Update binaryen to 133

[gominimal-pkgmgr-mgr]

Update binaryen 124 → 133

Source: github:WebAssembly/binaryen
Release: https://github.com/WebAssembly/binaryen/releases/tag/version_133
Changelog: WebAssembly/binaryen@version_124...version_133
Released: 2 days ago (2026-09-21)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 133 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

• 2 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (2)

This update clears 2 vulnerabilities affecting 124:

CVE / GHSA	Severity	Fixed in
CVE-2025-14956	LOW	via range: <= 125
CVE-2025-14957	LOW	via range: <= 125

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)

	Component	Old	New
~	binaryen	124	133
~	binaryen-upstream	124	133

Changes

	Old	New
Version	124	133
SHA256	b8d06af81a8c2bb2...	2f3e3d9edc567514...
Size		7.1 MB
Source	https://github.com/WebAssembly/binaryen/archive/refs/tags/version_124.tar.gz	https://github.com/WebAssembly/binaryen/archive/refs/tags/version_133.tar.gz

• License: Apache-2.0 (source: GitHub + tarball)

---

Created by pkgmgr

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: ca84fd4d-e8a3-4fe2-b611-b1cfcbe1cf3c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}