Skip to content

build(deps-dev): bump @emnapi/wasi-threads from 1.2.1 to 2.0.0#120

Merged
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/emnapi/wasi-threads-2.0.0
Jun 20, 2026
Merged

build(deps-dev): bump @emnapi/wasi-threads from 1.2.1 to 2.0.0#120
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/emnapi/wasi-threads-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps @emnapi/wasi-threads from 1.2.1 to 2.0.0.

Release notes

Sourced from @​emnapi/wasi-threads's releases.

v2.0.0-alpha.2

What's Changed

Full Changelog: toyobayashi/emnapi@v2.0.0-alpha.1...v2.0.0-alpha.2

v2.0.0-alpha.1

Notable Changes

  • JavaScript packages are ESM only now
  • No longer provide prebuilt libraries for wasm32-unknown-unknown and wasm32-wasip1 target
  • Deprecated JS version implementation of async work and TSFN, switched to libuv threadpool based implementation by default
  • Minimum Nan support in early stage, no prebuilt library, not production ready feature.

Full Changelog: toyobayashi/emnapi@v1.10.0...v2.0.0-alpha.1

v1.11.1

What's Changed

New Contributors

Full Changelog: toyobayashi/emnapi@v1.11.0...v1.11.1

v1.11.0

What's Changed

  • feat: add napi_create_external_sharedarraybuffer (#211)
  • feat: support SharedArrayBuffer in napi_create_typedarray (#212)
  • refactor: remove use of PThread.runningWorkers (#216)

Full Changelog: toyobayashi/emnapi@v1.10.0...v1.11.0

v1.10.0

What's Changed

  • fix: early update wasm memory for views (https://github.com/hardfist/emnapi-shared-memory-grow-repro)
  • fix!: napi_adjust_external_memory no longer grow wasm memory
  • fix: add missing from64 wrap
  • fix: coalesce tsfn (js version) send message
  • ci: restructure CI workflows
  • ci: prebuilt liraries using llvm 22

Thanks @​hardfist

Full Changelog: toyobayashi/emnapi@v1.9.2...v1.10.0

v1.9.2

What's Changed

... (truncated)

Commits
  • f85bc7d 2.0.0-alpha.2
  • a0b0c18 refactor: remove use of PThread.runningWorkers (#216)
  • ae41bf5 2.0.0-alpha.1
  • 083a0b0 ci: make v8 headers optional (#215)
  • 6eac60e doc: add example and rewrite readme (#214)
  • 81897a8 ci: workflow_dispatch:
  • 22144d0 feat: support SharedArrayBuffer in napi_create_typedarray (#212)
  • e63ba5b feat: add napi_create_external_sharedarraybuffer (#211)
  • 1627e5a test: sync tsfn abort test
  • 72b6ea3 fix: free queue node and set async_pending flag before finalize
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels Jun 16, 2026
@cursor

cursor Bot commented Jun 16, 2026

Copy link
Copy Markdown

PR Summary

Medium Risk
Major dev-dependency upgrade in the native/WASM rebuild chain could break postinstall/rebuild or CI if v2’s ESM-only or threading changes don’t match pinned @emnapi/core/@napi-rs/wasm-runtime, but runtime app logic is untouched.

Overview
Bumps the devDependency @emnapi/wasi-threads from 1.2.1 to 2.0.0 in package.json and package-lock.json, alongside existing @emnapi/* pins and npm overrides for the emnapi/WASM toolchain used with native rebuild tooling (e.g. electron-rebuild / better-sqlite3).

This is a major upstream release (notable changes include ESM-only JS packages and WASI threading refactors); there are no application source changes in this PR.

Reviewed by Cursor Bugbot for commit 97e1eaf. Bugbot is set up for automated code reviews on this repo. Configure here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 572dda7. Configure here.

Comment thread package.json
@socket-security

socket-security Bot commented Jun 16, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​emnapi/​wasi-threads@​1.2.1 ⏵ 2.0.0100100100 +183 -6100

View full report

Bumps [@emnapi/wasi-threads](https://github.com/toyobayashi/emnapi) from 1.2.1 to 2.0.0.
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@wasi-threads-v1.2.1...wasi-threads-v2.0.0)

---
updated-dependencies:
- dependency-name: "@emnapi/wasi-threads"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/emnapi/wasi-threads-2.0.0 branch from 572dda7 to 97e1eaf Compare June 20, 2026 03:19
@haasonsaas haasonsaas merged commit 41936de into main Jun 20, 2026
6 checks passed
@haasonsaas haasonsaas deleted the dependabot/npm_and_yarn/emnapi/wasi-threads-2.0.0 branch June 20, 2026 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant