[dependabot]

Bumps the cargo-major group with 6 updates in the /products/breg/wasm-handler-sdk directory:

Package	From	To
der	0.7.10	0.8.2
miniz_oxide	0.8.5	0.9.1
pg_query	6.2.1	18.1.0
pkcs1	0.7.5	0.8.0
saphyr-parser	0.1.0	0.3.3
x509-cert	0.2.5	0.3.0

Updates der from 0.7.10 to 0.8.2

Commits

• 7637997 der v0.8.2 (#2422)
• 0ebccf5 der: add AsIntRef and AsUintRef traits (#2415)
• 399ec59 const-oid: reject over-u32 arcs in BER decoder instead of truncating (#2412)
• f17419b chore(deps): bump crate-ci/typos from 1.49.0 to 1.50.0 (#2419)
• e90fd35 apply clippy fixes (#2417)
• 8792e91 x509-tsp: provide a to_datetime for GeneralizedTimeNanos (#2413)
• 520ec4c pkcs5: support for generic aead encrypt/decrypt (#2410)
• fe4004b pkcs8: PrivateKeyInfo docs about PrivateKeyInfoRef type alias (#2406)
• 283d836 der: error on nested trailing data (#2401)
• 7bab21a add new unit tests and corresponding artifacts (#2407)
• Additional commits viewable in compare view

Updates miniz_oxide from 0.8.5 to 0.9.1

Changelog

Sourced from miniz_oxide's changelog.

0.9.1 - 2026-03-13

Bug Fixes

• reject incomplete Huffman trees with max code length > 1 (#190) - (c40992a) - Lilith River
• bump simd_adler32 dependency version (needed for wasm issue fix) - (a9b3756) - oyvindln

Other

• add wasmtime to workflow for running tests with wasip1 - (f70ad10) - oyvindln
• box LZOxide.codes on wasm32 to reduce stack allocation (#189) - (d0f3e0c) - Fabrício Bracht

---

0.9.0 - 2026-01-12

Version bump due to a minor API break for having to add enum variants. Many enums have been made non_exhaustive to make it easier to avoid API breaks in the future. The minimum rust version is now 1.60.

Bug Fixes

• (deflate) simplify stored compression, fixes to updating compresson level after start - (c5a7662) - oyvindln
• (deflate) make more stuff non_exhaustive, reduce deflate stack usage a tiny bit - (cd2d14f) - oyvindln
• (miniz_oxide) make tdeflflush and compressionstrategy non exhaustive - (130d51d) - oyvindln
• fix flush test, make new simpler init function for compressoroxide and make flag creation function const - (3bb0d51) - oyvindln
• make more funtions const and make tinflstatus non_exhaustive - (84a94e8) - oyvindln

Documentation

• (inflate) add documentation and doctest for decompress_slice_iter_to_slice - (97465ca) - oyvindln

Features

• feat(deflate): add window_bits feature for deflate, don't set wbits - (e70e395) - oyvindln

Other

• Implement support for partial flushes (#179) - (2ede365) - Jonathan Behrens
• Add decompress_with_limit to handle ring buffers (#183) - (bac1abe) - peckpeck
• Flush improvements (#185) - (0d276ac) - Jim Peters
• Fix flush_block to always insert zlib header correctly (#187) - (414d9b8) - Jim Peters

---

0.8.9 - 2025-06-09

Other

• Remove compiler-builtins from rustc-dep-of-std dependencies (#173) - (025c06e) - Trevor Gross

---

0.8.8 - 2025-04-08

... (truncated)

Commits

• See full diff in compare view

Updates pg_query from 6.2.1 to 18.1.0

Changelog

Sourced from pg_query's changelog.

