Skip to content

chore(deps): update all non-major dependencies - #1866

Merged
danielroe merged 1 commit into
mainfrom
renovate/all-minor-patch
Oct 19, 2026
Merged

chore(deps): update all non-major dependencies#1866
danielroe merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@cucumber/cucumber 13.2.1 → 13.3.0 age confidence pnpm-workspace.overrides minor
@cucumber/cucumber 13.2.1 → 13.3.0 age confidence devDependencies minor
@nuxt/content (source) 3.16.1 → 3.16.2 age confidence devDependencies patch
@nuxt/devtools-kit (source) ^3.4.2 → ^3.4.3 age confidence dependencies patch 3.4.4
@nuxt/ui (source) 4.11.3 → 4.12.0 age confidence devDependencies minor
@oxc-project/types (source) 0.152.0 → 0.154.0 age confidence devDependencies minor
@playwright/test (source) 1.63.0 → 1.64.1 age confidence devDependencies minor
@types/bun (source) 1.4.2 → 1.4.3 age confidence devDependencies patch
actions/setup-node v7.0.0 → v7.1.0 age confidence action minor
eslint (source) 10.12.0 → 10.13.0 age confidence devDependencies minor
fake-indexeddb ^6.2.5 → ^6.2.6 age confidence dependencies patch
happy-dom 20.14.5 → 20.14.6 age confidence pnpm-workspace.overrides patch
happy-dom 20.14.5 → 20.14.6 age confidence devDependencies patch
jsdom 30.1.1 → 30.1.3 age confidence pnpm-workspace.overrides patch
jsdom 30.1.1 → 30.1.3 age confidence devDependencies patch
knip (source) 6.39.0 → 6.41.0 age confidence devDependencies minor 6.42.0
magic-string ^1.4.2 → ^1.4.3 age confidence dependencies patch
node (source) ^24.0.0 → ^24.22.0 age confidence devEngines.runtime minor
oxc-parser (source) 0.152.0 → 0.154.0 age confidence devDependencies minor
pkg-pr-new (source) 0.0.88 → 0.0.91 age confidence devDependencies patch
playwright-core (source) 1.63.0 → 1.64.1 age confidence devDependencies minor
pnpm (source) 12.3.4 → 12.14.0 age confidence devEngines.packageManager minor
rollup (source) 4.64.0 → 4.64.9 age confidence pnpm-workspace.overrides patch 4.64.10
rollup (source) 4.64.0 → 4.64.9 age confidence devDependencies patch 4.64.10
ts-jest (source) 29.4.14 → 29.4.15 age confidence devDependencies patch
tsdown (source) 0.23.0 → 0.23.1 age confidence devDependencies patch
vite (source) 8.3.2 → 8.3.4 age confidence pnpm-workspace.overrides patch
vite (source) 8.3.2 → 8.3.4 age confidence devDependencies patch
vue (source) ^3.5.43 → ^3.5.44 age confidence pnpm-workspace.overrides patch
vue (source) 3.5.43 → 3.5.44 age confidence devDependencies patch
vue (source) ^3.5.43 → ^3.5.44 age confidence dependencies patch
vue-router (source) 5.3.1 → 5.4.0 age confidence devDependencies minor
vue-router (source) ^5.3.1 → ^5.4.0 age confidence dependencies minor
vue-tsc (source) 3.3.12 → 3.3.13 age confidence devDependencies patch

Release Notes

cucumber/cucumber-js (@​cucumber/cucumber)

v13.3.0

Compare Source

Added
  • Support steps with both a data table and a doc string (#​2967)
Changed
  • Deprecate willBeRetried in After hook (#​2968)
nuxt/content (@​nuxt/content)

v3.16.2

Compare Source

Bug Fixes
Performance Improvements
nuxt/ui (@​nuxt/ui)

v4.12.0

Compare Source

Features
Bug Fixes
Performance Improvements
  • components: import Reka UI primitives by name instead of from reka-ui/namespaced (#​7176) (896d609)
  • components: pick link props without a reactive proxy (#​7208) (68d0467)
  • DashboardSearch/ContentSearch: lazy load modal and command palette (#​7161) (6f50933)
  • Header/DashboardSidebar/Sidebar: lazy load menu overlay (#​7160) (691899a)
  • Toaster: lazy load toast component (#​7163) (1b09a26)
  • useComponentProps: skip prop resolution for Vue internal flags (#​7186) (c029710)
microsoft/playwright (@​playwright/test)

v1.64.1

Compare Source

Bug Fixes
  • #​43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #​43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});
  • New fps option in testOptions.video, recordVideo and
    screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
  • New style option takes CSS declarations for the point marker, the target
    highlight and the action title. It replaces the fontSize option, which is now deprecated.
  • The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
  • Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
    quality.
  • All video options are also available in Playwright MCP and playwright-cli.

🎯 Test runner

  • New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

    // playwright.config.ts
import { defineConfig, devices } from '@playwright/test';

export default defineConfig({
  projects: [
    { name: 'chromium', use: devices['Desktop Chrome'] },
    { name: 'firefox', use: devices['Desktop Firefox'], default: false },
    { name: 'webkit', use: devices['Desktop Safari'], default: false },
  ],
});
    npx playwright test                     # runs chromium only
npx playwright test --project=firefox   # runs firefox
npx playwright test --project="*"       # runs all three, for example on CI

  • New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

    npx playwright test --shuffle
# Running 42 tests using 4 workers, shuffle seed 271828182
# ...

# Pass the seed to reproduce the same order.
npx playwright test --shuffle 271828182

  • New lock option in test.describe.configure() adds test locks to all tests in a file or a group:

    test.describe.configure({ lock: 'user-settings' });

  • New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

    // playwright.config.ts
export default defineConfig({
  expect: {
    toHaveScreenshot: { type: 'webp' },
  },
});

🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);

New APIs

Breaking changes ⚠️

  • screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:

    // playwright.config.ts
export default defineConfig({
  use: {
    ...devices['Desktop Chrome'],
    screen: undefined,
  },
});

  • JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.

  • --update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.

  • Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions

  • Chromium 156.0.8078.4
  • Mozilla Firefox 157.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 155
  • Microsoft Edge 155
actions/setup-node

v7.1.0

Compare Source

What's Changed
Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:
New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

eslint/eslint (eslint)

v10.13.0

Compare Source

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

dumbmatter/fakeIndexedDB (fake-indexeddb)

v6.2.6

Compare Source

capricorn86/happy-dom (happy-dom)

v20.14.6

Compare Source

👷‍♂️ Patch fixes
jsdom/jsdom (jsdom)

v30.1.3

Compare Source

  • Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
  • Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
  • Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
  • Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
  • Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
  • Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
  • Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
  • Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
  • Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
  • Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
  • Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
  • Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
  • Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
  • Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)

v30.1.2

Compare Source

  • Updated URLs to support Unicode v18.0.0 in internationalized domain names.
  • Reduced package size and memory use for CSS property definitions. (@​scttcper)
  • Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
  • Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
  • Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
  • Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
  • Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
  • Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
  • Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
  • Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
  • Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
  • Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
  • Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)
webpro-nl/knip (knip)

v6.41.0: Release 6.41.0

Compare Source

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from danielroe as a code owner October 19, 2026 02:45
@socket-security

socket-security Bot commented Oct 19, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.4.2 ⏵ 1.4.31001004893100
Updatedhappy-dom@​20.14.5 ⏵ 20.14.66610088 +195 -170 -30
Updatedpkg-pr-new@​0.0.88 ⏵ 0.0.91100 +11007096 +4100
Updatedplaywright-core@​1.63.0 ⏵ 1.64.19910079 +19980
Updatedfake-indexeddb@​6.2.5 ⏵ 6.2.610010010082 -2100
Updatedvite@​8.3.2 ⏵ 8.3.499 +110082 +196100
Updatedtsdown@​0.23.0 ⏵ 0.23.198 +110088 +196 +1100
Updatedoxc-parser@​0.152.0 ⏵ 0.154.08910010095 -1100
Updated@​nuxt/​content@​3.16.1 ⏵ 3.16.296 +110090 +197 +1100
Updatedvue@​3.5.43 ⏵ 3.5.449910091 +198 +1100
Updated@​cucumber/​cucumber@​13.2.1 ⏵ 13.3.09710010091 -2100
Updatedvue-tsc@​3.3.12 ⏵ 3.3.131001009196 +1100
Updatedts-jest@​29.4.14 ⏵ 29.4.1597 +110095 +193 +1100
Updated@​nuxt/​ui@​4.11.3 ⏵ 4.12.09710010095 -3100
Updatedknip@​6.39.0 ⏵ 6.41.09910095 +196 +2100
Updatednuxt-nightly@​5.0.0-2610170817-3bb43aa ⏵ 5.0.0-2610181131-6566d1995100100 +196100
Updatedrollup@​4.64.0 ⏵ 4.64.996 +110010099 +1100
Updatedeslint@​10.12.0 ⏵ 10.13.097 +110010097100
Updatedjsdom@​30.1.1 ⏵ 30.1.39810010098100
Updated@​playwright/​test@​1.63.0 ⏵ 1.64.110010010099100

View full report

@pkg-pr-new

pkg-pr-new Bot commented Oct 19, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/nuxt/test-utils/@nuxt/test-utils@1866

npm i https://pkg.pr.new/nuxt/test-utils/vitest-environment-nuxt@1866

commit: 37d1626

@danielroe
danielroe added this pull request to the merge queue Oct 19, 2026
Merged via the queue into main with commit da6a54b Oct 19, 2026
15 checks passed
@danielroe
danielroe deleted the renovate/all-minor-patch branch October 19, 2026 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@danielroe danielroe danielroe approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@danielroe