Skip to content

chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1 - #133

Merged
Coding-Dev-Tools merged 2 commits into
mainfrom
dependabot/npm_and_yarn/playwright/test-1.62.1
Aug 10, 2026
Merged

chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1#133
Coding-Dev-Tools merged 2 commits into
mainfrom
dependabot/npm_and_yarn/playwright/test-1.62.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps @playwright/test from 1.61.1 to 1.62.1.

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

  • #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
  • #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
  • #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
  • #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
  • #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits
  • 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
  • 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
  • 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
  • 66c5cc9 chore: mark v1.62.1 (#42020)
  • 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
  • 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
  • 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 9, 2026
@dependabot
dependabot Bot requested a review from Coding-Dev-Tools as a code owner August 9, 2026 14:38
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 9, 2026
@Coding-Dev-Tools
Coding-Dev-Tools merged commit e6c06f4 into main Aug 10, 2026
23 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/playwright/test-1.62.1 branch August 10, 2026 01:58
Coding-Dev-Tools added a commit that referenced this pull request Aug 10, 2026
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>
Coding-Dev-Tools added a commit that referenced this pull request Aug 10, 2026
* feat(core): pro-feature hardening, release-readiness cleanup

Store/Schema:
- Transaction rollback safety on Windows (commits_deferred flag)
- Skip redundant index.upsert when index shares store vector table
- Embedding-space contract validation and direct SQL matrix path
- Restore orphaned Store methods (prompt_eligibility_counts,
  embedding_space_health, context_savings_grouped, add_sync_bytes,
  get_sync_stats) and harden _logical_digest for sqlite-vec
- Dashboard startup self-check for orphaned Store methods
- v11 handoff column migration for sessions table

Release readiness:
- Strip dead TEAM scope surface (Scope.TEAM, MemoryRecord.team_id,
  SearchFilter.team_id/caller_id) per AGENTS.md §0
- Remove team_id column from memories table (team_members retained)
- Remove conflict_aware profile (zero callers/tests/docs)
- Add format/group_by params to MemoryService.context_savings()

Other:
- watch_repo key name, LLM fallback chain cost tracking
- context_savings_grouped SELECT columns
- Sync robustness, response budgets, docs sync

* feat(api): wire format/group_by through all transport surfaces

- MCP tool engraphis_context_savings: add format and group_by params
- v2 API route /context-savings: add format and group_by query params
- Read-only API /context-savings: add format and group_by query params
- MCP HTTP CLI: minor fix

* feat(eval): add extractor/handoff quality evals and pro-feature scripts

- eval/extractor_quality.py: offline extractor distillation quality harness
- eval/handoff_quality.py: structured session-handoff eval
- eval/datasets/handoff_quality.jsonl: handoff scenario fixtures
- eval/datasets/sample.jsonl: 3 new entries (link_symbol, hierarchical
  consolidation, extractor/handoff patterns)
- scripts/watch_repo.py: file-watcher for code-graph reindexing
- scripts/validate_compose_contract.py: schema contract validator

* feat(dashboard): startup workspace guard and static asset sync

- dashboard_app.py: pass workspace to stats() when allowed_workspaces
  is configured (prevents ValidationError on workspace-bound instances)
- Sync classic_assets and static bundles with latest dashboard changes

* test: update tests for release-readiness changes

- test_cli_entrypoints: clear ENGRAPHIS_WORKSPACES env for subprocess isolation
- test_dashboard_security_headers: monkeypatch.delenv ENGRAPHIS_WORKSPACES
- test_savings: adjust for context_savings format/group_by signature
- test_sync: align with sync robustness hardening
- test_update_check: align with 2-part semver acceptance
- test_mcp_server, test_smart_mcp_gateway: align with MCP surface wiring
- test_store_class_integrity: new Store method integrity coverage
- test_dashboard_v2, test_release_infrastructure, test_secret_hygiene: minor
  alignment with pro-feature changes

* fix(test): update eval harness question count 4→9 to match dataset

* fix(test): use __version__ instead of hardcoded 1.5 in savings test

* fix(store): add prev_hash/receipt_hash to context_savings_grouped SELECT

The restored method from b7e80c2 predated the hash-validation contract
in _public_receipt_row. Without prev_hash and receipt_hash in the SELECT,
every receipt was marked invalid_payload and excluded from aggregation,
causing the grouped method to return 0 groups despite valid receipts.

Verified: all 4 dimensions (workspace/repo/agent/day) now return correct
token aggregation. Savings ratio: 0.6 (180 saved / 300 source).

Found by round-3 ContextSavingsGroupedRuntime scout.

* fix: normalize store.py CRLF→LF (regression from d18231a)

* feat(eval): add --output-dir for persistent eval reports

Save JSON reports to a directory with timestamped filenames.
Cherry-picked from codex/fix-pr-104-codeql-v4 (a4928c5).

