chore(deps): Update spin-sdk requirement from <4,>=3.4 to >=4.0.0,<5 in /experiments/003_wasm_compile

[dependabot]

Updates the requirements on spin-sdk to permit the latest version.

Commits

• bed3580 chore(pyproject.toml): release 4.0.0 (#154)
• 00358b6 Merge pull request #153 from vdice/chore/release-4.0.0-rc1
• b150c92 ci(build.yml): grab project version from pyproject.toml
• 33f9b68 chore(pyproject.toml): release 4.0.0-rc1
• 00d8cd5 bump componentize-py version to v0.23.0 (#152)
• be170a4 Merge pull request #150 from vdice/ci/release
• 191e400 ci(release): add docs/workflow for releasing
• 396d219 Merge pull request #151 from vdice/ci/docs
• 6cb7ead chore(.gitattributes): remove docs entry
• 1730e61 ref(docs): remove docs folder
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[iheitlager]

Review: real regression found, not merging yet

Tested together with #43 (same `requirements.txt`, and spin-python-sdk's own v4.0.0 changelog includes "bump componentize-py version to v0.23.0" as one of its own commits — these two are a coordinated pair, not independent bumps) in a scratch worktree.

Baseline first (current pinned versions, for context): `python-raw` currently fails at build with `ModuleNotFoundError: No module named 'componentize_py_types'` — a pre-existing bug, unrelated to either PR. `python-spin` currently builds fine.

With both bumps applied (componentize-py `>=0.25.0,<0.26` + spin-sdk `>=4.0.0,<5`):

• `python-raw` now builds successfully — the componentize-py bump fixes the pre-existing bug. Good news, but that credit belongs to chore(deps): Update componentize-py requirement from <0.18,>=0.17 to >=0.25.0,<0.26 in /experiments/003_wasm_compile #43, not this PR.
• `python-spin` now fails:

  AssertionError: Unable to resolve `Some("spin-http")`.
  Available worlds: [ ... no "spin-http" in the list ... ]
  

  `python-spin/spin.toml` hardcodes `componentize-py -w spin-http componentize app -o app.wasm`. That world name doesn't exist in spin-sdk v4's WIT bindings anymore — it's been renamed/restructured (candidates in the new world list include `spin:up/http-trigger@4.0.0`, but I didn't track down and verify the exact correct replacement — a component build target/wit dir may also need to change, not just the world name, since a naive substitution hit a second error, `failed to read path for WIT [wit]`).

Recommendation: needs a companion fix to `python-spin/spin.toml`'s build command before this is safe to merge. Merging as-is breaks a currently-working build. Not merging until that's sorted — happy to help track down the correct world name if wanted.

---

🤖 Analysis by Claude