chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1 - #133
Merged
Coding-Dev-Tools merged 2 commits intoAug 10, 2026
Merged
Conversation
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
deleted the
dependabot/npm_and_yarn/playwright/test-1.62.1
branch
August 10, 2026 01:58
Coding-Dev-Tools
added a commit
that referenced
this pull request
Aug 10, 2026
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>
Coding-Dev-Tools
added a commit
that referenced
this pull request
Aug 10, 2026
* feat(core): pro-feature hardening, release-readiness cleanup Store/Schema: - Transaction rollback safety on Windows (commits_deferred flag) - Skip redundant index.upsert when index shares store vector table - Embedding-space contract validation and direct SQL matrix path - Restore orphaned Store methods (prompt_eligibility_counts, embedding_space_health, context_savings_grouped, add_sync_bytes, get_sync_stats) and harden _logical_digest for sqlite-vec - Dashboard startup self-check for orphaned Store methods - v11 handoff column migration for sessions table Release readiness: - Strip dead TEAM scope surface (Scope.TEAM, MemoryRecord.team_id, SearchFilter.team_id/caller_id) per AGENTS.md §0 - Remove team_id column from memories table (team_members retained) - Remove conflict_aware profile (zero callers/tests/docs) - Add format/group_by params to MemoryService.context_savings() Other: - watch_repo key name, LLM fallback chain cost tracking - context_savings_grouped SELECT columns - Sync robustness, response budgets, docs sync * feat(api): wire format/group_by through all transport surfaces - MCP tool engraphis_context_savings: add format and group_by params - v2 API route /context-savings: add format and group_by query params - Read-only API /context-savings: add format and group_by query params - MCP HTTP CLI: minor fix * feat(eval): add extractor/handoff quality evals and pro-feature scripts - eval/extractor_quality.py: offline extractor distillation quality harness - eval/handoff_quality.py: structured session-handoff eval - eval/datasets/handoff_quality.jsonl: handoff scenario fixtures - eval/datasets/sample.jsonl: 3 new entries (link_symbol, hierarchical consolidation, extractor/handoff patterns) - scripts/watch_repo.py: file-watcher for code-graph reindexing - scripts/validate_compose_contract.py: schema contract validator * feat(dashboard): startup workspace guard and static asset sync - dashboard_app.py: pass workspace to stats() when allowed_workspaces is configured (prevents ValidationError on workspace-bound instances) - Sync classic_assets and static bundles with latest dashboard changes * test: update tests for release-readiness changes - test_cli_entrypoints: clear ENGRAPHIS_WORKSPACES env for subprocess isolation - test_dashboard_security_headers: monkeypatch.delenv ENGRAPHIS_WORKSPACES - test_savings: adjust for context_savings format/group_by signature - test_sync: align with sync robustness hardening - test_update_check: align with 2-part semver acceptance - test_mcp_server, test_smart_mcp_gateway: align with MCP surface wiring - test_store_class_integrity: new Store method integrity coverage - test_dashboard_v2, test_release_infrastructure, test_secret_hygiene: minor alignment with pro-feature changes * fix(test): update eval harness question count 4→9 to match dataset * fix(test): use __version__ instead of hardcoded 1.5 in savings test * fix(store): add prev_hash/receipt_hash to context_savings_grouped SELECT The restored method from b7e80c2 predated the hash-validation contract in _public_receipt_row. Without prev_hash and receipt_hash in the SELECT, every receipt was marked invalid_payload and excluded from aggregation, causing the grouped method to return 0 groups despite valid receipts. Verified: all 4 dimensions (workspace/repo/agent/day) now return correct token aggregation. Savings ratio: 0.6 (180 saved / 300 source). Found by round-3 ContextSavingsGroupedRuntime scout. * fix: normalize store.py CRLF→LF (regression from d18231a) * feat(eval): add --output-dir for persistent eval reports Save JSON reports to a directory with timestamped filenames. Cherry-picked from codex/fix-pr-104-codeql-v4 (a4928c5). * fix(core): P1/P2 bug fixes — LLM client, sync quarantine, memory_type preservation, retention SQL, migration safety, port parsing - llm/client.py: _LLMProviderError accepts *args + message kwarg (fixes TypeError on cost-ceiling path) - llm/client.py: parse_provider_chain detects URL ports via :// prefix check (prevents port-as-ceiling stripping) - core/sync.py: quarantine merge preserves prior reasons alongside inherited_quarantine (audit trail) - stores/vectors.py: upsert_memory preserves existing memory_type when caller passes default semantic - routes/memory.py: AVG(stability) SQL approximation for retention stats (avoids OOM on large workspaces) - routes/vault.py: hashlib suffix on smart-import split doc_ids (collision prevention) - routes/vault.py: health_overview and find_stale bounded to 10k limit - service.py: Windows-safe two-step rename with staging file and rollback for v1->v2 migration - stores/__init__.py: graph backfill uses _replace_support_rows + per-namespace rebuild (O(N) not O(N²)) - config.py: embed_dim downstream consumers use 'is not None' pattern - 6 downstream embed_dim call sites fixed (dashboard_app, mcp_server, read_only_api, inspector, v2_api, embedder) - eval/longmemeval_v2.py: _stored_memory_type_counts scoped to workspace - eval/harness.py: --output-dir writing inside try/except for clean CLI errors - KILO_CODE_INTEGRATION.md: tool count corrected to nine; engraphis_forget row added - .env.example: ENGRAPHIS_SYNC_TOKEN_ORIGIN documented - Test file trailing newlines restored * test(llm): add parse_provider_chain + _LLMProviderError regression coverage Closes P1 gap flagged by FinalA_Tests review: - port-stripping fix (localhost:8080 vs ceiling) — 5 cases - multi-provider chain parsing with mixed ceilings - empty/whitespace fallback to default chain - _LLMProviderError positional+kwarg construction contract * fix(core): harden provider parsing and sqlite vector batches * fix(infra): CI/CD alignment, docs corrections, dashboard assets, eval harness improvements - .github/workflows/release.yml: CodeQL config-file reference added - .env.example: ENGRAPHIS_SYNC_TOKEN_ORIGIN documented for standalone sync tokens - docs/KILO_CODE_INTEGRATION.md: Smart tool count corrected to nine; engraphis_forget row added to Classic table - engraphis/dashboard_assets/vendor/d3.min.js: unified across classic/static (no new Function) - eval/longmemeval_v2.py: _stored_memory_type_counts scoped to workspace - eval/harness.py: --output-dir writing inside try/except for clean CLI errors - tests/e2e/demo.spec.js, test_dashboard_vendor_assets.py, test_documentation_contracts.py: new coverage - deploy/force-graph license/yarn lock files added - docs/benchmark-evidence offline fixtures added - Multiple doc updates: AGENTS.md, BENCHMARKS.md, CHANGELOG.md, README.md, SECURITY.md, SYNC.md - Demo infrastructure: screen demo HTML, prepare script, record script - Integration updates: hermes plugin, pi MCP client - Skills: engraphis-memory SKILL.md and references updated * fix(release): close budget, trust, and scope gaps * fix(analytics): keep grouped token units separate * fix(csp): replace D3 dynamic CSV constructor * test(e2e): isolate Playwright from user databases * fix(deps): update Pi loader past audit advisories * fix(storage): preserve transaction and read-only boundaries * chore(release): prepare version 1.6 * feat(import): add trusted local document workflows * fix(packaging): ship importer guides in source archives * fix(import): harden universal document workflows * fix(ci): close security and platform release gates * fix(ui): remove hosted plan header badges safely * fix: avoid tainted upload filename paths * fix(core): keep trusted config dependency-free * fix: address importer review findings * fix: address latest importer review findings * fix: address document importer review findings * fix: preserve importer state on incomplete scans * fix: defer reconciliation for incomplete scans * fix: close watcher and savings review findings * fix: close document scan and polling review findings * fix: harden document importer reconciliation * fix: read dashboard memories from active store * Fix EPUB percent-encoded manifest paths * Fix percent-encoded EPUB manifest paths * Harden Obsidian scan and RTF decoding * Fix UTF-16 Markdown importer decoding * Retry failed watchdog reindexes * Retire stale Obsidian links on ambiguity * Fix batch forwarding and descriptive HLC updates * Fix HTML importer charset detection * Fix PR130 CI connector, config, schema, and dashboard regressions * Fix v14 source job session backfill * Retire stale Obsidian links for missing targets * Report unprocessed importer plans as pending * Fix concurrent import revisions and link support * Preserve temporal ordering for concurrent imports * Preserve incomplete links and persist warnings * Harden XML attributes and ignored HTML regions * Harden container metadata and fallback links * Harden bounded document parser fallbacks * Publish sync conflict vectors safely * fix: harden importer, sync, and scoped recall * fix: prevent read-only error detail exposure * fix: close remaining document import review gaps * fix(review): MCP error redaction gap + Windows SQLite URI in v2_api fallback paths - Wrap engraphis_get_memory post-inspect body in try/except with _classify_gateway_exception to match all other Smart tools, preventing internal error details from leaking through FastMCP. - Fix malformed SQLite URI on Windows in _keyword_search and memories routes: use Path.resolve().as_uri() + '?mode=ro' instead of bare string interpolation, matching the store's URI construction pattern. * fix(review): CHANGELOG anchor, graph layers enforcement, header parse warnings - Fix README 1.5 release notes anchor link to match CHANGELOG heading format - Add missing CHANGELOG entries for dashboard version display, MCP error redaction fix, Windows SQLite URI fix, graph layers enforcement, and header parse warning - Apply _graph_csv() limit enforcement to /graph endpoint layers parameter, matching all other graph endpoints (64-item, 200-char limits) - Add stderr warnings to _parse_headers for silent ENGRAPHIS_LLM_EXTRA_HEADERS misconfiguration instead of silently dropping invalid headers * fix(security): resolve CodeQL path traversal alerts in vault import\n\n- Reject symlinks on import folder and individual candidates\n- Verify resolved folder stays under allowed roots via normcase+startswith\n- Use resolved_folder for relative_to to prevent escape via symlink * fix(review): core-floor import guards for pydantic and httpx MCP server and LLM client import pydantic/httpx at module load, which breaks the numpy-only core floor when those extras are absent. Guard both imports so the core remains importable without optional extras, matching the deterministic hashing-embedder floor that CI enforces. Co-authored-by: CommandCodeBot <noreply@commandcode.ai> * fix(review): address remaining release 1.6 review threads Closes the last open review concerns before merge: - XLSX worksheets and PPTX slides now follow the workbook/presentation relationship order (r:id via the rels parts) instead of numeric order, with a deterministic fallback when those parts are missing. - RTF \binN binary payloads are skipped without unbalancing the group stack; XHTML encoding honors the XML prolog before <meta charset>. - _walk_tree bounds directory entry sorting before the 10k file cap and marks oversized directories as incomplete scans. - import launchers guard worker.start() and mark the job failed instead of leaving it stuck running when thread start raises. - vault import_folder reads through an fd-safe helper (O_NOFOLLOW, identity and containment revalidation) to close the open/read TOCTOU. - watchdog watcher applies the same exclude policy as the polling backend before enqueueing events. - Store._write_operation joins an active defer_commits boundary instead of opening an unreleased inner savepoint; link reconciliation commits the batch it owns even when the connection reports no ownership. - ENGRAPHIS_LLM_EXTRA_HEADERS parse errors are value-free on stderr. - Tests: workbook/slide order, RTF bin, XHTML prolog, oversized directory, worker-start failure, sync relay origin binding, and external-vector equality for HLC conflict successors. Co-authored-by: CommandCodeBot <noreply@commandcode.ai> * feat(dashboard): accessibility, persistent savings, and keyboard navigation - Add skip link, main-content focus target, and notice banner to both the v2 ledger and classic dashboards. - Surface a persistent runtime-savings summary (value, meta, rate) and a savings overview section on Today, with receipt-backed fallbacks when the estimate cannot load. - Rename the metric labels to "Live memories" / "All versions, including history" so the counts are unambiguous. - Keyboard support: arrow/Home/End navigation for library options, graph/provenance/manage tabs, and roving tabindex for role=option cards. - View routing via history.pushState/popstate with a ?view= parameter and focus management on view switch. - Dashboard tests and e2e spec updated for the new markup and keyboard behavior. Co-authored-by: CommandCodeBot <noreply@commandcode.ai> * chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1 (#133) Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.1) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com> * chore(deps-dev): bump tree-sitter-language-pack from 1.13.5 to 1.14.3 (#134) Bumps [tree-sitter-language-pack](https://github.com/xberg-io/tree-sitter-language-pack) from 1.13.5 to 1.14.3. - [Release notes](https://github.com/xberg-io/tree-sitter-language-pack/releases) - [Changelog](https://github.com/xberg-io/tree-sitter-language-pack/blob/main/CHANGELOG.md) - [Commits](xberg-io/tree-sitter-language-pack@v1.13.5...v1.14.3) --- updated-dependencies: - dependency-name: tree-sitter-language-pack dependency-version: 1.14.3 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com> * fix(review): portable memory health, streamed 413, live v15 session backfill - memory_health() falls back to a portable Python retention calculation when the SQLite build lacks SQLITE_ENABLE_MATH_FUNCTIONS (EXP), so the diagnostic keeps working on SQLCipher and minimal builds. - read-only API returns 413 for streamed/chunked bodies that exceed the limit: the receive hook raises an internal marker the middleware translates directly, since FastAPI's body parser would otherwise turn it into a generic 400 before the ValueError handler runs. - migration backfills jobs.session_id from the live v15 source manifest (not only staged v14 temp tables) so the v16 exact-session triggers never reject lineage for legacy session-scoped import jobs. The staged path shares the same backfill helpers. - Tests: streamed-oversize 413 regression; existing declared-oversize, health, and migration suites pass. Co-authored-by: CommandCodeBot <noreply@commandcode.ai> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: CommandCodeBot <noreply@commandcode.ai> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps @playwright/test from 1.61.1 to 1.62.1.
Release notes
Sourced from @playwright/test's releases.
... (truncated)
Commits
26a9e47cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...0a81d5dcherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...8376826cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...66c5cc9chore: mark v1.62.1 (#42020)9672bc3cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...4325804cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors9632f8echerry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...e3950d9chore: mark v1.62.0 (#41981)f07e0f7cherry-pick(#41940): docs: release notes for v1.62 (#41967)05a306ccherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)