build(nix): update dependencies

[wrpc-bot]

Description

Automated Nix flake update

Changes

• Updated input 'fenix':
    'github:nix-community/fenix/8124451' (2026-03-13)
  → 'github:nix-community/fenix/47ece01' (2026-04-16)
• Updated input 'fenix/nixpkgs':
    'github:nixos/nixpkgs/fe416aa' (2026-03-12)
  → 'github:nixos/nixpkgs/4bd9165' (2026-04-14)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/6254616' (2026-03-12)
  → 'github:rust-lang/rust-analyzer/94c2f68' (2026-04-15)
• Updated input 'nixify':
    'github:rvolosatovs/nixify/bcc5e78' (2026-03-13)
  → 'github:rvolosatovs/nixify/a99688e' (2026-03-24)
• Updated input 'nixify/advisory-db':
    'github:rustsec/advisory-db/a38e165' (2026-03-11)
  → 'github:rustsec/advisory-db/909d601' (2026-03-23)
• Updated input 'nixify/nixpkgs-darwin':
    'github:nixos/nixpkgs/a855687' (2026-03-12)
  → 'github:nixos/nixpkgs/98bf810' (2026-03-22)
• Updated input 'nixify/nixpkgs-nixos':
    'github:nixos/nixpkgs/0590cd3' (2026-03-11)
  → 'github:nixos/nixpkgs/4590696' (2026-03-23)
• Updated input 'nixify/rust-overlay':
    'github:oxalica/rust-overlay/2b18fe4' (2026-03-12)
  → 'github:oxalica/rust-overlay/dc00324' (2026-03-23)
• Updated input 'nixlib':
    'github:nix-community/nixpkgs.lib/7489b10' (2026-03-08)
  → 'github:nix-community/nixpkgs.lib/ec2b7be' (2026-04-12)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/7569023' (2026-03-11)
  → 'github:NixOS/nixpkgs/566acc0' (2026-04-15)

[rvolosatovs]

@copilot adapt to upstream changes and update rustls

[Copilot]

@copilot adapt to upstream changes and update rustls

Done in 79d4559. Changes made:

1. Adapted to upstream nixify changes: Switched flake.nix targets from opt-out (false) to opt-in (true) per feat(rust): only include native build by default; cross-compilation opt-in via targets rvolosatovs/nixify#498 — this fixes the missing wrpc-x86_64-pc-windows-gnu attribute.

2. Updated rustls dependencies:

   • Updated async-nats from 0.44 to 0.47 — this removes the rustls-pemfile dependency entirely (fixing RUSTSEC-2025-0134) and upgrades rustls-native-certs from 0.7 to 0.8.
   • Updated rustls-webpki from 0.103.9 to 0.103.11 via cargo update (fixing RUSTSEC-2026-0049).

[rvolosatovs]

@copilot update wasmtime

[Copilot]

@copilot update wasmtime

Wasmtime update to v43 is in progress but incomplete. Completed so far in commits up to 8901b9a:

• Bumped all wasmtime ecosystem deps: wasmtime/wasmtime-wasi/wasmtime-wasi-http/wasmtime-cli-flags 41→43, wasmparser 0.243→0.245, wit-parser 0.220→0.245, wit-component 0.239→0.245, wit-bindgen 0.45→0.54, wit-bindgen-core 0.36→0.54, wasi-preview1-component-adapter-provider 41→43
• Fixed wrpc-introspect, wit-bindgen-wrpc-rust, and wit-bindgen-wrpc-go for wit-parser 0.245 / wit-bindgen-core 0.54 API changes
• Started fixing wrpc-runtime-wasmtime for the wasmtime 42/43 anyhow::Error → wasmtime::Error migration (added anyhow feature, partially fixed codec.rs and polyfill.rs)

Remaining work needed: The wrpc-runtime-wasmtime and wrpc-wasmtime-cli crates still have ~60 compilation errors related to the anyhow::Error ↔ wasmtime::Error type mismatch (wasmtime 42 removed anyhow from its public API). The pattern is: functions implementing wasmtime host traits need wasmtime::error::Context instead of anyhow::Context, and anyhow::Error values need .map_err(wasmtime::Error::from_anyhow) conversion.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• docs.rs
  • Triggering command: `/usr/bin/python3 python3 -c
    import urllib.request

Check the wit-parser 0.245.1 source to understand what changed with Stream

url = 'REDACTED'
req = urllib.request.Request(url, headers={'User-Agent': 'wrpc-bot'})
data = ur 64-REDACTED-linux-gnu/bin/rust-lld -fuse-ld=lld -z relro -o /home/REDACTED/work/wrpc/wrpc/target/debug/deps/libthiserror_impl-f17bacc1682a1316/home/REDACTED/.rustup/toolchains/stable-x86_64-REDACTED-linux-gnu/lib/rustlib/x86_64-REDACTED-linux-gnu/lib/libhashbrown-70305b2ec0766fa6.rlib /usr/lib/gcc/x86_64-linux-gnu/13/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/13/crtbeginS.o -L/home/REDACTED/work/wrpc/wrpc/target/debug/deps/rustcvDIsaR/raw-dylibs 64-u�� 64-REDACTED-linux-gnu/lib/librustc_std_workspace_alloc-76b5fe9328c1063f.rlib 64-REDACTED-linux-gnu/lib/libminiz_oxide-2b6a8d2f6e1dc71b.rlib lib/rustlib/x86_64-REDACTED-linux-gnu/bin/self-contained/cc 6f71e162c/build_/home/REDACTED/.rustup/toolchains/stable-x86_64-REDACTED-linux-gnu/lib/rustlib/x86_/home/REDACTED/work/wrpc/wrpc/target/debug/build/oid-registry-21822613304fe13a/build_script_build-21822613304fe13a.build_script_build.907545faa478f8b0-cgu.0.rcgu. o o o` (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)