chore(deps): update all non-major devdependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@decimalturn/toml-patch	2.0.1 → 2.1.0			devDependencies	minor
@playwright/test (source)	1.61.1 → 1.62.1			devDependencies	minor
npm-run-all2	9.0.2 → 9.0.3			devDependencies	patch
oxlint (source)	1.74.0 → 1.78.0			devDependencies	minor
pnpm/action-setup	v6.0.9 → v6.0.10			action	patch
smol-toml	1.7.0 → 1.8.0			devDependencies	minor
tsdown (source)	0.22.13 → 0.22.14			devDependencies	patch

---

Release Notes

DecimalTurn/toml-patch (@​decimalturn/toml-patch)

v2.1.0

Compare Source

Added

• Parsing: New temporal option in ParseOptions. When true, TOML date/time values are returned as Temporal objects (Temporal.PlainDate, Temporal.PlainTime, Temporal.PlainDateTime, Temporal.ZonedDateTime) instead of custom Date subclasses.
• Stringify: Auto-detect Temporal objects in the input JS and serialize them to the correct TOML date/time type. Note that ZonedDateTime with IANA timezone annotations will throws an error (TOML only supports numerical offsets).

microsoft/playwright (@​playwright/test)

v1.62.1

Compare Source

v1.62.0

Compare Source

🧱 New component testing model

Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a

gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates
to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) /
unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an
AbortSignal, letting you
cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);

await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot()
can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');

// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and locator.screenshot() also accept webp as a type,
where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before
reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded,
fixed, or failing through a TestRun object:

class MyReporter {
  async preprocess({ config, suite, testRun }) {
    for (const test of suite.allTests()) {
      if (shouldSkip(test))
        testRun.skip(test);
    }
  }
}

🔁 Isolated retries

New testConfig.retryStrategy controls when failed tests are retried. The default
'immediate' retries as soon as a worker is free; 'isolated' runs all retries at the end,
one by one in a single worker, to minimize interference with the rest of the suite:

// playwright.config.ts
export default defineConfig({
  retries: 2,
  retryStrategy: 'isolated',
});

New APIs

Browser and Context

• New option credentials includes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.

Actions

• New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scroll-into-view.

Network

• New apiResponse.timing() returns resource timing information for an API response.

Evaluation

• New locator.waitForFunction() waits until a function — called with the matching element — returns a truthy value.
• page.evaluate() and related methods now accept functions as evaluate arguments.
• page.addInitScript() / browserContext.addInitScript() now accept functions as init-script arguments.

Command line & MCP

• Playwright now bundles the Playwright MCP server and playwright-cli, runnable via npx playwright mcp and npx playwright cli.

Reporters

• The HTML report's Merge files grouping — previously only a UI toggle — can now be enabled from the config with the new mergeFiles reporter option:

// playwright.config.ts
export default defineConfig({
  reporter: [['html', { mergeFiles: true }]],
});

Announcements

• ⚠️ Debian 11 is not supported anymore.

Browser Versions

• Chromium 151.0.7922.34
• Mozilla Firefox 153.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 151
• Microsoft Edge 151

bcomnes/npm-run-all2 (npm-run-all2)

v9.0.3

Compare Source

Merged

• Upgrade: Bump ansi-styles from 6.2.3 to 7.0.0 #244
• Upgrade: Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 #243
• Upgrade: Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 #242
• Upgrade: Bump actions/setup-node from 6 to 7 #241
• chore: update schema version in .knip.jsonc to v6 #237
• Upgrade: Bump @​types/node from 25.9.4 to 26.0.0 #239
• Upgrade: Bump actions/checkout from 6 to 7 #238

Commits

• Harden GitHub Actions workflows 7f5fca6
• Remove obsolete shell-quote types d970668

oxc-project/oxc (oxlint)

v1.78.0

Compare Source

🚀 Features

• ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#​25207) (Mikhail Baev)
• d4a897c linter/eslint: Implement one-var rule (#​24470) (Cole Ellison)
• 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#​24571) (Cole Ellison)

🐛 Bug Fixes

• 9573937 linter/typescript: Validate ban-ts-comment description_format (#​25320) (Mikhail Baev)

v1.77.0

Compare Source

🐛 Bug Fixes

• 5c0fa61 linter/eslint/no-warning-comments: Unify config structs and remove manual options docs (#​25151) (Mikhail Baev)

📚 Documentation

• 9dc7756 linter/typescript/no-unnecessary-condition: Clarify options (#​25110) (camc314)

v1.76.0

Compare Source

🚀 Features

• 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#​24598) (vigneshwar)
• 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#​24724) (Bartok)
• 016cf2a linter/oxc: Add bad-match-all-arg rule (#​24900) (camc314)
• cdc941e linter/n: Implement exports-style rule (#​24087) (Mikhail Baev)
• 1ad6f6c linter/eslint: Implement id-denylist rule (#​24632) (Mikhail Baev)

📚 Documentation

• 3ff2e0e linter: Clarify config extends types (#​24936) (Boshen)

v1.75.0

Compare Source

🚀 Features

• dd18383 linter/node: Implement no-top-level-await rule (#​24634) (Connor Shea)
• 16a65f2 linter/react: Implement function-component-definition rule (#​24471) (Cole Ellison)
• 7f1f585 linter: Reuse jest/padding-around-test-blocks for vitest/padding-around-test-blocks (#​24519) (Mikhail Baev)
• 99978a8 linter/import/consistent-type-specifier-style: Support prefer-top-level-if-only-type-imports option (#​24502) (camc314)

🐛 Bug Fixes

• 8694167 linter/eslint/prefer-destructuring: Handle typed declarations (#​24616) (camc314)

pnpm/action-setup (pnpm/action-setup)

v6.0.10

Compare Source

rolldown/tsdown (tsdown)

v0.22.14

Compare Source

   🚀 Features

• Add CLI build concurrency option  -  by @​sxzz and Jeroen Zwartepoorte (8a14c)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on the 15th day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​decimalturn/​toml-patch@​2.1.0
	tsdown@​0.22.14
	npm-run-all2@​9.0.3
	oxlint@​1.78.0
	smol-toml@​1.8.0
	@​playwright/​test@​1.62.1

View full report