Skip to content

[master] Michijs Dependabot changes - #422

Open
michijs[bot] wants to merge 1 commit into
masterfrom
michijs-dependabot
Open

[master] Michijs Dependabot changes#422
michijs[bot] wants to merge 1 commit into
masterfrom
michijs-dependabot

Conversation

@michijs

@michijs michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

@michijs

michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Bump open from 11.0.1 to 11.0.2

Changelog:
Sourced from releases.
        ### v11.0.2- Update dependencies  6f006ad

https://redirect.github.com/sindresorhus/open/compare/v11.0.1...v11.0.2

        ### v11.0.1- Fix WSL failure when the working directory is unreachable from Windows  6ac3fe4

https://redirect.github.com/sindresorhus/open/compare/v11.0.0...v11.0.1

Commit history:

@michijs

michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Bump sharp from 0.35.3 to 0.35.4

Changelog:
Sourced from releases.
        ### v0.35.4https://redirect.github.com/lovell/sharp-libvips/releases/tag/v1.3.3
  • Bound resize dimensions to coordinate limit.

  • Bound composite left and top to coordinate limit.
    #4564
    @​metsw24-max

  • Round palette bit depth up for png and gif colours.
    #4569
    @​metsw24-max

  • Ensure tiff.subifd input option is used.
    #4572
    @​metsw24-max

  • Ensure info.pages is correct when limiting input page range.
    #4578
    @​metsw24-max

  • Improve support for input Streams finishing before output is requested.
    #4584
    @​Jaybhade

          ### v0.35.4-rc.0* Upgrade to libvips v8.18.6 for upstream bug fixes.
    
  • Bound resize dimensions to coordinate limit.

  • Bound composite left and top to coordinate limit.
    #4564
    @​metsw24-max

  • Round palette bit depth up for png and gif colours.
    #4569
    @​metsw24-max

  • Ensure tiff.subifd input option is used.
    #4572
    @​metsw24-max

  • Ensure info.pages is correct when limiting input page range.
    #4578
    @​metsw24-max

  • Improve support for input Streams finishing before output is requested.
    #4584
    @​Jaybhade

          ### v0.35.3* Tighten verification of `text` dimensions, TIFF tile dimensions and `extend` values.
    
  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info.
    #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer.
    #4520
    @​Andarist

  • Bound clahe width and height to avoid signed overflow.
    #4551
    @​metsw24-max

  • Bound trim margin to avoid signed overflow.
    #4552
    @​metsw24-max

  • Reject infinite values when validating numbers.
    #4553
    @​metsw24-max

  • Bound extract region to libvips coordinate limit.
    #4555
    @​metsw24-max

  • Verify background colour values are numbers.
    #4556
    @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit.
    #4558
    @​metsw24-max

  • Tighten recomb and affine matrix verification.
    #4560
    @​chatman-media

  • Verify cache memory limit to avoid overflow.
    #4561
    @​metsw24-max

          ### v0.35.3-rc.2* Tighten verification of `text` dimensions, TIFF tile dimensions and `extend` values.
    
  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info.
    #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer.
    #4520
    @​Andarist

  • Bound clahe width and height to avoid signed overflow.
    #4551
    @​metsw24-max

  • Bound trim margin to avoid signed overflow.
    #4552
    @​metsw24-max

  • Reject infinite values when validating numbers.
    #4553
    @​metsw24-max

  • Bound extract region to libvips coordinate limit.
    #4555
    @​metsw24-max

  • Verify background colour values are numbers.
    #4556
    @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit.
    #4558
    @​metsw24-max

  • Tighten recomb and affine matrix verification.
    #4560
    @​chatman-media

  • Verify cache memory limit to avoid overflow.
    #4561
    @​metsw24-max

          ### v0.35.3-rc.1* Tighten verification of `text` dimensions, TIFF tile dimensions and `extend` values.
    
  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info.
    #4500

  • Bound clahe width and height to avoid signed overflow.
    #4551
    @​metsw24-max

