Skip to content

Bump the minor-and-patch group with 10 updates - #105

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-65a2338020
Closed

Bump the minor-and-patch group with 10 updates#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-65a2338020

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 10 updates:

Package From To
@localnerve/csp-hashes 7.0.3 7.1.0
@localnerve/editable-object 0.3.23 0.3.24
@localnerve/sass-asset-functions 7.13.6 7.14.0
@playwright/test 1.61.1 1.62.0
eslint 10.7.0 10.8.0
eslint-plugin-playwright 2.10.5 2.11.0
globals 17.7.0 17.8.0
rollup 4.62.2 4.62.3
sass 1.101.3 1.102.0
tar 7.5.21 7.5.22

Updates @localnerve/csp-hashes from 7.0.3 to 7.1.0

Commits

Updates @localnerve/editable-object from 0.3.23 to 0.3.24

Commits
  • 1cabd1e Merge pull request #43 from localnerve/rc-0.3.24
  • 022cbb4 @​0.3.24 - update devdeps
  • acbc47c Merge pull request #41 from localnerve/dependabot/npm_and_yarn/minor-and-patc...
  • bc7953f Merge pull request #40 from localnerve/dependabot/github_actions/actions/setu...
  • 3653159 Merge branch 'main' into dependabot/github_actions/actions/setup-node-7.0.0
  • 07af8c9 Merge pull request #42 from localnerve/dependabot/github_actions/actions/chec...
  • b318dc4 Bump actions/checkout from 7.0.0 to 7.0.1
  • 9705e90 Bump the minor-and-patch group across 1 directory with 4 updates
  • af88d3f Bump actions/setup-node from 6.4.0 to 7.0.0
  • See full diff in compare view

Updates @localnerve/sass-asset-functions from 7.13.6 to 7.14.0

Changelog

Sourced from @​localnerve/sass-asset-functions's changelog.

7.14.0

  • sass 1.102.0

7.13.8

  • sass 1.101.7

7.13.7

  • sass 1.101.6
Commits

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table>

... (truncated)

Commits
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • 2934858 fix: correct pending navigation log spacing (#41949)
  • 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
  • bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
  • 15c4f55 fix(mcp): identify downloads explicitly (#41933)
  • f5fa967 fix(network): request.postData() returns null for empty string body override ...
  • 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
  • 244a1ff feat(firefox): roll to r1538 (#41938)
  • Additional commits viewable in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates eslint-plugin-playwright from 2.10.5 to 2.11.0

Release notes

Sourced from eslint-plugin-playwright's releases.

v2.11.0

2.11.0 (2026-07-27)

Features

  • no-unnecessary-assertions: flag always-passing assertions on a Locator (#470) (b6d3e5d), closes #463
Commits
  • b6d3e5d feat(no-unnecessary-assertions): flag always-passing assertions on a Locator ...
  • bba6d4e add explanation for prefer-locator (#478)
  • See full diff in compare view

Updates globals from 17.7.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

Updates rollup from 4.62.2 to 4.62.3

Release notes

Sourced from rollup's releases.

v4.62.3

4.62.3

2026-07-26

Bug Fixes

  • Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

Changelog

Sourced from rollup's changelog.

4.62.3

2026-07-26

Bug Fixes

  • Sanitize illegal characters preserved modules input base (#6439)

Pull Requests

Commits
  • a80a197 4.62.3
  • e87e19b Update audit resolve
  • 72f98e9 Fix build:docs after rollup update (#6460)
  • e3821cd fix: make isLegal idempotent by not using a global-flag regex (#6432)
  • db0c477 Sanitize input base before computing preserved module chunk names (#6439)
  • a65f21c chore(deps): update dependency magic-string to v1 (#6457)
  • a43aae4 docs: fix broken commonjs namedExports link in troubleshooting (#6455)
  • 41c28d7 chore(deps): lock file maintenance (#6459)
  • 894136e chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (#6446)
  • fad0ba3 fix(deps): update swc monorepo (major) (#6458)
  • Additional commits viewable in compare view

Updates sass from 1.101.3 to 1.102.0

Release notes

Sourced from sass's releases.

Dart Sass 1.102.0

To install Sass 1.102.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.7

To install Sass 1.101.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.6

To install Sass 1.101.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.5

To install Sass 1.101.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.4

To install Sass 1.101.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.102.0

  • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

  • No user-visible changes.

1.101.6

  • No user-visible changes.

1.101.5

  • No user-visible changes.

1.101.4

  • Avoid emitting rgb() or rgba() functions with non-percent decimal channels. Older browsers only support integer values or (potentially decimal) percentages for these functions, so in order to preserve backwards-compatibility while retaining full precision for modern browsers, legacy colors that contain at least one non-integer channel will now use percentages for their channels (for example, rgb(0%, 100%, 50%) rather than rgb(0, 255, 127.5)).

  • Fix a bug where the values of plain-CSS if() expressions were emitted using their meta.inspect() format rather than their CSS serialization format.

Commits

Updates tar from 7.5.21 to 7.5.22

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 10 updates
2a3c147 
Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@localnerve/csp-hashes](https://github.com/localnerve/csp-hashes) | `7.0.3` | `7.1.0` |
| [@localnerve/editable-object](https://github.com/localnerve/editable-object) | `0.3.23` | `0.3.24` |
| [@localnerve/sass-asset-functions](https://github.com/localnerve/sass-asset-functions) | `7.13.6` | `7.14.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [eslint-plugin-playwright](https://github.com/mskelton/eslint-plugin-playwright) | `2.10.5` | `2.11.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.8.0` |
| [rollup](https://github.com/rollup/rollup) | `4.62.2` | `4.62.3` |
| [sass](https://github.com/sass/dart-sass) | `1.101.3` | `1.102.0` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.21` | `7.5.22` |


Updates `@localnerve/csp-hashes` from 7.0.3 to 7.1.0
- [Release notes](https://github.com/localnerve/csp-hashes/releases)
- [Commits](localnerve/csp-hashes@v7.0.3...v7.1.0)

Updates `@localnerve/editable-object` from 0.3.23 to 0.3.24
- [Commits](localnerve/editable-object@v0.3.23...v0.3.24)

Updates `@localnerve/sass-asset-functions` from 7.13.6 to 7.14.0
- [Release notes](https://github.com/localnerve/sass-asset-functions/releases)
- [Changelog](https://github.com/localnerve/sass-asset-functions/blob/master/CHANGELOG.md)
- [Commits](localnerve/sass-asset-functions@v7.13.6...v7.14.0)

Updates `@playwright/test` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.0)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `eslint-plugin-playwright` from 2.10.5 to 2.11.0
- [Release notes](https://github.com/mskelton/eslint-plugin-playwright/releases)
- [Changelog](https://github.com/mskelton/eslint-plugin-playwright/blob/main/CHANGELOG.md)
- [Commits](mskelton/eslint-plugin-playwright@v2.10.5...v2.11.0)

Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.8.0)

Updates `rollup` from 4.62.2 to 4.62.3
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.2...v4.62.3)

Updates `sass` from 1.101.3 to 1.102.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.101.3...1.102.0)

Updates `tar` from 7.5.21 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.21...v7.5.22)

---
updated-dependencies:
- dependency-name: "@localnerve/csp-hashes"
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@localnerve/editable-object"
  dependency-version: 0.3.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@localnerve/sass-asset-functions"
  dependency-version: 7.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-playwright
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: rollup
  dependency-version: 4.62.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.102.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security

socket-security Bot commented Jul 27, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​localnerve/​editable-object@​0.3.23 ⏵ 0.3.246610096 +194100
Updated@​localnerve/​csp-hashes@​7.0.3 ⏵ 7.1.072 +1100100 +194100
Updated@​localnerve/​sass-asset-functions@​7.13.6 ⏵ 7.14.07710010096 +1100
Updatedglobals@​17.7.0 ⏵ 17.8.0100 +110086 +194 +5100
Updatedtar@​7.5.21 ⏵ 7.5.2291 -51009995100
Updatedeslint-plugin-playwright@​2.10.5 ⏵ 2.11.0100 +1100100 +193 +1100
Updatedeslint@​10.7.0 ⏵ 10.8.09710010095 -1100
Updatedrollup@​4.62.2 ⏵ 4.62.39610010098 +1100
Updatedsass@​1.101.3 ⏵ 1.102.010010010097 +3100
Updated@​playwright/​test@​1.61.1 ⏵ 1.62.010010010099100

View full report

@localnerve localnerve mentioned this pull request Jul 28, 2026
Merged
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-65a2338020 branch July 28, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants