Bumps <https://github.com/tokio-rs/slab> from 0.4.10 to 0.4.11.

Fix Slab::get_disjoint_mut out of bounds.

(This combines two dependabots into one)

Link: Release notes <https://github.com/tokio-rs/slab/releases>
Link: Changelog <https://github.com/tokio-rs/slab/blob/master/CHANGELOG.md>
Link: Commits <https://github.com/tokio-rs/slab/compare/v0.4.10...v0.4.11>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

This is mainly just to be on the latest version for the next release of
Unit.

This required some changes to the language module as described here
<https://github.com/bytecodealliance/wasmtime/pull/10016>.

We also add unnecessary_transmutes to the list of allowed linters to
quell warnings like

  warning: unnecessary transmute
     --> /home/andrew/src/unit/src/wasm-wasi-component/target/debug/build/wasm-wasi-component-9ae3c2c94201e6be/out/bindings.rs:440:13
      |
  440 | ...   ::std::mem::transmute(self._bitfield_1.get(0usize, 24u8) as u32)
      |       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: replace this with: `u32::cast_signed(self._bitfield_1.get(0usize, 24u8) as u32)`
      |
      = note: `#[warn(unnecessary_transmutes)]` on by default

Also, because this is new in rustc 1.88, to avoid warnings on older
compilers the simplest thing is to just add unknown_lints to the list.

Link: <https://lists.gnu.org/archive/html/qemu-rust/2025-07/msg00006.html>
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

Run 'cargo update' to get the latest version of the required crates in
preparation for the 1.35.0 release.

Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

Update (cargo update) the rust crates for wasm-wasi-component, otel &
unitctl.

This will fix build issues with wasm-wasi-component & rustc 1.86+.
It will also fix dependabot issues in otel and unitctl.

Link: <https://github.com/bytecodealliance/wasmtime/issues/10184>
Link: <https://github.com/nginx/unit/pull/1585>
Link: <https://github.com/nginx/unit/pull/1589>
Link: <https://github.com/nginx/unit/pull/1570>
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

Run 'cargo update' to get the latest version of the required crates in
preparation for the 1.34.0 release.

This resolves a dependabot notification regarding 'idna'.

Link: <https://github.com/nginx/unit/security/dependabot/13>
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

For no real reason other than to be on the latest release for the next
release of Unit...

Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

This fixes an issue we had with wasm-wasi-component failing to load
components with

  2024/11/06 21:08:50 [alert] 107196#107196 failed to create initial state

  Caused by:
      0: failed to compile component
      1: WebAssembly translation error
      2: Invalid input WebAssembly code at offset 15936: zero byte expected

Which was a symptom of
<https://github.com/bytecodealliance/wasmtime/issues/9130>

Closes: https://github.com/nginx/unit/issues/1477
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

Bumps <https://github.com/bytecodealliance/wasmtime> from 24.0.0 to
24.0.1.

Fixes:

  a runtime crash when combining tail-calls with host imports that
  capture a stack trace or trap. GHSA-q8hx-mm92-4wvg

  a race condition could lead to WebAssembly control-flow integrity and
  type safety violations. GHSA-7qmx-3fpx-r45m

Link: Release notes <https://github.com/bytecodealliance/wasmtime/releases>
Link: Changelog <https://github.com/bytecodealliance/wasmtime/blob/main/docs/WASI-some-possible-changes.md>
Link: Commits <https://github.com/bytecodealliance/wasmtime/compare/v24.0.0...v24.0.1>
Signed-off-by: dependabot[bot] <support@github.com>
[ Tweaked commit message/subject - Andrew ]
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

While the C based wasm language module inherits the process environment
the Rust based wasm-wasi-component language module did not.

One upshot of this is that with wasm-wasi-component you don't get access
to any environment variables specified in the Unit configuration.

wasm-wasi-component was based on wasmtime 17.0.0. This capability wasn't
added to the wasmtime-crate until version 20.0.0.

Now that wasm-wasi-component has been updated to a newer wasmtime-crate
we can enable this functionality.

Closes: https://github.com/nginx/unit/issues/1312
[ Commit message - Andrew ]
Signed-off-by: Andrew Clayton <a.clayton@nginx.com>

Signed-off-by: Ava Hahn <a.hahn@f5.com>