fix(deps): update rust dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
oxc_allocator (source)	dependencies	minor	0.131.0 → 0.132.0
oxc_codegen (source)	dependencies	minor	0.131.0 → 0.132.0
oxc_minifier (source)	dependencies	minor	0.131.0 → 0.132.0
oxc_parser (source)	dependencies	minor	0.131.0 → 0.132.0
oxc_span (source)	dependencies	minor	0.131.0 → 0.132.0
tar	build-dependencies	patch	0.4.45 → 0.4.46
wasi-preview1-component-adapter-provider	dependencies	patch	44.0.1 → 44.0.2
wasmtime	workspace.dependencies	patch	44.0.1 → 44.0.2
wasmtime-wasi	workspace.dependencies	patch	44.0.1 → 44.0.2
wasmtime-wizer	dependencies	patch	44.0.1 → 44.0.2
wit-component (source)	dependencies	minor	0.249 → 0.250
wit-dylib (source)	dependencies	minor	0.249 → 0.250
wit-parser (source)	workspace.dependencies	minor	0.249 → 0.250

---

Release Notes

composefs/tar-rs (tar)

v0.4.46

Compare Source

Security

• archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm) by @​cgwalters in #​454

See also GHSA-3cv2-h65g-fgmm

Other changes

• ci: Fix and re-enable reverse dependency testing by @​cgwalters in #​444
• Update astral-tokio-tar requirement from 0.5 to 0.6 by @​dependabot[bot] in #​446
• Update some links by @​atouchet in #​445
• Add support of absolute paths by @​zxvfc in #​426
• docs: Expand notes on concurrent mutations and following symlinks by @​cgwalters in #​453
• Update repo links by @​cgwalters in #​451
• ci: Add crates.io trusted publishing workflow by @​cgwalters in #​456
• Release 0.4.46 by @​cgwalters in #​455

New Contributors

• @​dependabot[bot] made their first contribution in #​446
• @​atouchet made their first contribution in #​445
• @​zxvfc made their first contribution in #​426

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

bytecodealliance/wasmtime (wasi-preview1-component-adapter-provider)

v44.0.2

Compare Source

44.0.2

Released 2026-05-21.

Fixed

• WASI path_open(TRUNCATE) bypasses FilePerms::WRITE host restriction.
  GHSA-2r75-cxrj-cmph

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.