzdata locations on Android
• f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
• c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
• 120686c Bump codecov/codecov-action from 5 to 6
• See full diff in compare view

Updates log from 0.4.29 to 0.4.33

Release notes

Sourced from log's releases.

0.4.32

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in rust-lang/log#729
• Prepare for 0.4.32 release by @​KodrAus in rust-lang/log#730

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

• fix typos in kv compile errors and log documentation by @​Isvane in rust-lang/log#726
• Leverage static str key when possible by @​tisonkun in rust-lang/log#727
• Prepare for 0.4.31 release by @​KodrAus in rust-lang/log#728

New Contributors

• @​Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

• Support capturing of std::net types by @​KodrAus in rust-lang/log#724

New Contributors

• @​V0ldek made their first contribution in rust-lang/log#720
• @​woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

• MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

• Fixed key comparison by @​matteo-zeggiotti-ok in rust-lang/log#732

New Contributors

• @​matteo-zeggiotti-ok made their first contribution in rust-lang/log#732

Full Changelog: https://github.com/rust-lang/log/compa...

Description has been truncated