chore(deps): update non-major dependencies#421
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
2382ef0 to
179b685
Compare
e7b41bb to
4fa5d1c
Compare
34b735c to
b1a31b6
Compare
20beed2 to
b6c82f8
Compare
a81a7a4 to
0ff62b9
Compare
e2f9892 to
8df6c27
Compare
268ab4b to
8635331
Compare
a46e33e to
e0212d4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.0.0→3.1.01.58.1→1.61.01.61.12.50.1→2.67.02.68.00.8.0→0.11.00.8.0→0.11.00.8.0→0.11.00.9.0→0.12.00.8.0→0.11.05.3.1→5.4.15.4.218.3.27→18.3.318.54.0→8.62.08.54.0→8.62.06.0.3→6.0.75.1.3→5.1.55.1.62.4.6→2.4.11v1.19.0→v1.20.05.5.5→5.5.60.4.26→0.5.33.21.0→3.21.83.8.1→3.8.41.9.11→1.9.131.9.11→1.9.135.49.1→5.56.35.56.45.49.1→5.56.35.56.44.3.6→4.6.04.7.1(+1)6.4.1→6.4.30.25.0→0.28.02.11.10→2.11.123.2.4→3.2.63.5.27→3.5.383.5.393.5.27→3.5.383.5.39Release Notes
paulmillr/noble-ed25519 (@noble/ed25519)
v3.1.0Compare Source
Uint8Array, while TS 5.9+ made it genericUint8Array<ArrayBuffer>TS2345sign()in Firefox WebExtension context. Closes gh-120Full Changelog: paulmillr/noble-ed25519@3.0.1...3.1.0
v3.0.1Compare Source
verifyFull Changelog: paulmillr/noble-ed25519@3.0.0...3.0.1
microsoft/playwright (@playwright/test)
v1.61.0Compare Source
🔑 WebAuthn passkeys
New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer
navigator.credentials.create()/navigator.credentials.get()ceremonies in the page — no real hardware key required, works in all browsers:You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.
🗃️ Web Storage
New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
New APIs
Network
Browser and Screencast
artifactsDirin browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.cursorin screencast.showActions() controls the cursor decoration rendered for pointer actions.onFramecallback in screencast.start() now receives atimestampof when the frame was presented by the browser.Test runner
trace: new'on-all-retries','retain-on-first-failure'and'retain-on-failure-and-retries'values. See the video modes table for which runs are recorded and kept in each mode.expect.soft.poll(...).process.argvfrom the runner process, handy for reading custom arguments passed after the--separator.AggregateErroras a separate entry.-Gcommand line shorthand for--grep-invert.🛠️ Other improvements
Browser Versions
This version was also tested against the following stable channels:
v1.60.0Compare Source
🌐 HAR recording on Tracing
tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same
content,modeandurlFilteroptions asrecordHar. The returned Disposable makes it easy to scope a recording withawait using:🪝 Drop API
New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches
dragenter,dragover, anddropwith a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:🎯 Aria snapshots
page.locator('body').boxesoption on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as[box=x,y,width,height], useful for AI consumption.🛑 test.abort()
New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:
New APIs
Browser, Context and Page
Locators and Assertions
descriptionin page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.pseudoin expect(locator).toHaveCSS() reads computed styles from::beforeor::after.stylein locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.Network
noDefaultsin browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.Errors and Reporting
line/columnproperties (lineNumber/columnNumberare deprecated).expect(...)matcher failure.workerInfoargument with details about the worker for fixture teardown errors.Test runner
{testFileBaseName}token in testProject.snapshotPathTemplate — file name without extension.workers: 0or negative values.🛠️ Other improvements
npx playwright show-reportaccepts.zipfiles directly — no need to unzip first.repeatEachIndexis shown in the test header when non-zero.Breaking Changes⚠️
Locator.ariaRef()— use the standard locator.ariaSnapshot() pipeline.handleoption onBrowserContext.exposeBindingandPage.exposeBinding.loggeroption onBrowserType.connectandBrowserType.connectOverCDP— use tracing instead.videosPath/videoSize— userecordVideoinstead.Browser Versions
This version was also tested against the following stable channels:
v1.59.1Compare Source
Bug Fixes
codegen,--uiandshowcommands (#39990)v1.59.0Compare Source
🎬 Screencast
New page.screencast API provides a unified interface for capturing page content with:
Screencast recording — record video with precise start/stop control, as an alternative to the
recordVideooption:Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:
screencast.showActions() accepts
position('top-left','top','top-right','bottom-left','bottom','bottom-right'),duration(ms per annotation), andfontSize(px). Returns a disposable to stop showing actions.Action annotations can also be enabled in test fixtures via the
videooption:Visual overlays — add chapter titles and custom HTML overlays on top of the page for richer narration:
Real-time frame capture — stream JPEG-encoded frames for custom processing like thumbnails, live previews, AI vision, and more:
Agentic video receipts — coding agents can produce video evidence of their work. After completing a task, an agent can record a walkthrough video with rich annotations for human review:
The resulting video serves as a receipt: chapter titles provide context, action annotations highlight each interaction, and the visual walkthrough is faster to review than text logs.