* fix(core): P1/P2 bug fixes — LLM client, sync quarantine, memory_type preservation, retention SQL, migration safety, port parsing

- llm/client.py: _LLMProviderError accepts *args + message kwarg (fixes TypeError on cost-ceiling path)
- llm/client.py: parse_provider_chain detects URL ports via :// prefix check (prevents port-as-ceiling stripping)
- core/sync.py: quarantine merge preserves prior reasons alongside inherited_quarantine (audit trail)
- stores/vectors.py: upsert_memory preserves existing memory_type when caller passes default semantic
- routes/memory.py: AVG(stability) SQL approximation for retention stats (avoids OOM on large workspaces)
- routes/vault.py: hashlib suffix on smart-import split doc_ids (collision prevention)
- routes/vault.py: health_overview and find_stale bounded to 10k limit
- service.py: Windows-safe two-step rename with staging file and rollback for v1->v2 migration
- stores/__init__.py: graph backfill uses _replace_support_rows + per-namespace rebuild (O(N) not O(N²))
- config.py: embed_dim downstream consumers use 'is not None' pattern
- 6 downstream embed_dim call sites fixed (dashboard_app, mcp_server, read_only_api, inspector, v2_api, embedder)
- eval/longmemeval_v2.py: _stored_memory_type_counts scoped to workspace
- eval/harness.py: --output-dir writing inside try/except for clean CLI errors
- KILO_CODE_INTEGRATION.md: tool count corrected to nine; engraphis_forget row added
- .env.example: ENGRAPHIS_SYNC_TOKEN_ORIGIN documented
- Test file trailing newlines restored

* test(llm): add parse_provider_chain + _LLMProviderError regression coverage

Closes P1 gap flagged by FinalA_Tests review:
- port-stripping fix (localhost:8080 vs ceiling) — 5 cases
- multi-provider chain parsing with mixed ceilings
- empty/whitespace fallback to default chain
- _LLMProviderError positional+kwarg construction contract

* fix(core): harden provider parsing and sqlite vector batches

* fix(infra): CI/CD alignment, docs corrections, dashboard assets, eval harness improvements

- .github/workflows/release.yml: CodeQL config-file reference added
- .env.example: ENGRAPHIS_SYNC_TOKEN_ORIGIN documented for standalone sync tokens
- docs/KILO_CODE_INTEGRATION.md: Smart tool count corrected to nine; engraphis_forget row added to Classic table
- engraphis/dashboard_assets/vendor/d3.min.js: unified across classic/static (no new Function)
- eval/longmemeval_v2.py: _stored_memory_type_counts scoped to workspace
- eval/harness.py: --output-dir writing inside try/except for clean CLI errors
- tests/e2e/demo.spec.js, test_dashboard_vendor_assets.py, test_documentation_contracts.py: new coverage
- deploy/force-graph license/yarn lock files added
- docs/benchmark-evidence offline fixtures added
- Multiple doc updates: AGENTS.md, BENCHMARKS.md, CHANGELOG.md, README.md, SECURITY.md, SYNC.md
- Demo infrastructure: screen demo HTML, prepare script, record script
- Integration updates: hermes plugin, pi MCP client
- Skills: engraphis-memory SKILL.md and references updated

* fix(release): close budget, trust, and scope gaps

* fix(analytics): keep grouped token units separate

* fix(csp): replace D3 dynamic CSV constructor

* test(e2e): isolate Playwright from user databases

* fix(deps): update Pi loader past audit advisories

* fix(storage): preserve transaction and read-only boundaries

* chore(release): prepare version 1.6

* feat(import): add trusted local document workflows

* fix(packaging): ship importer guides in source archives

* fix(import): harden universal document workflows

* fix(ci): close security and platform release gates

* fix(ui): remove hosted plan header badges safely

* fix: avoid tainted upload filename paths

* fix(core): keep trusted config dependency-free

* fix: address importer review findings

* fix: address latest importer review findings

* fix: address document importer review findings

* fix: preserve importer state on incomplete scans

* fix: defer reconciliation for incomplete scans

* fix: close watcher and savings review findings

* fix: close document scan and polling review findings

* fix: harden document importer reconciliation

* fix: read dashboard memories from active store

* Fix EPUB percent-encoded manifest paths

* Fix percent-encoded EPUB manifest paths

* Harden Obsidian scan and RTF decoding

* Fix UTF-16 Markdown importer decoding

* Retry failed watchdog reindexes

* Retire stale Obsidian links on ambiguity

* Fix batch forwarding and descriptive HLC updates

* Fix HTML importer charset detection

* Fix PR130 CI connector, config, schema, and dashboard regressions

* Fix v14 source job session backfill

* Retire stale Obsidian links for missing targets

* Report unprocessed importer plans as pending

* Fix concurrent import revisions and link support

* Preserve temporal ordering for concurrent imports

* Preserve incomplete links and persist warnings

* Harden XML attributes and ignored HTML regions

* Harden container metadata and fallback links

* Harden bounded document parser fallbacks

* Publish sync conflict vectors safely

* fix: harden importer, sync, and scoped recall

* fix: prevent read-only error detail exposure

* fix: close remaining document import review gaps

* fix(review): MCP error redaction gap + Windows SQLite URI in v2_api fallback paths

- Wrap engraphis_get_memory post-inspect body in try/except with
  _classify_gateway_exception to match all other Smart tools, preventing
  internal error details from leaking through FastMCP.
- Fix malformed SQLite URI on Windows in _keyword_search and memories
  routes: use Path.resolve().as_uri() + '?mode=ro' instead of bare string
  interpolation, matching the store's URI construction pattern.

* fix(review): CHANGELOG anchor, graph layers enforcement, header parse warnings

- Fix README 1.5 release notes anchor link to match CHANGELOG heading format
- Add missing CHANGELOG entries for dashboard version display, MCP error
  redaction fix, Windows SQLite URI fix, graph layers enforcement, and
  header parse warning
- Apply _graph_csv() limit enforcement to /graph endpoint layers parameter,
  matching all other graph endpoints (64-item, 200-char limits)
- Add stderr warnings to _parse_headers for silent ENGRAPHIS_LLM_EXTRA_HEADERS
  misconfiguration instead of silently dropping invalid headers

* fix(security): resolve CodeQL path traversal alerts in vault import\n\n- Reject symlinks on import folder and individual candidates\n- Verify resolved folder stays under allowed roots via normcase+startswith\n- Use resolved_folder for relative_to to prevent escape via symlink

* fix(review): core-floor import guards for pydantic and httpx

MCP server and LLM client import pydantic/httpx at module load, which
breaks the numpy-only core floor when those extras are absent. Guard
both imports so the core remains importable without optional extras,
matching the deterministic hashing-embedder floor that CI enforces.

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>

* fix(review): address remaining release 1.6 review threads

Closes the last open review concerns before merge:

- XLSX worksheets and PPTX slides now follow the workbook/presentation
  relationship order (r:id via the rels parts) instead of numeric order,
  with a deterministic fallback when those parts are missing.
- RTF \binN binary payloads are skipped without unbalancing the group
  stack; XHTML encoding honors the XML prolog before <meta charset>.
- _walk_tree bounds directory entry sorting before the 10k file cap and
  marks oversized directories as incomplete scans.
- import launchers guard worker.start() and mark the job failed instead
  of leaving it stuck running when thread start raises.
- vault import_folder reads through an fd-safe helper (O_NOFOLLOW,
  identity and containment revalidation) to close the open/read TOCTOU.
- watchdog watcher applies the same exclude policy as the polling
  backend before enqueueing events.
- Store._write_operation joins an active defer_commits boundary instead
  of opening an unreleased inner savepoint; link reconciliation commits
  the batch it owns even when the connection reports no ownership.
- ENGRAPHIS_LLM_EXTRA_HEADERS parse errors are value-free on stderr.
- Tests: workbook/slide order, RTF bin, XHTML prolog, oversized
  directory, worker-start failure, sync relay origin binding, and
  external-vector equality for HLC conflict successors.

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>

* feat(dashboard): accessibility, persistent savings, and keyboard navigation

- Add skip link, main-content focus target, and notice banner to both the
  v2 ledger and classic dashboards.
- Surface a persistent runtime-savings summary (value, meta, rate) and a
  savings overview section on Today, with receipt-backed fallbacks when
  the estimate cannot load.
- Rename the metric labels to "Live memories" / "All versions, including
  history" so the counts are unambiguous.
- Keyboard support: arrow/Home/End navigation for library options,
  graph/provenance/manage tabs, and roving tabindex for role=option cards.
- View routing via history.pushState/popstate with a ?view= parameter and
  focus management on view switch.
- Dashboard tests and e2e spec updated for the new markup and keyboard
  behavior.

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>

* chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1 (#133)

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.1 to 1.62.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>

* chore(deps-dev): bump tree-sitter-language-pack from 1.13.5 to 1.14.3 (#134)

Bumps [tree-sitter-language-pack](https://github.com/xberg-io/tree-sitter-language-pack) from 1.13.5 to 1.14.3.
- [Release notes](https://github.com/xberg-io/tree-sitter-language-pack/releases)
- [Changelog](https://github.com/xberg-io/tree-sitter-language-pack/blob/main/CHANGELOG.md)
- [Commits](xberg-io/tree-sitter-language-pack@v1.13.5...v1.14.3)

---
updated-dependencies:
- dependency-name: tree-sitter-language-pack
  dependency-version: 1.14.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>

* fix(review): portable memory health, streamed 413, live v15 session backfill

- memory_health() falls back to a portable Python retention calculation
  when the SQLite build lacks SQLITE_ENABLE_MATH_FUNCTIONS (EXP), so the
  diagnostic keeps working on SQLCipher and minimal builds.
- read-only API returns 413 for streamed/chunked bodies that exceed the
  limit: the receive hook raises an internal marker the middleware
  translates directly, since FastAPI's body parser would otherwise turn
  it into a generic 400 before the ValueError handler runs.
- migration backfills jobs.session_id from the live v15 source manifest
  (not only staged v14 temp tables) so the v16 exact-session triggers
  never reject lineage for legacy session-scoped import jobs. The staged
  path shares the same backfill helpers.
- Tests: streamed-oversize 413 regression; existing declared-oversize,
  health, and migration suites pass.

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant