Skip to content

Bump the npm-patch-and-minor group across 1 directory with 10 updates - #164

Merged
bitsforthought merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-patch-and-minor-8344aac15c
Nov 11, 2026
Merged

Bump the npm-patch-and-minor group across 1 directory with 10 updates#164
bitsforthought merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-patch-and-minor-8344aac15c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-patch-and-minor group with 10 updates in the / directory:

Package From To
@playwright/test 1.64.1 1.65.0
@eslint-community/regexpp 4.12.2 4.12.3
@monogrid/gainmap-js 3.7.2 3.7.3
semver 7.8.5 7.8.6
ast-v8-to-istanbul 1.0.7 1.0.8
playwright 1.64.1 1.65.0
playwright-core 1.64.1 1.65.0
tinybench 6.2.2 6.2.3
tough-cookie 6.0.2 6.1.0
undici 8.12.3 8.12.4

Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates @eslint-community/regexpp from 4.12.2 to 4.12.3

Release notes

Sourced from @​eslint-community/regexpp's releases.

v4.12.3

4.12.3 (2026-11-08)

Bug Fixes

  • updates unicode resource with latest (#221) (1eb755f)
Commits

Updates @monogrid/gainmap-js from 3.7.2 to 3.7.3

Release notes

Sourced from @​monogrid/gainmap-js's releases.

v3.7.3

3.7.3 (2026-11-05)

Bug Fixes

  • encode: write the MPF primary image type Chrome expects (#90) (b3cfd9f), closes #89
Changelog

Sourced from @​monogrid/gainmap-js's changelog.

3.7.3 (2026-11-05)

Bug Fixes

  • encode: write the MPF primary image type Chrome expects (#90) (b3cfd9f), closes #89
Commits
  • 2529e4e chore(release): 3.7.3 [skip ci]
  • b3cfd9f fix(encode): write the MPF primary image type Chrome expects (#90)
  • e91eafd chore(deps-dev): bump three and @​types/three (#88)
  • 892af77 docs: document relative brightness, content boost and gamut handling when enc...
  • See full diff in compare view

Updates semver from 7.8.5 to 7.8.6

Release notes

Sourced from semver's releases.

v7.8.6

7.8.6 (2026-11-02)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.8.6 (2026-11-02)

Bug Fixes

Chores

Commits

Updates ast-v8-to-istanbul from 1.0.7 to 1.0.8

Release notes

Sourced from ast-v8-to-istanbul's releases.

v1.0.8

What's Changed

Full Changelog: AriPerkkio/ast-v8-to-istanbul@v1.0.7...v1.0.8

Commits
  • e14e741 1.0.8
  • a3880e7 fix: static class methods always reported as covered (#216)
  • cd07180 chore: remove rollup dev dependency
  • 3ceeca8 chore(deps): update vitest to v2 (#214)
  • 97dc2b8 chore(deps): update all non-major npm dependencies (#213)
  • 927f712 chore(deps): update all non-major npm dependencies (#211)
  • dfb7ceb chore: downgrade pnpm to 11 to avoid `Cannot find module '<some-path>/pnpm/12...
  • 4f303ab chore(deps): update all non-major npm dependencies (#209)
  • e8e0b7f chore(deps): update all non-major npm dependencies (#206)
  • 4ea1075 chore(deps): update all non-major npm dependencies (#205)
  • Additional commits viewable in compare view

Updates playwright from 1.64.1 to 1.65.0

Release notes

Sourced from playwright's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates playwright-core from 1.64.1 to 1.65.0

Release notes

Sourced from playwright-core's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates tinybench from 6.2.2 to 6.2.3

Release notes

Sourced from tinybench's releases.

v6.2.3

   🏎 Performance

    View changes on GitHub
Commits
  • e90b98a chore: release v6.2.3
  • 36f88ae chore(deps): update all non-major dependencies (#723)
  • 89b5ca1 perf: reduce large-sample sorting overhead (#720)
  • 75a53e9 chore(deps): update dependency @​cloudflare/workers-types to v5.20261028.1 (#722)
  • 1ec5417 chore(deps): update pnpm to v12.16.1 (#721)
  • 66b4952 chore(deps): update all non-major dependencies (#719)
  • ac52571 chore(deps): update dependency @​cloudflare/workers-types to v5.20261026.1 (#718)
  • ab03a72 chore(deps): lock file maintenance (#713)
  • 0822733 chore(deps): update node.js to v26 (#715)
  • f91c85f chore(deps): pin dependencies (#717)
  • Additional commits viewable in compare view

Updates tough-cookie from 6.0.2 to 6.1.0

Release notes

Sourced from tough-cookie's releases.

v6.1.0

Notable changes

Secure cookies are rejected when set from an insecure origin (#656, #663)

CookieJar now refuses to store a Secure cookie set from a URL that isn't potentially trustworthy, such as plain http://example.com, per RFC 6265bis §5.7 step 13. https: and wss: URLs are still accepted, and so are localhost and loopback addresses while allowSecureOnLocal is enabled (the default). setCookie() now rejects with Cookie is Secure but this is not a secure connection, or drops the cookie silently when ignoreError: true is passed.

