Skip to content

Build(deps): Bump the all-dependencies group across 1 directory with 29 updates - #496

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/all-dependencies-5aa69a7214
Closed

Build(deps): Bump the all-dependencies group across 1 directory with 29 updates#496
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/all-dependencies-5aa69a7214

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 29 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1066.0 3.1097.0
@aws-sdk/lib-storage 3.1066.0 3.1097.0
@codemirror/lang-markdown 6.5.0 6.5.1
@codemirror/search 6.7.0 6.7.1
@simplewebauthn/server 13.3.1 13.3.2
markdown-it 14.2.0 14.3.0
nodemailer 8.0.11 9.0.3
pg 8.21.0 8.22.0
pg-boss 12.18.3 12.26.3
puppeteer-core 25.1.0 25.4.0
@fontsource-variable/hanken-grotesk 5.2.8 5.3.0
@fontsource-variable/jetbrains-mono 5.2.8 5.3.0
@fontsource/spectral 5.2.8 5.3.0
@playwright/test 1.60.0 1.62.0
@sveltejs/adapter-node 5.5.4 5.5.7
@sveltejs/kit 2.65.0 2.70.1
@sveltejs/vite-plugin-svelte 7.1.2 7.2.0
@types/node 25.9.3 26.1.2
eslint 10.4.1 10.8.0
eslint-plugin-svelte 3.19.0 3.22.0
globals 17.6.0 17.8.0
prettier 3.8.4 3.9.6
prettier-plugin-svelte 4.1.0 4.1.1
svelte 5.56.3 5.56.8
svelte-check 4.6.0 4.7.4
typescript 6.0.3 7.0.2
typescript-eslint 8.61.0 8.65.0
vite 8.0.16 8.1.5
vitest 4.1.8 4.1.10

Updates @aws-sdk/client-s3 from 3.1066.0 to 3.1097.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1097.0

3.1097.0(2026-07-28)

Chores
Documentation Changes
  • client-connect: Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate (c87ac126)
  • client-datasync: Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V. (5ef349f0)
New Features
  • client-trustedadvisor: Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN. (16e67f16)
  • client-rolesanywhere: Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits. (20c913fd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets. (fa2b1a0a)

For list of updated packages, view updated-packages.md in assets-3.1097.0.zip

v3.1096.0

3.1096.0(2026-07-27)

New Features
  • clients: update client endpoints as of 2026-07-27 (24e536ee)
  • client-bcm-data-exports: With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format. (bf6df63c)
  • client-glue: Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs. (70d8b71e)
  • client-sagemaker: This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families. (587c6437)
  • client-account: This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed. (d633065c)
  • client-quicksight: Added new Governance fields to Custom Permissions API to support Deny By Default functionality. (730d4716)
  • client-cleanrooms: This release adds support for the CR.8X worker type for SQL (32 vCPU) (4c532188)
  • client-emr-containers: With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue. (b6c745a4)
  • client-securityagent: AWS Security Agent adds a new task hours field that reflects the active work done for a task. (6419f793)
  • client-partnercentral-account: Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required. (db69aaa7)
  • client-cleanroomsml: This release adds support for the CR.8X worker type for SQL (32 vCPU) (bcabd86a)
Bug Fixes
  • core/protocols: handle JSON exponent notation in jsonReviver (#8226) (c3b27fd3)

For list of updated packages, view updated-packages.md in assets-3.1096.0.zip

v3.1095.0

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1097.0 (2026-07-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1096.0 (2026-07-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1091.0 (2026-07-20)

... (truncated)

Commits

Updates @aws-sdk/lib-storage from 3.1066.0 to 3.1097.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1097.0

3.1097.0(2026-07-28)

Chores
Documentation Changes
  • client-connect: Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate (c87ac126)
  • client-datasync: Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V. (5ef349f0)
New Features
  • client-trustedadvisor: Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN. (16e67f16)
  • client-rolesanywhere: Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits. (20c913fd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets. (fa2b1a0a)

For list of updated packages, view updated-packages.md in assets-3.1097.0.zip

v3.1096.0

3.1096.0(2026-07-27)

