build(deps): update wasmtime requirement from 40.0.0 to 41.0.0

[dependabot]

Updates the requirements on wasmtime to permit the latest version.

Release notes

Sourced from wasmtime's releases.

v41.0.0

41.0.0

Released 2026-01-20.

Added

• Support for {Future,Stream}Any in the component model has improved. #12142

• Wasmtime has initial support for breakpoints and single-stepping with the debug feature for guest programs. #12133

• Wasmtime has begun adding a new Error type which is similar to anyhow::Error but supports gracefully handling OOM. Wasmtime still uses anyhow::Error but this will change in the future to wasmtime::Error which will be a distinct type. #12163

• An initial top-level crate for async-debugging guest programs has been added. #12183

Changed

• Cranelift now optimizes redundant select + icmp instructions. #12135

• Synchronous component model functions can no longer block before returning. This implements a change in the upstream specification to the upcoming async support in the component model which places stricter restrictions on non-async functions and their ability to perform blocking operations. #12043

• Frame iteration in debug mode now visits all activations which enables seeing all frames from recursive wasm calls. #12176

• Wasmtime now requires Rust 1.90.0 or later. #12167

• Intra-component stream/future reads/writes are now allowed for simple data types. #12181

• The POLL callback code has been removed from the canonical ABI for async functions and the waitable-set.poll function no longer yields. #12182

• Guest-to-guest adapters injected by Wasmtime now have improved trapping error

... (truncated)

Changelog

Sourced from wasmtime's changelog.

42.0.0

Unreleased.

Added

Changed

---

Release notes for previous releases of Wasmtime can be found on the respective release branches of the Wasmtime repository.

• 41.0.x
• 40.0.x
• 39.0.x
• 38.0.x
• 37.0.x
• 36.0.x
• 35.0.x
• 34.0.x
• 33.0.x
• 32.0.x
• 31.0.x
• 30.0.x
• 29.0.x
• 28.0.x
• 27.0.x
• 26.0.x
• 25.0.x
• 24.0.x
• 23.0.x
• 22.0.x
• 21.0.x
• 20.0.x
• 19.0.x
• 18.0.x
• 17.0.x
• 16.0.x
• 15.0.x
• 14.0.x
• 13.0.x
• 12.0.x
• 11.0.x
• 10.0.x
• 9.0.x
• 8.0.x
• 7.0.x
• 6.0.x

... (truncated)

Commits

• 3dda916 Release Wasmtime 41.0.0 (#12373)
• 309028e [41.0.0] Backport update to WASI 0.3.0-rc-2026-01-06 (#12344)
• 4a67a85 Cranelift: x64: fix user-controlled recursion in cmp emission. (#12333) (#12342)
• 1db4911 Fix ISLE icmp optimization rules for vector inputs (#12335) (#12340)
• 7e98de5 x64: Fix lowering rules for shld (#12321) (#12323)
• 9379396 Insert veneers on arm64 in cranelift-jit where necessary (#12239) (#12320)
• 9656606 Fix Module::image_range to include non-text part of module. (#12302) (#12307)
• 677cb00 [41.0.0] Migrate this workspace to using trusted publishing (#12277)
• 83ff6b8 Add release notes (#12256)
• 0889323 cranelift-codegen: rename most uses of std to core and alloc (#12237)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)