chore(deps): bump wasmtime from 46.0.3 to 48.0.1

[dependabot]

Bumps wasmtime from 46.0.3 to 48.0.1.

Release notes

Sourced from wasmtime's releases.

v48.0.1

48.0.1

Released 2026-08-24.

Fixed

• Context slots in component compositions are now correctly managed. #14139

• The Host header is now set by default for HTTP requests sent with WASIp2. #14167

v48.0.0

48.0.0

Released 2026-08-20.

Added

• Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

• Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

• Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

• Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

• Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

• Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Changelog

Sourced from wasmtime's changelog.

48.0.1

Released 2026-08-24.

Fixed

• Context slots in component compositions are now correctly managed. #14139

• The Host header is now set by default for HTTP requests sent with WASIp2. #14167

---

48.0.0

Released 2026-08-20.

Added

• Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

• Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

• Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

• Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

• Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

• Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Commits

• 7bac2c2 Release Wasmtime 48.0.1 (#14197)
• 188c5bc [48.0.x] Two backports for a point release (#14194)
• f1412a5 Release Wasmtime 48.0.0 (#14169)
• f821ba6 [48.0.0] Backports for security fixes (#14175)
• a12fff3 Add release notes (#14159)
• a90217a Alias analysis: do not eliminate loads with different byte orders (#14162) (#...
• c267eed [48.0.0] Some more backports (#14138)
• fc78952 [48.0.0] Backport some changes from main (#14106)
• 45af25f winch(x64): Prefer operands in the value stack for atomic operations (#14074)
• a71048c [wasi-nn] disable AMX instructions in OneDNN (#14073)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)