  • Bound trim margin to avoid signed overflow.
    #4552
    @​metsw24-max

  • Reject infinite values when validating numbers.
    #4553
    @​metsw24-max

  • Bound extract region to libvips coordinate limit.
    #4555
    @​metsw24-max

  • Verify background colour values are numbers.
    #4556
    @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit.
    #4558
    @​metsw24-max

  • Tighten recomb and affine matrix verification.
    #4560
    @​chatman-media

  • Verify cache memory limit to avoid overflow.
    #4561
    @​metsw24-max

Commit history:
  • 22a089 Create image on demand, reduces memory consumption
  • b12a16 Prevent TypeError when module load error has no code (#4593)
  • 4180d8 Docs: Add (refreshed) security page to website
  • cd82c4 Docs: Add (refreshed) contributing page to website

    Also adds AI policy, based partly on Nuxt's

  • 7f1a0a Release v0.35.4
  • f92781 Upgrade to sharp-libvips v1.3.3
  • e80209 Prerelease v0.35.4-rc.0
  • e13eb2 CI: Fix wasm32 build (#4589)

    By backporting commit toyobayashi/emnapi@​128af46 as a patch.

  • a82a0b Upgrade to libvips v8.18.6
  • 8044fe Bound resize dimensions to coordinate limit
  • 147f85 Docs: changelog entries for #4578 #4584
  • ee5bfb Tests: use yauzl directly rather than via extract-zip wrapper

    Also bumps devDeps

  • 7a7788 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef Improve support for input Streams finishing before output is requested (#4584)
  • 09f007 Docs: autoOrient handles only EXIF Orientation (#4587)
  • c4d74e Ensure info.pages is correct when limiting input page range (#4578)
  • 56676c Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#4583)
  • 3e0ac1 Docs: Add alt-text to SVGs, plus bump deps
  • 686f45 Bump actions/setup-python from 6.3.0 to 7.0.0 (#4575)
  • 82dca1 Bump actions/checkout from 7.0.0 to 7.0.1 (#4574)
  • 82bff2 Docs: create initial changelog for next release
  • addd11 Ensure tiff.subifd input option is used (#4572)
  • 11e89a Round palette bit depth up for png and gif colours (#4569)
  • 408db3 Bump actions/setup-node from 6.4.0 to 7.0.0 (#4573)
  • 7f045b Docs: serverless-esbuild requires explicit libc #4568
  • 6c9975 Bump denoland/setup-deno from 2.0.4 to 2.0.5 (#4566)
  • c19059 Bound composite left and top to coordinate limit (#4564)
  • 101844 Release v0.35.3
  • ba303a Prerelease v0.35.3-rc.2
  • 4f94fc Upgrade to sharp-libvips v1.3.2

@michijs

michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Bump @​types/node from 26.2.0 to 26.4.1

Commit history:
  • 173d91 🤖 Merge PR #75436 [forge-viewer] Fix Viewer3DImpl.rayIntersect return type and add test by @​yiskang

    Co-authored-by: Claude Sonnet 5 <noreply@​anthropic.com>

  • eeb97b 🤖 Merge PR #75485 [chrome] prune codeowners by @​erwanjugand
  • 5998bf 🤖 Merge PR #75497 [chrome] fix chrome.devtools.inspectedWindow.eval() by @​erwanjugand
  • 91a061 🤖 Merge PR #75369 feat(google-apps-script): remove nonexistent APIs, update api versions by @​hkleungai
  • b32daf 🤖 Merge PR #75393 mpv-script: type inference for property functions by @​sharpchen
  • 998ff7 🤖 Merge PR #75507 feat(decode-uri-component): remove types by @​hkleungai
  • f5ffd0 🤖 Merge PR #75506 feat(import-local): remove types by @​hkleungai
  • d3e242 🤖 Merge PR #75503 [bun] update to 1.4.1 by @​RiskyMH
  • 22cc17 🤖 Merge PR #75464 [openui5] Update the definition files for OpenUI5 1.152 by @​openui5bot

    Co-authored-by: sapui5 <DL_59954CAE5F99B77F58000028@​exchange.sap.corp>

  • 7e21f4 🤖 Merge PR #75361 feat(markdown-it-container): makes opts optional by @​hkleungai
  • d62faf 🤖 Merge PR #75494 feat(extenso): remove types by @​hkleungai
  • 46562a 🤖 Merge PR #75493 feat(sales-tax): remove types by @​hkleungai
  • 37fa09 🤖 Merge PR #75492 feat(raygun4js): remove types by @​hkleungai
  • 9b0ba5 🤖 Merge PR #75491 feat(ink-divider): remove types by @​hkleungai
  • 1cfc1c 🤖 Merge PR #75490 feat(react-scroll-sync): remove types by @​hkleungai
  • 7c0127 🤖 Merge PR #75487 chore: sync updates to google.maps by @​googlemaps-bot

    Co-authored-by: copybara-service[bot] <copybara-service[bot]@​users.noreply.redirect.github.com>

  • 4f5847 🤖 Merge PR #75495 Sync latest changes to @​types/google-publisher-tag by @​google-publisher-tag

    Co-authored-by: jimper <jimper@​users.noreply.redirect.github.com>

  • 844360 [react-dom] Add onBrowserBailout (#75489)

    Co-authored-by: Claude Code (kimi-k3[1m]) <noreply@​anthropic.com>

  • 15ef53 [react-dom] Update server-rendering options (#75488)

    Co-authored-by: Claude Code (kimi-k3[1m]) <noreply@​anthropic.com>

  • d7bf42 🤖 Merge PR #75480 feat(viewport-mercator-project): remove types by @​hkleungai
  • 7f9e14 🤖 Merge PR #75479 feat(weighted): remove types by @​hkleungai
  • 7a4dec 🤖 Merge PR #75478 feat(chownr): remove types by @​hkleungai
  • c43d39 🤖 Merge PR #75477 feat(gestalt-datepicker): remove types by @​hkleungai
  • 02497a 🤖 Merge PR #75473 [@​types/googlepay] Add Merchant Initiated Transaction types by @​dali-stripe

    Co-authored-by: Cursor <cursoragent@​cursor.com>

  • ebcca7 🤖 Merge PR #75456 [oidc-provider] v9.12.x by @​panva
  • ee6e80 🤖 Merge PR #75481 feat(zoomist): remove types by @​hkleungai
  • f68d2e 🤖 dprint fmt
  • 53342e 🤖 Merge PR #75486 [EW-34132] Add preserveEncoding, CompressionStream & DecompressionStream by @​aniefer
  • dfba4c Update VS Code types to 1.136 (#75483)
  • 51272b 🤖 dprint fmt

@michijs

michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Bump playwright-core from 1.62.1 to 1.63.0

Changelog:
Sourced from releases.
        ### v1.63.0## 🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group.
Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments,
and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API
steps, the subtitle is the locator or the navigation url — for example, Click with subtitle getByRole('button').
Both are rendered next to the step title in the trace viewer and the HTML report.

🖼️ Aria and screen snapshots in traces

The snapshots option of tracing.start() and the testOptions.trace fixture option now accept an
object selecting what to capture on every action:

// playwright.config.ts
export default defineConfig({
  use: {
    trace: {
      mode: 'on',
      snapshots: { dom: true, aria: true, screen: true }
    },
  },
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

Locators

const response = await request.get<User>('/api/users/42');
const user = await response.json(); // typed as User

Test runner

  • New standalone testOptions.reducedMotion, testOptions.forcedColors and testOptions.contrast options.
  • New --add-reporter command line option appends a reporter on top of the ones configured in playwright.config, instead of replacing them like --reporter does.
  • New omitTags option for the list, line, dot, github and junit reporters suppresses the tags that are automatically appended to test titles.

Command line

  • npx playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
  • npx playwright codegen --http-credentials records against pages behind HTTP authentication.

Miscellaneous

  • New built-in perfetto reporter writes a Trace Event Format file for the Perfetto UI or chrome://tracing, rendering the test run as a timeline with a lane per worker.
  • The HTML report renders a duration waterfall next to test steps.

Announcements

  • ⚠️ The experimental @&ZeroWidthSpace;playwright/experimental-ct-react, @&ZeroWidthSpace;playwright/experimental-ct-react17 and @&ZeroWidthSpace;playwright/experimental-ct-vue packages will no longer be updated. Follow the migration guide to move to the stories model introduced in 1.62. Story ids passed to fixtures.mount() can now be typed through the generated Stories registry.
  • ⚠️ Ubuntu 20.04 is not supported anymore.
  • 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

Browser Versions

  • Chromium 153.0.8010.12
  • Mozilla Firefox 155.0
  • WebKit 26.6

This version was also tested against the following stable channels:

  • Google Chrome 153

  • Microsoft Edge 153

          ### v1.62.1### Bug Fixes
    
  • #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)

  • #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)

  • #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG

  • #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62

  • #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

Commit history:
  • 46cd50 feat(webkit): roll to r2360 (#42553)
  • b1f8fd docs(test): mark test.step subtitle option as since v1.63 (#42568)
  • fe49b3 docs: release notes for v1.63 (#42552)
  • a5e563 docs(ci): recommend globalTimeout instead of a CI job timeout (#42563)
  • ca667f fix(har): do not report zero sizes for bodies that were never read (#42564)
  • 581288 feat(test): add subtitle option to test.step (#42566)
  • 1e9d2b chore: roll browser_patches (#42557)
  • d4b2db fix(types): expose signal option of Locator.elementHandle (#42520)
  • 1d6fc5 feat(chromium): roll to r1244 (#42545)

    Co-authored-by: microsoft-playwright-automation[bot] <203992400+microsoft-playwright-automation[bot]@​users.noreply.redirect.github.com>

  • d1dcd6 chore: mark v1.64.0-next (#42551)
  • 2b7a5f test: response.body() for content-encoding:identity (#42537)
  • 648a67 fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f5 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f5 docs(csharp): fix nonexistent method names in guide examples (#42507)

    Co-authored-by: Super-Eric <9334019+Super-Eric@​users.noreply.redirect.github.com>

  • bd6e55 chore(video): emit frames with real timestamps, drop frame number quantization (#42480)
  • a76bdd docs(tracing): enable snapshots options in other languages (#42526)
  • bfb42e feat(ct): type mount() story ids through a generated Stories registry (#42518)
  • 3dd248 chore(deps): bump actions/setup-java from 5.7.0 to 6.0.0 in the github-actions group across 1 directory (#42523)

    Signed-off-by: dependabot[bot] <support@​redirect.github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.redirect.github.com>

  • 34d230 feat(firefox): roll to r1543 (#42524)

    Co-authored-by: microsoft-playwright-automation[bot] <203992400+microsoft-playwright-automation[bot]@​users.noreply.redirect.github.com>

  • 612050 fix(test): support multiple contexts with --debug=cli (#42503)
  • e9163e feat(mcp): add --profile-dir-name to select the Chrome profile in extension mode (#42527)
  • df01cf fix(mcp): time out extension connection when a token is passed (#42525)
  • 855c73 chore(ci): bump azure/login to v3.0.2 (#42509)
  • 3be4b2 fix(trace-viewer): serve snapshots with a strict script-src policy (#42508)
  • bcf53b test(connect): fix unsafe launch options test with channels and tracing (#42504)
  • 328334 chore: bump WebKit version to 26.6 (#42514)
  • c874c8 docs(cli): use npx playwright cli for local installs (#42512)
  • 14f3c0 fix(reporter): include host in navigation and request subtitles (#42515)
  • 8e11a5 test(webkit): reenable WebSocket handshake HAR coverage (#42513)

    the upstream WebKit fix restores the reported WebSocket handshake headers on macOS 26

    remove the platform skip so the existing HAR assertions run again

    see https://redirect.github.com/microsoft/playwright/issues/42205

@michijs

michijs Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Bump @​types/chrome from ^0.2.7 to ^0.2.9

