From e721c6cf3fc042513d62edc7d809e1e82bdca50e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 13 Oct 2026 23:18:39 +0000 Subject: [PATCH 1/4] build(deps): bump the github-actions group with 5 updates Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `7.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/setup-node` from 5.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v5...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .../engineering-platform-validation.yml | 8 ++++---- .../workflows/ep-server-production-release.yml | 18 +++++++++--------- .github/workflows/owner-authorization.yml | 2 +- .github/workflows/security-baseline.yml | 2 +- .github/workflows/tde-observe.yml | 2 +- 6 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9510bcdc..c32381ef 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,6 +17,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5 - - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: {languages: python,javascript-typescript} - - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 diff --git a/.github/workflows/engineering-platform-validation.yml b/.github/workflows/engineering-platform-validation.yml index 55076d8a..8acb6afd 100644 --- a/.github/workflows/engineering-platform-validation.yml +++ b/.github/workflows/engineering-platform-validation.yml @@ -243,7 +243,7 @@ jobs: run: npm run test:engineering-dashboard -- --shard=${{ matrix.shard }} - name: Upload Engineering Status browser screenshots if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-status-browser-screenshots-${{ matrix.artifact_suffix }} path: | @@ -257,7 +257,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5 - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: {node-version: '24'} - run: npm ci - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 @@ -266,7 +266,7 @@ jobs: path: browser-shard-evidence - name: Enforce all selected production JavaScript files strictly above 80.2 percent run: node tools/qualification/dashboard_js_coverage.mjs . browser-shard-evidence dashboard-executable-coverage.json - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: dashboard-executable-coverage @@ -279,7 +279,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v22 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v22 with: {node-version: '22'} - name: Install pinned browser validation dependencies run: npm ci --ignore-scripts diff --git a/.github/workflows/ep-server-production-release.yml b/.github/workflows/ep-server-production-release.yml index 671c25d0..e121f2e9 100644 --- a/.github/workflows/ep-server-production-release.yml +++ b/.github/workflows/ep-server-production-release.yml @@ -138,7 +138,7 @@ jobs: "$RUNNER_TEMP/ep-production/bin/engineering-platform-server" --help >/dev/null - name: Generate SBOM for the exact release runtime run: cyclonedx-py environment --output-file dist/engineering-platform.cdx.json - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-platform-production-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: dist/ @@ -156,7 +156,7 @@ jobs: ref: ${{ needs.release-context.outputs.candidate_sha }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: {python-version: '3.14'} - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v22 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v22 with: {node-version: '22'} - run: python3 -m pip install . && npm ci && npx playwright install --with-deps chromium # Execute the same bounded four-part coordinator as local qualification; @@ -178,7 +178,7 @@ jobs: ref: ${{ needs.release-context.outputs.candidate_sha }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: {python-version: '3.14'} - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: engineering-platform-production-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: dist @@ -267,7 +267,7 @@ jobs: cmp "$QUALIFIED" "$RUNNER_TEMP/$QUALIFIED" fi rm -f pypi.json "$QUALIFIED" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-platform-qualified-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: | @@ -293,7 +293,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5 with: ref: ${{ needs.release-context.outputs.candidate_sha }} - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: engineering-platform-qualified-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: release-input @@ -398,7 +398,7 @@ jobs: ref: ${{ needs.release-context.outputs.candidate_sha }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: {python-version: '3.14'} - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: engineering-platform-qualified-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: release-input @@ -520,7 +520,7 @@ jobs: ep_draft_upload "$DRAFT_ID" "$RECEIPT" "$RECEIPT" fi rm -f "$RECEIPT" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-platform-published-evidence-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: | @@ -541,7 +541,7 @@ jobs: ref: ${{ needs.release-context.outputs.candidate_sha }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: {python-version: '3.14'} - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: engineering-platform-published-evidence-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: published-input @@ -771,7 +771,7 @@ jobs: gh release upload "$TAG" "$RECEIPT" gh release download "$TAG" --pattern "$RECEIPT" --output - | cmp "$RECEIPT" - fi - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-platform-release-evidence-${{ needs.release-context.outputs.version }}-${{ needs.release-context.outputs.candidate_sha }} path: engineering-platform-release-complete-*.json diff --git a/.github/workflows/owner-authorization.yml b/.github/workflows/owner-authorization.yml index 4af01a74..ac85c52c 100644 --- a/.github/workflows/owner-authorization.yml +++ b/.github/workflows/owner-authorization.yml @@ -116,7 +116,7 @@ jobs: script: | const [targetOwner, targetRepo] = process.env.TARGET_REPOSITORY.split("/"); await github.rest.repos.createCommitStatus({owner: targetOwner, repo: targetRepo, sha: process.env.TARGET_SHA, context: "Owner Authorization", state: "success", description: "HIGH_RISK authorized for this exact SHA", target_url: `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`}); - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: trusted-delivery-owner-authorization-evidence path: owner-authorization-evidence.json diff --git a/.github/workflows/security-baseline.yml b/.github/workflows/security-baseline.yml index e7a8d35d..983e0f9f 100644 --- a/.github/workflows/security-baseline.yml +++ b/.github/workflows/security-baseline.yml @@ -30,7 +30,7 @@ jobs: python -m build sha256sum dist/* > dist/SHA256SUMS cyclonedx-py environment --output-file dist/engineering-platform.cdx.json - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: engineering-platform-supply-chain-evidence path: dist/ diff --git a/.github/workflows/tde-observe.yml b/.github/workflows/tde-observe.yml index 9b1c5bfe..fb08aeb1 100644 --- a/.github/workflows/tde-observe.yml +++ b/.github/workflows/tde-observe.yml @@ -62,7 +62,7 @@ jobs: printf 'assessment_exit=%s\nqualification_exit=%s\n' "$assessment_exit" "$qualification_exit" > tde-observe/summary.txt - name: Publish TDE observe evidence if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: tde-observe-evidence path: | From 8441e428d2b28d9e8b9b64160aa8563fbee8c835 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 12:34:33 +0000 Subject: [PATCH 2/4] build(deps-dev): bump the browser-dependencies group across 1 directory with 2 updates --- updated-dependencies: - dependency-name: "@openai/codex" dependency-version: 0.162.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: browser-dependencies - dependency-name: "@playwright/test" dependency-version: 1.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: browser-dependencies ... Signed-off-by: dependabot[bot] --- package-lock.json | 80 +++++++++++++++++++++++------------------------ package.json | 4 +-- 2 files changed, 42 insertions(+), 42 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2650acd7..35801104 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,15 +8,15 @@ "name": "engineering-platform-browser-validation", "version": "2.3.120", "devDependencies": { - "@openai/codex": "0.160.1", - "@playwright/test": "1.63.0", + "@openai/codex": "0.162.1", + "@playwright/test": "1.64.0", "acorn": "8.19.0" } }, "node_modules/@openai/codex": { - "version": "0.160.1", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1.tgz", - "integrity": "sha512-f1yrJhwgimKQI1kYQlxdPJcFwkNZxZrbz7Hf89EAcnLqkQ7TiESzr2FgSZn13Ga5RuHjlVUfurzwq10wk9zw2g==", + "version": "0.162.1", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1.tgz", + "integrity": "sha512-NWZdi/kxyjv/8EUGFupziGU38YyleugZRM4JXgY5XFH7FUmaFA33NZS2Bmq0HPazf7S3jJQQWsZ/jAK9jsrV3Q==", "dev": true, "license": "Apache-2.0", "bin": { @@ -26,19 +26,19 @@ "node": ">=16" }, "optionalDependencies": { - "@openai/codex-darwin-arm64": "npm:@openai/codex@0.160.1-darwin-arm64", - "@openai/codex-darwin-x64": "npm:@openai/codex@0.160.1-darwin-x64", - "@openai/codex-linux-arm64": "npm:@openai/codex@0.160.1-linux-arm64", - "@openai/codex-linux-x64": "npm:@openai/codex@0.160.1-linux-x64", - "@openai/codex-win32-arm64": "npm:@openai/codex@0.160.1-win32-arm64", - "@openai/codex-win32-x64": "npm:@openai/codex@0.160.1-win32-x64" + "@openai/codex-darwin-arm64": "npm:@openai/codex@0.162.1-darwin-arm64", + "@openai/codex-darwin-x64": "npm:@openai/codex@0.162.1-darwin-x64", + "@openai/codex-linux-arm64": "npm:@openai/codex@0.162.1-linux-arm64", + "@openai/codex-linux-x64": "npm:@openai/codex@0.162.1-linux-x64", + "@openai/codex-win32-arm64": "npm:@openai/codex@0.162.1-win32-arm64", + "@openai/codex-win32-x64": "npm:@openai/codex@0.162.1-win32-x64" } }, "node_modules/@openai/codex-darwin-arm64": { "name": "@openai/codex", - "version": "0.160.1-darwin-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-arm64.tgz", - "integrity": "sha512-6Znu97O7+Ie/cnUpsWLx6NlcPc7DNuj6sAs58xpt0/tKRgx4+xgE9zca1YrwqQUBjUQO1HexudyimmhpZjdWlA==", + "version": "0.162.1-darwin-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-darwin-arm64.tgz", + "integrity": "sha512-YVXpg57itBuQxjofay3KDF5UbnZF4Y1ZmNFzUCz0ZQiQN+DndxOjN5V87rnXvPaC4qCPO2El74DzewoBP8JyPQ==", "cpu": [ "arm64" ], @@ -54,9 +54,9 @@ }, "node_modules/@openai/codex-darwin-x64": { "name": "@openai/codex", - "version": "0.160.1-darwin-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-x64.tgz", - "integrity": "sha512-Q33hmY6BxhoQRgCo4f/xS20yMxORnilQMNdr5w1bXSkXGYAty8/z9odcHbsNYUM6m0fNle12DHLQ5F0Dpfji3A==", + "version": "0.162.1-darwin-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-darwin-x64.tgz", + "integrity": "sha512-0/WHRhbUnM1wAjfyCO54Q8s4vQRxLVBbqW6XuQf7rZTEMTYPKRIQU9aPeRgjG653ZCSjtBrslWQ+G9urY9CksQ==", "cpu": [ "x64" ], @@ -72,9 +72,9 @@ }, "node_modules/@openai/codex-linux-arm64": { "name": "@openai/codex", - "version": "0.160.1-linux-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-arm64.tgz", - "integrity": "sha512-JLyjBlmjPvwTaicHemw+y5xQSz3Uja2r7F/xkvS8gFufTA2g132Ak+0fo35xnJ/k2uc9fTtjm0LrsEGI78L6Ng==", + "version": "0.162.1-linux-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-linux-arm64.tgz", + "integrity": "sha512-Ss7W/SrKtQFNaMtSojNoiykJgX+iDC8daM+YrcvgmJADtQPk0cd3w6Dna4CYH2CYvf9nQranj69fpcTzZ3sQIQ==", "cpu": [ "arm64" ], @@ -90,9 +90,9 @@ }, "node_modules/@openai/codex-linux-x64": { "name": "@openai/codex", - "version": "0.160.1-linux-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-x64.tgz", - "integrity": "sha512-sIDhqV+bsZKKVaVFVY5iB+pAzyOz2XRm3H1KXCsSJwGj5p98qnrT0Fweo1Hfe7WnyTp8mfBNdbVzUeO+mHYugA==", + "version": "0.162.1-linux-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-linux-x64.tgz", + "integrity": "sha512-cjK2mdHIfEepZ1lQ1MX3aTQC+8ncIsvnacl/6vI2dIIcfP8/MrhTQ2+qRlkXFNDzJSj1d36quIszP+3/4CUJWQ==", "cpu": [ "x64" ], @@ -108,9 +108,9 @@ }, "node_modules/@openai/codex-win32-arm64": { "name": "@openai/codex", - "version": "0.160.1-win32-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-arm64.tgz", - "integrity": "sha512-PCGz2kVUBKKzyKv/cqo/1WqWN8GVUyk9sk0LyWIyXftdU0t+SSsGp45c2I6iOitm88ftGB3LxFHpTMnaiIKU7w==", + "version": "0.162.1-win32-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-win32-arm64.tgz", + "integrity": "sha512-teVVACnEcupkR6XSmUQKwlGg/oA15d1DQDPVSoAfilHgctPEpTi5y11jYS6JhJO+AFnYM84gyo5SOS5vlnCQSg==", "cpu": [ "arm64" ], @@ -126,9 +126,9 @@ }, "node_modules/@openai/codex-win32-x64": { "name": "@openai/codex", - "version": "0.160.1-win32-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-x64.tgz", - "integrity": "sha512-yyqykHtHNhm0ZViofGozz9a4ffUyXDsiyRu9Q2hPNg/cu4uzSsovNr5kDmzBXPFWAilmlZuNkwpw1W7uae2nlg==", + "version": "0.162.1-win32-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-win32-x64.tgz", + "integrity": "sha512-dfl4MhHuEi0ARKyNmrTxk+RQmsWNCQAoVLUtrYq+yrW1C8P2sg5ziwgHUUACHjYLKuACV7ARH5Nq5pnCz3GlaQ==", "cpu": [ "x64" ], @@ -143,13 +143,13 @@ } }, "node_modules/@playwright/test": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.63.0.tgz", - "integrity": "sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.64.0.tgz", + "integrity": "sha512-oTN9FNYuN6bqQMwiho6jJKLCG2/QOYCixGXuCjRmzOq23eODeukuY2XiAVoVpAECbuezMt1MHQjAiQxK8F+Y+g==", "dev": true, "license": "Apache-2.0", "dependencies": { - "playwright": "1.63.0" + "playwright": "1.64.0" }, "bin": { "playwright": "cli.js" @@ -172,13 +172,13 @@ } }, "node_modules/playwright": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.63.0.tgz", - "integrity": "sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.0.tgz", + "integrity": "sha512-kVzTnYFYEyQ9RGzBjNCd2+yEqWmVbxl3AHPynv3qQ6JTjv4a+kwRcnqQwIpuP3NnrnIrE/Q6wWAIAvMfIE2/Yg==", "dev": true, "license": "Apache-2.0", "dependencies": { - "playwright-core": "1.63.0" + "playwright-core": "1.64.0" }, "bin": { "playwright": "cli.js" @@ -188,9 +188,9 @@ } }, "node_modules/playwright-core": { - "version": "1.63.0", - "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.63.0.tgz", - "integrity": "sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==", + "version": "1.64.0", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.0.tgz", + "integrity": "sha512-T9r+MZkTECl2+oUcZ26YgZzTrYidTsIhYYkJix+6iDOymOb1FB2RLLSOxRGnZGv5DStt+aduIVbt+E8WygXYpg==", "dev": true, "license": "Apache-2.0", "bin": { diff --git a/package.json b/package.json index a96256fe..7e865d3c 100644 --- a/package.json +++ b/package.json @@ -9,8 +9,8 @@ "test:p-transport-ingress-matrix": "python3 tools/qualification/p_transport_installed_ingress_matrix.py --source-root ." }, "devDependencies": { - "@openai/codex": "0.160.1", - "@playwright/test": "1.63.0", + "@openai/codex": "0.162.1", + "@playwright/test": "1.64.0", "acorn": "8.19.0" } } From 