This changes behavior that existing v6 code may rely on. To keep storing Secure cookies no matter which origin set them, opt out with:

new CookieJar(store, { enforceSecureOriginOnStorage: false })

The opt-out applies only to storage. On retrieval, Secure cookies are still returned only for secure origins, the same as in v6.0.x. The setting survives serialize()/deserialize() and clone().

Other behavior changes

  • __Host- cookies now need an explicit Path=/ attribute. Having the default path come out as / is no longer enough (#608).
  • Cookie.validate() now returns false for names that aren't valid HTTP tokens, such as empty names, names with separators or control characters, and non-ASCII names. Parsing and storage are unchanged (#650).
  • An explicit SameSite=None is now kept when serializing with Cookie.toString() and getSetCookieStrings(); it used to be dropped (#639).
  • An IPv4 address in the Domain attribute is now accepted instead of being treated as a public suffix (#630).

Additions

  • New exported PrefixSecurityMode type for the prefixSecurity option (#659, #667).
  • The getCookiesSync, getCookieString*, getSetCookieStrings* and setCookieSync methods now accept a URL as well as a string, matching their async counterparts (#655).

What's Changed

... (truncated)

Commits
  • f5dd871 6.1.0
  • e99f6d6 chore(deps-dev): bump the dev-dependencies group across 1 directory with 9 up...
  • fb8f307 chore(deps): bump esbuild and tsup (#674)
  • e0a2cc5 chore(deps): bump tldts (#669)
  • 34a379f chore(deps): bump fast-uri from 3.1.7 to 3.1.9 (#668)
  • e02c190 chore(deps-dev): bump vitest from 4.1.12 to 5.0.5 (#672)
  • 6f53e4f ci: stop patching jsdom WPT expectations in integration tests (#664)
  • d20c170 feat: add enforceSecureOriginOnStorage option to opt out of Secure-cookie ori...
  • 9ba0b1c fix: reject Secure cookies set over untrustworthy origins (#656)
  • bcc5a1f Merge pull request #667 from salesforce/wjh/non-breaking-prefix-security
  • Additional commits viewable in compare view

Updates undici from 8.12.3 to 8.12.4

Release notes

Sourced from undici's releases.

v8.12.4

⚠️ Security Fixes

This release fixes six vulnerabilities.

CVE-2026-116592 / GHSA-mqg3-3v4r-cm32 (high)

Undici 8.12.2 and 8.12.3 could cache the final response from a redirect chain under the original request key without applying the origin, cache policy, freshness, or Vary requirements of every intermediate hop. This could poison a cache or expose one user's response to another user. The fix validates every redirect hop, combines their Vary fields, limits freshness and stale serving to the most restrictive hop, and invalidates persistent SQLite entries written by vulnerable releases.

CVE-2026-120474 / GHSA-7xg3-fphp-28hg (medium)

A shared cache used with compose(redirect(), cache()) could store a credential-dependent response from a same-origin redirect under the original URL. A later authenticated or unauthenticated request could then receive another user's response. Redirected requests carrying Authorization, Cookie, or Proxy-Authorization are no longer stored under the original alias key.

CVE-2026-116630 / GHSA-5rm8-gv32-r954 (medium)

A cross-origin redirect during cache revalidation could let a 304 Not Modified response from the redirect target validate a cached response from the original origin. Undici now checks that the revalidation target matches the cached URL and that any returned validator matches the stored representation before replaying the cached body.

CVE-2026-120415 / GHSA-9v6h-8rgp-m69f (medium)

The redirect interceptor did not strip credentials correctly when request headers were supplied as an array of [name, value] pairs. With a header-normalizing interceptor outside redirect(), credentials could be sent to a cross-origin redirect target. Undici now handles both tuple arrays and flat header arrays when removing sensitive headers.

CVE-2026-120222 / GHSA-3g9m-rv3r-w5w2 (medium)

A downstream handler exception during cache replay could escape as an uncaught exception or unhandled promise rejection and terminate the process. This included dump size-limit failures, excessive Content-Encoding values in decompress, asynchronous cache-store failures, and cached-body replay after a 304. These failures are now reported as request errors.

CVE-2026-120423 / GHSA-r4pc-4jcp-7pqc (medium)

fetch() could skip Subresource Integrity verification when valid integrity metadata was separated or surrounded by ASCII whitespace other than a space, including a horizontal tab. Integrity metadata is now split on all ASCII whitespace before SHA-256, SHA-384, or SHA-512 verification.

What's Changed

... (truncated)

Commits
  • 779ee3e Bumped v8.12.4 (#6162)
  • 10fa822 docs: remove security release notes
  • 6228fc5 docs: add security release notes
  • 1dd2657 test(cache): align redirect caching with hop policy
  • 8ea1d61 fix(cache): detect an actual redirect, not a plain revalidation
  • 4257261 test(cache): cover credentialed revalidation refresh
  • aa7ccff fix(cache): treat proxy-authorization as a credential when caching redirects
  • 8cf5ce1 test(cache): cover proxy-authorization credential on same-origin redirect
  • 26c42c2 fix(cache): do not cache credential-bearing same-origin redirects under the a...
  • e958661 test: cover decompress too-many-content-encodings throw on async cache replay
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-patch-and-minor group across 1 directory with 10 updates
a9e6283 
Bumps the npm-patch-and-minor group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [@eslint-community/regexpp](https://github.com/eslint-community/regexpp) | `4.12.2` | `4.12.3` |
| [@monogrid/gainmap-js](https://github.com/MONOGRID/gainmap-js) | `3.7.2` | `3.7.3` |
| [semver](https://github.com/npm/node-semver) | `7.8.5` | `7.8.6` |
| [ast-v8-to-istanbul](https://github.com/AriPerkkio/ast-v8-to-istanbul) | `1.0.7` | `1.0.8` |
| [playwright](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.64.1` | `1.65.0` |
| [tinybench](https://github.com/tinylibs/tinybench) | `6.2.2` | `6.2.3` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `6.0.2` | `6.1.0` |
| [undici](https://github.com/nodejs/undici) | `8.12.3` | `8.12.4` |



Updates `@playwright/test` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `@eslint-community/regexpp` from 4.12.2 to 4.12.3
- [Release notes](https://github.com/eslint-community/regexpp/releases)
- [Commits](eslint-community/regexpp@v4.12.2...v4.12.3)

Updates `@monogrid/gainmap-js` from 3.7.2 to 3.7.3
- [Release notes](https://github.com/MONOGRID/gainmap-js/releases)
- [Changelog](https://github.com/MONOGRID/gainmap-js/blob/main/CHANGELOG.md)
- [Commits](MONOGRID/gainmap-js@v3.7.2...v3.7.3)

Updates `semver` from 7.8.5 to 7.8.6
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.5...v7.8.6)

Updates `ast-v8-to-istanbul` from 1.0.7 to 1.0.8
- [Release notes](https://github.com/AriPerkkio/ast-v8-to-istanbul/releases)
- [Commits](AriPerkkio/ast-v8-to-istanbul@v1.0.7...v1.0.8)

Updates `playwright` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `playwright-core` from 1.64.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.1...v1.65.0)

Updates `tinybench` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/tinylibs/tinybench/releases)
- [Commits](tinylibs/tinybench@v6.2.2...v6.2.3)

Updates `tough-cookie` from 6.0.2 to 6.1.0
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v6.0.2...v6.1.0)

Updates `undici` from 8.12.3 to 8.12.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.12.3...v8.12.4)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-patch-and-minor
- dependency-name: "@eslint-community/regexpp"
  dependency-version: 4.12.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
- dependency-name: "@monogrid/gainmap-js"
  dependency-version: 3.7.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
- dependency-name: semver
  dependency-version: 7.8.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
- dependency-name: ast-v8-to-istanbul
  dependency-version: 1.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
- dependency-name: playwright
  dependency-version: 1.65.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patch-and-minor
- dependency-name: playwright-core
  dependency-version: 1.65.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patch-and-minor
- dependency-name: tinybench
  dependency-version: 6.2.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
- dependency-name: tough-cookie
  dependency-version: 6.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patch-and-minor
- dependency-name: undici
  dependency-version: 8.12.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from bitsforthought as a code owner November 11, 2026 18:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026
@bitsforthought
Match Playwright browser images to the upgraded dependency
7428352 
Update the local container and CI job to use Playwright 1.65.0's pinned
browser image. Keeping the package and browser versions aligned prevents
Playwright from looking for browser executables that the image lacks.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d4ffa3e3-b2c2-48ce-b7a5-6e8bb3fceb8e
@bitsforthought

bitsforthought commented Nov 11, 2026

Copy link
Copy Markdown
Owner

Aligned the local and CI Playwright images with @playwright/test 1.65.0. Browser E2E passed.

@bitsforthought
bitsforthought merged commit 73bc75b into main Nov 11, 2026
4 checks passed
@bitsforthought
bitsforthought deleted the dependabot/npm_and_yarn/npm-patch-and-minor-8344aac15c branch November 11, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bitsforthought bitsforthought bitsforthought approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bitsforthought