Skip to content

chore(deps-dev): bump the npm-development group with 6 updates#477

Merged
brendanjryan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-9993ddbe89
May 25, 2026
Merged

chore(deps-dev): bump the npm-development group with 6 updates#477
brendanjryan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-9993ddbe89

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps the npm-development group with 6 updates:

Package From To
@playwright/test 1.59.1 1.60.0
fast-check 4.7.0 4.8.0
hono 4.12.18 4.12.19
playwright 1.59.1 1.60.0
rolldown 1.0.0 1.0.1
@vitejs/plugin-react 6.0.1 6.0.2

Updates @playwright/test from 1.59.1 to 1.60.0

Release notes

Sourced from @​playwright/test's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

... (truncated)

Commits

Updates fast-check from 4.7.0 to 4.8.0

Release notes

Sourced from fast-check's releases.

New arbitrary to chain in a loop fashion

[Code][Diff]

Features

  • (PR#6678) Add chainUntil arbitrary for iterative chaining

Fixes

  • (PR#6965) Bug: Restore ability not to use skipLibCheck
  • (PR#6877) CI: Lowercase discussion_category_name to "announcements"
  • (PR#6878) CI: Scope permissions of clean-caches
  • (PR#6880) CI: Add PR-authoring guidance for Claude
  • (PR#6887) CI: Delete CLAUDE.md
  • (PR#6888) CI: Use tilde ranges for security dependency overrides
  • (PR#6891) CI: Disable Renovate updates on pnpm overrides
  • (PR#6899) CI: Scope Claude hooks to $CLAUDE_PROJECT_DIR
  • (PR#6905) CI: Enable pnpm global virtual store
  • (PR#6933) CI: Pin pnpm in npm install commands
  • (PR#6932) CI: Grant discussions: write to release jobs
  • (PR#6935) CI: Skip PR template check for dubzzz
  • (PR#6937) CI: Mirror the repo to tangled
  • (PR#6938) CI: Add missing runs-on for tangled
  • (PR#6889) Doc: Add release notes for fast-check 4.7.0
  • (PR#6900) Doc: Fix broken API reference links
  • (PR#6844) Doc: Extract manual setup guide into dedicated page
  • (PR#6845) Doc: Add index pages for documentation sections
  • (PR#6918) Doc: Fix Documentation link to point to first doc page
  • (PR#6939) Doc: Link to Tangled mirror of fast-check
  • (PR#6934) Test: Tolerate \p{...} value drift in docs tests
  • (PR#6951) Test: Fix poisoning tests for latest Node
Changelog

Sourced from fast-check's changelog.

4.8.0

New arbitrary to chain in a loop fashion [Code][Diff]

Features

  • (PR#6678) Add chainUntil arbitrary for iterative chaining

Fixes

  • (PR#6965) Bug: Restore ability not to use skipLibCheck
  • (PR#6877) CI: Lowercase discussion_category_name to "announcements"
  • (PR#6878) CI: Scope permissions of clean-caches
  • (PR#6880) CI: Add PR-authoring guidance for Claude
  • (PR#6887) CI: Delete CLAUDE.md
  • (PR#6888) CI: Use tilde ranges for security dependency overrides
  • (PR#6891) CI: Disable Renovate updates on pnpm overrides
  • (PR#6899) CI: Scope Claude hooks to $CLAUDE_PROJECT_DIR
  • (PR#6905) CI: Enable pnpm global virtual store
  • (PR#6933) CI: Pin pnpm in npm install commands
  • (PR#6932) CI: Grant discussions: write to release jobs
  • (PR#6935) CI: Skip PR template check for dubzzz
  • (PR#6937) CI: Mirror the repo to tangled
  • (PR#6938) CI: Add missing runs-on for tangled
  • (PR#6889) Doc: Add release notes for fast-check 4.7.0
  • (PR#6900) Doc: Fix broken API reference links
  • (PR#6844) Doc: Extract manual setup guide into dedicated page
  • (PR#6845) Doc: Add index pages for documentation sections
  • (PR#6918) Doc: Fix Documentation link to point to first doc page
  • (PR#6939) Doc: Link to Tangled mirror of fast-check
  • (PR#6934) Test: Tolerate \p{...} value drift in docs tests
  • (PR#6951) Test: Fix poisoning tests for latest Node
Commits
  • c0da76f 🔖 Update CHANGELOG.md for fast-check@4.8.0, @​fast-check/ava@​3.0.1 (#6967)
  • df6f4c1 🐛 Restore ability not to use skipLibCheck (#6965)
  • af612c5 ⬆️ Update dependency @​types/node to ^24.12.3 (#6952)
  • 917dda4 ✅ Fix poisoning tests for latest Node (#6951)
  • acb5c6f ✅ Tolerate \p{...} value drift in docs tests (#6934)
  • 26cab19 ✨ Add chainUntil arbitrary for iterative chaining (#6678)
  • 16f65f6 ⬆️ Update dependency oxlint to ^1.60.0 (#6856)
  • 0a8ce9a ⬆️ Update dependency @​microsoft/api-extractor to ^7.58.7 (#6898)
  • debb9b6 📝 Fix broken API reference links (#6900)
  • 642e651 ⬆️ Update dependency typescript to ~6.0.3 (#6886)
  • Additional commits viewable in compare view

Updates hono from 4.12.18 to 4.12.19

Release notes

Sourced from hono's releases.

v4.12.19

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.18...v4.12.19

Commits
  • 7e62bcd 4.12.19
  • e2f252a fix(stream): upgrade @hono/node-server to v2 and fix abort handling (#4940)
  • 54f2f0c feat(request): add bytes() (#4921)
  • e59db59 feat(cache): key cache entries by configured vary headers (#4915)
  • 48a7ccb feat(bearer-auth): make bearerAuth generic for typed context in verifyToken (...
  • ff7522f fix(cookie): return the first cookie when there are multiple cookies with the...
  • 26f8c33 fix(serveStatic): make options parameter optional in all adapters (#4934)
  • 16c4e38 ci: pin GitHub Actions to SHAs (#4932)
  • See full diff in compare view

Updates playwright from 1.59.1 to 1.60.0

Release notes

Sourced from playwright's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

... (truncated)

Commits

Updates rolldown from 1.0.0 to 1.0.1

Release notes

Sourced from rolldown's releases.

v1.0.1

[1.0.1] - 2026-05-13

🚀 Features

🐛 Bug Fixes

  • transform: enable enum_eval for transformSync and vite TS transform (#9325) by @​Dunqing
  • error: remove severity prefix from diagnostic messages (#9262) by @​Kyujenius
  • deps: pin pnpm to 10.23.0 to work around catalog mismatch on Netlify (#9364) by @​shulaoda
  • ci: pin mimalloc-safe to 0.1.58 (#9361) by @​shulaoda
  • dev/lazy: fix exports of lazy requests in lazy chunks (#9249) by @​h-a-n-a
  • rolldown_plugin_vite_resolve: handle errors in resolveSubpathImports callback (#9355) by @​sapphi-red
  • rolldown_plugin_lazy_compilation: use loadExports for fetched proxy to preserve original export names (#9132) by @​h-a-n-a
  • common: include offending index in HybridIndexVec panic message (#9296) by @​SAY-5

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.0.1] - 2026-05-13

🚀 Features

🐛 Bug Fixes

  • transform: enable enum_eval for transformSync and vite TS transform (#9325) by @​Dunqing
  • error: remove severity prefix from diagnostic messages (#9262) by @​Kyujenius
  • deps: pin pnpm to 10.23.0 to work around catalog mismatch on Netlify (#9364) by @​shulaoda
  • ci: pin mimalloc-safe to 0.1.58 (#9361) by @​shulaoda
  • dev/lazy: fix exports of lazy requests in lazy chunks (#9249) by @​h-a-n-a
  • rolldown_plugin_vite_resolve: handle errors in resolveSubpathImports callback (#9355) by @​sapphi-red
  • rolldown_plugin_lazy_compilation: use loadExports for fetched proxy to preserve original export names (#9132) by @​h-a-n-a
  • common: include offending index in HybridIndexVec panic message (#9296) by @​SAY-5

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 2777945 release: v1.0.1 (#9384)
  • 4e35380 feat(experimental/lazy-barrel): advice on oversized barrel modules (#9236)
  • 83d2762 docs: clarify scope of topLevelVar (#9380)
  • 9ba2e73 chore: migrate @rolldown/pluginutils to rolldown/plugins (#9317)
  • ef5796f fix(transform): enable enum_eval for transformSync and vite TS transform ...
  • 1f5dce1 fix(error): remove severity prefix from diagnostic messages (#9262)
  • fd47919 chore(deps): upgrade oxc to 0.130.0 (#9360)
  • 4c121d3 chore(deps): update npm packages (#9343)
  • 024de36 fix(rolldown_plugin_vite_resolve): handle errors in resolveSubpathImports c...
  • 7e5855c feat(chunk-optimization): dedupe already-loaded dynamic deps (#9305)
  • See full diff in compare view

Updates @vitejs/plugin-react from 6.0.1 to 6.0.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.2 (2026-05-14)

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the npm-development group with 6 updates
385e447 
Bumps the npm-development group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.7.0` | `4.8.0` |
| [hono](https://github.com/honojs/hono) | `4.12.18` | `4.12.19` |
| [playwright](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0` | `1.0.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.1` | `6.0.2` |


Updates `@playwright/test` from 1.59.1 to 1.60.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.59.1...v1.60.0)

Updates `fast-check` from 4.7.0 to 4.8.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.8.0/packages/fast-check)

Updates `hono` from 4.12.18 to 4.12.19
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.18...v4.12.19)

Updates `playwright` from 1.59.1 to 1.60.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.59.1...v1.60.0)

Updates `rolldown` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.1/packages/rolldown)

Updates `@vitejs/plugin-react` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: fast-check
  dependency-version: 4.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: hono
  dependency-version: 4.12.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: playwright
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: rolldown
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 25, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 25, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedplaywright@​1.60.01001001009980
Added@​types/​node@​25.9.11001008196100
Added@​typescript/​native-preview@​7.0.0-dev.20260523.110010082100100
Addedtsx@​4.22.31001008294100
Addedvite@​8.0.14991008298100
Addedfast-check@​4.8.010010010090100
Added@​vitejs/​plugin-react@​6.0.210010010092100
Added@​remix-run/​node-fetch-server@​0.13.310010010092100
Addedhono@​4.12.19991009796100
Added@​playwright/​test@​1.60.010010010099100

View full report

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented May 25, 2026

Open in StackBlitz

npm i https://pkg.pr.new/mppx@477

commit: 385e447

@brendanjryan brendanjryan merged commit 57ddfe0 into main May 25, 2026
15 checks passed
@brendanjryan brendanjryan deleted the dependabot/npm_and_yarn/npm-development-9993ddbe89 branch May 25, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@brendanjryan