Skip to content

fix(deps): update all non-major dependencies - #1517

Merged
hi-ogawa merged 2 commits into
mainfrom
renovate/all-minor-patch
Oct 20, 2026
Merged

hi-ogawa merged 2 commits into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@babel/core (source) ^8.0.6 → ^8.0.7 age confidence devDependencies patch
@cloudflare/vite-plugin (source) ^1.62.5 → ^1.64.0 age confidence devDependencies minor
@playwright/test (source) ^1.63.0 → ^1.64.1 age confidence devDependencies minor
@swc/core (source) ^1.16.13 → ^1.16.18 age confidence dependencies patch
@types/busboy (source) ^1.5.4 → ^1.5.5 age confidence devDependencies patch
@types/node (source) ^24.19.1 → ^24.19.2 age confidence devDependencies patch
actions/create-github-app-token v3.2.0 → v3.3.0 age confidence action minor
actions/setup-node v7.0.0 → v7.1.0 age confidence action minor
es-module-lexer ^3.0.3 → ^3.0.4 age confidence dependencies patch
eslint-plugin-n ^18.4.1 → ^18.5.0 age confidence devDependencies minor
oxc-transform-react (source) ^0.152.0 → ^0.155.0 age confidence devDependencies minor
oxfmt (source) ^0.71.0 → ^0.74.0 age confidence devDependencies minor
oxlint (source) ^1.87.0 → ^1.89.0 age confidence devDependencies minor
oxlint-tsgolint ^7.0.2003 → ^7.0.2004 age confidence devDependencies patch
playwright-chromium (source) ^1.63.0 → ^1.64.1 age confidence devDependencies minor
pnpm (source) 10.34.6 → 10.34.7 age confidence packageManager patch
react-router (source) 8.4.0 → 8.5.0 age confidence dependencies minor
rolldown (source) ^1.2.12 → ^1.2.14 age confidence devDependencies patch
srvx ^1.0.5 → ^1.0.6 age confidence dependencies patch
styled-components (source) ^6.5.3 → ^6.6.0 age confidence dependencies minor
tsdown (source) ^0.23.0 → ^0.23.1 age confidence devDependencies patch
vite (source) ^8.3.2 → ^8.3.4 age confidence devDependencies patch
vite-plugin-inspect ^12.0.2 → ^12.1.0 age confidence devDependencies minor
vitest (source) ^5.0.3 → ^5.0.5 age confidence devDependencies patch
wrangler (source) ^4.147.0 → ^4.151.2 age confidence devDependencies minor
zizmorcore/zizmor-action v0.6.4 → v0.7.1 age confidence action minor

Release Notes

babel/babel (@​babel/core)

v8.0.7

Compare Source

🐛 Bug Fix
  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
  • babel-traverse
  • Other
  • babel-core
🏠 Internal
  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.64.0

Compare Source

Minor Changes
  • #​16245 d6b1c82 Thanks @​WalshyDev! - Generate source maps for Worker environments by default

    Worker builds now emit source maps unless Vite's build.sourcemap or the Worker's upload_source_maps is set, so deployed Workers get stack traces that point at the original source. The source maps are written next to the Worker bundle and included in Build Output; the client environment is unchanged, so no source maps are added to public assets. Set build.sourcemap: false for the Worker environment, or upload_source_maps: false in the Worker config, to opt out.

Patch Changes

v1.63.2

Compare Source

Patch Changes
  • #​16025 61e07fd Thanks @​kohjunhao! - Fix optional Docker lookups printing Docker CLI errors during successful builds

    cf build looks for Container images left behind by earlier builds so it can remove them. This lookup is best effort, but when Docker could not be reached it still printed errors such as Cannot connect to the Docker daemon, even when the build succeeded and no image needed Docker. Docker commands whose output Wrangler reads no longer forward the Docker CLI's error output to the terminal. If one of these commands fails in a way that stops the command, the error message still includes the Docker CLI's output.

  • #​16038 dc3e4df Thanks @​dario-piotrowicz! - Use consumer-specific CLI names and commands in shared user-facing messages

    Shared deployment, container, configuration, and authentication helpers can now render commands and configuration filenames for their calling CLI while preserving Wrangler-compatible defaults. This prevents cf workflows from presenting Wrangler-branded guidance when an equivalent cf command exists.

  • Updated dependencies [fcf625d, 091e5ec, 5152bf8, 9f87de8, daae435, 18f061c, 9be5ec7, 61e07fd, cafd3f9, ea64ec4, d232454]:

v1.63.1

Compare Source

Patch Changes
  • #​15617 93c1069 Thanks @​jpatel3! - Stop the update check from recommending deprecated versions

    Previously, the "update available" notice shown by wrangler and @cloudflare/vite-plugin always pointed at whichever version was tagged latest on npm, even after that version had been deprecated for shipping a bug. Deprecated versions are now never recommended: if the latest release has been deprecated, the newest non-deprecated stable release below it is suggested instead, or nothing at all if you are already on it.

    The check now reads the npm registry directly instead of going through the update-check package, which discarded the deprecation information. The on-disk cache location and one-hour refresh interval are unchanged.

  • #​16003 6947df3 Thanks @​oddharsh! - Ship using and await using declarations to the runtime as written

    Worker builds no longer lower explicit resource management into helper code, so Workers that use it ship about 1.7 KB less. workerd supports the syntax natively. On Vite 8 the plugin builds Workers at an es2026 target, so Oxc leaves the syntax alone. On Vite 6 and 7, where esbuild has no es2026 target, the Worker environments tell esbuild that using is supported instead. Client builds keep their own targets: the plugin changes only the Worker environments.

  • #​16145 e820406 Thanks @​cpojer! - Honor the source-map setting in release builds

    Omit the plugin's JavaScript and declaration source maps when building with SOURCEMAPS=false, reducing the installed package size. Normal development builds keep source maps, and application source-map settings are unchanged.

  • Updated dependencies [2d1d563, 85b14e7, e6f7663, fe607f9, ad7ff45, 8de6b3c, ae29445, 757faa6, cc8e969, 417b186, 93c1069, 6947df3, 82acf3c, 9a58244]:

v1.63.0

Compare Source

Minor Changes
  • #​16030 aa2f9b7 Thanks @​edmundhung! - Add email-protected Quick Tunnels to the Cloudflare Vite plugin

    Set tunnel.allowedMail to a list of email addresses or domain patterns to require email authentication when exposing a Vite development or preview server through a Quick Tunnel.

Patch Changes
microsoft/playwright (@​playwright/test)

v1.64.1

Compare Source

Bug Fixes
  • #​43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #​43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});
  • New fps option in testOptions.video, recordVideo and
    screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
  • New style option takes CSS declarations for the point marker, the target
    highlight and the action title. It replaces the fontSize option, which is now deprecated.
  • The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
  • Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
    quality.
  • All video options are also available in Playwright MCP and playwright-cli.

🎯 Test runner

  • New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

    // playwright.config.ts
    import { defineConfig, devices } from '@playwright/test';
    
    export default defineConfig({
      projects: [
        { name: 'chromium', use: devices['Desktop Chrome'] },
        { name: 'firefox', use: devices['Desktop Firefox'], default: false },
        { name: 'webkit', use: devices['Desktop Safari'], default: false },
      ],
    });
    npx playwright test                     # runs chromium only
    npx playwright test --project=firefox   # runs firefox
    npx playwright test --project="*"       # runs all three, for example on CI
  • New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

    npx playwright test --shuffle
    # Running 42 tests using 4 workers, shuffle seed 271828182
    # ...
    
    # Pass the seed to reproduce the same order.
    npx playwright test --shuffle 271828182
  • New lock option in test.describe.configure() adds test locks to all tests in a file or a group:

    test.describe.configure({ lock: 'user-settings' });
  • New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

    // playwright.config.ts
    export default defineConfig({
      expect: {
        toHaveScreenshot: { type: 'webp' },
      },
    });

🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);

New APIs

Breaking changes ⚠️

  • screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:

    // playwright.config.ts
    export default defineConfig({
      use: {
        ...devices['Desktop Chrome'],
        screen: undefined,
      },
    });
  • JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.

  • --update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.

  • Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions

  • Chromium 156.0.8078.4
  • Mozilla Firefox 157.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 155
  • Microsoft Edge 155
swc-project/swc (@​swc/core)

v1.16.18

Compare Source

Bug Fixes

v1.16.17

Compare Source

Bug Fixes
Features
  • (ci) Restrict pull requests to trusted contributors (#​12463) (ee297d6)

  • (es/codegen) Support configurable output indentation (#​12490) (2058335)

    • BREAKING: support configurable output indentation (#​12490)
Miscellaneous Tasks
Performance
Refactor
  • (es/parser) Isolate parser state and make grammar parameters explicit (#​12425) (5898e8a)
Ci
  • Refresh CodSpeed main baseline (c19d531)
actions/create-github-app-token

v3.3.0

Compare Source

Features
Bug Fixes
  • deps: bump nested undici from 6.24.0 to 6.29.0 (#​403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#​395) (a69c19d)
actions/setup-node

v7.1.0

Compare Source

What's Changed
Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:
New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

guybedford/es-module-lexer (es-module-lexer)

v3.0.4

Compare Source

What's Changed

Full Changelog: guybedford/es-module-lexer@3.0.3...3.0.4

eslint-community/eslint-plugin-n (eslint-plugin-n)

v18.5.0

Compare Source

🌟 Features
  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#​578) (2fa0069)
🩹 Fixes
  • no-mixed-requires: classify modern Node built-ins (#​580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#​577) (4a6dee1)
📚 Documentation
oxc-project/oxc (oxfmt)

v0.74.0: oxfmt v0.74.0

Compare Source

🐛 Bug Fixes
  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glu

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5f51a96 to 984e0a8 Compare October 19, 2026 11:04
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 984e0a8 to 655e35b Compare October 20, 2026 00:45
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@hi-ogawa
hi-ogawa merged commit b3e9835 into main Oct 20, 2026
24 checks passed
@hi-ogawa
hi-ogawa deleted the renovate/all-minor-patch branch October 20, 2026 01:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant