Skip to content

build(deps-dev): bump the development-dependencies group across 1 directory with 8 updates - #127

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-8918e3d1d3
Closed

build(deps-dev): bump the development-dependencies group across 1 directory with 8 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-8918e3d1d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 8 updates in the / directory:

Package From To
@playwright/test 1.61.1 1.62.1
@sveltejs/kit 2.70.1 2.70.2
eslint 10.7.0 10.8.0
globals 17.7.0 17.8.0
supabase 2.109.1 2.110.0
svelte 5.56.7 5.56.8
svelte-check 4.7.3 4.7.4
vite 8.1.5 8.2.0

Updates @playwright/test from 1.61.1 to 1.62.1

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

  • #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
  • #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
  • #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
  • #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
  • #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits
  • 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
  • 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
  • 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
  • 66c5cc9 chore: mark v1.62.1 (#42020)
  • 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
  • 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
  • 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • Additional commits viewable in compare view

Updates @sveltejs/kit from 2.70.1 to 2.70.2

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (#1)
Changelog

Sourced from @​sveltejs/kit's changelog.

2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (#1)
Commits

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates globals from 17.7.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

Updates supabase from 2.109.1 to 2.110.0

Release notes

Sourced from supabase's releases.

v2.110.0

Supabase CLI v2.110.0 — 2026-07-27

Core database commands are now on the native TypeScript shell, with fixes for Edge Function bundling, type generation, and local stack recovery. Most of this release is quality improvements and stability fixes.

Highlights

  • Recover your local stack from interruptions — supabase start can now recover a stopped database instead of requiring a clean restart. (#5953)

Improvements

  • Edge Function bundling works again — Docker-based bundling restored for Edge Functions. (#5875)
  • Type generation without config.toml — supabase gen types now works even without supabase/config.toml. (#5881)
  • Storage seeding skips OS junk files — macOS .DS_Store and similar files no longer clutter seeded buckets. (#5938)
  • Better error messages — Removed redundant "Expected" prefixes and aligned formatting with Go CLI. (#5831, #5804, #5832)
  • Functions deploy validates --jobs — Invalid job counts are caught early. (#5797)
  • Telemetry resilience — No more hangs when endpoints are blocked. (#5880)
  • API keys redacted in output — Credentials no longer appear in error messages. (#5891)

Bug fixes

  • Local migrations no longer sync to remote projects via db push. (#5951)
  • db pull works correctly with per-connection role step-down and pg-delta. (#5895)
  • Config validation runs before destructive db reset --local. (#5840)
  • secrets set tolerates malformed config.toml. (#5796)
  • config-push handles dotenvx encrypted secrets. (#5842)
  • functions download defaults to Docker. (#5793)
  • Project size enum no longer offers "nano" tier. (#5799)
  • Windows credential logout works properly. (#5913)
  • Auth templates preserved during supabase init. (#5906)
  • Malformed project refs don't hang remote calls. (#5802)
  • db lint detects local API exposure. (#5887)

TypeScript port progress

  • Now served by the TypeScript shell: db push, db reset, db start, supabase start, supabase stop, supabase status. Behavior matches the Go CLI. (#5715, #5847, #5765)
  • pg-delta catalog cache integrated in the TypeScript shell. (#5932)

Plus 20+ internal improvements, CLI behavior fixes, and dependency updates.

Full changelog: supabase/cli@v2.109.1...v2.110.0

v2.110.0-beta.41

2.110.0-beta.41 (2026-07-27)

Bug Fixes

v2.110.0-beta.40

2.110.0-beta.40 (2026-07-27)

... (truncated)

Commits

Updates svelte from 5.56.7 to 5.56.8

Release notes

Sourced from svelte's releases.

svelte@5.56.8

Patch Changes

  • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

  • fix: preserve select selection when spread attributes omit value (#18561)

Changelog

Sourced from svelte's changelog.

5.56.8

Patch Changes

  • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

  • fix: preserve select selection when spread attributes omit value (#18561)

Commits

Updates svelte-check from 4.7.3 to 4.7.4

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.4

Patch Changes

  • fix: support TypeScript 7 Stable under npm alias (#3073)
Commits

Updates vite from 8.1.5 to 8.2.0

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

  • add input to server.fs.allow (#23035) (95a3cda)
  • bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
  • bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
  • config: include column in config incompatibility location (#23064) (8a24572)
  • dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

  • bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
  • deps: update all non-major dependencies (#23069) (4c07b74)
  • hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
  • importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
  • module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
  • server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
  • support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

  • config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

8.2.0-beta.0 (2026-07-22)

Features

  • add input option (#22642) (9beae37)
  • config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
  • css: export PostCSS config type for type-safe configs (#22792) (302c755)
  • dev: label network URLs with their interface name (#22830) (78accc4)
  • optimizer: support aube lockfile (#22813) (6319827)
  • optimizer: support nub lockfile (#22891) (65d3604)
  • update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
  • wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

Performance Improvements

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the development-dependencies group across 1 dir…
b01cbce 
…ectory with 8 updates

Bumps the development-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.70.1` | `2.70.2` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.8.0` |
| [supabase](https://github.com/supabase/cli/tree/HEAD/apps/cli) | `2.109.1` | `2.110.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.7` | `5.56.8` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.7.3` | `4.7.4` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.0` |



Updates `@playwright/test` from 1.61.1 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

Updates `@sveltejs/kit` from 2.70.1 to 2.70.2
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.70.2/packages/kit)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.8.0)

Updates `supabase` from 2.109.1 to 2.110.0
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/apps/cli/docs/release-process.md)
- [Commits](https://github.com/supabase/cli/commits/v2.110.0/apps/cli)

Updates `svelte` from 5.56.7 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `svelte-check` from 4.7.3 to 4.7.4
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.7.3...svelte-check@4.7.4)

Updates `vite` from 8.1.5 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.70.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: supabase
  dependency-version: 2.110.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: svelte
  dependency-version: 5.56.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte-check
  dependency-version: 4.7.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@vercel

vercel Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
gitgud Ready Ready Preview Aug 3, 2026 6:24am

cameroncuster
cameroncuster approved these changes Aug 3, 2026
View reviewed changes

@cameroncuster cameroncuster left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR Risk Analyzer Agent🛡️

Risk Analysis 🛡️ · Low Risk

✅ Approved — Low-Risk Change

Details Dependabot dev-dependency group bump: only `package.json` (`devDependencies` version bumps) and the generated `pnpm-lock.yaml` change — no runtime `dependencies`, `scripts`, or source code touched. All bumps are patch/minor with bug-fix changelogs, and no opted-out paths (`.augment/`, `.github/`, `AGENTS.md`) are involved. CI (`build` gate + tests) covers any regression, so no human input is needed.

cameroncuster
cameroncuster reviewed Aug 3, 2026
View reviewed changes

@cameroncuster cameroncuster left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Deep Code Review Agent🐛

Review completed with 0 suggestions.

@cameroncuster

cameroncuster commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Verifier 🛰️

🛰️ Verifier Report

TL;DR: Rebuilt and served the app under the bumped dev toolchain (vite, svelte, SvelteKit, Playwright) and drove the full hermetic browser suite end-to-end against it across desktop and mobile.

🔍 Walkthrough

  • Locked lockfile installs cleanly at the new versions → pnpm install --frozen-lockfile resolved every bump with no lockfile drift.

    the exact resolved versions after install 
    @playwright/test 1.62.1 · @sveltejs/kit 2.70.2 · eslint 10.8.0
globals 17.8.0 · supabase 2.110.0 · svelte 5.56.8
svelte-check 4.7.4 · vite 8.2.0

    A stale/mismatched lockfile would have failed --frozen-lockfile here.

  • Production build succeeds under the new build toolchain → vite build compiled every route and ran adapter-vercel with vite@8.2.0 / svelte@5.56.8 / @sveltejs/kit@2.70.2.

  • Full browser suite is green against the served head → 211 passed, 7 skipped, 0 failed with the bumped @playwright/test@1.62.1, across desktop + mobile viewports.

    final suite line 
    7 skipped
211 passed (1.9m)

    Covers data/empty/backend-failure rendering, auth + admin gates, import-solves, submit (Codeforces + Kattis) two-phase flows, theme startup, and a11y/navigation.

  • The served UI renders correctly under the new toolchain — Problems page with fixture rows fetched from the mock backend during SSR:
    Problems page rendering three fixture rows under the bumped toolchain

📋 Scope

Under test: a dev-dependency-only bump (8 packages, devDependencies in package.json + pnpm-lock.yaml; no application source changed). The runtime-observable risk is the build/serve/test toolchain (vite, svelte, @sveltejs/kit, @playwright/test), so the head was rebuilt and served under the new versions and exercised end-to-end.

Not tested:

  • Runtime application behavior beyond what the suite covers — there is no app source change to exercise; the bumped packages are all dev/build/test tooling.
  • The opt-in live Supabase smoke path (SUPABASE_SMOKE=1) — off by default and read-only; not requested.
  • CI static gates (lint / format / type-check) — CI's job, not re-run here.

📦 Artifacts · e2e log · 🖼️ homepage screenshot

Don't like what you see? Add a verification skill so the next run tests this kind of change.

Want another run? Comment cosmos verify on this PR.

👍 / 👎 · View session

@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-8918e3d1d3 branch August 10, 2026 06:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cameroncuster cameroncuster cameroncuster approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cameroncuster