build(deps): bump worldcoin/mobile-bench-rs/.github/workflows/reusable-pr-auto.yml from 0.1.37 to 0.2.0

[dependabot]

Bumps worldcoin/mobile-bench-rs/.github/workflows/reusable-pr-auto.yml from 0.1.37 to 0.2.0.

Release notes

Sourced from worldcoin/mobile-bench-rs/.github/workflows/reusable-pr-auto.yml's releases.

mobench 0.2.0

What's Changed

• Release mobench 0.2.0 by @​dcbuild3r in worldcoin/mobile-bench-rs#47

Full Changelog: worldcoin/mobile-bench-rs@v0.1.49...v0.2.0

mobench v0.1.49 adds the native Android ABI correction for 32-bit devices, application-defined native metrics, and a BrowserStack Automate release lane for the pinned public @worldcoin/provekit browser package.

Highlights

• Map Rust usize values and MobenchBuf lengths/capacities to native-width JNA values on Android, including armeabi-v7a.
• Add record_sample_u64 and record_run_u64; native reports serialize these values under custom_metrics.
• Surface native Android worker exits promptly and preserve string panic payloads in ABI diagnostics.
• Upload large BrowserStack artifacts over HTTP/1.1 without an implicit total request deadline.
• Gate releases with the pinned public @worldcoin/provekit@0.1.0 browser fixture across desktop and mobile BrowserStack browsers, including proof verification and tamper rejection.

Published crates

• mobench 0.1.49
• mobench-sdk 0.1.49
• mobench-macros 0.1.49

Migration from 0.1.48

Update the applicable crates to 0.1.49. Existing benchmark configurations remain compatible. Native C ABI users should regenerate Android runners to receive the 32-bit ABI correction.

Release evidence

• Release commit: 217cfd4f78db1284276a1a1da44e3bf473729f5c
• Full exact-SHA release gate: https://github.com/worldcoin/mobile-bench-rs/actions/runs/30637246574
• Release PR checks passed for Rust, workflow security, compile, and plot fixtures.

mobench v0.1.48

mobench 0.1.48 adds browser-hosted WASM benchmarking through BrowserStack Automate and makes real downstream native/browser matrices first-class release gates.

Highlights

• Build browser-safe WASM benchmark bundles and execute them with mobench run-web.
• Run BrowserStack Automate sessions across desktop and real mobile browsers using the WebDriver transport.
• Gate releases with ProveKit age-check and World ID Protocol native/WASM fixtures across Android, iOS, macOS, and Windows browser targets.
• Keep long-running browser proofs responsive through module-worker execution and page-owned polling.
• Preserve the reviewed credential boundary with immutable reusable-workflow and generated-caller pins.

Published crates

• mobench 0.1.48
• mobench-sdk 0.1.48
• mobench-macros 0.1.48

... (truncated)

Changelog

Sourced from worldcoin/mobile-bench-rs/.github/workflows/reusable-pr-auto.yml's changelog.

Changelog

All notable user-facing changes to mobench, mobench-sdk, and mobench-macros are tracked here by release. See RELEASE_NOTES.md for the longer integration-oriented release notes and support status.

v0.2.0 - 2026-07-31

Added

• Added a browser-compatible SDK timing path, browser-callable JSON benchmark boundary, worker-backed web harness, and WebAssembly builder.
• Added cargo mobench build --target web and cargo mobench run-web with a direct W3C BrowserStack Automate transport.
• Added hashed ci prepare / ci run-prebuilt bundles for separating untrusted downstream builds from credentialed BrowserStack execution.
• Added pinned ProveKit and world-id-protocol native/WASM release-gate workflows and fixture adapters.
• Added the published @worldcoin/provekit browser SDK lane, including public prove/verify and tamper-rejection checks through BrowserStack Automate.

Changed

• Ported the v0.1.47 secure reusable-workflow boundary, configurable toolchains/targets/backends/functions/device matrices, and bounded completion timeout into the 0.2 architecture.
• Hardened Android worker-death handling and iOS heartbeat/accessibility result transport while retaining strict 0.2 report identity.
• Kept BrowserStack native stack/flamegraph profiling explicitly unsupported.
• Published the runtime, domain, process, artifact, provider, and report foundation crates alongside mobench, mobench-sdk, and mobench-macros.

Validation

• Local formatting, locked workspace tests, native/WASM checks, Clippy, workflow security tests, and workflow linting are required.
• The final candidate passed both pinned downstreams on two Android devices, two iOS devices, and all four browser environments on the exact candidate SHA in workflow run 30652763040.

v0.1.49 - 2026-07-31

Added

• Added record_sample_u64 and record_run_u64 for native benchmark reports; the JSON ABI emits their values under custom_metrics.
• Added a BrowserStack Automate release lane for the pinned public @worldcoin/provekit browser package. The fixture proves, verifies, and rejects a tampered proof through the package API on desktop and mobile web.

... (truncated)

Commits

• cf4416d Release mobench 0.2.0 (#47)
• 217cfd4 Release mobench 0.1.49
• d248bad Fix native Android ABI on 32-bit devices (#45)
• ec58487 Pin mobench 0.1.48 release workflow (#44)
• 9495b59 Release mobench 0.1.48 (#43)
• b29b4a5 Add WASM browser backend and downstream release gate
• 8a2dfbb Finalize immutable 0.1.47 workflow pins
• f36ea54 Release mobench 0.1.47: reliable long-running mobile CI (#41)
• d5e00b3 Fix pinned-toolchain native prebuilt BrowserStack runs (#40)
• cde5e71 Embed persisted iOS benchmark parameters
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Low Risk
Single CI workflow pin with unchanged inputs; risk is limited to differences in upstream mobench 0.2.0 PR-auto behavior, not application or proving logic in this repo.

Overview
Updates the Mobile Bench PR Auto workflow to call worldcoin/mobile-bench-rs’s reusable-pr-auto.yml at commit cf4416db (mobench 0.2.0) instead of the previous pin.

All dispatch inputs stay the same: same mobile-bench.yml target, Tests (stable) compile gate, ./crates/zk-mobile-bench, and the same seven zk_mobile_bench::* benchmark functions. Only the upstream reusable workflow version changes, so PR-triggered mobile benchmark automation will run on the 0.2.0 mobench CI stack (including upstream fixes and gates from that release line).

^{Reviewed by Cursor Bugbot for commit 1c71562. Bugbot is set up for automated code reviews on this repo. Configure here.}