0fc6ff43fcabb68af906f64854b48a6685d6cc26 Mon Sep 17 00:00:00 2001 From: Peter van Tol Date: Thu, 15 Oct 2026 08:33:45 +0200 Subject: [PATCH 3/4] fix(deps): retain qualified Codex sandbox runtime --- package-lock.json | 56 +++++++++++++++++++++++------------------------ package.json | 2 +- 2 files changed, 29 insertions(+), 29 deletions(-) diff --git a/package-lock.json b/package-lock.json index 35801104..3efdc6ea 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,15 +8,15 @@ "name": "engineering-platform-browser-validation", "version": "2.3.120", "devDependencies": { - "@openai/codex": "0.162.1", + "@openai/codex": "0.160.1", "@playwright/test": "1.64.0", "acorn": "8.19.0" } }, "node_modules/@openai/codex": { - "version": "0.162.1", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1.tgz", - "integrity": "sha512-NWZdi/kxyjv/8EUGFupziGU38YyleugZRM4JXgY5XFH7FUmaFA33NZS2Bmq0HPazf7S3jJQQWsZ/jAK9jsrV3Q==", + "version": "0.160.1", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1.tgz", + "integrity": "sha512-f1yrJhwgimKQI1kYQlxdPJcFwkNZxZrbz7Hf89EAcnLqkQ7TiESzr2FgSZn13Ga5RuHjlVUfurzwq10wk9zw2g==", "dev": true, "license": "Apache-2.0", "bin": { @@ -26,19 +26,19 @@ "node": ">=16" }, "optionalDependencies": { - "@openai/codex-darwin-arm64": "npm:@openai/codex@0.162.1-darwin-arm64", - "@openai/codex-darwin-x64": "npm:@openai/codex@0.162.1-darwin-x64", - "@openai/codex-linux-arm64": "npm:@openai/codex@0.162.1-linux-arm64", - "@openai/codex-linux-x64": "npm:@openai/codex@0.162.1-linux-x64", - "@openai/codex-win32-arm64": "npm:@openai/codex@0.162.1-win32-arm64", - "@openai/codex-win32-x64": "npm:@openai/codex@0.162.1-win32-x64" + "@openai/codex-darwin-arm64": "npm:@openai/codex@0.160.1-darwin-arm64", + "@openai/codex-darwin-x64": "npm:@openai/codex@0.160.1-darwin-x64", + "@openai/codex-linux-arm64": "npm:@openai/codex@0.160.1-linux-arm64", + "@openai/codex-linux-x64": "npm:@openai/codex@0.160.1-linux-x64", + "@openai/codex-win32-arm64": "npm:@openai/codex@0.160.1-win32-arm64", + "@openai/codex-win32-x64": "npm:@openai/codex@0.160.1-win32-x64" } }, "node_modules/@openai/codex-darwin-arm64": { "name": "@openai/codex", - "version": "0.162.1-darwin-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-darwin-arm64.tgz", - "integrity": "sha512-YVXpg57itBuQxjofay3KDF5UbnZF4Y1ZmNFzUCz0ZQiQN+DndxOjN5V87rnXvPaC4qCPO2El74DzewoBP8JyPQ==", + "version": "0.160.1-darwin-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-arm64.tgz", + "integrity": "sha512-6Znu97O7+Ie/cnUpsWLx6NlcPc7DNuj6sAs58xpt0/tKRgx4+xgE9zca1YrwqQUBjUQO1HexudyimmhpZjdWlA==", "cpu": [ "arm64" ], @@ -54,9 +54,9 @@ }, "node_modules/@openai/codex-darwin-x64": { "name": "@openai/codex", - "version": "0.162.1-darwin-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-darwin-x64.tgz", - "integrity": "sha512-0/WHRhbUnM1wAjfyCO54Q8s4vQRxLVBbqW6XuQf7rZTEMTYPKRIQU9aPeRgjG653ZCSjtBrslWQ+G9urY9CksQ==", + "version": "0.160.1-darwin-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-darwin-x64.tgz", + "integrity": "sha512-Q33hmY6BxhoQRgCo4f/xS20yMxORnilQMNdr5w1bXSkXGYAty8/z9odcHbsNYUM6m0fNle12DHLQ5F0Dpfji3A==", "cpu": [ "x64" ], @@ -72,9 +72,9 @@ }, "node_modules/@openai/codex-linux-arm64": { "name": "@openai/codex", - "version": "0.162.1-linux-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-linux-arm64.tgz", - "integrity": "sha512-Ss7W/SrKtQFNaMtSojNoiykJgX+iDC8daM+YrcvgmJADtQPk0cd3w6Dna4CYH2CYvf9nQranj69fpcTzZ3sQIQ==", + "version": "0.160.1-linux-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-arm64.tgz", + "integrity": "sha512-JLyjBlmjPvwTaicHemw+y5xQSz3Uja2r7F/xkvS8gFufTA2g132Ak+0fo35xnJ/k2uc9fTtjm0LrsEGI78L6Ng==", "cpu": [ "arm64" ], @@ -90,9 +90,9 @@ }, "node_modules/@openai/codex-linux-x64": { "name": "@openai/codex", - "version": "0.162.1-linux-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-linux-x64.tgz", - "integrity": "sha512-cjK2mdHIfEepZ1lQ1MX3aTQC+8ncIsvnacl/6vI2dIIcfP8/MrhTQ2+qRlkXFNDzJSj1d36quIszP+3/4CUJWQ==", + "version": "0.160.1-linux-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-linux-x64.tgz", + "integrity": "sha512-sIDhqV+bsZKKVaVFVY5iB+pAzyOz2XRm3H1KXCsSJwGj5p98qnrT0Fweo1Hfe7WnyTp8mfBNdbVzUeO+mHYugA==", "cpu": [ "x64" ], @@ -108,9 +108,9 @@ }, "node_modules/@openai/codex-win32-arm64": { "name": "@openai/codex", - "version": "0.162.1-win32-arm64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-win32-arm64.tgz", - "integrity": "sha512-teVVACnEcupkR6XSmUQKwlGg/oA15d1DQDPVSoAfilHgctPEpTi5y11jYS6JhJO+AFnYM84gyo5SOS5vlnCQSg==", + "version": "0.160.1-win32-arm64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-arm64.tgz", + "integrity": "sha512-PCGz2kVUBKKzyKv/cqo/1WqWN8GVUyk9sk0LyWIyXftdU0t+SSsGp45c2I6iOitm88ftGB3LxFHpTMnaiIKU7w==", "cpu": [ "arm64" ], @@ -126,9 +126,9 @@ }, "node_modules/@openai/codex-win32-x64": { "name": "@openai/codex", - "version": "0.162.1-win32-x64", - "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.162.1-win32-x64.tgz", - "integrity": "sha512-dfl4MhHuEi0ARKyNmrTxk+RQmsWNCQAoVLUtrYq+yrW1C8P2sg5ziwgHUUACHjYLKuACV7ARH5Nq5pnCz3GlaQ==", + "version": "0.160.1-win32-x64", + "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.160.1-win32-x64.tgz", + "integrity": "sha512-yyqykHtHNhm0ZViofGozz9a4ffUyXDsiyRu9Q2hPNg/cu4uzSsovNr5kDmzBXPFWAilmlZuNkwpw1W7uae2nlg==", "cpu": [ "x64" ], diff --git a/package.json b/package.json index 7e865d3c..dc044ac2 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "test:p-transport-ingress-matrix": "python3 tools/qualification/p_transport_installed_ingress_matrix.py --source-root ." }, "devDependencies": { - "@openai/codex": "0.162.1", + "@openai/codex": "0.160.1", "@playwright/test": "1.64.0", "acorn": "8.19.0" } From 3c0ee30a5976f60ba686ed166a88dced5f1d897e Mon Sep 17 00:00:00 2001 From: Peter van Tol Date: Thu, 15 Oct 2026 09:23:40 +0200 Subject: [PATCH 4/4] test(browser): await responsive layout after viewport resize --- tests/engineering/dashboard.spec.mjs | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/tests/engineering/dashboard.spec.mjs b/tests/engineering/dashboard.spec.mjs index 2c730888..332dd792 100644 --- a/tests/engineering/dashboard.spec.mjs +++ b/tests/engineering/dashboard.spec.mjs @@ -5417,13 +5417,16 @@ test.describe("Engineering Status browser smoke", () => { } await page.setViewportSize({ width: 390, height: 844 }); - const [narrowUsage, narrowTimeline] = await Promise.all([ - cards.nth(0).boundingBox(), cards.nth(1).boundingBox(), - ]); - expect(narrowUsage).not.toBeNull(); - expect(narrowTimeline).not.toBeNull(); - expect(Math.abs(narrowTimeline.x - narrowUsage.x)).toBeLessThanOrEqual(1); - expect(narrowTimeline.y).toBeGreaterThan(narrowUsage.y); + // Viewport resizing can resolve before the responsive layout is painted. + await expect(async () => { + const [narrowUsage, narrowTimeline] = await Promise.all([ + cards.nth(0).boundingBox(), cards.nth(1).boundingBox(), + ]); + expect(narrowUsage).not.toBeNull(); + expect(narrowTimeline).not.toBeNull(); + expect(Math.abs(narrowTimeline.x - narrowUsage.x)).toBeLessThanOrEqual(1); + expect(narrowTimeline.y).toBeGreaterThan(narrowUsage.y); + }).toPass({ timeout: 5000 }); }); test("formats preflight timestamps through the selected dashboard locale", async ({ page }) => {