Commit history:
  • 173d91 🤖 Merge PR #75436 [forge-viewer] Fix Viewer3DImpl.rayIntersect return type and add test by @​yiskang

    Co-authored-by: Claude Sonnet 5 <noreply@​anthropic.com>

  • eeb97b 🤖 Merge PR #75485 [chrome] prune codeowners by @​erwanjugand
  • 5998bf 🤖 Merge PR #75497 [chrome] fix chrome.devtools.inspectedWindow.eval() by @​erwanjugand
  • 91a061 🤖 Merge PR #75369 feat(google-apps-script): remove nonexistent APIs, update api versions by @​hkleungai
  • b32daf 🤖 Merge PR #75393 mpv-script: type inference for property functions by @​sharpchen
  • 998ff7 🤖 Merge PR #75507 feat(decode-uri-component): remove types by @​hkleungai
  • f5ffd0 🤖 Merge PR #75506 feat(import-local): remove types by @​hkleungai
  • d3e242 🤖 Merge PR #75503 [bun] update to 1.4.1 by @​RiskyMH
  • 22cc17 🤖 Merge PR #75464 [openui5] Update the definition files for OpenUI5 1.152 by @​openui5bot

    Co-authored-by: sapui5 <DL_59954CAE5F99B77F58000028@​exchange.sap.corp>

  • 7e21f4 🤖 Merge PR #75361 feat(markdown-it-container): makes opts optional by @​hkleungai
  • d62faf 🤖 Merge PR #75494 feat(extenso): remove types by @​hkleungai
  • 46562a 🤖 Merge PR #75493 feat(sales-tax): remove types by @​hkleungai
  • 37fa09 🤖 Merge PR #75492 feat(raygun4js): remove types by @​hkleungai
  • 9b0ba5 🤖 Merge PR #75491 feat(ink-divider): remove types by @​hkleungai
  • 1cfc1c 🤖 Merge PR #75490 feat(react-scroll-sync): remove types by @​hkleungai
  • 7c0127 🤖 Merge PR #75487 chore: sync updates to google.maps by @​googlemaps-bot

    Co-authored-by: copybara-service[bot] <copybara-service[bot]@​users.noreply.redirect.github.com>

  • 4f5847 🤖 Merge PR #75495 Sync latest changes to @​types/google-publisher-tag by @​google-publisher-tag

    Co-authored-by: jimper <jimper@​users.noreply.redirect.github.com>

  • 844360 [react-dom] Add onBrowserBailout (#75489)

    Co-authored-by: Claude Code (kimi-k3[1m]) <noreply@​anthropic.com>

  • 15ef53 [react-dom] Update server-rendering options (#75488)

    Co-authored-by: Claude Code (kimi-k3[1m]) <noreply@​anthropic.com>

  • d7bf42 🤖 Merge PR #75480 feat(viewport-mercator-project): remove types by @​hkleungai
  • 7f9e14 🤖 Merge PR #75479 feat(weighted): remove types by @​hkleungai
  • 7a4dec 🤖 Merge PR #75478 feat(chownr): remove types by @​hkleungai
  • c43d39 🤖 Merge PR #75477 feat(gestalt-datepicker): remove types by @​hkleungai
  • 02497a 🤖 Merge PR #75473 [@​types/googlepay] Add Merchant Initiated Transaction types by @​dali-stripe

    Co-authored-by: Cursor <cursoragent@​cursor.com>

  • ebcca7 🤖 Merge PR #75456 [oidc-provider] v9.12.x by @​panva
  • ee6e80 🤖 Merge PR #75481 feat(zoomist): remove types by @​hkleungai
  • f68d2e 🤖 dprint fmt
  • 53342e 🤖 Merge PR #75486 [EW-34132] Add preserveEncoding, CompressionStream & DecompressionStream by @​aniefer
  • dfba4c Update VS Code types to 1.136 (#75483)
  • 51272b 🤖 dprint fmt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants