Bump io.github.charlietap.chasm:chasm from 1.4.7 to 1.4.8

[dependabot]

Bumps io.github.charlietap.chasm:chasm from 1.4.7 to 1.4.8.

Release notes

Sourced from io.github.charlietap.chasm:chasm's releases.

1.4.8

Whats Changed

40-45% faster decoding

This release contains a substantial rewrite of Chasm's decoder hot path. Primitive reads no longer pay the cost of binding a Result for every value, byte arrays and SourceReader inputs now share a buffered reader, and LEB128 decoding uses specialised fast paths when the input is contiguous.

In sequential corpus decoding comparisons against 1.4.7, the byte-array decode api dropped from 1.179 seconds to 0.690 seconds, a 41.5% reduction. The SourceReader api dropped from 1.247 seconds to 0.677 seconds, a 45.7% reduction.

Added Component Model decoding

Chasm can now decode WebAssembly Component Model binaries. The new component(...) embedding API accepts either a ByteArray or a SourceReader and returns a component in the same style as the existing core module API.

The new AST and decoder cover component types, imports and exports, aliases, instances, canonical definitions, starts, values, nested components, embedded core modules and custom metadata.

Added Component Model validation

Decoded components can now be passed to the existing validate(...) embedding API.

The validator handles the Component Model type system and subtyping rules, imports and exports, aliases, instantiation, nested components and core modules, canonical ABI definitions and options, resources and component values.

Both the decoder and validator pass the official Component Model test suite in it's entirety and include all the future release features like maps etc.

Commits

• 9e2e2fa prepare for release 1.4.8
• ff2b7bc gradle 9.6.1
• 7d367d8 chasm: add component model validation to testsuite runner
• 4245ee6 chasm: add public validate component api
• d6e46d2 validator: validate component model components
• 97974c8 type-system: model analyzed component types
• a915731 validator: make module validation reusable by components
• f773c58 decoder: bound component vector allocations
• 5d86561 decoder: align component values with the binary grammar
• 381307b docs: distinguish routine checks from verification evidence
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)