deps: bump wasmtime from 41.0.4 to 42.0.1

[dependabot]

Bumps wasmtime from 41.0.4 to 42.0.1.

Release notes

Sourced from wasmtime's releases.

v42.0.1

42.0.1

Released 2026-02-25.

Fixed

• Fix some minor bindgen! issues with anyhow: true #12658

v42.0.0

42.0.0

Released 2026-02-20.

Added

• Cranelift now supports bitwise operations on floats on aarch64. #12326

• Cranelift now supports NaN canonicalization of f16 and f128. #12337

• Wasmtime has gained minimal support to implement fixed-length lists in the component model being communicated between composed components. #10619

• Wasmtime's Error and Result types are now built-in to the wasmtime crate and are no longer defined by the anyhow crate. Wasmtime exports a mostly-compatible anyhow-like API at wasmtime::error which is used instead. Wasmtime's own Error handles OOM internally and is foundational part of Wasmtime's work-in-progress support to gracefully handle OOM. #12309

• Wasmtime now exports an extension trait to convert anyhow::Result<T> into wasmtime::Result<T>. #12255

• Wasmtime supports a new bindgen! option to generate bindings specifically with anyhow::Result instead of wasmtime::Result. #12331

• The Nvidia-Cuda execution provider is now supported for the wasi-nn onnx backend. #12044

• Non-exported and private entities can now be accessed through the debugger API. #12367

... (truncated)

Changelog

Sourced from wasmtime's changelog.

42.0.1

Released 2026-02-25.

Fixed

• Fix some minor bindgen! issues with anyhow: true #12658

---

42.0.0

Released 2026-02-24.

Added

• Cranelift now supports bitwise operations on floats on aarch64. #12326

• Cranelift now supports NaN canonicalization of f16 and f128. #12337

• Wasmtime has gained minimal support to implement fixed-length lists in the component model being communicated between composed components. #10619

• Wasmtime's Error and Result types are now built-in to the wasmtime crate and are no longer defined by the anyhow crate. Wasmtime exports a mostly-compatible anyhow-like API at wasmtime::error which is used instead. Wasmtime's own Error handles OOM internally and is foundational part of Wasmtime's work-in-progress support to gracefully handle OOM. #12309

• Wasmtime now exports an extension trait to convert anyhow::Result<T> into wasmtime::Result<T>. #12255

• Wasmtime supports a new bindgen! option to generate bindings specifically with anyhow::Result instead of wasmtime::Result. #12331

• The Nvidia-Cuda execution provider is now supported for the wasi-nn onnx backend. #12044

• Non-exported and private entities can now be accessed through the debugger API. #12367

... (truncated)

Commits

• 6844a83 Release Wasmtime 42.0.1 (#12666)
• 6801aa7 Fix some minor bindgen! issues with anyhow: true (#12658)
• aa3cfe7 Release Wasmtime 42.0.0 (#12627)
• 639c239 [42.0.0] Backport fixes for security advisories. (#12651)
• 1b9d068 Add release notes (#12624)
• cbbe555 Implement TryClone for WasmSubType; use it in the TypeRegistry (#12527)
• b96811d Handle OOM when getting a function type's trampoline type (#12524)
• 6592cf9 Struct locals etc (#12513)
• c190d7c Document the effect of CI outages on releases (#12521)
• 071704b Don't panic while already panicking in the OOM test runner (#12526)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[raffaelschneider]

@dependabot rebase