18.1.0 2026-10-27

• Upgrade to Postgres 18.6 (libpg_query 18.1.0)
  • Performance: libpg_query now uses upb instead of protobuf-c for serialization, which is substantially faster thanks to its built-in arena allocation, resulting in 2x faster runtime.
  • Robustness: overly deep queries now return a "stack depth limit exceeded" error instead of crashing the process (#348), and the deparser strictly checks unexpected pointer values in input parse trees instead of crashing
  • Parser: comments are now ignored when parsing queries (they are only significant for scanning), fixing parse errors for tokens like NOT /* comment */ IN (#378); PL/pgSQL statements without bodies now return an error instead of crashing (#363)
  • Parser: PL/pgSQL parsing reworked to use proper type definitions (Postgres 18.0.0), replacing the previous ad-hoc approach
  • Deparser: parentheses are now added based on operator precedence, fixing cases where deparsed SQL changed meaning or was invalid (#371)
  • Deparser: comment handling reworked for Postgres 18 multi-statement strings: comments between statements are no longer attributed to the following statement (relevant for deparse_comments_for_query)
  • normalize: support NOTIFY statements (#340) and fix handling of U& special constants in DefElem nodes (#347)
  • summary: fix a relation going missing when a CTE shares its name (#367) and fix a memory leak when the tree walk throws an error
• Breaking: parse, fingerprint and summary now require parser/fingerprint options arguments, corresponding to the C pg_query_parse_opts, pg_query_fingerprint_opts and pg_query_summary APIs. Options accept ParserOptions/FingerprintOptions constants or raw integers; pass 0 for the defaults:
  • parse(statement, parser_options)
  • fingerprint(statement, parser_options, fingerprint_options)
  • summary(statement, parser_options, truncate_limit)
• Breaking: deparse now requires a DeparseOptions argument, and all deparse convenience methods (ParseResult::deparse, protobuf::ParseResult::deparse, Node::deparse, NodeEnum::deparse, NodeRef::deparse, NodeMut::deparse) likewise require it, mirroring the C PostgresDeparseOpts struct (comments, pretty_print, indent_size, max_line_length, trailing_newline, commas_start_of_line); pass Default::default() for the previous plain behavior
• Fingerprint values changed: fingerprinting now follows Postgres 18 query ID behavior. In SELECT/DML statements the relation alias (if present) replaces the relation name and schema names are ignored; sequences of 2+ digits

... (truncated)

Commits

• 20f3a18 Release 18.1.0 (#79)
• See full diff in compare view

Updates pkcs1 from 0.7.5 to 0.8.0

Commits

• 7434675 pkcs1 v0.8.0 (#2506)
• 0722c46 pkcs1: documentation improvements (#2505)
• 106ce72 pkcs1: add DecodeRsa*Key/EncodeRsa*Key impls for Rsa*Key* types (#2504)
• 9960cb7 pkcs5: return an error from Salt::new for salts longer than MAX_LEN (#2502)
• ae28c9f der: reject malformed binary REAL values instead of panicking (#2501)
• 47e6ffd Update references to {datatracker,tools}.ietf.org to rfc-editor.org (#2500)
• 4c5fadb Cargo.lock: bump dependencies (#2493)
• ea3b305 der v0.8.3 (#2492)
• a8ddabe Bump ctutils to v0.4.5; MSRV 1.87 (#2494)
• a53ac93 der: fix recursion in TryFrom\<AnyRef<'_>> impl for bool (#2491)
• Additional commits viewable in compare view

Updates saphyr-parser from 0.1.0 to 0.3.3

Commits

• 9a60bea saphyr v0.3.3
• eac3d1d CHANGELOG; update v0.3.3 release notes draft
• 5d16228 Merge pull request #147 from wleeaf/fix/emitter-literal-cr-bom
• abe2baf garden: add remote for @​wleeaf
• 58916be fix(emitter): indent root literal blocks with document marker lines
• af9a829 fix(emitter): keep trailing empty lines of multiline strings with |+
• d629589 fix(emitter): don't write carriage returns or a BOM in literal blocks
• eb0feb1 cargo: update clipboard-win to non-yanked version
• 31fd871 saphyr v0.3.2
• 2a3e03d Merge pull request #145 from spicysharkco/fix/emitter-quote-bom
• Additional commits viewable in compare view

Updates x509-cert from 0.2.5 to 0.3.0

Commits

• c478c6b x509-cert v0.3.0 (#2375)
• 905717f der v0.8.1 (#2377)
• 2556627 der: cap maximum number of nested messages at 64 (#2379)
• b45caa8 der: have SliceReader use reader::position::Position (#2378)
• 42b4325 x509-cert: re-enable minimal-versions checks (#2374)
• 233eb65 chore(deps): bump the all-deps group across 1 directory with 8 updates (#2373)
• f9e2ab5 chore(deps): bump crate-ci/typos from 1.47.2 to 1.48.0 (#2372)
• 4bfdd7c chore(deps): bump p256 from 0.14.0-rc.15 to 0.14 (#2371)
• 235839f tls_codec: 0.4.3 prep (#2365)
• de2aa55 der: simplify SetOfVec sorting test (#2367)
• Additional commits viewable in compare view

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-09T04:07:43.890844Z	11b53a7	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 752f9d05cc

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Commit the updated root lockfile

The workspace Cargo.lock still resolves pg_query 6.2.1 (and likewise retains the old exact miniz_oxide and saphyr-parser versions), which cannot satisfy these new manifest requirements. Consequently, every root-workspace CI command using --locked aborts during dependency resolution before compiling; regenerate and commit the root lockfile alongside the nested WASM SDK lockfile.

AGENTS.md reference: AGENTS.md:L346-L355

Useful? React with 👍 / 👎.