build(deps): bump @bytecodealliance/jco from 1.11.1 to 1.24.6 in /spec/fixtures/components/js_app

[dependabot]

Bumps @bytecodealliance/jco from 1.11.1 to 1.24.6.

Release notes

Sourced from @​bytecodealliance/jco's releases.

jco-v1.24.6

[1.24.6] - 2026-06-30

🧪 Testing

• (jco) allow retries, avoid old node versions in perf test by @​vados-cosmonic in #1716

• (jco) enable parallelism on TS tests by @​vados-cosmonic

• (jco) enable tests for recent transpile fixes by @​vados-cosmonic

• (jco) add perf gate for async calls by @​vados-cosmonic in #1712

• (jco) temporarily disable new test until jco-transpile release by @​vados-cosmonic in #1710

• (jco) add regression test test for result/option helper types by @​vados-cosmonic

⚙️ Miscellaneous Tasks

• (jco) update jco-transpile to v0.3.9 by @​vados-cosmonic

jco-v1.24.5

[1.24.5] - 2026-06-29

🐛 Bug Fixes

• (jco) fix test file generation by @​vados-cosmonic

🧪 Testing

• (jco) add regression test for subtask removal memory leak by @​vados-cosmonic in #1701

• (jco) refactor to list of explicit tests rather than walking by @​vados-cosmonic in #1609

• (jco) rename fixture wat directory to wast by @​vados-cosmonic

• (jco) temporarily disable WAST tests by @​vados-cosmonic

• (jco) support WastDirective::AssertTrap by @​vados-cosmonic

• (jco) wast->js conversion logic by @​vados-cosmonic

• (jco) add skipped tests to wast by @​vados-cosmonic

• (jco) add component model WAST test harness by @​vados-cosmonic

⚙️ Miscellaneous Tasks

• (jco) update to jco-transpile v0.3.8 by @​vados-cosmonic

... (truncated)

Commits

• 92d3134 release: jco v1.24.6
• e95125d test(jco): allow retries, avoid old node versions in perf test
• 3225cba test(jco): enable parallelism on TS tests
• d6282cf test(jco): enable tests for recent transpile fixes
• ed97a65 chore(jco): update jco-transpile to v0.3.9
• 4be6570 release: jco-transpile v0.3.9
• 5b81d9a release: js-component-bindgen v2.0.9
• 3f4c597 test(jco): add perf gate for async calls
• 66163aa feat(bindgen): cache WebAssembly.promising wrapped callees
• 0da6df5 test(jco): temporarily disable new test until jco-transpile release
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​bytecodealliance/jco since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Medium Risk
Large jump in the tool that builds the spec WASM artifact; nested deps may require Node 20+, so CI/local builds could break without re-running build/tests on the fixture.

Overview
Bumps @bytecodealliance/jco from 1.11.1 to 1.24.6 in spec/fixtures/components/js_app (package.json and package-lock.json only). The fixture’s npm run build path is unchanged—it still runs jco componentize to produce js_app.wasm for component specs.

The lockfile refresh pulls in a much newer jco toolchain (e.g. jco-transpile, preview3-shim, oxc-parser, binaryen 130, wizer 10, commander 14). Some of those packages declare Node ≥ 20, which is stricter than the fixture README’s Node ≥ 18 note.

^{Reviewed by Cursor Bugbot for commit f24b32a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[dependabot]

Superseded by #186.