chore(deps-dev): bump the development group across 1 directory with 4 updates

[dependabot]

Bumps the development group with 4 updates in the / directory: @playwright/test, @types/node, oxfmt and oxlint.

Updates @playwright/test from 1.62.0 to 1.62.1

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• See full diff in compare view

Updates @types/node from 26.1.1 to 26.1.2

Commits

• See full diff in compare view

Updates oxfmt from 0.60.0 to 0.61.0

Commits

• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• See full diff in compare view

Updates oxlint from 1.75.0 to 1.76.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

• 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
• 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
• bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
• 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
• 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
• 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
• ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

• 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
• 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
• 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
• 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
• a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
• ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
• 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
• ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
• e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
• 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
• 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
• fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
• ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
• dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
• 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
• cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

• 25d577e language_server: Start tools in parallel (#15500) (Sysix)
• 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
• 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
• 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
• 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
• 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

• 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
• 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
• a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
• 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
• 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
• 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.76.0] - 2026-07-27

🚀 Features

• 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)
• 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)
• 016cf2a linter/oxc: Add bad-match-all-arg rule (#24900) (camc314)
• cdc941e linter/n: Implement exports-style rule (#24087) (Mikhail Baev)
• 1ad6f6c linter/eslint: Implement id-denylist rule (#24632) (Mikhail Baev)

📚 Documentation

• 3ff2e0e linter: Clarify config extends types (#24936) (Boshen)

Commits

• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• 3ff2e0e docs(linter): clarify config extends types (#24936)
• 8d31dfa feat(linter): verify eslint/no-restricted-globals config schema (#24598)
• 7069621 feat(linter): verify jest/vitest prefer-lowercase-title config schema (#24724)
• 016cf2a feat(linter/oxc): add bad-match-all-arg rule (#24900)
• cdc941e feat(linter/n): implement exports-style rule (#24087)
• 1ad6f6c feat(linter/eslint): implement id-denylist rule (#24632)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[clawsweeper]

Codex review: needs maintainer review before merge. Reviewed August 12, 2026, 1:20 PM ET / 17:20 UTC.

ClawSweeper review

What this changes

Updates the root development-tool resolution for Oxfmt and refreshes the pnpm lockfile to newer Playwright, Node type, Oxfmt, and Oxlint releases.

Merge readiness

⚠️ Ready for maintainer review - 2 items remain

Keep open: current main still resolves all four development tools at the older versions, so this clean, focused refresh remains necessary for maintainer review.

Priority: P3
Reviewed head: 0d905fed759afd82db16409c41e75ae13cd5f04d

Review scores

Measure	Result	What it means
Overall readiness	🐚 platinum hermit (4/6)	A narrowly scoped, mechanically consistent development-tool update whose remaining confidence check is normal repository validation.
Proof confidence	🌊 off-meta tidepool	Not applicable: Not applicable to this automated dependency-bot PR; repository package and browser validation is the relevant merge evidence.
Patch quality	🐚 platinum hermit (4/6)	No actionable review findings were identified.

Verification

Check	Result	Evidence
Real behavior	Not applicable	Not applicable: Not applicable to this automated dependency-bot PR; repository package and browser validation is the relevant merge evidence.
Evidence reviewed	5 items	Current main retains the prior resolutions: Main declares Oxfmt ^0.60.0 and resolves Playwright 1.62.0, Node types 26.1.1, Oxfmt 0.60.0, and Oxlint 1.75.0; the PR's requested resolutions are therefore not already implemented. Affected tools are development validation inputs: The package scripts invoke Oxfmt, Oxlint, Playwright, TypeScript, and Vitest; this is a development-tool update rather than a runtime protocol change. PR diff is focused: The supplied PR metadata shows two changed files: package.json changes the Oxfmt range and pnpm-lock.yaml refreshes all four resolved development tools.
Findings	None	None.
Security	None	None.

How this fits together

The root package manifest selects development tools, while pnpm-lock.yaml fixes the exact versions installed by CI. Those tools run formatting, linting, type checks, and browser tests before package release.

flowchart LR
  A[Package manifest] --> B[Development tool versions]
  B --> C[pnpm lockfile]
  C --> D[Frozen CI install]
  D --> E[Format lint build and browser tests]

Loading

Before merge

• Resolve merge risk (P1) - The updated formatter, linter, and browser-test tooling can alter CI behavior; the exact locked resolution should pass the repository validation suite before merge.
• Complete next step (P2) - No repair lane is appropriate: the remaining action is normal package-owner review and validation of this focused dependency refresh.

Agent review details

Security

None.

Review metrics

Metric	Value	Why it matters
Dependency refresh scope	4 development-tool resolutions; 2 files changed; 0 runtime dependency declarations changed	The patch is limited to tooling used by CI and local validation rather than the published terminal runtime.

Merge-risk options

Maintainer options:

1. Validate the refreshed toolchain (recommended)
   Run the repository package and browser validation on this exact lockfile before merging because the upgraded tools execute in CI.

Copy recommended automerge instruction

@clawsweeper automerge

Special instructions:
Run `pnpm check` and `pnpm run test:browser` against the PR head under the repository-declared Node.js and pnpm versions; retain the generated pnpm lockfile.

Technical review

Best possible solution:

Approve the focused lockfile refresh once the PR head passes the repository's package and browser validation under the declared Node.js and pnpm versions.

Do we have a high-confidence way to reproduce the issue?

Not applicable: this is a mechanical development-dependency refresh, and the relevant verification is running the repository validation commands on the updated lockfile.

Is this the best way to solve the issue?

Yes. Updating the declared Oxfmt range and keeping all resolved development-tool versions together in pnpm-lock.yaml is the narrow, maintainable package-manager path.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning high; reviewed against 0f3f61661932.

Labels

Label justifications:

• P3: This is a routine development-tool refresh with no reported runtime regression.
• merge-risk: 🚨 automation: The changed formatter, linter, and browser-test packages execute in repository validation and can change CI behavior after merge.
• rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
• status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Not applicable: Not applicable to this automated dependency-bot PR; repository package and browser validation is the relevant merge evidence.

Evidence

What I checked:

• Current main retains the prior resolutions: Main declares Oxfmt ^0.60.0 and resolves Playwright 1.62.0, Node types 26.1.1, Oxfmt 0.60.0, and Oxlint 1.75.0; the PR's requested resolutions are therefore not already implemented. (package.json:90, 0f3f61661932)
• Affected tools are development validation inputs: The package scripts invoke Oxfmt, Oxlint, Playwright, TypeScript, and Vitest; this is a development-tool update rather than a runtime protocol change. (package.json:73, 0f3f61661932)
• PR diff is focused: The supplied PR metadata shows two changed files: package.json changes the Oxfmt range and pnpm-lock.yaml refreshes all four resolved development tools. (package.json:94, 0d905fed759a)
• Recent toolchain provenance: The latest main commit touching the package files is the toolchain refresh by Peter Steinberger, providing the closest current-main ownership signal. (package.json:94, 0f3f61661932)
• Release and main-state check: Current main commit 0f3f616 is not contained by a local release tag; the latest release is v0.3.2 at ee607e9, and neither establishes the PR's newer resolutions as shipped. (pnpm-lock.yaml:14, 0f3f61661932)

Likely related people:

• Peter Steinberger: Authored the latest current-main commit that refreshed package.json and pnpm-lock.yaml. (role: recent toolchain contributor; confidence: high; commits: 0f3f61661932; files: package.json, pnpm-lock.yaml)

Rank-up moves

Optional improvements that raise the rating; they are not merge blockers.

• Confirm pnpm check and pnpm run test:browser on the PR head.

Rating scale

Score	Internal tier	Crab rank	Meaning
6/6	S	🦀 challenger crab	Exceptional readiness
5/6	A	🦞 diamond lobster	Very strong readiness
4/6	B	🐚 platinum hermit	Good normal PR; ordinary maintainer review
3/6	C	🦐 gold shrimp	Useful, but confidence is limited
2/6	D	🦪 silver shellfish	Proof or implementation needs work
1/6	F	🧂 unranked krab	Not merge-ready
N/A	NA	🌊 off-meta tidepool	Rating does not apply

Overall follows the weaker of proof and patch quality.
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Workflow

• ClawSweeper keeps one durable marker-backed review comment per issue or PR.
• Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
• A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
• PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
• Maintainers can also comment @clawsweeper review to request a fresh review only.
• Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
• Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
• Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

History

Review history (79 earlier review cycles; latest 8 shown)

• reviewed 2026-08-09T22:52:51.389Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-09T23:57:58.306Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-10T16:15:43.074Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-10T17:22:43.847Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-11T06:13:10.145Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-11T11:07:55.400Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-11T13:18:03.225Z sha 0d905fe :: needs maintainer review before merge. :: none
• reviewed 2026-08-11T17:19:47.199Z sha 0d905fe :: needs maintainer review before merge. :: none