Bump rquickjs from 0.12.1 to 0.14.0

[dependabot]

Bumps rquickjs from 0.12.1 to 0.14.0.

Changelog

Sourced from rquickjs's changelog.

[0.14.0] - 2026-09-17

Breaking Changes

• Removed unused trait StaticJsFunction.

Added

• Added Exception::throw_dom, PredefinedAtom::DOMException, and intrinsic::DOMException.
• Support for wasm32-unknown-unknown from [@​mrchantey]

Fixed

• Fixed Params::is_constructor to return the suggested value instead of false.
• Fixed ExoticMethod to fix type checking for &Ctx
• Fixed Ctx::execute_pending_job treating a job that threw the same as one that ran successfully, leaving the exception pending on the runtime instead of clearing it.
• Fixed Object::instance_of leaving a pending exception on the runtime when the checked object isn't an instance of the given Rust class.

[0.13.0] - 2026-09-07

Breaking Changes

• TypedArray::as_bytes, ArrayBuffer::as_bytes and ArrayBuffer::as_slice are now unsafe fn, and the unsound safe AsRef<[T]> impls for TypedArray and ArrayBuffer were removed in favor of the new unsafe fn TypedArray::as_slice #736
• TypedArray::as_raw and ArrayBuffer::as_raw now return NonNull<[u8]> slice pointers, and the unnameable RawArrayBuffer type has been removed.

Added

• Add pre-generated bindings for riscv64gc-unknown-linux-gnu and riscv64a23-unknown-linux-gnu
• ArrayBuffer::new-backed buffers now support ArrayBuffer.prototype.transfer to a different length instead of always failing

Fixed

• Fixed deadlock when dropping a Context while the runtime lock is held under the parallel feature
• Updated sys/quickjs to 2c620e4 (quickjs-ng 0.16.2) and adapted ArrayBuffer callbacks to the new JSReallocArrayBufferDataFunc contract
• Removed stale RefCountHeader cast in drop_context (field moved to allocator header in quickjs-ng)

Security

• Fixed TypedArray/ArrayBuffer byte-slice accessors returning a safe &[u8] that could be mutated, detached or reallocated by JS running while the slice was still borrowed #736

[0.12.2] - 2026-07-27

Added

• Added TypedArray<U8Clamped> support for Uint8ClampedArray, obtainable via TypedArray::from_object and matched by is_typed_array like other typed array classes

Fixed

• Fixed rquickjs-sys host build failing during cross-compilation by reusing bundled bindings for the host target instead of running bindgen with a mismatched libclang #709

Commits

• d7ef5ee Release 0.14.0 (#754)
• d0ede00 Bump sys/quickjs from 5301314 to 0fdea21 (#755)
• e97f61c Bump actions-rust-lang/setup-rust-toolchain from 1 to 2 (#750)
• cce4f0a Add support for wasm32-unknown-unknown (#728)
• 95b6f37 Fix Ctx::execute_pending_job discarding a job's exception (#753)
• 821e9e0 Fix pending exception leak in Object::instance_of (#752)
• 4ce6a08 Fix type checking for &Ctx in ExoticMethod (#751)
• c920225 Update syn requirement from 2 to 3 (#713)
• 5c9764e Refactor CI to use cargo-zigbuild and split bindings workflow (#689)
• 276cdef Bump sys/quickjs from 5c87424 to 5301314 (#749)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)