Skip to content

chore(deps): update napi-rs - #266

Open
cachekit-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/napi-rs
Open

chore(deps): update napi-rs#266
cachekit-renovate-bot[bot] wants to merge 1 commit into
mainfrom
renovate/napi-rs

Conversation

@cachekit-renovate-bot

@cachekit-renovate-bot cachekit-renovate-bot Bot commented Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
napi dependencies minor 3.8.4 → 3.16.1
napi-build build-dependencies minor 2.3.1 → 2.6.0
napi-derive dependencies minor 3.5.3 → 3.7.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

napi-rs/napi-rs (napi)

v3.16.1

Compare Source

Fixed
  • (napi) avoid a deadlock when a worker loads the addon during block_on (#​3670)

v3.16.0

Compare Source

Added
  • (napi) support well-known symbol keys for class members (#​3665)
  • (napi) support symbol_for keys for class members (#​3661)
Fixed
  • (napi) compact class identity metadata (#​3667)
  • (napi) keep the registered classes when a later load fails (#​3666)
  • (napi) free define_class closures, honour static flags, avoid TS1016 in constructors (#​3662)
  • (napi) free threadsafe function call data when the call fails (#​3656)

v3.15.0

Compare Source

Added
  • (napi) cancel a ReadableStream through its Reader, and fix ReadableStream::cancel (#​3623)
Fixed
  • (napi) set the custom GC aborted flag before Node closes its tsfn (#​3626)
  • (napi) TypedArray input leaks and compat buffer copies on wasm (#​3612)
  • (napi) copy managed array inputs (#​3607)
  • (napi) reject a value of another class on builds without type tags (#​3610)
  • (napi) drop unadopted class value and reset factory flag on failed conversion (#​3603)
  • (napi) join the Tokio runtime threads at env teardown (#​3592)
  • (napi) keep borrowed class args alive across AsyncTask/AsyncBlock (#​3584)
Other
  • (cli) cover FreeBSD arm64 (#​3620)
  • (cli) record the design behind the threaded WASI heap sync (#​3581)

v3.14.2

Compare Source

Fixed
  • (napi) register the wasm cleanup through the env cleanup hook (#​3571)
  • (napi) own NativeBorrowScope storage via NonNull to fix aliasing violation (#​3573)
  • (napi) bound serde_json::Value conversion depth at 128 levels (#​3568)

v3.14.1

Compare Source

Fixed
  • (napi) create objects with napi_define_properties on every Node version (#​3560)

v3.14.0

Compare Source

Added
  • (napi) lock the allocator on threaded WASI and never hang after a worker crash (#​3552)

v3.13.0

Compare Source

Added
  • (async-runtime) offer the MultiThread flavor on wasm32-wasip1-threads (#​3541)
Fixed
  • (napi) validate native payload provenance for External and instance data (#​3540)

v3.12.7

Compare Source

Fixed
  • (napi) guard AsyncTask completion against env teardown (#​3536)

v3.12.6

Compare Source

Fixed
  • (cli) drain outstanding async work before disposing a WASI binding (#​3528)

v3.12.5

Compare Source

Fixed
  • fatal_exception noop in optimized builds (#​3509)

v3.12.4

Compare Source

Security
  • Object::unwrap and Object::remove_wrapped (and the deprecated Env::unwrap / Env::drop_wrapped) read a TypeId out of a payload that is not a TaggedObject, giving a heap out-of-bounds read and a JavaScript-forgeable out-of-bounds write; payload provenance is now validated before dereferencing. See GHSA-rhpj-pggq-896v, fixed in #​3506.
  • The serde deserializer reached unreachable!() on ordinary JavaScript values and aborted the process instead of returning an error. See GHSA-f334-75xc-qxv3, fixed in #​3507.
  • ArrayBuffer::from_external, TypedArraySlice::from_external and Uint8ClampedSlice::from_external (plus the compat-mode Env::create_arraybuffer_with_borrowed_data) built their slice from freed memory on runtimes without external buffers. See GHSA-32mm-r9wp-hrvc, fixed in #​3503.
Fixed
  • (napi) return errors from the serde deserializer for unexpected JS value shapes (#​3507)
  • (napi) validate wrapped payload provenance in Object::unwrap/remove_wrapped (#​3506)
  • (napi) point from_external slices at the engine-owned copy after finalize reclaims the source (#​3503)

v3.12.3

Compare Source

Fixed
  • CurrentThread waker-stack deadlocks and threadless-wasm Buffer detachment (#​3489)
  • (napi) catch panics in closure trampolines instead of aborting (#​3473)
Other
  • (napi) keep anyhow error cause when converting (#​3477)
  • (napi) outline threadsafe callback dispatch (#​3465)
  • (napi) outline class instance construction (#​3464)

v3.12.2

Compare Source

Fixed
  • (napi) memory safety in PromiseRaw callbacks and AbortSignal conversion (#​3458)

v3.12.1

Compare Source

Fixed
  • (napi) stop unloading addons with live native code, preserve non-Error rejections, and add the wasm teardown barrier (#​3423)
  • (wasi) avoid randomness during module registration (#​3447)

v3.12.0

Compare Source

Added
  • (cli) support non-threaded WASI targets (#​3353)

v3.11.0

Compare Source

Added
  • unforgeable #[napi] class identity via Node object type tags (#​3405)
  • (napi) add pluggable async runtime backend (#​3352)
Fixed
  • (napi) release JsDeferred tsfn on null-env teardown drain (#​3404 follow-up) (#​3408)
  • (napi) guard JsDeferred against env teardown (#​3404)
  • (napi) register the async runtime env cleanup hook per registration (#​3400)
Other
  • (napi) share tracing callsite (#​3409)

v3.10.5

Compare Source

Fixed
  • (napi) release FunctionRef off the JS thread via the custom-GC TSFN (#​3394)

v3.10.4

Compare Source

Fixed
  • (cli) align build and project configuration (#​3387)
Other
  • (readme) point sponsors image at napi.rs/sponsors.svg (#​3379)

v3.10.3

Compare Source

Fixed
  • (napi) preserve the JS error object when cloning an Error off-thread (#​3375)

v3.10.2

Compare Source

Fixed
  • (napi) keep message and cause when cloning a JS-exception Error off-thread (#​3373)

v3.10.1

Compare Source

Fixed
  • (napi) release Error's exception reference via the custom GC when dropped off-thread. (#​3370)
  • (napi) stop ref exception object in ThreadsafeFunction sync-throw path on wasm targets (#​3369)
Other
  • (napi) share class accessor trampolines (#​3364)
  • optimize object field raw property access (#​3365)

v3.10.0

Compare Source

Added
  • (napi) implement To/FromNapiValue for OsString, OsStr, Path and PathBuf (#​3339)
Fixed
  • (napi) route custom-GC Buffer/TypedArray cross-thread drops through the owning isolate (#​3357) (#​3360)

v3.9.4

Compare Source

Other
  • (napi-derive) outline #[napi(object)] field-error decoration (#​3338)

v3.9.3

Compare Source

Fixed
  • (napi) sync referred flag when creating a weak ThreadsafeFunction (#​3337)
Other
  • (napi) outline non-generic core of ThreadsafeFunction::create (#​3334)

v3.9.2

Compare Source

Fixed
  • (napi) ReadableStream Reader loses chunks and aborts on errored streams (#​3328)

v3.9.1

Compare Source

Fixed
  • (napi) unify Reference finalize callbacks on Arc (Rc/Arc type confusion) (#​3313)
  • (napi) zero-copy external strings, fix WASI double-free (#​3308)
  • (napi) experimental node_api_create_object_with_properties (#​3304)

v3.9.0

Compare Source

Added
  • (napi) add ThreadsafeFunction::call_async_catch to handle errors in callback functions (#​3291)
Fixed
  • (deps) update rust crate ctor to v1 (#​3276)
  • (deps) update rust crate ctor to 0.13.0 (#​3275)
  • (deps) update rust crate ctor to 0.12.0 (#​3271)

v3.8.6

Compare Source

Fixed
  • (deps) update rust crate ctor to 0.11.0 (#​3270)
  • (napi) Convert #[ctor] calls to declarative form to remove all features (#​3257)
Other
  • (napi) skip duplicate validation (#​3268)
  • (napi) clarify unsafe function invariants (#​3267)

v3.8.5

Compare Source

Fixed
  • (napi) preserve generator class methods (#​3231)
  • (deps) update rust crate ctor to v0.10.0 (#​3224)
  • (deps) disable ctor priority feature (#​3209)
  • (deps) update rust crate ctor to v0.9.1 (#​3204)
  • (napi) handle ThreadsafeFunction callback errors gracefully during shutdown (#​3188)
  • (napi) populate Error::cause from ThreadsafeFunction callee-handled callbacks (#​3162)
  • correct typo in Either error message ("non" → "none") (#​3183)

Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@cachekit-renovate-bot cachekit-renovate-bot Bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026
@coderabbitai

coderabbitai Bot commented Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@codecov

codecov Bot commented Oct 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@github-actions

github-actions Bot commented Nov 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Instruction counts: FAIL

Head d5de278 against base 4b3fece7adbc0f51f828f00d1009ba0ba58cdfa8, Node v24.22.2, valgrind-3.26.0. Instructions per op on the main thread (bench:ir --compare); median of the repeats, A/A = (max − min) / median. A workload fails above +2.00% and warns above +1.00% (its own threshold: napi-encrypted at +4.00%, plaintext-set-1mb at +10.00%, warning at half); an A/A over 0.40% reads INCONCLUSIVE.

workload base Ir/op head Ir/op delta A/A base / head verdict
plaintext-set-64b 43,300 45,260 +4.53% 0.00% / 0.00% FAIL
keygen 12,356 13,138 +6.33% 0.00% / 0.00% FAIL
napi-envelope 45,397 49,596 +9.25% 0.00% / 0.00% FAIL
napi-envelope-40b 16,069 19,988 +24.39% 0.00% / 0.00% FAIL
napi-envelope-64kb 499,522 569,060 +13.92% 0.00% / 0.00% FAIL
napi-encrypted 44,390 48,176 +8.53% 0.00% / 0.00% FAIL
napi-encrypted-64kb 849,978 985,205 +15.91% 0.00% / 0.00% FAIL
secure-set-get 517,014 525,279 +1.60% 0.00% / 0.00% warn
wrap-l1-hit 17,020 17,818 +4.69% 0.00% / 0.00% FAIL
wrap-l1-hit-metrics 16,978 17,777 +4.71% 0.00% / 0.00% FAIL
secure-wrap-l1-hit-100b 61,917 66,574 +7.52% 0.00% / 0.00% FAIL
secure-wrap-l1-hit-10kb 1,520,962 1,536,496 +1.02% 0.00% / 0.00% warn
wrap-l1-hit-cachekitio 17,057 17,845 +4.62% 0.00% / 0.00% FAIL
All 36 workloads: 11 FAIL, 2 warn, 23 ok
workload base Ir/op head Ir/op delta A/A base / head verdict
l1-get-hit 1,203 1,203 0.00% 0.00% / 0.00% ok
l1-set-at-capacity-1k 6,344 6,344 0.00% 0.00% / 0.00% ok
l1-set-at-capacity-10k 4,156 4,156 0.00% 0.00% / 0.00% ok
l1-set-at-capacity-100k 12,720 12,720 0.00% 0.00% / 0.00% ok
plaintext-set-1kb 219,980 222,069 +0.95% 0.00% / 0.00% ok
plaintext-set-10kb 1,848,712 1,850,731 +0.11% 0.00% / 0.00% ok
plaintext-set-100kb 18,087,271 18,088,775 +0.01% 0.00% / 0.00% ok
plaintext-set-64b 43,300 45,260 +4.53% 0.00% / 0.00% FAIL
plaintext-set-1mb 175,372,577 175,378,536 +0.00% 0.00% / 0.00% ok
plaintext-set-containers 1,400,495 1,402,512 +0.14% 0.00% / 0.00% ok
keygen 12,356 13,138 +6.33% 0.00% / 0.00% FAIL
keygen-1kb 276,286 277,069 +0.28% 0.00% / 0.00% ok
keygen-wasm 15,930 15,930 0.00% 0.00% / 0.00% ok
keygen-wasm-1kb 315,757 315,757 0.00% 0.00% / 0.00% ok
serializer-roundtrip 406,164 406,164 0.00% 0.00% / 0.00% ok
napi-envelope 45,397 49,596 +9.25% 0.00% / 0.00% FAIL
napi-envelope-40b 16,069 19,988 +24.39% 0.00% / 0.00% FAIL
napi-envelope-64kb 499,522 569,060 +13.92% 0.00% / 0.00% FAIL
wasm-envelope 58,980 58,980 0.00% 0.00% / 0.00% ok
wasm-envelope-40b 14,532 14,532 0.00% 0.00% / 0.00% ok
wasm-envelope-64kb 906,417 906,423 +0.00% 0.00% / 0.00% ok
napi-encrypted 44,390 48,176 +8.53% 0.00% / 0.00% FAIL
napi-encrypted-64kb 849,978 985,205 +15.91% 0.00% / 0.00% FAIL
wasm-encrypted 324,796 324,796 0.00% 0.00% / 0.00% ok
wasm-encrypted-64kb 32,108,152 32,108,145 -0.00% 0.00% / 0.00% ok
secure-set-get 517,014 525,279 +1.60% 0.00% / 0.00% warn
get-l1-hit 2,111 2,111 0.00% 0.00% / 0.00% ok
wrap-l1-hit 17,020 17,818 +4.69% 0.00% / 0.00% FAIL
wrap-l1-hit-metrics 16,978 17,777 +4.71% 0.00% / 0.00% FAIL
get-l2-hit-metrics 262,888 264,951 +0.78% 0.01% / 0.01% ok
secure-wrap-l1-hit-100b 61,917 66,574 +7.52% 0.00% / 0.00% FAIL
secure-wrap-l1-hit-10kb 1,520,962 1,536,496 +1.02% 0.00% / 0.00% warn
secure-wrap-l1-hit-1mb 238,974,289 239,978,762 +0.42% 0.00% / 0.01% ok
wrap-l1-hit-cachekitio 17,057 17,845 +4.62% 0.00% / 0.00% FAIL
wrap-l1-hit-int-cachekitio 2,361 2,361 0.00% 0.00% / 0.00% ok
wrap-l1-hit-int 2,349 2,350 +0.04% 0.00% / 0.00% ok

Run log

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@27Bslash6 27Bslash6

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@27Bslash6