New Features
  • clients: update client endpoints as of 2026-07-27 (24e536ee)
  • client-bcm-data-exports: With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format. (bf6df63c)
  • client-glue: Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs. (70d8b71e)
  • client-sagemaker: This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families. (587c6437)
  • client-account: This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed. (d633065c)
  • client-quicksight: Added new Governance fields to Custom Permissions API to support Deny By Default functionality. (730d4716)
  • client-cleanrooms: This release adds support for the CR.8X worker type for SQL (32 vCPU) (4c532188)
  • client-emr-containers: With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue. (b6c745a4)
  • client-securityagent: AWS Security Agent adds a new task hours field that reflects the active work done for a task. (6419f793)
  • client-partnercentral-account: Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required. (db69aaa7)
  • client-cleanroomsml: This release adds support for the CR.8X worker type for SQL (32 vCPU) (bcabd86a)
Bug Fixes
  • core/protocols: handle JSON exponent notation in jsonReviver (#8226) (c3b27fd3)

For list of updated packages, view updated-packages.md in assets-3.1096.0.zip

v3.1095.0

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.1097.0 (2026-07-28)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1096.0 (2026-07-27)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1091.0 (2026-07-20)

... (truncated)

Commits

Updates @codemirror/lang-markdown from 6.5.0 to 6.5.1

Commits

Updates @codemirror/search from 6.7.0 to 6.7.1

Commits

Updates @simplewebauthn/server from 13.3.1 to 13.3.2

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.2

This update fixes a CVSS v4 Low (2.0) security vulnerability identified in @​simplewebauthn/server. See the security advisory linked below for more information.

Changes:

  • [server] Fixed an issue with verifyRegistrationResponse() allowing a maliciously-crafted attestation statement's x5c to contain a self-signed "root certificate" instead of chaining back to an RP-specified trust anchor (GHSA-6hxq-p678-4hr2)
Commits
  • 84656ff Update version to 13.3.2
  • dd0d73c Fail cert path validation closed instead
  • 213e9ba Add test for failure to chain to trust anchor
  • 989507a Add tests for notAfter enforcement
  • b55f4b9 Move explanation into test
  • 7bed04c Update comments around cert chain validity
  • 6ee9644 Add new tests
  • c23890a Update existing test to use helpers
  • 8d02ed4 Add X.509 cert helpers for tests
  • 8a53d70 Use X509ChainBuilder for chain validation
  • Additional commits viewable in compare view

Updates markdown-it from 14.2.0 to 14.3.0

Changelog

Sourced from markdown-it's changelog.

[14.3.0] - 2026-07-02

Changed

  • Reworked build pipeline & tools.
  • Added source maps.
  • Bumped linkify-it to 5.0.2.

Fixed

  • Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.
Commits
  • ff0ee08 14.3.0 released
  • 52e2749 Bump linkify-it / vite deps
  • 56c2404 fix: keep backslash-space hard line break (CommonMark 6.7) (#1185)
  • 0fbb18b Bump vite from 8.0.14 to 8.0.16 (#1181)
  • 83450e2 Rework benchmark deps and bump versions
  • 57a6863 benchmark => tinybench
  • 7608db1 Update CI config
  • 9d8eb42 Added package-lock and updated versions to latest possible
  • 0aee70d lint: enable @​stylistic/no-multi-spaces rule
  • 8878985 lint => neostandard
  • Additional commits viewable in compare view

Updates nodemailer from 8.0.11 to 9.0.3

Release notes

Sourced from nodemailer's releases.

v9.0.3

9.0.3 (2026-06-30)

Bug Fixes

  • smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

v9.0.2

9.0.2 (2026-06-29)

Bug Fixes

  • addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)
  • harden smtp-connection low-severity issues (22ddcea)
  • harden smtp-connection response parsing and socket lifecycle (68860b9)
  • prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)
  • reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

v9.0.1

9.0.1 (2026-06-17)

Bug Fixes

  • enforce disableFileAccess/disableUrlAccess for raw message option (a82e060)

v9.0.0

9.0.0 (2026-06-14)

⚠ BREAKING CHANGES

  • HTTPS requests made while fetching remote content (attachment href/path URLs, OAuth2 token endpoints, HTTP/HTTPS proxy CONNECT) now validate the server's TLS certificate by default. Requests to hosts with self-signed, expired, or hostname-mismatched certificates that previously succeeded will now fail. Opt back out per request with tls.rejectUnauthorized=false (transport options, or a per-attachment tls option).

Bug Fixes

  • replace deprecated url.parse with a WHATWG URL wrapper (0c080fb)
  • validate TLS certificates by default when fetching remote content (6a947ac)
Changelog

Sourced from nodemailer's changelog.

9.0.3 (2026-06-30)

Bug Fixes

  • smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

9.0.2 (2026-06-29)

Bug Fixes

  • addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)
  • harden smtp-connection low-severity issues (22ddcea)
  • harden smtp-connection response parsing and socket lifecycle (68860b9)
  • prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)
  • reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

9.0.1 (2026-06-17)

Bug Fixes

  • enforce disableFileAccess/disableUrlAccess for raw message option (a82e060)

9.0.0 (2026-06-14)

⚠ BREAKING CHANGES

  • HTTPS requests made while fetching remote content (attachment href/path URLs, OAuth2 token endpoints, HTTP/HTTPS proxy CONNECT) now validate the server's TLS certificate by default. Requests to hosts with self-signed, expired, or hostname-mismatched certificates that previously succeeded will now fail. Opt back out per request with tls.rejectUnauthorized=false (transport options, or a per-attachment tls option).

Bug Fixes

  • replace deprecated url.parse with a WHATWG URL wrapper (0c080fb)
  • validate TLS certificates by default when fetching remote content (6a947ac)
Commits
  • 1f61eb4 chore(master): release 9.0.3 (#1836)
  • 07d8253 fix(smtp-connection): harden STARTTLS upgrade and secure socket handling (#1835)
  • 4801f3a chore(master): release 9.0.2 (#1832)
  • 9ba1064 fix(addressparser): keep operator chars inside an address-literal as text (#1...
  • 22ddcea fix: harden smtp-connection low-severity issues
  • af002eb chore: add Node.js 26 to the CI test matrix
  • 6347b47 fix: reject CRLF in HTTP proxy CONNECT destination to prevent request injection
  • 68860b9 fix: harden smtp-connection response parsing and socket lifecycle
  • 9517bc5 fix: prevent SES transport callback double-invocation and hang on sync errors...
  • 69cf625 chore(master): release 9.0.1 (#1828)
  • Additional commits viewable in compare view

Updates pg from 8.21.0 to 8.22.0

Changelog

Sourced from pg's changelog.

pg@8.22.0

Commits

Updates pg-boss from 12.18.3 to 12.26.3

Release notes

Sourced from pg-boss's releases.

12.26.3

What's Changed

Fixes

  • groupConcurrency fetch plan regression (#842, #845, thanks @​bcomnes)

    Queues using groupConcurrency could hit a severe query plan regression when a saturated group had a large backlog of pending jobs ahead of eligible jobs from other groups and table statistics underestimated the number of active groups. In one report, job fetch went from 4ms to 400ms and pinned database CPU at 100%.

  • fromDrizzle crash on the postgres.js driver (#852)

    unwrapSQLResult now checks element shape and treats an array whose elements have no rows property as the row set itself.

Full Changelog: timgit/pg-boss@12.26.2...12.26.3

12.26.2

What's Changed

Fixes

Recover silent LISTEN/NOTIFY connection drops. The dedicated listener connection could go half-open — TCP dies with no FIN and no error event — leaving notify-enabled workers silently degraded to the 30s polling backstop with no recovery. The listener now runs two independent detectors:

  • TCP keepalive on the listen connection for OS-level dead-peer detection.
  • Same-session heartbeat that verifies the channel subscription is still live, catching both a hung socket and a lost subscription while the socket looks fine.

On any drop it tears down, reconnects with capped backoff, re-runs LISTEN, and fires the reconnect hook so workers drain jobs missed during the gap. Works identically over SSL/TLS connections.

New options

Heartbeat and keepalive timings are now tunable via the constructor (previously hardcoded) — useful for raising the heartbeat timeout on a loaded database:

  • notifyHeartbeatIntervalMs — interval between listener heartbeat checks. Default 10000.
  • notifyHeartbeatTimeoutMs — per-heartbeat query timeout; the listener reconnects if a heartbeat exceeds it. Default 5000.
  • notifyKeepAliveInitialDelayMs — TCP keepalive initial delay on the listener connection. Default 10000.

Defaults preserve prior behavior, so no action is needed unless you want to tune them.

New Contributors

Full Changelog: timgit/pg-boss@12.26.1...12.26.2

12.26.1

What's Changed

  • fetch() now uses start_after <= now() instead of < now() (#848, thanks @​ziemekobel). A job inserted with the default start_after = now() could be invisible to a fetch() issued immediately after the insert. now() is transaction-scoped, and on backends with coarse clock resolution — notably PGlite — consecutive autocommit statements often share the same timestamp, so the strict < skipped the job until the clock ticked. NOTIFY gating already used <=; fetch now matches.

New Contributors

Full Changelog: timgit/pg-boss@12.26.0...12.26.1

... (truncated)

Commits
  • b98853b deps
  • d70d61d versioning
  • 82e276b fix drizzle + postgres driver
  • 422b273 Fix groupConcurrency fetch plan regression (#845)
  • a5a3e71 added LISTEN tuning config and docs, versioning, deps
  • 1d1443b Merge pull request #851 from unix/codex/fix-listen-heartbeat
  • 189cdec fix: recover silent listen connection failures
  • 52ec0b2 versioning and deps and tests
  • f562f04 Merge pull request #848 from ziemekobel/fix/pglite-fetch-now
  • d2d1a5c Fix PGlite flakiness from coarse now() timestamps
  • Additional commits viewable in compare view

Updates puppeteer-core from 25.1.0 to 25.4.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

🛠️ Fixes

puppeteer-core: v25.3.0

25.3.0 (2026-07-01)

🎉 Features

  • support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

📄 Documentation

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.5 to 3.0.6

puppeteer-core: v25.2.1

... (truncated)

Changelog

Sourced from puppeteer-core's changelog.

25.4.0 (2026-07-27)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 25.3.0 to 25.4.0

🛠️ Fixes

25.3.0 (2026-07-01)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.5 to 3.0.6

🎉 Features

  • support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

... (truncated)

Commits
  • f5b96c5 chore: release main (#15201)
  • 29a6e7c chore(webmcp): Update WebMCP to Chrome 151 implementation (#15146)
  • 4a48c8a feat: add browser-level PWA install/launch/uninstall APIs (#15235)
  • ffe1c91 chore(deps): bump the all group with 5 updates (#15262)
  • 06442ae feat: roll to Chrome 151.0.7922.47 (#15237)
  • 7c72827 chore(deps): bump svgo from 3.3.3 to 3.3.4 in /website (#15253)
  • 83b0e31 chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /website (#15254)
  • 0ebbd98 chore(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website (#15255)
  • befa16f chore(deps): bump body-parser from 1.20.5 to 1.20.6 in /website (#15256)
  • 8af689d chore(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /website (#15257)
  • Additional commits viewable in compare view

Updates @fontsource-variable/hanken-grotesk from 5.2.8 to 5.3.0

Commits

Updates @fontsource-variable/jetbrains-mono from 5.2.8 to 5.3.0

Commits

Updates @fontsource/spectral from 5.2.8 to 5.3.0

Commits

Updates @playwright/test from 1.60.0 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table>

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
@dependabot
Build(deps): Bump the all-dependencies group across 1 directory with …
7d7d417 
…29 updates

Bumps the all-dependencies group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1066.0` | `3.1097.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1066.0` | `3.1097.0` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.7.0` | `6.7.1` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.1` | `13.3.2` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.2.0` | `14.3.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.11` | `9.0.3` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.21.0` | `8.22.0` |
| [pg-boss](https://github.com/timgit/pg-boss) | `12.18.3` | `12.26.3` |
| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `25.1.0` | `25.4.0` |
| [@fontsource-variable/hanken-grotesk](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/hanken-grotesk) | `5.2.8` | `5.3.0` |
| [@fontsource-variable/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/jetbrains-mono) | `5.2.8` | `5.3.0` |
| [@fontsource/spectral](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/spectral) | `5.2.8` | `5.3.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.0` |
| [@sveltejs/adapter-node](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-node) | `5.5.4` | `5.5.7` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.65.0` | `2.70.1` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `7.1.2` | `7.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.3` | `26.1.2` |
| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.8.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.19.0` | `3.22.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.8.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.6` |
| [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) | `4.1.0` | `4.1.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.3` | `5.56.8` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.6.0` | `4.7.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.0` | `8.65.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.10` |



Updates `@aws-sdk/client-s3` from 3.1066.0 to 3.1097.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1097.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.1066.0 to 3.1097.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1097.0/lib/lib-storage)

Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.1
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/search` from 6.7.0 to 6.7.1
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@simplewebauthn/server` from 13.3.1 to 13.3.2
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.2/packages/server)

Updates `markdown-it` from 14.2.0 to 14.3.0
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.2.0...14.3.0)

Updates `nodemailer` from 8.0.11 to 9.0.3
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.11...v9.0.3)

Updates `pg` from 8.21.0 to 8.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.22.0/packages/pg)

Updates `pg-boss` from 12.18.3 to 12.26.3
- [Release notes](https://github.com/timgit/pg-boss/releases)
- [Commits](timgit/pg-boss@12.18.3...12.26.3)

Updates `puppeteer-core` from 25.1.0 to 25.4.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-core-v25.1.0...puppeteer-core-v25.4.0)

Updates `@fontsource-variable/hanken-grotesk` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/hanken-grotesk)

Updates `@fontsource-variable/jetbrains-mono` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/jetbrains-mono)

Updates `@fontsource/spectral` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/spectral)

Updates `@playwright/test` from 1.60.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.0)

Updates `@sveltejs/adapter-node` from 5.5.4 to 5.5.7
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/adapter-node/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-node@5.5.7/packages/adapter-node)

Updates `@sveltejs/kit` from 2.65.0 to 2.70.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.70.1/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 7.1.2 to 7.2.0
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.2.0/packages/vite-plugin-svelte)

Updates `@types/node` from 25.9.3 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.4.1 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.1...v10.8.0)

Updates `eslint-plugin-svelte` from 3.19.0 to 3.22.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.22.0/packages/eslint-plugin-svelte)

Updates `globals` from 17.6.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.6.0...v17.8.0)

Updates `prettier` from 3.8.4 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.4...3.9.6)

Updates `prettier-plugin-svelte` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/sveltejs/prettier-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/prettier-plugin-svelte/compare/prettier-plugin-svelte@4.1.0...prettier-plugin-svelte@4.1.1)

Updates `svelte` from 5.56.3 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `svelte-check` from 4.6.0 to 4.7.4
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.6.0...svelte-check@4.7.4)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `typescript-eslint` from 8.61.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint)

Updates `vite` from 8.0.16 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `vitest` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1092.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1092.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@fontsource-variable/hanken-grotesk"
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@fontsource-variable/jetbrains-mono"
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@fontsource/spectral"
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@sveltejs/adapter-node"
  dependency-version: 5.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: markdown-it
  dependency-version: 14.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: pg
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pg-boss
  dependency-version: 12.26.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: prettier-plugin-svelte
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: puppeteer-core
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: svelte
  dependency-version: 5.56.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: svelte-check
  dependency-version: 4.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/develop/all-dependencies-5aa69a7214 branch from 34860a1 to 7d7d417 Compare July 28, 2026 19:50
@mtaanquist mtaanquist mentioned this pull request Jul 28, 2026
Merged
@mtaanquist

mtaanquist commented Jul 28, 2026

Copy link
Copy Markdown
Owner

Superseded by #498.

This batch could not go green: it included typescript 6.0.3 -> 7.0.2, but svelte-check@4.7.4 still peers on typescript@"^5.0.0 || ^6.0.0". npm ci aborted with ERESOLVE, so all three jobs failed at install before running anything, and that one bump blocked the other 28.

#498 carries the 28 compatible updates at the same target versions and holds typescript on 6. It also adds a dependabot ignore for typescript 7.x so future grouped PRs are not blocked the same way.

TypeScript 7 is not adoptable yet for reasons upstream of Svelte: it does not expose a stable programmatic API, so tools that embed the compiler (Svelte, Vue, Astro, Angular, Volar) are all still on TypeScript 6. The proposed fix is the "content mappers" API, microsoft/typescript-go#4712, which is still at design stage. The ignore entry is a hold, not a decision - drop it once svelte-check accepts TypeScript 7.

@mtaanquist mtaanquist closed this Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/develop/all-dependencies-5aa69a7214 branch July 28, 2026 20:29
mtaanquist added a commit that referenced this pull request Jul 29, 2026
@mtaanquist @claude
Build(deps): Bump 28 dependencies, hold typescript at 6
41e8b9f 
Dependabot grouped 29 npm updates into #496, but typescript 7.0.2 fails
npm ci: svelte-check 4.7.4 still peers on typescript ^5 || ^6, so the
whole batch died at install and every CI job failed before running.

Takes the 28 compatible updates and leaves typescript on 6, with a
dependabot ignore for 7.x so next week's group is not blocked the same
way. Drop the ignore once svelte-check accepts typescript 7.

The source changes are prettier 3.9 reformatting only: it drops the
leading pipe on union types that fit on one line.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mtaanquist