chore(deps): update rust crate wasmtime to v40.0.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
wasmtime	dependencies	patch	40.0.0 → 40.0.4

---

Release Notes

bytecodealliance/wasmtime (wasmtime)

v40.0.4

Compare Source

40.0.4

Released 2026-02-24.

Changed

• Wasmtime's implementation of WASI now has the ability to limit resource
  consumption on behalf of the guest, such as host-allocated memory. This means
  that some behaviors previously allowed by Wasmtime can now disallowed, such as
  transferring excessive data from the guest to the host. Additionally calls to
  wasi:random/random.get-random-bytes, for example, can have limits in place
  to avoid allocating too much memory on the host. To preserve
  backwards-compatible behavior these limits are NOT set by default. Embedders
  must opt-in to configuring these knobs as appropriate for their embeddings.
  For more information on this see the related security advisory with further
  details on knobs added and what behaviors can be restricted.
  GHSA-852m-cvvp-9p4w

Fixed

• Panics when adding too many headers to a wasi:http/types.fields has been
  resolved
  GHSA-243v-98vx-264h

• Panic when dropping a [Typed]Func::call_async future.
  GHSA-xjhv-v822-pf94

v40.0.3

Compare Source

40.0.3

Released 2026-01-26.

Fixed

• Fixed a bug in lowering of f64.copysign on x86-64 whereby when combined
  with an f64.load, the resulting machine code could read 16 bytes rather
  than 8 bytes. This could result in a segfault when Wasmtime is configured
  without signals-based traps.

v40.0.2

Compare Source

40.0.2

Released 2026-01-14.

Fixed

• A possible stack overflow in the x64 backend with cmp emission has been
  fixed.
  #​12333

• Some ISLE optimization rules which created erroneous IR for vector inputs have
  been fixed.
  #​12179
  #​12335

• The x64 lowering of shld has been fixed for some edge caxes.
  #​12321

v40.0.1

Compare Source

40.0.1

Released 2026-01-07.

Changed

• This release is a test of Wasmtime's CI-based crate publishing infrastructure.
  Wasmtime is switching to crates.io-based trusted publishing for this release
  and is testing that everything works.
  #​12257

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.