chore(deps-dev): bump the development_dependencies group with 5 updates by dependabot[bot] · Pull Request #10918 · axios/axios

dependabot · 2026-05-19T22:14:58Z

Bumps the development_dependencies group with 5 updates:

Package	From	To
@vitest/browser	`4.1.5`	`4.1.6`
@vitest/browser-playwright	`4.1.5`	`4.1.6`
fs-extra	`11.3.4`	`11.3.5`
playwright	`1.59.1`	`1.60.0`
vitest	`4.1.5`	`4.1.6`

Updates @vitest/browser from 4.1.5 to 4.1.6

Release notes

Sourced from @vitest/browser's releases.

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

a8fd24c chore: release v4.1.6
18af98c fix(browser): simplify orchestrator otel carrier (#10285)
3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
See full diff in compare view

Updates @vitest/browser-playwright from 4.1.5 to 4.1.6

Release notes

Sourced from @vitest/browser-playwright's releases.

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

a8fd24c chore: release v4.1.6
See full diff in compare view

Updates fs-extra from 11.3.4 to 11.3.5

Changelog

Sourced from fs-extra's changelog.

11.3.5 / 2026-05-06

Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)

Fix error handling in timestamp preservation code (#1065, #1069)

Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)

Commits

8a88f58 11.3.5
81a1311 Mirror all utimesMillis() tests for utimesMillisSync() (#1070)
b7ab7f8 Properly handle close errors in utimesMillis*() (#1069)
1c248ed Fix file descriptor leak in utimesMillisSync (#1066)
a4000d6 Ensure all usages of areIdentical receive bigint stats (#1068)
1e9c57d Fix error handling in utimesMillis (#1065)
See full diff in compare view

Updates playwright from 1.59.1 to 1.60.0

Release notes

Sourced from playwright's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:
await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.
🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:
await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});
🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').

New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:
test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});
New APIs

Browser, Context and Page

... (truncated)

Commits

87bb9dd cherry-pick(#40747): fix(yauzl): vendor yauzl with destroy-lifecycle fix
9a9c51c cherry-pick(#40733): chore(electron): revert #40184 (move Electron API to a s...
4b3b628 cherry-pick(#40736): Revert "feat(electron): add timeout option to electronAp...
f869f96 chore: bump version to v1.60.0 (#40714)
7eb6918 cherry-pick(#40710): docs: release notes v1.60
118d2aa cherry-pick(#40693): chore(python): formdata path type
54012f5 chore(deps): bump ip-address and express-rate-limit (#40680)
9fa531d fix(screencast): unblock frame ack when an async client disconnects (#40674)
3649db5 chore(mcp): bump default extension protocol to v2 (#40678)
bb6c009 chore(extension): mark 0.2.1 (#40679)
Additional commits viewable in compare view

Updates vitest from 4.1.5 to 4.1.6

Release notes

Sourced from vitest's releases.

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

a8fd24c chore: release v4.1.6
18af98c fix(browser): simplify orchestrator otel carrier (#10285)
3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bump dev tooling across the repo: update the vitest suite to 4.1.7, playwright 1.60.0, and fs-extra 11.3.5, plus linting/commit tools and pinned test fixture types. Keeps tests current with no runtime impact.

Dependencies
- vitest and @vitest/*: now 4.1.7.
- playwright 1.60.0; fs-extra 11.3.5.
- Tooling: eslint 10.4.0, @commitlint/* 21.0.1, lint-staged 17.0.5, rollup 4.60.4, globals 17.6.0, @babel/preset-env 7.29.5.
- tests/module/esm: pin @types/node 20.19.39 and typescript 5.9.3.
- Files changed: package.json, package-lock.json, tests/module/esm/package.json.
Notes
- Vitest: sequential API deprecated; prefer test(..., { concurrent: false }) and sequence.concurrent: true when needed.
- Playwright: adds HAR tracing and locator.drop(); ensure npx playwright install --with-deps runs on CI.
- Tooling requires newer Node: @commitlint/* v21 needs Node ≥22.12; lint-staged v17 needs Node ≥22.22. Ensure CI/local dev use Node 22.x.
- Docs/Testing: update /docs/ if we list tool versions; no new tests—run full CI.
- Semantic version impact: Patch (dev-only).

^{Written for commit 8e55c62. Summary will update on new commits. Review in cubic}

Bumps the development_dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.5` | `4.1.6` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.5` | `4.1.6` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.4` | `11.3.5` | | [playwright](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` | Updates `@vitest/browser` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser) Updates `@vitest/browser-playwright` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser-playwright) Updates `fs-extra` from 11.3.4 to 11.3.5 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5) Updates `playwright` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.59.1...v1.60.0) Updates `vitest` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/browser" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: fs-extra dependency-version: 11.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: playwright dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development_dependencies - dependency-name: vitest dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

cubic-dev-ai

No issues found across 1 file

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Re-trigger cubic}

socket-security · 2026-05-19T22:16:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@commitlint/cli@20.5.3 ⏵ 21.0.1	⁺¹	⁺¹
npm/@vitest/browser@4.1.5 ⏵ 4.1.7	⁺⁴	⁺¹	⁺¹
npm/vitest@4.1.7
npm/playwright@1.60.0
npm/@vitest/browser-playwright@4.1.5 ⏵ 4.1.7	⁺²		⁺¹
npm/rollup@4.60.3 ⏵ 4.60.4	⁺¹
npm/eslint@10.3.0 ⏵ 10.4.0
npm/fs-extra@11.3.5
npm/@commitlint/config-conventional@20.5.3 ⏵ 21.0.1
npm/lint-staged@17.0.5

View full report

…cies-23cfc96759

…es (#10918) * chore(deps-dev): bump the development_dependencies group with 5 updates Bumps the development_dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `4.1.5` | `4.1.6` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.5` | `4.1.6` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.4` | `11.3.5` | | [playwright](https://github.com/microsoft/playwright) | `1.59.1` | `1.60.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` | Updates `@vitest/browser` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser) Updates `@vitest/browser-playwright` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/browser-playwright) Updates `fs-extra` from 11.3.4 to 11.3.5 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5) Updates `playwright` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.59.1...v1.60.0) Updates `vitest` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/browser" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: fs-extra dependency-version: 11.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies - dependency-name: playwright dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development_dependencies - dependency-name: vitest dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development_dependencies ... Signed-off-by: dependabot[bot] <[email protected]> * chore: bump packages * chore: package lock update --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jay <[email protected]>

dependabot Bot added commit::chore The PR is related to a chore type::automated-pr The PR has been created by an automation labels May 19, 2026

dependabot Bot requested a review from jasonsaayman as a code owner May 19, 2026 22:14

dependabot Bot added commit::chore The PR is related to a chore type::automated-pr The PR has been created by an automation labels May 19, 2026

cubic-dev-ai Bot reviewed May 19, 2026

View reviewed changes

jasonsaayman added 3 commits May 20, 2026 20:04

Merge branch 'v1.x' into dependabot/npm_and_yarn/development_dependen…

13f48f5

…cies-23cfc96759

chore: bump packages

ffe0e32

chore: package lock update

8e55c62

jasonsaayman merged commit f9cad15 into v1.x May 20, 2026
28 checks passed

jasonsaayman deleted the dependabot/npm_and_yarn/development_dependencies-23cfc96759 branch May 20, 2026 18:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the development_dependencies group with 5 updates#10918

chore(deps-dev): bump the development_dependencies group with 5 updates#10918
jasonsaayman merged 4 commits into
v1.xfrom
dependabot/npm_and_yarn/development_dependencies-23cfc96759

dependabot Bot commented on behalf of github May 19, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

socket-security Bot commented May 19, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 19, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

11.3.5 / 2026-05-06

v1.60.0

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

Summary by cubic

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

socket-security Bot commented May 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 19, 2026 •

edited by cubic-dev-ai Bot

Loading

socket-security Bot commented May 19, 2026 •

edited

Loading