Skip to content
This repository was archived by the owner on Nov 2, 2026. It is now read-only.

fix(deps): update minor and patch dependencies - #100

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/minor-and-patch-dependencies
Open

fix(deps): update minor and patch dependencies#100
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/minor-and-patch-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@antfu/eslint-config 9.1.0 → 9.5.1 age confidence devDependencies minor
@capacitor/android (source) 7.6.7 → 7.6.9 age confidence dependencies patch 7.6.10
@capacitor/cli (source) 7.6.7 → 7.6.9 age confidence devDependencies patch 7.6.10
@capacitor/core (source) 7.6.7 → 7.6.9 age confidence dependencies patch 7.6.10
@capacitor/ios (source) 7.6.7 → 7.6.9 age confidence dependencies patch 7.6.10
@grafana/faro-web-sdk (source) 2.8.0 → 2.13.0 age confidence dependencies minor
@grafana/faro-web-tracing (source) 2.8.0 → 2.13.0 age confidence dependencies minor
@playwright/test (source) 1.63.0 → 1.64.1 age confidence devDependencies minor
@tailwindcss/vite (source) 4.3.1 → 4.3.3 age confidence devDependencies patch
@vitejs/plugin-vue (source) 6.0.7 → 6.0.10 age confidence devDependencies patch
@vitest/coverage-v8 (source) 4.1.9 → 4.1.12 age confidence devDependencies patch
@vue/test-utils 2.5.0 → 2.5.1 age confidence devDependencies patch
docker/dockerfile 1.27 → 1.28 age confidence syntax minor
eslint (source) 10.6.0 → 10.13.0 age confidence devDependencies minor 10.14.0
node (source) 26.9.0-alpine → 26.12.1-alpine age confidence stage minor 26.13.0
prettier (source) 3.9.1 → 3.9.10 age confidence devDependencies patch
tailwindcss (source) 4.3.1 → 4.3.3 age confidence devDependencies patch
vite (source) 8.1.0 → 8.3.5 age confidence devDependencies minor
vitest (source) 4.1.9 → 4.1.12 age confidence devDependencies patch
vue (source) 3.5.39 → 3.5.44 age confidence dependencies patch
vue-router (source) 5.1.0 → 5.4.0 age confidence dependencies minor
vue-tsc (source) 3.3.5 → 3.3.13 age confidence devDependencies patch 3.3.14
zod (source) 4.4.3 → 4.6.7 age confidence dependencies minor

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.5.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v9.5.0

Compare Source

   🚀 Features
    View changes on GitHub

v9.4.1

Compare Source

   🚀 Features
  • pnpm: Enforce new-line style for pnpm-workspace.yaml  -  by @​antfu (ab400)
    View changes on GitHub

v9.4.0

Compare Source

   🚀 Features
    View changes on GitHub

v9.3.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v9.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
ionic-team/capacitor (@​capacitor/android)

v7.6.9

Compare Source

Bug Fixes
  • block navigation to the internal HTTP proxy path (430356a)
  • block the HTTP proxy path in subframes (80b6c5e)

v7.6.8

Compare Source

Bug Fixes
  • android: explicitly grant URI permissions for image capture intent (#​8526) (9653d27)
grafana/faro-web-sdk (@​grafana/faro-web-sdk)

v2.13.0

Compare Source

Features
Bug Fixes
  • allow frontend owners to approve release package metadata (#​2333) (b519200)
  • deps: update npm-dependencies (#​2322) (0ba0597)
  • replay: disable unsupported canvas recording (#​2317) (bd9099c)
  • session: adopt rotated sessions in same-origin iframes (#​2286) (4697c87)
  • transport-otlp-http: serialize all measurement values as OTLP attributes (#​2288) (94a5aeb)
  • web-sdk: report zero TLS time for non-secure resources (#​2308) (2540176)
  • web-tracing: enforce a single tracing owner across Faro instances (#​2178) (b71cd77)

v2.12.1

Compare Source

Bug Fixes

v2.12.0

Compare Source

Features
Bug Fixes

v2.11.0

Compare Source

Features
  • web-tracing: omit trace context for unsampled sessions (#​2251) (f839439)
Bug Fixes

v2.10.0

Compare Source

Features
  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#​2187) (557e94d)
Bug Fixes
  • core: keep config.paused in sync with pause and unpause (#​2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#​2208) (4378883)
  • deps: bump vulnerable transitive deps (#​2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#​2164) (42f154f)
  • deps: update npm-dependencies (#​2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#​2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#​2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#​2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#​2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#​2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#​2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#​2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#​2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#​2200) (4b90404)

v2.9.0

Compare Source

Features
  • user-actions: add configurable initial activity timeout (#​2183) (dd10a3d)
Bug Fixes
  • security/critical/: update dependency tar to v7.5.21 [security] (#​2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#​2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#​2182) (623efe2)

v2.8.2

Compare Source

Bug Fixes
  • session: attribute the rotation-triggering signal to the new session
    (#​2168)
    (923d3b8)
  • session: stop a background tab from emitting an expired session id
    (#​2167)
    (eba5c2f)

v2.8.1

Compare Source

Bug Fixes
microsoft/playwright (@​playwright/test)

v1.64.1

Compare Source

Bug Fixes
  • #​43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #​43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'
🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});
  • New fps option in testOptions.video, recordVideo and
    screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
  • New style option takes CSS declarations for the point marker, the target
    highlight and the action title. It replaces the fontSize option, which is now deprecated.
  • The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
  • Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
    quality.
  • All video options are also available in Playwright MCP and playwright-cli.
🎯 Test runner

  • New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

    // playwright.config.ts
import { defineConfig, devices } from '@playwright/test';

export default defineConfig({
  projects: [
    { name: 'chromium', use: devices['Desktop Chrome'] },
    { name: 'firefox', use: devices['Desktop Firefox'], default: false },
    { name: 'webkit', use: devices['Desktop Safari'], default: false },
  ],
});
    npx playwright test                     # runs chromium only
npx playwright test --project=firefox   # runs firefox
npx playwright test --project="*"       # runs all three, for example on CI

  • New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

    npx playwright test --shuffle
# Running 42 tests using 4 workers, shuffle seed 271828182
# ...

# Pass the seed to reproduce the same order.
npx playwright test --shuffle 271828182

  • New lock option in test.describe.configure() adds test locks to all tests in a file or a group:

    test.describe.configure({ lock: 'user-settings' });

  • New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

    // playwright.config.ts
export default defineConfig({
  expect: {
    toHaveScreenshot: { type: 'webp' },
  },
});
🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);
New APIs
Breaking changes ⚠️

  • screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:

    // playwright.config.ts
export default defineConfig({
  use: {
    ...devices['Desktop Chrome'],
    screen: undefined,
  },
});

  • JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.

  • --update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.

  • Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions
  • Chromium 156.0.8078.4
  • Mozilla Firefox 157.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 155
  • Microsoft Edge 155
tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

v4.3.2

Compare Source

Fixed
  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#​20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#​20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#​20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#​20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#​20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#​20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#​20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#​20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#​20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#​20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#​20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#​20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#​20289)
vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.10

Bug Fixes
  • plugin-vue: compile transformed normal scripts outside vapor mode (#​857) (7b63e3c)
  • plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)
Documentation
  • plugin-vue: clarify compiler initialization hooks (55d0cab)

v6.0.9

Bug Fixes
Miscellaneous Chores

v6.0.8

Features
Bug Fixes
vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.12

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.1.11

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.1.10

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
vuejs/test-utils (@​vue/test-utils)

v2.5.1

Compare Source

What's Changed

New Contributors

Full Changelog: vuejs/test-utils@v2.5.0...v2.5.1

eslint/eslint (eslint)

v10.13.0

Compare Source

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

v10.12.0

Compare Source

Features

  • 4618052 feat: handle astral letters in new-cap ([#​21357](htt

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "after 02:00 and before 06:00 every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added component: dependencies Dependency update or dependency policy. dependencies Dependency update, lockfile change, or dependency policy. priority: P2 Medium; normal planned work. type: chore Maintenance work without intended behavior change. labels Sep 22, 2026
@renovate

renovate Bot commented Sep 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 16, reused 0, downloaded 0, added 0
 ERR_PNPM_FETCH_401  GET https://npm.pkg.github.com/@jorisjonkers-dev%2Fvue-web-commons: Unauthorized - 401

This error happened while installing a direct dependency of /tmp/renovate/repos/github/JorisJonkers-dev/agents-ui

No authorization header was set for the request.

These authorization settings were found:
@jorisjonkers-dev:registry=https://npm.pkg.github.com

@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 8 times, most recently from ae11318 to 2aabdca Compare September 30, 2026 07:14
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 2 times, most recently from 10fd7e1 to 369d66a Compare October 8, 2026 13:26
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 9 times, most recently from 1693d8d to 591a28b Compare October 16, 2026 02:22
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 6 times, most recently from b90a83e to a091ea8 Compare October 21, 2026 17:10
@renovate
renovate Bot enabled auto-merge (squash) October 21, 2026 17:10
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch 5 times, most recently from 21cd319 to 67e4df3 Compare October 28, 2026 09:13
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch from 67e4df3 to 00cce27 Compare October 29, 2026 05:26
@renovate
renovate Bot force-pushed the renovate/minor-and-patch-dependencies branch from 00cce27 to ee73d89 Compare October 29, 2026 19:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

component: dependencies Dependency update or dependency policy. dependencies Dependency update, lockfile change, or dependency policy. priority: P2 Medium; normal planned work. type: chore Maintenance work without intended behavior change.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants