deps(web)(deps-dev): bump the dev-minor group across 1 directory with 14 updates

[dependabot]

Bumps the dev-minor group with 10 updates in the / directory:

Package	From	To
@analogjs/vite-plugin-angular	2.5.2	2.6.4
@analogjs/vitest-angular	2.5.2	2.6.4
@axe-core/playwright	4.11.3	4.12.1
@azure/cosmos	4.9.3	4.10.0
@playwright/test	1.60.0	1.62.0
@types/node	24.12.4	24.13.3
@vitest/browser-playwright	4.1.7	4.1.10
knip	6.14.2	6.29.0
lint-staged	17.0.5	17.2.0
prettier	3.8.3	3.9.6

Updates @analogjs/vite-plugin-angular from 2.5.2 to 2.6.4

Release notes

Sourced from @​analogjs/vite-plugin-angular's releases.

v2.6.4

2.6.4 (2026-07-23)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)
• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)
• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222
• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

v2.6.4-beta.4

2.6.4-beta.4 (2026-07-23)

Bug Fixes

• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)

v2.6.4-beta.3

2.6.4-beta.3 (2026-07-22)

Bug Fixes

• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

v2.6.4-beta.2

2.6.4-beta.2 (2026-07-14)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)

v2.6.4-beta.1

2.6.4-beta.1 (2026-07-11)

Bug Fixes

• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222

v2.6.3

2.6.3 (2026-07-07)

Bug Fixes

• support and migrate to Nx 23 (#2393) (b4e9140)

... (truncated)

Changelog

Sourced from @​analogjs/vite-plugin-angular's changelog.

2.6.4 (2026-07-23)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)
• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)
• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222
• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

2.6.4-beta.4 (2026-07-23)

Bug Fixes

• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)

2.6.4-beta.3 (2026-07-22)

Bug Fixes

• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

2.6.4-beta.2 (2026-07-14)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)

2.6.4-beta.1 (2026-07-11)

Bug Fixes

• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222

2.6.3 (2026-07-07)

Bug Fixes

• support and migrate to Nx 23 (#2393) (b4e9140)
• vite-plugin-angular: be more selective with potential angular code detection (#2394) (f257d10)
• vite-plugin-angular: track inlined resources for HMR invalidation in fast compile (#2414) (db3d366)

Performance Improvements

• platform: scope route invalidation to add/unlink and enable router fesm transform cache (#2410) (120407c)
• vite-plugin-angular: dedupe emits, filter watcher invalidation, and memoize HMR metadata (#2412) (1d9e6fe)
• vite-plugin-angular: persist dependency transform output across dep-optimizer runs (#2416) (c7fe67b)
• vite-plugin-angular: reduce redundant parsing, fs work, and blocking reads in fastCompile (#2411) (f7f1fb2)

2.6.3-beta.5 (2026-07-03)

... (truncated)

Commits

• e549ddb chore: release 2.6.4 [skip ci]
• 47ef617 Merge pull request #2435 from analogjs/beta
• f1ae5ca chore: release 2.6.4-beta.4 [skip ci]
• 50126d4 fix(vite-plugin-angular): ensure compatibility with NodeNext resolution (#2434)
• 7f3553a chore: release 2.6.4-beta.3 [skip ci]
• 0960098 fix(vite-plugin-nitro): enforce path boundary in generated API middleware (#2...
• 04e32e2 chore: add agent skills for fix-issue and open-pr workflows
• f6e27a6 chore: release 2.6.4-beta.2 [skip ci]
• 2a9ab32 fix(nx-plugin): ensure @​nx/eslint is installed when applying the preset (#2424)
• 124bdcb chore: release 2.6.4-beta.1 [skip ci]
• Additional commits viewable in compare view

Updates @analogjs/vitest-angular from 2.5.2 to 2.6.4

Release notes

Sourced from @​analogjs/vitest-angular's releases.

v2.6.4

2.6.4 (2026-07-23)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)
• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)
• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222
• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

v2.6.4-beta.4

2.6.4-beta.4 (2026-07-23)

Bug Fixes

• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)

v2.6.4-beta.3

2.6.4-beta.3 (2026-07-22)

Bug Fixes

• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

v2.6.4-beta.2

2.6.4-beta.2 (2026-07-14)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)

v2.6.4-beta.1

2.6.4-beta.1 (2026-07-11)

Bug Fixes

• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222

v2.6.3

2.6.3 (2026-07-07)

Bug Fixes

• support and migrate to Nx 23 (#2393) (b4e9140)

... (truncated)

Changelog

Sourced from @​analogjs/vitest-angular's changelog.

2.6.4 (2026-07-23)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)
• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)
• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222
• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

2.6.4-beta.4 (2026-07-23)

Bug Fixes

• vite-plugin-angular: ensure compatibility with NodeNext resolution (#2434) (50126d4)

2.6.4-beta.3 (2026-07-22)

Bug Fixes

• vite-plugin-nitro: enforce path boundary in generated API middleware (#2428) (0960098)

2.6.4-beta.2 (2026-07-14)

Bug Fixes

• nx-plugin: ensure @​nx/eslint is installed when applying the preset (#2424) (2a9ab32)

2.6.4-beta.1 (2026-07-11)

Bug Fixes

• vite-plugin-angular: skip vmThreads pool default in browser mode (#2423) (9cb7dc1), closes #2222

2.6.3 (2026-07-07)

Bug Fixes

• support and migrate to Nx 23 (#2393) (b4e9140)
• vite-plugin-angular: be more selective with potential angular code detection (#2394) (f257d10)
• vite-plugin-angular: track inlined resources for HMR invalidation in fast compile (#2414) (db3d366)

Performance Improvements

• platform: scope route invalidation to add/unlink and enable router fesm transform cache (#2410) (120407c)
• vite-plugin-angular: dedupe emits, filter watcher invalidation, and memoize HMR metadata (#2412) (1d9e6fe)
• vite-plugin-angular: persist dependency transform output across dep-optimizer runs (#2416) (c7fe67b)
• vite-plugin-angular: reduce redundant parsing, fs work, and blocking reads in fastCompile (#2411) (f7f1fb2)

2.6.3-beta.5 (2026-07-03)

... (truncated)

Commits

• e549ddb chore: release 2.6.4 [skip ci]
• 47ef617 Merge pull request #2435 from analogjs/beta
• f1ae5ca chore: release 2.6.4-beta.4 [skip ci]
• 50126d4 fix(vite-plugin-angular): ensure compatibility with NodeNext resolution (#2434)
• 7f3553a chore: release 2.6.4-beta.3 [skip ci]
• 0960098 fix(vite-plugin-nitro): enforce path boundary in generated API middleware (#2...
• 04e32e2 chore: add agent skills for fix-issue and open-pr workflows
• f6e27a6 chore: release 2.6.4-beta.2 [skip ci]
• 2a9ab32 fix(nx-plugin): ensure @​nx/eslint is installed when applying the preset (#2424)
• 124bdcb chore: release 2.6.4-beta.1 [skip ci]
• Additional commits viewable in compare view

Updates @axe-core/playwright from 4.11.3 to 4.12.1

Changelog

Sourced from @​axe-core/playwright's changelog.

4.12.1 (2026-06-22)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)

Commits

• See full diff in compare view

Updates @azure/cosmos from 4.9.3 to 4.10.0

Changelog

Sourced from @​azure/cosmos's changelog.

4.10.0 (2026-07-21)

Features Added

• Added a semantic reranking API. Use Container.semanticRerank(rerankContext, documents, options) to score and reorder documents by relevance via the Cosmos DB Inference Service. Configure it through enablePreviewFeatures.semanticRerank on CosmosClientOptions: inferenceEndpoint (required) and an optional inferenceRequestTimeout (ms, default 5000) single-attempt timeout that fails with HTTP 408 when exceeded. Requires AAD authentication. The result and any thrown error include CosmosDiagnostics for the operation.
• Added enablePreviewFeatures to CosmosClientOptions, a dictionary for opting into preview features of the SDK.

Bugs Fixed

• #38087 Made boundingBox optional on the SpatialIndex type. Bounding boxes are only required for geometry spatial indexes, not geography ones.
• Fixed cross-partition queries making a redundant /pkranges metadata call on every query. Queries now reuse the shared partition key range cache (worst for hybrid queries, which previously fetched ranges per component query). The cache is also made failure-safe so a transient fetch error no longer poisons later lookups.
• #39115 Fixed continuation token handling for enableQueryControl queries. Resuming now routes through the query plan instead of forwarding the SDK-internal composite token to the gateway, avoiding an extra failing call and the MalformedContinuationToken error.

Commits

• 022e01c Adlnu/fix signoff pipeline (#38985)
• a55c383 [Cosmos] Bump @​azure/cosmos version to 4.10.0 (#39305)
• 04d12eb feat(cosmos): add semantic rerank API (#37981)
• 73754d0 [cosmos] Route enableQueryControl continuation resume through the query plan ...
• 0b2529b [@​azure/cosmos] Reuse shared partition key range cache for cross-partition qu...
• 55e1705 feat(cosmos): add enablePreviewFeatures to CosmosClientOptions (#39040)
• 1d09a0f [EngSys] upgrade dev dependency prettier to v3.9.1 (#39127)
• 0616d26 Re-export RestError and isRestError in non-management packages (#39007)
• 3181ad2 [EngSys] Bump min-version to node 22 (#38887) NO_CI
• 56d7d95 fix(cosmos): make boundingBox optional on SpatialIndex type (#38230)
• Additional commits viewable in compare view

Updates @playwright/test from 1.60.0 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)
• 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
• bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
• 15c4f55 fix(mcp): identify downloads explicitly (#41933)
• f5fa967 fix(network): request.postData() returns null for empty string body override ...
• 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
• 244a1ff feat(firefox): roll to r1538 (#41938)
• Additional commits viewable in compare view

Updates @types/node from 24.12.4 to 24.13.3

Commits

• See full diff in compare view

Updates @vitest/browser-playwright from 4.1.7 to 4.1.10

Release notes

Sourced from @​vitest/browser-playwright's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• 5c18dd2 fix(browser): check fs access in builtin commands [backport to v4] (#10680)
• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• 675b434 fix(browser): remove orphaned Playwright route when same module is mocked via...
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.7 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates axe-core from 4.11.4 to 4.12.1

Release notes

Sourced from axe-core's releases.

Release 4.12.1

Bug FixesThis release does not impact axe results.

• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

Release 4.12.0

In this release you'll find:

1. A new aria-tab-name rule that tests role="tab" elements have an accessible name
2. The landmark-complementary-is-top-level rule is deprecated, as ARIA no longer requires this
3. Preparations for Element Internal support (behind a feature flag)
4. Various other bug fixes for target-size, scrollable-region-focusable, and more

This release can see reveal new issues, as well as close out a few existing ones that might have come from false positives or the now deprecated rule.

Features

• add gather-internals.js external script (#5099) (c61d58b), closes #5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
• axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
• core: expose normalizeRunOptions (#4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
• getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
• list,listitem: support element internals role (#5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
• rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
• utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
• aria-conditional-attr: add support for radio (#5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#4987) (48ca955), closes #4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (ea7202c), closes #4704
• DqElement: avoid calling constructors with cloneNode (#5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#5096) (3a012a1)
• locale: ensure all subtags are correctly set (#5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#5066) (1229a6e), closes #5065
• target-size: ignore widgets that are inline with other inline elements (#5000) (a8dd81b)
• utils/getAncestry: escape node name (#5079) (d1fabaa), closes #5078
• utils: Add null check to parseCrossOriginStylesheet, closes #5074 (#5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#5059) (edc6ce2), closes #5030

Changelog

Sourced from axe-core's changelog.

4.12.1 (2026-06-09)

Bug Fixes

• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

4.12.0 (2026-06-01)

Features

• add gather-internals.js external script (#5099) (c61d58b), closes #5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
• axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
• core: expose normalizeRunOptions (#4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
• getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
• list,listitem: support element internals role (#5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
• rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
• utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
• aria-conditional-attr: add support for radio (#5100) (8223c98)
• aria-valid...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: web. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.