chore(deps): bump mlua from 0.11.5 to 0.11.6

[dependabot]

Bumps mlua from 0.11.5 to 0.11.6.

Release notes

Sourced from mlua's releases.

v0.11.6

What's Changed

• Lua 5.5 support under the new lua55 feature flag
• Luau updated to 0.705+
• Added AnyUserData::is_proxy
• Added num_params, num_upvalues, is_vararg to FunctionInfo

Full Changelog: mlua-rs/mlua@v0.11.5...v0.11.6

Lua 5.5 notes

Lua 5.5 support external strings and mlua enable this optimisation for impl IntoLua for String/BString (owned versions to move Drop into Lua). Also the Lua::create_external_string function allow moving ownership to Lua for any Into<Vec<u8>> types.

Changelog

Sourced from mlua's changelog.

v0.11.6 (Jan 27, 2026)

• Added Lua 5.5 support (lua55 feature flag)
• Luau updated to 0.705+
• Added AnyUserData::is_proxy method to check if userdata is a proxy
• Added num_params, num_upvalues, is_vararg to FunctionInfo

Commits

• e7fa8d7 v0.11.6
• c10718e Update CHANGELOG
• ec2ce36 Some final Lua 5.5 updates
• 7175700 mlua-sys: v0.10.0
• 6bb7f09 Don't use luaL_typename to get a static type name in Luau.
• e67ae7f Make RawLua::{push,push_value,pop_value} public
• 8c1535c cargo fmt
• fd245da Expose RawLua via Lua::exec_raw_lua (#670)
• 7fb7e86 Update spelling check
• 93617ee Update trybuild (compile) messages
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

Cargo.lock

Package	Version	License	Issue Type
mlua	0.11.6	Null	Unknown License
mlua-sys	0.10.0	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, CC0-1.0, Unlicense, 0BSD, Unicode-DFS-2016, Unicode-3.0, Zlib, MPL-2.0, BSL-1.0, Apache-2.0 WITH LLVM-exception, OpenSSL, BlueOak-1.0.0, CC-BY-3.0, CC-BY-4.0, WTFPL, MIT-0, NCSA

Excluded from license check:

pkg:cargo/serde, pkg:cargo/serde_json, pkg:cargo/tokio, pkg:cargo/clap, pkg:cargo/unicode-ident, pkg:cargo/unicode-normalization, pkg:cargo/unicode-bidi, pkg:cargo/unicode-width, pkg:cargo/unicode-segmentation, pkg:cargo/unicode-properties, pkg:cargo/ring, pkg:cargo/webpki, pkg:cargo/rustls-webpki, pkg:cargo/aws-lc-rs, pkg:cargo/aws-lc-sys, pkg:cargo/untrusted, pkg:cargo/openssl, pkg:cargo/openssl-sys, pkg:cargo/lab, pkg:cargo/iced, pkg:cargo/iced_core, pkg:cargo/iced_widget, pkg:cargo/iced_runtime

OpenSSF Scorecard

Package	Version	Score	Details
cargo/lua-src	550.0.0	Unknown	Unknown
cargo/mlua	0.11.6	Unknown	Unknown
cargo/mlua-sys	0.10.0	Unknown	Unknown

Scanned Files

• Cargo.lock