[dependabot]

Bumps the npm-minor-and-patch group with 9 updates in the / directory:

Package	From	To
@codemirror/autocomplete	6.20.3	6.20.4
@codemirror/language	6.12.4	6.13.1
@codemirror/view	6.43.13	6.43.15
@dagrejs/dagre	3.1.1	3.1.3
simple-icons	16.34.0	16.36.0
svelte	5.57.1	5.57.2
vite	6.4.4	6.4.5
@playwright/test	1.63.0	1.64.1
svelte-check	4.7.6	4.7.7

Updates @codemirror/autocomplete from 6.20.3 to 6.20.4

Commits

• See full diff in compare view

Updates @codemirror/language from 6.12.4 to 6.13.1

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.13 to 6.43.15

Commits

• See full diff in compare view

Updates @dagrejs/dagre from 3.1.1 to 3.1.3

Changelog

Sourced from @​dagrejs/dagre's changelog.

v3.1.3

Fixes & Improvements

• ESM & Package Exports (PR #516): Added "type": "module" to package.json and renamed the CommonJS bundle to dist/dagre.cjs so both ESM import and CommonJS require() resolve properly. Re-exported Graph with default generic parameters for backward compatibility.
• Dynamic Layout State Isolation (PR #515): Scoped remembered dynamic layout state to the input graph rather than module-level state to prevent state leaks across layouts.
• Cluster Edge Routing (PR #523): Restored internal edge routes inside clusters with custom rankdir directions.
• Zero-Width Node Intersections (PR #524): Fixed vertical edge route intersection calculations with zero-width nodes.
• Parallel Edge Subgraph Sorting (PR #522): Fixed sortSubgraph so each parallel-edge dummy node is paired at most once when laying out three or more parallel edges.
• Flat Graph Conflict Scan Optimization (PR #520): Skipped findType2Conflicts scan when no border dummy nodes are present in flat graphs.
• Release & Tooling (PR #526, PR #527): Added a preflight release check to ensure changelog.md is updated before releasing, and added .pre-commit-config.yaml to run tests.
• Dependency Updates: Updated @dagrejs/graphlib to 4.0.6.

---

[3.1.0] - 2026

New Features

• Per-Cluster Direction Support (PR #511): Each cluster/subgraph can now specify its own rankdir, ranksep, nodesep, and align settings. The layout engine recursively applies these settings, enabling complex nested cluster hierarchies with independent flow directions. Fully backward compatible with global rankdir and legacy layouts.
• Dynamic Graph Layout Support (PR #512): Added support for dynamic graph layouts via useDynamic and corePath configuration options in LayoutConfig. Enables persistent node ordering and layout stability when modifying graph structures.

Refactoring & Fixes

• TypeScript & Type Safety Improvements: Added ClusterNodeLabel and NodeCollection types, updated NodeLabel interfaces, and eliminated any type assertions across the codebase.
• Nested Cluster Fixes: Resolved edge cases in nested cluster isolation and improved edge routing for cross-cluster edges.

---

[3.0.0] - 2026

Major Improvements: TypeScript Migration

• Full TypeScript Rewrite (PR #509): Migrated the entire core codebase from JavaScript to TypeScript for improved type safety, better IDE autocompletion, and easier maintenance.
• Native Type Definitions: Removed the need for external @types/dagre packages; high-quality types are now shipped directly with the library.
• Modern Build Pipeline: * Replaced JSHint with ESLint for stricter code quality.
  • Replaced Browserify/Karma with modern bundling and testing tools.
  • Standardized project indentation to 2 spaces (aligning .eslintrc and .editorconfig).

Refactoring & Fixes

• Dependency Cleanup: Removed deprecated dependencies including bower.json and legacy test configurations.
• Module Exports: Standardized ESM and CommonJS exports to ensure compatibility with modern bundlers like Webpack 5, Vite, and Rollup.
• Internal Logic: Refined internal graph traversal algorithms to utilize TypeScript interfaces, reducing "undefined" runtime errors.

---

[2.0.0] - Legacy Modernization

Major Changes

• Organization Transfer: Formally moved the repository to the @dagrejs GitHub organization.
• Package Renaming: Published under the @dagrejs/dagre npm scope.
• Dropped Legacy Environments: Discontinued support for extremely old Node.js versions (pre-v10) and legacy browsers that do not support ES6 features.

Fixes

... (truncated)

Commits

• a73acbf Bumping for release
• a037580 Merge pull request #527 from dagrejs/check-release-notes
• 17757d9 Adding a check on release notes to the release
• 744d6e1 Bump version and set as pre-release
• a5ea31c Building for release
• 89b75d9 Merge pull request #526 from dagrejs/pre-commit
• 09913ac chore: add .pre-commit-config.yaml to run tests
• daa9324 Merge pull request #524 from dajiaohuang/fix/zero-width-edge-intersections-20...
• 77c6330 Merge branch 'master' into fix/zero-width-edge-intersections-20261015
• a4cfd26 chore: revert dist changes and move tests to layout-test.ts
• Additional commits viewable in compare view

Updates simple-icons from 16.34.0 to 16.36.0

Release notes

Sourced from simple-icons's releases.

Release 16.36.0

1 new icon

• HAProxy (#15025) (@​arsalanyavari, @​cscnk52)

2 updated icons

• Await (#15099) (@​maundytime, @​LitoMore)
• Elixir (#15021) (@​georgeguimaraes, @​cscnk52)

Release 16.35.0

2 new icons

• Aspire (#15059) (@​maddymontaquila)
• Zensical (#15037) (@​squidfunk)

Commits

• 2f67e5d Replace README CDN theme image links
• 27a47e6 Release 16.36.0
• 90646e4 Bump version to 16.36.0
• 4672316 Update Await icon and color (#15099)
• 30053a0 Update issue template (#15098)
• 90bd1f3 Add HAProxy icon (#15025)
• c71c69e Update Elixir brand color (#15021)
• 4d29a35 Polish readme icons (#15069)
• 955f17f Release 16.35.0
• dc7b106 Bump version to 16.35.0
• Additional commits viewable in compare view

Updates svelte from 5.57.1 to 5.57.2

Release notes

Sourced from svelte's releases.

svelte@5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Changelog

Sourced from svelte's changelog.

5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Commits

• 10fdca7 Version Packages (#18858)
• c580b38 fix: prevent duplicate derived subscriptions on reconnect (#18899)
• 3f885e3 fix: don't throw state_unsafe_mutation when the focused element is removed wi...
• fe4fb46 fix: error if {:else} is followed by another {:else} or {:else if ...} ...
• 179f66b fix: don't create async deriveds for a component destroyed while waiting for ...
• 79a0c0d fix: attach event handlers that are assigned after a top-level await in pro...
• 14136f8 fix: print {#await} blocks that only have a pending branch (#18908)
• 5cbdd34 fix: recover when an unexpected node replaces a nested boundary comment (#18925)
• 7e83327 fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)
• 020242d fix: ensure hydration state restoration for custom element attribute updates ...
• Additional commits viewable in compare view

Updates vite from 6.4.4 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

• fix: check server.fs after stripping query as well (#22160) (#23855) (91e40d7), closes #22160 #23855

Commits

• 83ab40b release: v6.4.5
• 91e40d7 fix: check server.fs after stripping query as well (#22160) (#23855)
• See full diff in compare view

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates svelte-check from 4.7.6 to 4.7.7

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.7

Patch Changes

• fix: recognise modern CSS properties such as corner-shape by updating vscode-css-languageservice (#3122)

• fix: recognise the real <script> and <style> start tags when a matching token also appears inside the other tag (#3079)

• fix: resolve symlinked packages when importing their .svelte files, so their types are not duplicated (#3119)

• fix: align default tsconfig "include" logic with tsc/tsserver (#3110)

• fix: report a failed TypeScript compiler process and exit non-zero when a run fails (#3133)

• fix: ignore the .svelte-check cache directory in --watch with --tsgo / --incremental (#3128)

• fix: check all files with --tsgo / --incremental when the tsconfig has no include (#3138)

• fix: disallow --tsgo together with --tsgo-experimental-api (#3128)

• fix: type elements from Svelte's svelte-html.d.ts with --tsgo / --incremental, like the language server (#3141)

Commits

• b1ab063 Version Packages (#3107)
• 3f734db fix: config discovery under dot directories (#3121)
• 2a80d78 fix: check all files with --tsgo / --incremental when tsconfig has no include...
• 297b9e0 fix: type elements from svelte-html.d.ts with --tsgo / --incremental (#3141)
• 2394f19 fix: don't hide $props's type argument error (#3126)
• e549d19 fix(syntax): don't let comments inside \<template> swallow the file (#3137)
• af7c6a5 fix: report a failed TypeScript compiler process instead of a clean run (#3133)
• abaa1ee fix: ignore svelte-check cache directory in watch mode with --tsgo / --increm...
• 1d367d0 fix: ignore noEmitOnError and isolatedDeclarations in emitDts (#3129)
• 565abf9 Recognise modern CSS properties in svelte check (#3122)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions