ci(rust): bump napi from 3.12.0 to 3.12.2

[dependabot]

Bumps napi from 3.12.0 to 3.12.2.

Release notes

Sourced from napi's releases.

napi-v3.12.2

Fixed

• (napi) memory safety in PromiseRaw callbacks and AbortSignal conversion (#3458)

napi-v3.12.1

Fixed

• (napi) stop unloading addons with live native code, preserve non-Error rejections, and add the wasm teardown barrier (#3423)
• (wasi) avoid randomness during module registration (#3447)

Commits

• 444bf29 chore(napi): release v3.12.2 (#3459)
• 2ffb055 fix(napi): memory safety in PromiseRaw callbacks and AbortSignal conversion (...
• 511ead2 chore(deps): update dependency oxc-parser to ^0.146.0 (#3457)
• 220b402 chore(deps): update dependency oxc-parser to ^0.145.0 (#3456)
• 70c1493 chore(release): publish
• aeba312 fix(cli): compatible with emnapi v1 & v2 (#3454)
• d532909 chore(deps): update dependency oxc-parser to ^0.144.0 (#3453)
• b8ba732 fix(deps): update emnapi to v2.0.0-alpha.4 (#3451)
• 06349eb chore(deps): update cross-platform-actions/action action to v1.4.0 (#3452)
• a5b5f27 chore(release): publish
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mehtarac]

@agent-of-mkmeral is this safe to merge?

[agent-of-mkmeral]

@mehtarac Yes — this was safe to merge (and I see it's already merged ✅). Assessment for the record:

Verdict: ✅ Safe

• Scope: Cargo.lock only (+5/−4) — patch-level bump of napi 3.12.0 → 3.12.2, no manifest or source changes.

• Upstream changes are bug/safety fixes, not behavior changes:

  • 3.12.2: memory safety fix in PromiseRaw callbacks and AbortSignal conversion (napi-rs#3458)
  • 3.12.1: stops unloading addons with live native code, preserves non-Error rejections, wasm teardown barrier (napi-rs#3423)

  These are actually fixes we want — this crate backs the Node bindings, and the addon-unload/memory-safety fixes reduce crash risk at process teardown.

• CI: fully green across the matrix — Rust (ubuntu/macos/windows), Python 3.10–3.14 × 3 OS, Node 20/22/24 × 3 OS, Security audit, and CI Gate all passed on 80e44c5.

• No open review threads, no conflicting changes.

Nothing to flag. 👍