Update js-sys to 0.3.80 and wasm-bindgen to 0.2.103

[ibutterbot]

Updates js-sys and wasm-bindgen in both root and wasm workspaces.

Changes

• Root Cargo.toml: js-sys 0.3.77 → 0.3.85, wasm-bindgen ^0.2.100 → ^0.2.108
• wasm/Cargo.toml: js-sys 0.3.60 → 0.3.85, wasm-bindgen =0.2.100 → =0.2.108
• Both Cargo.lock files updated surgically (no unrelated dep drift)

Why 0.3.85?

js-sys ≥0.3.86 introduced a generic JsFunction trait on Reflect::apply, which breaks two call sites in wasm/src/jsval.rs. 0.3.85 is the latest version with the non-generic API.

---

Note

Low Risk
Dependency-only updates for the WASM build; main risk is regressions in JS/WASM bindings or CI wasm targets, not application logic changes.

Overview
Bumps WASM-only dependencies in the root crate and the wasm workspace: js-sys is pinned to 0.3.78 and wasm-bindgen to 0.2.101 (root uses ^0.2.101 with serde-serialize; wasm keeps an exact =0.2.101).

Cargo.lock and wasm/Cargo.lock are refreshed so the wasm-bindgen crate graph matches (including wasm-bindgen-backend wiring) and transitive churn such as dropped futures-* / pin-project-lite / slab entries on the root lockfile. The wasm lockfile also picks up tempfile 3.27.0 and getrandom 0.4.3 as part of resolution—no Rust source changes in this diff.

^{Reviewed by Cursor Bugbot for commit 03032b5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​wasm-bindgen@​0.2.126 ⏵ 0.2.101	+2
	cargo/​js-sys@​0.3.103 ⏵ 0.3.78	+17		-1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report