chore(deps): consolidate 6 Dependabot bumps (pollster 1.0, wide 1.5, tungstenite 0.30, +patches)

.github/workflows/web.yml

@@ -117,7 +117,7 @@ jobs:
       # than straight into `_site/docs`, because the assemble step below clears +
       # recreates `_site`.
       - name: Set up Python for MkDocs
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.12"
 

crates/rustynes-android/Cargo.toml

@@ -45,7 +45,7 @@ android_logger = "0.15"
 # `AndroidNdk` window handle wgpu needs.
 wgpu = "29"
 raw-window-handle = "0.6"
-pollster = "0.4"
+pollster = "1.0"
 bytemuck = { version = "1", features = ["derive"] }
 # Shared CRT/scanline WGSL (single source of truth with the desktop frontend).
 rustynes-gfx-shaders.workspace = true

crates/rustynes-frontend/Cargo.toml

@@ -230,9 +230,12 @@ toml.workspace = true
 serde_json.workspace = true
 sha2.workspace = true
 
-# Frontend-only utilities. Both already in the dependency tree as
-# transitive deps of wgpu; adding them as direct deps is free.
-pollster = "0.4"
+# Frontend-only utilities. `bytemuck` matches the version already resolved
+# transitively (via wgpu), so declaring it direct is free. `pollster` is pinned
+# to 1.0 as an intentional direct dep for `block_on`; note this is a NEW major
+# distinct from the `pollster 0.4` that `rfd` still pulls transitively, so the two
+# coexist as a temporary duplicate until rfd bumps to pollster 1.x.
+pollster = "1.0"
 bytemuck = "1"
 web-time.workspace = true
 
@@ -250,7 +253,7 @@ rustynes-netplay.workspace = true
 # dependency-light. Native-only on purpose — the wasm blitter uses
 # `core::arch::wasm32` v128 intrinsics under `+simd128` (with a scalar fallback),
 # so `wide` never enters the wasm bundle and the 5 MiB size budget is untouched.
-wide = "0.7"
+wide = "1.5"
 
 # v1.7.0 "Forge" G4 — movie-export hash hardening (native export path only, so
 # the wasm size budget is untouched). `.fm2` wants an MD5 `romChecksum`, `.bk2`

crates/rustynes-ios/Cargo.toml

@@ -44,7 +44,7 @@ log = "0.4"
 [target.'cfg(target_os = "ios")'.dependencies]
 wgpu = "29"
 raw-window-handle = "0.6"
-pollster = "0.4"
+pollster = "1.0"
 bytemuck = { version = "1", features = ["derive"] }
 cpal = "0.18"
 # Shared CRT/scanline/NTSC WGSL (single source of truth with the desktop

crates/rustynes-mobile/Cargo.toml

@@ -75,7 +75,7 @@ zip = { version = "8", default-features = false, features = ["deflate"] }
 # STUN responder, exactly like `rustynes-netplay`'s `tests/nat_loopback.rs`. The
 # blocking `tungstenite` server side mirrors the client the bridge uses; same
 # version + pure-rustls features (no OpenSSL) so the dev build stays consistent.
-tungstenite = { version = "0.29", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"] }
+tungstenite = { version = "0.30", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"] }
 
 [[bin]]
 # The binding generator the platform builds invoke:

crates/rustynes-netplay/Cargo.toml

@@ -37,15 +37,15 @@ thiserror = { workspace = true, features = ["std"] }
 # only the async WebSocket plumbing in `examples/signaling_server.rs`.
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
 tokio = { version = "1", features = ["rt-multi-thread", "net", "macros", "sync", "time", "io-util"], optional = true }
-tokio-tungstenite = { version = "0.29", optional = true }
+tokio-tungstenite = { version = "0.30", optional = true }
 futures-util = { version = "0.3", optional = true }
 serde_json = { version = "1.0", optional = true }
 
 # v1.8.7 — the SYNC WebSocket client backing the `netplay-client` signaling
 # worker. `rustls-tls-webpki-roots` keeps it pure-Rust TLS (no system OpenSSL),
 # which is what lets it cross-compile cleanly to aarch64-linux-android. No async
 # runtime: this is the blocking `tungstenite::connect` + `read`/`send` API.
-tungstenite = { version = "0.29", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"], optional = true }
+tungstenite = { version = "0.30", default-features = false, features = ["handshake", "rustls-tls-webpki-roots"], optional = true }
 
 # v2.5.0 Phase C — WebRTC transport scaffold for the browser (wasm32 only).
 # The native build (UDP/std::net) needs none of these; on wasm they back the