build(deps): bump wasmtime from 39.0.1 to 41.0.1

[dependabot]

Bumps wasmtime from 39.0.1 to 41.0.1.

Release notes

Sourced from wasmtime's releases.

v41.0.1

41.0.1

Released 2026-01-26.

Fixed

• Fixed a bug in lowering of f64.copysign on x86-64 whereby when combined with an f64.load, the resulting machine code could read 16 bytes rather than 8 bytes. This could result in a segfault when Wasmtime is configured without signals-based traps.

v41.0.0

41.0.0

Released 2026-01-20.

Added

• Support for {Future,Stream}Any in the component model has improved. #12142

• Wasmtime has initial support for breakpoints and single-stepping with the debug feature for guest programs. #12133

• Wasmtime has begun adding a new Error type which is similar to anyhow::Error but supports gracefully handling OOM. Wasmtime still uses anyhow::Error but this will change in the future to wasmtime::Error which will be a distinct type. #12163

• An initial top-level crate for async-debugging guest programs has been added. #12183

Changed

• Cranelift now optimizes redundant select + icmp instructions. #12135

• Synchronous component model functions can no longer block before returning. This implements a change in the upstream specification to the upcoming async support in the component model which places stricter restrictions on non-async functions and their ability to perform blocking operations. #12043

• Frame iteration in debug mode now visits all activations which enables seeing all frames from recursive wasm calls. #12176

... (truncated)

Changelog

Sourced from wasmtime's changelog.

41.0.1

Released 2026-01-26.

Fixed

• Fixed a bug in lowering of f64.copysign on x86-64 whereby when combined with an f64.load, the resulting machine code could read 16 bytes rather than 8 bytes. This could result in a segfault when Wasmtime is configured without signals-based traps.

---

41.0.0

Released 2026-01-20.

Added

• Support for {Future,Stream}Any in the component model has improved. #12142

• Wasmtime has initial support for breakpoints and single-stepping with the debug feature for guest programs. #12133

• Wasmtime has begun adding a new Error type which is similar to anyhow::Error but supports gracefully handling OOM. Wasmtime still uses anyhow::Error but this will change in the future to wasmtime::Error which will be a distinct type. #12163

• An initial top-level crate for async-debugging guest programs has been added. #12183

Changed

• Cranelift now optimizes redundant select + icmp instructions. #12135

• Synchronous component model functions can no longer block before returning. This implements a change in the upstream specification to the upcoming async support in the component model which places stricter restrictions on non-async functions and their ability to perform blocking operations. #12043

• Frame iteration in debug mode now visits all activations which enables seeing all frames from recursive wasm calls. #12176

... (truncated)

Commits

• c30fce8 Release Wasmtime 41.0.1 (#12434)
• 799585f [41.0] Backport Cranelift: x64: fix incorrect load-sinking in copysign oper...
• 3c47640 Add vets for wasmtime-internal-debugger (#12376) (#12389)
• 3dda916 Release Wasmtime 41.0.0 (#12373)
• 309028e [41.0.0] Backport update to WASI 0.3.0-rc-2026-01-06 (#12344)
• 4a67a85 Cranelift: x64: fix user-controlled recursion in cmp emission. (#12333) (#12342)
• 1db4911 Fix ISLE icmp optimization rules for vector inputs (#12335) (#12340)
• 7e98de5 x64: Fix lowering rules for shld (#12321) (#12323)
• 9379396 Insert veneers on arm64 in cranelift-jit where necessary (#12239) (#12320)
• 9656606 Fix Module::image_range to include non-text part of module. (#12302) (#12307)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)