deps(rust)(deps): bump the rust-plugins group in /crates/signia-plugins with 3 updates

[dependabot]

Updates the requirements on thiserror, wasmtime and wasmtime-wasi to permit the latest version.
Updates thiserror to 2.0.18

Release notes

Sourced from thiserror's releases.

2.0.18

• Make compatible with project-level needless_lifetimes = "forbid" (#443, thanks @​LucaCappelletti94)

Commits

• dc0f6a2 Release 2.0.18
• 0275292 Touch up PR 443
• 3c33bc6 Merge pull request #443 from LucaCappelletti94/master
• 995939c Reproduce issue 442
• 21653d1 Made clippy lifetime allows conditional
• 45e5388 Update actions/upload-artifact@v5 -> v6
• 386aac1 Update actions/upload-artifact@v4 -> v5
• ec50561 Update actions/checkout@v5 -> v6
• 247eab5 Update name of empty_enum clippy lint
• 91b181f Raise required compiler to Rust 1.68
• Additional commits viewable in compare view

Updates wasmtime to 40.0.2

Release notes

Sourced from wasmtime's releases.

v40.0.2

40.0.2

Released 2026-01-14.

Fixed

• A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333

• Some ISLE optimization rules which created erroneous IR for vector inputs have been fixed. #12179 #12335

• The x64 lowering of shld has been fixed for some edge caxes. #12321

Changelog

Sourced from wasmtime's changelog.

40.0.2

Released 2026-01-14.

Fixed

• A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333

• Some ISLE optimization rules which created erroneous IR for vector inputs have been fixed. #12179 #12335

• The x64 lowering of shld has been fixed for some edge caxes. #12321

---

40.0.1

Released 2026-01-07.

Changed

• This release is a test of Wasmtime's CI-based crate publishing infrastructure. Wasmtime is switching to crates.io-based trusted publishing for this release and is testing that everything works. #12257

---

40.0.0

Released 2025-12-20.

Added

• WASIp3 support for wasi:http now implements Response::from_http to convert from standard Rust types to WASI types. #12063

• Cranelift now supports a "patchable" ABI which has a maximum number of arguments and clobbers no registers. This is paired as well with a new patchable_call instruction which supports being turned into NOPs at runtime. #12061 #12101

Changed

... (truncated)

Commits

• bb9ef67 Release Wasmtime 40.0.2 (#12346)
• f5728ae [40.0.x] Backport a few codegen fixes (#12345)
• 27a0a94 Cranelift: x64: fix user-controlled recursion in cmp emission. (#12333) (#12341)
• 918e5dc Release Wasmtime 40.0.1 (#12271)
• 01cc1c0 Migrate this workspace to using trusted publishing (#12257) (#12265)
• 0807b00 Release Wasmtime 40.0.0 (#12192)
• fadd22a [40.0.0] trap on blocking call in sync task before return (#12144)
• c242041 Add release notes (#12132)
• ac3358b Fix various broken links in docs. (#12125)
• 058a9bc Components: implement exception-tag translation in core module types. (#12122)
• Additional commits viewable in compare view

Updates wasmtime-wasi to 40.0.2

Release notes

Sourced from wasmtime-wasi's releases.

v40.0.2

40.0.2

Released 2026-01-14.

Fixed

• A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333

• Some ISLE optimization rules which created erroneous IR for vector inputs have been fixed. #12179 #12335

• The x64 lowering of shld has been fixed for some edge caxes. #12321

Changelog

Sourced from wasmtime-wasi's changelog.

40.0.2

Released 2026-01-14.

Fixed

• A possible stack overflow in the x64 backend with cmp emission has been fixed. #12333

• Some ISLE optimization rules which created erroneous IR for vector inputs have been fixed. #12179 #12335

• The x64 lowering of shld has been fixed for some edge caxes. #12321

---

40.0.1

Released 2026-01-07.

Changed

• This release is a test of Wasmtime's CI-based crate publishing infrastructure. Wasmtime is switching to crates.io-based trusted publishing for this release and is testing that everything works. #12257

---

40.0.0

Released 2025-12-20.

Added

• WASIp3 support for wasi:http now implements Response::from_http to convert from standard Rust types to WASI types. #12063

• Cranelift now supports a "patchable" ABI which has a maximum number of arguments and clobbers no registers. This is paired as well with a new patchable_call instruction which supports being turned into NOPs at runtime. #12061 #12101

Changed

... (truncated)

Commits

• bb9ef67 Release Wasmtime 40.0.2 (#12346)
• f5728ae [40.0.x] Backport a few codegen fixes (#12345)
• 27a0a94 Cranelift: x64: fix user-controlled recursion in cmp emission. (#12333) (#12341)
• 918e5dc Release Wasmtime 40.0.1 (#12271)
• 01cc1c0 Migrate this workspace to using trusted publishing (#12257) (#12265)
• 0807b00 Release Wasmtime 40.0.0 (#12192)
• fadd22a [40.0.0] trap on blocking call in sync task before return (#12144)
• c242041 Add release notes (#12132)
• ac3358b Fix various broken links in docs. (#12125)
• 058a9bc Components: implement exception-tag translation in core module types. (#12122)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.