update wasmtime (#2484)

* update wasmtime

have you heard? new wasmtime is out that fixes 12 different security
advisories. hot off the presses

* placate clippy

* delete wasm-compose example

it is heavily bitrotted because it is not checked in CI. Unfortunately,
we do not have the energy to maintain it.

The Cargo.locks in this are getting us dependabot vulnerability alerts.

* more clippy fixes

* more clippy fixes

* fuzz-stats: fix exhaustive match error with a todo

* clippy fixes

* switch to wasmtime 36 track - using 43 has too new of a rust-version

Author: pchickey

Cargo.lock

@@ -138,7 +138,7 @@ smallvec = "1.11.1"
 spdx = "0.10.1"
 termcolor = "1.2.0"
 url = "2.0.0"
-wasmtime = { version = "34.0.1", default-features = false, features = ['cranelift', 'component-model', 'runtime', 'gc-drc'] }
+wasmtime = { version = "36.0.7", default-features = false, features = ['cranelift', 'component-model', 'runtime', 'gc-drc'] }
 thiserror = { version = "2.0.12", default-features = false }
 tempfile = "3.2.0"
 wit-bindgen = { git = 'https://github.com/bytecodealliance/wit-bindgen', default-features = false }

Cargo.toml

@@ -58,6 +58,7 @@ pub fn dummy_ref(ty: &RefType) -> Ref {
         | HeapType::Struct
         | HeapType::ConcreteArray(_)
         | HeapType::ConcreteStruct(_) => Ref::Any(None),
+        _ => todo!(),
     }
 }