🔗 Interoperability
New browser.bind() API makes a launched browser available for
playwright-cli,@playwright/mcp, and other clients to connect to.Bind a browser — start a browser and bind it so others can connect:
Connect from playwright-cli — connect to the running browser from your favorite coding agent.
Connect from @playwright/mcp — or point your MCP server to the running browser.
Connect from a Playwright client — use API to connect to the browser. Multiple clients at a time are supported!
Pass
hostandportoptions to bind over WebSocket instead of a named pipe:Call browser.unbind() to stop accepting new connections.
📊 Observability
Run
playwright-cli showto open the Dashboard that lists all the bound browsers, their statuses, and allows interacting with them:🐛 CLI debugger for agents
Coding agents can now run
npx playwright test --debug=clito attach and debug tests overplaywright-cli— perfect for automatically fixing tests in agentic workflows:📋 CLI trace analysis for agents
Coding agents can run
npx playwright traceto explore Playwright Trace and understand failing or flaky tests from the command line:♻️
await usingMany APIs now return async disposables, enabling the
await usingsyntax for automatic cleanup:🔍 Snapshots and Locators
page.locator('body').ariaSnapshot().depthandmodein locator.ariaSnapshot().New APIs
Screencast
Storage, Console and Errors
filterin page.consoleMessages() and page.pageErrors() controls which messages are returned.Miscellaneous
livein tracing.start() for real-time trace updates.artifactsDirin browserType.launch() to configure the artifacts directory.🛠️ Other improvements
'retain-on-failure-and-retries'records a trace for each test run and retains all traces when an attempt fails — great for comparing a passing trace with a failing one from a flaky test.Known Issues⚠️ ⚠️
navigator.platformemulation can cause Ctrl or Meta dispatching errors (#40009). PassPLAYWRIGHT_NO_UA_PLATFORM = '1'environment variable while we are issuing a patch release. Let us know in the issue how it affected you.Breaking Changes⚠️
@playwright/experimental-ct-sveltepackage.junittest reporter now differentiates between types of errors, so some of the previous<failure>s are now reported as<error>s.Browser Versions
This version was also tested against the following stable channels:
v1.58.2Compare Source
Highlights
#39121 fix(trace viewer): make paths via stdin work
#39129 fix: do not force swiftshader on chromium mac
Browser Versions
sveltejs/kit (@sveltejs/kit)
v2.67.0Compare Source
Minor Changes
prerender.handleInvalidUrloption for invalid URLs discovered while crawling (#16088)Patch Changes
fix: support
exactOptionalPropertyTypesfor optional form schema fields (#15866)fix: avoid unnecessarily overriding a user's Vite 8
codeSplittingsetting (#16118)v2.66.0Compare Source
Minor Changes
feat: precompress prerendered
.mdand.mdxfiles (#15893)feat: warn the user when they forget to make boolean inputs optional in their form schemas (#15804)
Patch Changes
fix: blur active element before component update during navigation so that blur/focusout handlers fire while old component data is still valid (#15452)
fix: ensure
baseis available from$service-workerduring development (#15882)fix: use correct relative asset paths when rendering an error page for a missing
__data.jsonrequest (#15884)fix: preserve active
for awaitconsumers acrossquery.livereconnects (#16022)fix: settle
query.livereconnect promise on all exit paths, preventinginvalidateAll()from deadlocking when a live query is offline or interrupted (#16022)fix: preserve last value when a
query.livestream completes without yielding on reconnect (#16022)fix: remove
types: ['node']from generated tsconfig to avoid errors when@types/nodeis not installed (#15709)fix: prefer pages over endpoints when prerendering (#16076)
fix: restore snapshots after afterNavigate callbacks (#16066)
fix: support
ws:/wss:andtrusted-types-evalfor CSP sources (#15938)fix: omit empty
fileinputs from remote form data (#15898)fix: fail early if a route with
+pageand+serveris marked as prerenderable (#16075)fix: wait a tick before resetting forms (#15805)
fix:
preflightschemas apply correctly when chained beforefor(#15863)fix: blank page in SPA mode when root layout
load()throws (#15798)fix: pass all unknown options from the
sveltekitVite plugin through tovite-plugin-svelte(#16010)v2.65.2Compare Source
Patch Changes
fix: throw an error when prerendering a root +server.js that returns a non-HTML response (#15994)
fix: decode base64-serialized fetch bodies before caching them for client-side replay (#16034)
fix: correctly access explicit dynamic public environment variables from prerendered pages and service workers (#16024)
fix: allow
preloadCodeto be called during initial page load (#16028)fix: send
cache-control: private, no-storeon remote function responses so personalized query results can never be cached by shared caches (#16020)fix: preserve the HTTP status and error body when a remote function request fails in transport (e.g. a 401/403 from a
handlehook), instead of reporting a generic 500 (#16021)fix: avoid loading universal nodes during build analysis when the app uses a hash router (#16042)
fix: correctly serve client entry during development when using the pnpm global virtual store (#16045)
fix: normalize path separators when comparing config (#16037)
fix: ensure
buildingresolves correctly to allow avoiding build-time explicit environment variable validation (#16058)fix: prevent unhandled promise rejections when remote function failures are consumed via
current/errorinstead ofawait(#16018)v2.65.1Compare Source
Patch Changes
fix: avoid importing the Vite development client code into builds with a non-standard
NODE_ENV(#16023)fix: don't emit the unused bundle and stylesheet files when using
bundleStrategy: 'inline'(#16025)fix: reset queries before navigating when
invalidateAllis set (#16014)fix: regression in loading assets for absolute path apps (#16026)
v2.65.0Compare Source
Minor Changes
Patch Changes
fix: dedupe remote data (#15991)
fix: skip client build if all routes have CSR disabled (#15936)
v2.64.0Compare Source
Minor Changes
Fileobjects (#15978)Patch Changes
v2.63.1Compare Source
Patch Changes
fix: use SSE for
query.live(#15957)fix: use forward slashes in the generated
env.d.tsimport path on Windows (#15977)fix: allow
$app/environmentwith a warning whenexplicitEnvironmentVariablesis enabled (#15980)fix: avoid importing Vite while validating explicit environment variables (#15953)
docs: adjust the release version of explicit env vars (#15968)
fix: ensure
versionis defined when importing from$app/envwith explicit environment variables (#15971)v2.63.0Compare Source
Minor Changes
Patch Changes
fix: remove check for svelte.config.js before running
sync(#15946)fix: generate a placeholder tsconfig.json to squelch sync-time warnings (#15948)
fix: allow use of
$app/env/publicin service workers (#15950)v2.62.0Compare Source
Minor Changes
Patch Changes
fix: preserve multiple
Set-Cookieheaders on 304 responses (#15902)fix: preload for anchor elements that were just previously preloaded (#15915)
fix: catch load function streaming errors on the client (#15929)
fix: avoid generating the
_app/env.jsmodule if public dynamic environment variables are not used by the app (#15940)v2.61.1Compare Source
Patch Changes
v2.61.0Compare Source
Minor Changes
breaking: the
.run()method has been removed from remote queries on both the client and the server. Useawait query()directly instead — it now works everywhere (#15779)feat: remote queries can now be awaited in any context (event handlers, module scope, async callbacks), not just inside reactive contexts. The cache is shared across reactive and non-reactive subscribers, so awaiting a query in an event handler will dedupe with components that have already subscribed to the same query. (#15779)
feat: live query instances are now themselves async-iterable (#15878)
feat: add programmatic
submitmethod toformremote function instances (#15657)feat: pass
formremote function instance intoenhancecallback (#15657)Patch Changes
fix: resolve the app payload without using
process.env.NODE_ENV(#15852)fix: support
exactOptionalPropertyTypesfor optional route params (#15825)fix: correctly send
truevalue to the server for 'submit' and 'hidden' form fields (#15858)fix: avoid build warnings about undefined universal hooks (#15895)
fix: prefer default error page when failing to decode the URL pathname (#15744)
fix: disable link prefetching on slow internet connections (#15885)
fix: allow routes ending with optional parameters next to more specific routes (#15861)
fix: remove reliance on Content-Length header in deserialize_binary_form, which caused failures when proxies (e.g. Vercel, Azure) strip the header and use chunked transfer encoding (#15796)
v2.60.1Compare Source
Configuration
📅 Schedule: (in timezone America/New_York)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.