build(deps): bump the cargo group with 4 updates

[dependabot]

Bumps the cargo group with 4 updates: mlua, wgpu, uuid and kira.

Updates mlua from 0.12.0 to 0.12.1

Release notes

Sourced from mlua's releases.

v0.12.1

What's Changed

• Lua 5.5 updated to 5.5.1
• Luau updated to 0.736
• Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
• Fix coroutine stack handling after yielding from hooks (#723)

Full Changelog: mlua-rs/mlua@v0.12.0...v0.12.1

Changelog

Sourced from mlua's changelog.

v0.12.1 (Aug 29, 2026)

• Lua 5.5 updated to 5.5.1
• Luau updated to 0.736
• Allow #[mlua::userdata_impl] to be used in a different module from #[derive(UserData)] (#726)
• Fix coroutine stack handling after yielding from hooks (#723)

Commits

• 4fd87af v0.12.1
• 983c384 mlua-sys: v0.12.0
• 0224864 mlua_derive: v0.12.1
• aca3bb3 Update CHANGELOG
• 8ceeceb Create C closures under lua_cpcall so an allocation failure doesn't escape ...
• 4bca98f clippy
• 87dc0c1 mlua_derive: Make userdata_impl independent from module where UserData is d...
• 7539003 mlua-sys: Bump luau-src to v0.21 (Luau 0.736)
• e9b9844 mlua-sys: bump luau-src to 551+
• 66b9f08 Fix coroutine stack handling after hook yields
• See full diff in compare view

Updates wgpu from 29.0.4 to 30.0.1

Changelog

Sourced from wgpu's changelog.

v30.0.1 (2026-08-21)

Bug Fixes

Vulkan

• Stop passing an un-waited fence to vkAcquireNextImageKHR on non-Windows platforms, which triggered VUID-vkAcquireNextImageKHR-fence-10066 validation errors every frame since v30.0.0. By @​ErichDonGubler in #9855.

Metal

• Resolve metal color space constants dynamically. By @​andyleiserson in #9819.

WebGPU

• Upgrade vendored WebGPU bindings and wasm-bindgen to 0.2.127. This fixes a panic “can't access property "info", arg0 is null” when using the WebGPU backend and requestAdapter() fails. By @​beicause in #10034, backported in #10105.

v30.0.0 (2026-07-01)

Major changes

Optional vertex buffer slots

This allows gaps in VertexState's buffers and adds support for unbinding vertex buffers, bringing us in compliance with the WebGPU spec. As a result of this, VertexState's buffers field now has type of &[Option<VertexBufferLayout>]. To migrate, wrap vertex buffer layouts in Some:

  let vertex_state = wgpu::VertexState {
      module: &vs_module,
      entry_point: Some("vs_main"),
      compilation_options: wgpu::PipelineCompilationOptions::default(),
      buffers: &[
-         &vertex_buffer_layout
+         Some(&vertex_buffer_layout)
      ],
  };

By @​teoxoy in #9351.

Integer shader I/O no longer defaults to @interpolate(flat)

To align with the shading language specifications, naga no longer assumes that integer-typed shader I/O should have flat interpolation, i.e., should not be interpolated. Even though flat interpolation is the only choice for integer I/O, it must be still specified explicitly.

WGSL:

 struct FragmentInput {
     @location(0) tex_coord: vec2<f32>,
-    @location(1) index: i32,
+    @location(1) @interpolate(flat) index: i32,
 }
</tr></table> 

... (truncated)

Commits

• 40f4a34 Release v30.0.1
• 5e1084c fix(metal): Resolve some color space constants dynamically (#9819)
• 8bc5e2b Backport "Re-vendor WebGPU bindings (#10034)" to v30. (#10105)
• 42738aa backport: fix: use vk::Fence::null on non-Windows swapchain (#9918)
• 1464540 Remove example warning
• 8bf3e5f Update to v30 (#9790)
• aa2b790 [core] filter native-only features and limits if
• 2ea3a1d [vulkan] advertise DownlevelFlags::SURFACE_VIEW_FORMATS if `VK_KHR_swapchai...
• 69e66d8 add DENO_WEBGPU_STRICT_COMPLIANCE and set it for the CTS job
• 995ee7b add Limits::max_buffers_and_acceleration_structures_per_shader_stage
• Additional commits viewable in compare view

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

• Add ContextV7::with_additional_precision_bits by @​ChrisJr404 in uuid-rs/uuid#904
• Prepare for 1.26.0 release by @​KodrAus in uuid-rs/uuid#905

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

• Add a serde::bytes module that encodes a Uuid as a byte string by @​ChrisJr404 in uuid-rs/uuid#902
• Prepare for 1.25.0 release by @​KodrAus in uuid-rs/uuid#903

New Contributors

• @​ChrisJr404 made their first contribution in uuid-rs/uuid#902

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

• Fix non-ASCII character handling in parse diagnostics by @​questfever in uuid-rs/uuid#899
• Prepare for 1.24.1 release by @​KodrAus in uuid-rs/uuid#900

New Contributors

• @​questfever made their first contribution in uuid-rs/uuid#899

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits

• cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
• 34e4f49 don't test macros under miri
• d9e7242 update nightly used for miri
• ec16819 prepare for 1.26.0 release
• 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
• 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
• 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
• b7ccde8 prepare for 1.25.0 release
• c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
• 8c198b2 Add a serde::bytes module that encodes as a byte string
• Additional commits viewable in compare view

Updates kira from 0.12.3 to 0.12.4

Release notes

Sourced from kira's releases.

v0.12.4

• Allow creating StaticSoundData from non-'static sources (thanks @​a1phyr!)

Changelog

Sourced from kira's changelog.

v0.12.4 - August 27, 2026

• Allow creating StaticSoundData from non-'static sources (thanks @​a1phyr!)

Commits

• 3d6421e version bump
• 8e3e047 Enable using non-'static data in StaticSoundData
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vanlueckn]

@dependabot ignore wgpu major version

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[dependabot]

OK, I won't notify you about version 30.x.x of wgpu again, unless you unignore it.

[dependabot]

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.