chore(deps): bump mlua from 0.10.5 to 0.12.0

[dependabot]

Bumps mlua from 0.10.5 to 0.12.0.

Release notes

Sourced from mlua's releases.

v0.12.0

Highlights

More ergonomic UserData building blocks

• Declaratively implement UserData with #[derive(UserData)] and register methods/fields with the new #[mlua::userdata_impl] attribute macro.
• UserDataOwned<T> wrapper takes ownership of userdata and implements FromLua
• UserDataMethods::add_method_once/add_async_method_once
• __todebugstring metamethod for pretty-printing userdata when debugging
• MaybeSync trait for userdata under the send feature

Reorganized public API

Types are now grouped into focused modules: chunk, debug, error, function, table, string, state, thread, userdata and luau.

Thread lifecycle callbacks

Hook into coroutine create/resume/yield events across all Lua versions (when using mlua API).

Luau improvements

Latest Luau with extended require-by-string support and JIT options.

Garbage-collector interface refactor

Lua::gc_inc / Lua::gc_gen are replaced by a Lua::gc_set_mode, with GcIncParams/GcGenParams for fine-grained tuning.

What's Changed (since v0.12.0-rc.2)

• Crate root re-exports are refactored (only essentials are re-exported, the rest is in the new submodules)
• Added ThreadStatus::Normal and Thread::is_normal (mimic coroutine.status)
• Added Lua::set_jit_options with support of Luau JIT inliner (Luau)
• Added Value::as_vector/Value::is_vector (Luau)
• Added Table::remove
• serde: tables with the array metatable are always encoded as arrays (incl. detect_mixed_tables option)
• impl Hash for BorrowedStr/BorrowedBytes
• Lua::current_thread resolves implicit async threads to their root owner (#706)
• Bugfixes and improvements

Full Changelog: mlua-rs/mlua@v0.11.6...v0.12.0

v0.12.0-rc.2

The new stable version is almost ready and will be released after some testing

What's Changed

• Add #[derive(UserData)] and #[userdata_impl] macros
• Support thread create/resume/yield callbacks for all Lua versions (including Luau)
• Support to_alias_override/to_alias_fallback in Require trait (Luau)
• Prevent XRc overflow when dropping RawLua with foreign Lua state

... (truncated)

Changelog

Sourced from mlua's changelog.

v0.12.0 (Jul 05, 2026)

Changes since v0.12.0-rc.2

• Create root re-exports are refactored (only essentials are re-exported, the rest is in the new submodules)
• Added ThreadStatus::Normal and Thread::is_normal (mimic coroutine.status)
• Added Lua::set_jit_options with support of Luau JIT inliner (Luau)
• Added Value::as_vector/Value::is_vector (Luau)
• Added Table::remove
• serde: tables with the array metatable are always encoded as arrays (incl. detect_mixed_tables option)
• impl Hash for BorrowedStr/BorrowedBytes
• Lua::current_thread resolves implicit async threads to their root owner (#706)
• Bugfixes and improvements

v0.12.0-rc.2 (Jun 06, 2026)

• Add #[derive(UserData)] and #[mlua::userdata_impl] macros
• Support thread create/resume/yield callbacks for all Lua versions (including Luau)
• Support to_alias_override/to_alias_fallback in Require trait (Luau)
• Prevent XRc overflow when dropping RawLua with foreign Lua state
• implement Not for StdLib (#699)
• Fix String::to_pointer return NULL in Lua <5.4

v0.12.0-rc.1 (Apr 21, 2026)

• Rust 2024 edition
• Removed Error::ToLuaConversionError variant as it was unused (and not practically useful)
• New modules to group data types: chunk, debug, error, function, table, string, state, thread, userdata, luau
• Support __todebugstring metamethod for pretty formatting userdata value (for debugging)
• New MaybeSync trait that is required for userdata types
• Removed lifetime from BorrowedStr and BorrowedBytes
• New Thread methods: is_resumable, is_running, is_finished, is_error
• Added Thread::state to get raw Lua state pointer
• Luau TextRequirer is renamed to FsRequirer
• GC interface refactor: Lua::gc_inc/Lua::gc_gen is replaced with gc_set_mode
• Added GcIncParams and GcGenParams for GC tuning
• New UserDataMethods::add_method_once and UserDataMethods::add_async_method_once
• Initial Luau integer64 type support
• Changed interface of Function::wrap/wrap_mut/wrap_async to support any Error type
• Changed AnyUserData::type_name to return LuaString instead
• Added UserDataOwned<T> wrapper to take ownership of userdata T and implements FromLua

v0.11.6 (Jan 27, 2026)

• Added Lua 5.5 support (lua55 feature flag)
• Luau updated to 0.705+
• Added AnyUserData::is_proxy method to check if userdata is a proxy
• Added num_params, num_upvalues, is_vararg to FunctionInfo

v0.11.5 (Nov 22, 2025)

... (truncated)

Commits

• 8eddf85 v0.12.0
• 46d3783 Update CHANGELOG
• 7ddcdc1 Add Table::remove
• 6b19eeb Make VmState as non_exhaustive
• b64da48 Make NavigateError as non_exhaustive (Luau)
• cddbcc5 Refactor crate-root re-exports and drop hidden backward-compat aliases
• 1af17ec Various doc updates and refinement
• eef5985 Rename LuaJitOptions to LuauJitOptions in prelude
• 9099d5f Rename JitOptions::set_inliner to JitOptions::inliner for consistency
• 34825d6 Fix Lua::gc_set_mode panic when GC is internally stopped (Lua 5.4/5.5)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This PR changes mirrored Maestro source files in the public repo, but it does not link the matching private source-of-truth PR.

Add one of these to the PR body, then re-run the check:

• https://github.com/evalops/maestro-internal/pull/<number>
• evalops/maestro-internal#<number>
• maestro-internal#<number>

Mirrored files touched:

• Cargo.lock
• packages/tui-rs/Cargo.toml

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​mlua@​0.10.5 ⏵ 0.12.0	+1

View full report

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 903236cdfd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Move the dependency bump to the internal mirror source

This repository's root instructions say public-facing source changes must originate in evalops/maestro-internal and arrive through the protected mirror workflow, not be edited directly in this public tree. Bumping mlua here (and regenerating Cargo.lock) changes mirrored source in this repo and bypasses that workflow, so please make the dependency update in the internal source and let the mirror sync it.

Useful? React with 👍 / 👎.