Skip to content

chore(deps-dev): bump the npm-development group across 1 directory with 15 updates - #910

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-2df38d48b7
Open

chore(deps-dev): bump the npm-development group across 1 directory with 15 updates#910
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-2df38d48b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-development group with 15 updates in the / directory:

Package From To
@changesets/cli 3.0.0 3.0.2
@playwright/test 1.62.1 1.63.0
@vitest/browser-playwright 4.1.11 5.0.0
@vitest/coverage-v8 4.1.11 5.0.0
@x402/hono 2.22.0 2.25.0
@x402/mcp 2.22.0 2.25.0
@x402/next 2.22.0 2.25.0
browserslist 4.28.8 4.28.9
elysia 1.4.29 1.4.30
fast-check 4.9.0 4.10.0
next 16.3.4 16.3.5
playwright 1.62.1 1.63.0
prool 0.2.14 0.2.15
rolldown 1.2.4 1.2.8
@vitejs/plugin-react 6.0.5 6.1.1

Updates @changesets/cli from 3.0.0 to 3.0.2

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.2

Patch Changes

@​changesets/cli@​3.0.1

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.2

Patch Changes

3.0.1

Patch Changes

Commits

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates @vitest/browser-playwright from 4.1.11 to 5.0.0

Release notes

Sourced from @​vitest/browser-playwright's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates @x402/hono from 2.22.0 to 2.25.0

Commits

Updates @x402/mcp from 2.22.0 to 2.25.0

Commits

Updates @x402/next from 2.22.0 to 2.25.0

Commits

Updates browserslist from 4.28.8 to 4.28.9

Release notes

Sourced from browserslist's releases.

4.28.9

Changelog

Sourced from browserslist's changelog.

4.28.9

Commits

Updates elysia from 1.4.29 to 1.4.30

Release notes

Sourced from elysia's releases.

1.4.30

What's changed

The current development effort will be focused in Elysia 2, see kiana and beta release note.

1.4.x will only publish security updates, no new features.

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39

Full Changelog: elysiajs/elysia@1.4.29...1.4.30

Changelog

Sourced from elysia's changelog.

1.4.30 - 26 Aug 2026

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39
Commits

@dependabot
chore(deps-dev): bump the npm-development group across 1 directory wi…
b3c97f7 
…th 15 updates

Bumps the npm-development group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.11` | `5.0.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `5.0.0` |
| [@x402/hono](https://github.com/x402-foundation/x402) | `2.22.0` | `2.25.0` |
| [@x402/mcp](https://github.com/x402-foundation/x402) | `2.22.0` | `2.25.0` |
| [@x402/next](https://github.com/x402-foundation/x402) | `2.22.0` | `2.25.0` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.8` | `4.28.9` |
| [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.30` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.9.0` | `4.10.0` |
| [next](https://github.com/vercel/next.js) | `16.3.4` | `16.3.5` |
| [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [prool](https://github.com/wevm/prool) | `0.2.14` | `0.2.15` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.4` | `1.2.8` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.1` |



Updates `@changesets/cli` from 3.0.0 to 3.0.2
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@vitest/browser-playwright` from 4.1.11 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/browser-playwright)

Updates `@vitest/coverage-v8` from 4.1.11 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/coverage-v8)

Updates `@x402/hono` from 2.22.0 to 2.25.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/hono@v2.22.0...npm-@x402/hono@v2.25.0)

Updates `@x402/mcp` from 2.22.0 to 2.25.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/mcp@v2.22.0...npm-@x402/mcp@v2.25.0)

Updates `@x402/next` from 2.22.0 to 2.25.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/next@v2.22.0...npm-@x402/next@v2.25.0)

Updates `browserslist` from 4.28.8 to 4.28.9
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.8...4.28.9)

Updates `elysia` from 1.4.29 to 1.4.30
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.29...1.4.30)

Updates `fast-check` from 4.9.0 to 4.10.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.10.0/packages/fast-check)

Updates `next` from 16.3.4 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.4...v16.3.5)

Updates `playwright` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `prool` from 0.2.14 to 0.2.15
- [Release notes](https://github.com/wevm/prool/releases)
- [Changelog](https://github.com/wevm/prool/blob/main/CHANGELOG.md)
- [Commits](wevm/prool@v0.2.14...v0.2.15)

Updates `rolldown` from 1.2.4 to 1.2.8
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.8/packages/rolldown)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@vitest/browser-playwright"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-development
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-development
- dependency-name: "@x402/hono"
  dependency-version: 2.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@x402/mcp"
  dependency-version: 2.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@x402/next"
  dependency-version: 2.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: browserslist
  dependency-version: 4.28.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: elysia
  dependency-version: 1.4.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: fast-check
  dependency-version: 4.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: prool
  dependency-version: 0.2.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: rolldown
  dependency-version: 1.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@socket-security

socket-security Bot commented Sep 21, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednext@​16.3.4 ⏵ 16.3.56110090 +19970
Updated@​changesets/​cli@​3.0.0 ⏵ 3.0.2991007497100
Updatedelysia@​1.4.29 ⏵ 1.4.307610086 +195 -1100
Updatedrolldown@​1.2.4 ⏵ 1.2.891 +110078 +199100
Updated@​vitest/​coverage-v8@​4.1.11 ⏵ 5.0.09910079 +199100
Updatedplaywright@​1.62.1 ⏵ 1.63.0100 +1100100 +19980
Added@​types/​node@​26.6.21001008196100
Addedtsx@​4.23.131001008193100
Updated@​vitest/​browser-playwright@​4.1.11 ⏵ 5.0.0100 +110086 +199 +1100
Updated@​x402/​mcp@​2.22.0 ⏵ 2.25.086 +2100100 +197 +1100
Updatedfast-check@​4.9.0 ⏵ 4.10.0100 +1100100 +190 -2100
Updatedbrowserslist@​4.28.8 ⏵ 4.28.998 +110091 +193100
Updated@​vitejs/​plugin-react@​6.0.5 ⏵ 6.1.1100100100 +194 +1100
Updatedprool@​0.2.14 ⏵ 0.2.1596 +9100100 +194100
Updated@​x402/​next@​2.22.0 ⏵ 2.25.095 +4100100 +197 +2100
Updated@​x402/​hono@​2.22.0 ⏵ 2.25.098 +3100100 +197 +2100
Updated@​playwright/​test@​1.62.1 ⏵ 1.63.010010010099100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants