Skip to content

build(deps): bump the all-npm-dependencies group with 14 updates - #2163

Merged
kunish merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-74d08b4520
Aug 1, 2026
Merged

build(deps): bump the all-npm-dependencies group with 14 updates#2163
kunish merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-74d08b4520

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-npm-dependencies group with 14 updates:

Package From To
@antfu/eslint-config 9.1.0 9.2.0
@playwright/test 1.61.1 1.62.0
@tabler/icons-vue 3.45.0 3.46.0
@tanstack/vue-virtual 3.13.33 3.13.35
@types/node 24.13.2 26.1.2
daisyui 5.7.0 5.7.4
eslint 10.7.0 10.8.0
jsdom 29.1.1 30.0.0
lint-staged 17.1.0 17.2.0
meta-json-schema 1.19.28 1.19.29
nuxt 4.5.0 4.5.1
playwright 1.61.1 1.62.0
typescript 6.0.3 7.0.2
vue-tsc 3.3.7 3.3.8

Updates @antfu/eslint-config from 9.1.0 to 9.2.0

Release notes

Sourced from @​antfu/eslint-config's releases.

v9.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 386531f chore: release v9.2.0
  • 09680e4 fix: add scripts-info in package.json sorting
  • 9ff1e11 feat: update plugins
  • 8517e57 docs: add format_on_save to suggested Zed settings (#857)
  • 5ada54f fix(deps): accept eslint-plugin-astro v2 to resolve unmet peer warning (#855)
  • See full diff in compare view

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • 2934858 fix: correct pending navigation log spacing (#41949)
  • 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
  • bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
  • 15c4f55 fix(mcp): identify downloads explicitly (#41933)
  • f5fa967 fix(network): request.postData() returns null for empty string body override ...
  • 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
  • 244a1ff feat(firefox): roll to r1538 (#41938)
  • Additional commits viewable in compare view

Updates @tabler/icons-vue from 3.45.0 to 3.46.0

Release notes

Sourced from @​tabler/icons-vue's releases.

Release 3.46.0

18 new icons:

  • outline/play-bug
  • outline/play-bugs
  • outline/remote-control
  • outline/rocking-chair
  • outline/run-sprint
  • outline/sparkles-2-off
  • outline/tabs
  • outline/tags-chevron-down
  • outline/tags-chevron-left
  • outline/tags-chevron-right
  • outline/tags-chevron-up
  • outline/thinking-high
  • outline/thinking-low
  • outline/thinking-medium
  • outline/treasure-chest
  • outline/twig
  • outline/vault
  • outline/yarn

Fixed icons: outline/credits, outline/currency-tether, outline/device-3d-camera, outline/device-screen, outline/home-lock, outline/map-lock, outline/notdef, outline/queue-pop-in, outline/server-bolt, outline/server, outline/sparkles-2, outline/transform-point-bottom-left, outline/transform-point-bottom-right, outline/transform-point-top-left, outline/transform-point-top-right

Commits

Updates @tanstack/vue-virtual from 3.13.33 to 3.13.35

Release notes

Sourced from @​tanstack/vue-virtual's releases.

@​tanstack/vue-virtual@​3.13.35

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

@​tanstack/vue-virtual@​3.13.34

Patch Changes

  • Updated dependencies [7ae32b5]:
    • @​tanstack/virtual-core@​3.17.6
Changelog

Sourced from @​tanstack/vue-virtual's changelog.

3.13.35

Patch Changes

  • Updated dependencies [a5417b4]:
    • @​tanstack/virtual-core@​3.17.7

3.13.34

Patch Changes

  • Updated dependencies [7ae32b5]:
    • @​tanstack/virtual-core@​3.17.6
Commits

Updates @types/node from 24.13.2 to 26.1.2

Commits

Updates daisyui from 5.7.0 to 5.7.4

Release notes

Sourced from daisyui's releases.

v5.7.4

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.4

💚 Thank you for using daisyUI!

v5.7.3

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.3

💚 Thank you for using daisyUI!

v5.7.2

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.2

💚 Thank you for using daisyUI!

v5.7.1

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.1

💚 Thank you for using daisyUI!

Changelog

Sourced from daisyui's changelog.

5.7.4 (2026-07-25)

Bug Fixes

  • prevent avatar stretch in flex (2d52299)
  • prevent kbd shrink (59fee43)
  • prevent radial-progress shrink in a flex. (9efb4ed)

5.7.3 (2026-07-25)

Bug Fixes

5.7.2 (2026-07-25)

Bug Fixes

  • select, input, textarea, rating size modifiers in the CDN file. closes: #4631 (f8443be)

5.7.1 (2026-07-25)

Bug Fixes

Commits
  • 9944021 chore(release): 5.7.4
  • 59fee43 fix: prevent kbd shrink
  • 2d52299 fix: prevent avatar stretch in flex
  • 9efb4ed fix: prevent radial-progress shrink in a flex.
  • d10176e chore(release): 5.7.3
  • 1e81bdd Fix: nested modal-box style leak. closes: #4637
  • 03dc4f3 chore(release): 5.7.2
  • f8443be fix: select, input, textarea, rating size modifiers in the CDN file. closes: ...
  • a1efe04 chore(release): 5.7.1
  • 6d64755 fix: calendar day hover style (Cally) closes: #4630
  • See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates jsdom from 29.1.1 to 30.0.0

Release notes

Sourced from jsdom's releases.

v30.0.0

Breaking changes:

  • Node.js minimum version raised to ^22.22.2 || ^24.15.0 || >=26.0.0.

Other changes:

  • Added CSS.escape() and CSS.supports() functions. (@​asamuzaK)
  • Added 'background-position-x' and 'background-position-y' CSS properties. (@​olagokemills)
  • Fixed getComputedStyle() to convert length values into pixels. (@​asamuzaK)
  • Fixed CSS function serialization, e.g., in the return value of getPropertyValue(). (@​asamuzaK)
  • Fixed the type of error thrown by document.evaluate() (@​dokson)
Commits
  • 20a01fc 30.0.0
  • 8c8e583 Precompute WPT expectation matches
  • f32245c Bump Node.js floor and dependencies
  • 03ef23b Add background-position longhands
  • ded056f Test CSS.escape() with numeric IDs
  • d312832 Convert CSS values to pixels for computed styles
  • 4e0ee41 Implement CSS.escape() and CSS.supports()
  • 05eb709 Fix benchmark:compare script on Windows
  • 97c1b90 Fix CSS function value serialization
  • 15642ba Add benchmark comparison script
  • Additional commits viewable in compare view

Updates lint-staged from 17.1.0 to 17.2.0

Release notes

Sourced from lint-staged's releases.

v17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
    export default {
      "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
    };

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

    Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

    /** @type {import('lint-staged').Configuration} */
    export default {
      "*.js": {
        title: "Log staged JS files to console",
        task: async (files) => {
          console.log("Staged JS files:", files);
        },
      },
    };

v17.1.1

Patch Changes

  • #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.
Changelog

Sourced from lint-staged's changelog.

17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
    export default {
      "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
    };

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

    Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

    /** @type {import('lint-staged').Configuration} */
    export default {
      "*.js": {
        title: "Log staged JS files to console",
        task: async (files) => {
          console.log("Staged JS files:", files);
        },
      },
    };

17.1.1

Patch Changes

  • #1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.
Commits
  • fb540fb Merge pull request #1824 from lint-staged/changeset-release/main
  • dc0a738 chore(changeset): release
  • 60cbb88 Merge pull request #1823 from lint-staged/reimplement-chunk-files
  • 2354dc4 build(deps): update dependencies
  • 0516e7f docs: adjust debug logs
  • e22f6ed style: run oxfmt on README.md
  • 37e8e1a fix: restore chunking of git add command after running tasks
  • 2c75f1d chore: remove unused file
  • ee156cc feat: add improved lazy-chunking of command strings
  • baa7c98 feat: remove current chunkFiles implementation
  • Additional commits viewable in compare view

Updates meta-json-schema from 1.19.28 to 1.19.29

Release notes

Sourced from meta-json-schema's releases.

v1.19.29

Changes

  • 新增: proxy-provider override 新增配置项 override-expr,支持按顺序执行表达式数组
  • 新增: sudoku 出站新增顶层 multiplex 配置项,统一控制会话多路复用
  • 新增: openvpn 出站新增配置项 tls-authkey-directiondata-ciphersdata-ciphers-fallbacktls-crypt-v2,支持数据加密协商和 tls-crypt-v2 客户端密钥
  • 新增: TLS 出站和 Hysteria2 realm 新增配置项 name-cert-verify,支持指定证书 DNSName 校验目标
  • 新增: proxy 和 listener 新增 shadowquic 协议,包含 JLS 认证、QUIC 传输配置和 brutal 异步可选协商相关配置项
  • 新增: shadowsocks 出站插件和 listener,以及 vmess、vless、trojan、anytls、snell 出站和 listener 新增 JLS 相关配置项
  • 新增: vmess、vless、trojan、anytls 出站和 listener 新增 ShadowTLS 相关配置项
  • 新增: vmess、vless、trojan、anytls、snell 出站和 listener 新增 Restls 相关配置项
  • 新增: vless xhttp download-settings 新增配置项 shadow-tls-optsrestls-optsjls-opts,支持独立覆写下载连接的安全模式
  • 新增: anytls 出站新增配置项 disable-reuse,支持禁用会话复用
  • 调整: anytls listener 允许使用 JLS 或 allow-insecure 替代证书,并禁止 JLS 与证书配置同时使用
  • 调整: shadowsocks listener 启用的 ShadowTLS、Restls 和 JLS 安全模式互斥
  • 调整: rematch 出站要求填写 target-rematch-nametarget-sub-rule

Bug Fixes

  • 修复: vless 出站 xhttp-opts.session-table 支持预定义值或自定义 ASCII 字符表
  • 修复: vless listener 移除误收录的 session-tablesession-length
  • 修复: vmess 出站 tlsmirror-opts 和 listener tlsmirror-config 分别匹配各自的输入结构
  • 修复: shadowsocks listener 的 ShadowTLS、RESTLS 和 snell listener 的 ShadowTLS 配置匹配实际输入结构
  • 修复: mKCP header 使用明确值 none 表示无伪装包头
  • 修复: 明确 routing-mark 仅适用于 redir、tproxy、tun 之外的 listener
  • 修复: 明确 openvpn、masque 出站 handshake-timeout: 0 不设置额外握手超时
Changelog

Sourced from meta-json-schema's changelog.

v1.19.29

Changes

  • 新增: proxy-provider override 新增配置项 override-expr,支持按顺序执行表达式数组
  • 新增: sudoku 出站新增顶层 multiplex 配置项,统一控制会话多路复用
  • 新增: openvpn 出站新增配置项 tls-authkey-directiondata-ciphersdata-ciphers-fallbacktls-crypt-v2,支持数据加密协商和 tls-crypt-v2 客户端密钥
  • 新增: TLS 出站和 Hysteria2 realm 新增配置项 name-cert-verify,支持指定证书 DNSName 校验目标
  • 新增: proxy 和 listener 新增 shadowquic 协议,包含 JLS 认证、QUIC 传输配置和 brutal 异步可选协商相关配置项
  • 新增: shadowsocks 出站插件和 listener,以及 vmess、vless、trojan、anytls、snell 出站和 listener 新增 JLS 相关配置项
  • 新增: vmess、vless、trojan、anytls 出站和 listener 新增 ShadowTLS 相关配置项
  • 新增: vmess、vless、trojan、anytls、snell 出站和 listener 新增 Restls 相关配置项
  • 新增: vless xhttp download-settings 新增配置项 shadow-tls-optsrestls-optsjls-opts,支持独立覆写下载连接的安全模式
  • 新增: anytls 出站新增配置项 disable-reuse,支持禁用会话复用
  • 调整: anytls listener 允许使用 JLS 或 allow-insecure 替代证书,并禁止 JLS 与证书配置同时使用
  • 调整: shadowsocks listener 启用的 ShadowTLS、Restls 和 JLS 安全模式互斥
  • 调整: rematch 出站要求填写 target-rematch-nametarget-sub-rule

Bug Fixes

  • 修复: vless 出站 xhttp-opts.session-table 支持预定义值或自定义 ASCII 字符表
  • 修复: vless listener 移除误收录的 session-tablesession-length
  • 修复: vmess 出站 tlsmirror-opts 和 listener tlsmirror-config 分别匹配各自的输入结构
  • 修复: shadowsocks listener 的 ShadowTLS、RESTLS 和 snell listener 的 ShadowTLS 配置匹配实际输入结构
  • 修复: mKCP header 使用明确值 none 表示无伪装包头
  • 修复: 明确 routing-mark 仅适用于 redir、tproxy、tun 之外的 listener
  • 修复: 明确 openvpn、masque 出站 handshake-timeout: 0 不设置额外握手超时

Commits
  • ac61d5c chore: update desc
  • 84a0157 chore: enforce strict handling of default sentinels
  • 5bb6c84 ci: release v1.19.29
  • ab74681 chore: remove dangling definitions
  • a28a230 chore: bump deps
  • 45ddd29 feat: support openvpn cipher negotiation and tls-crypt-v2
  • 4f9c587 feat: support disabling anytls session reuse
  • cc153d4 docs: clarify shadowquic brutal negotiation
  • c712bd2 feat: support restls and jls for snell
  • 36f96e9 fix: reject conflicting shadowsocks security modes
  • Additional commits viewable in compare view

Updates nuxt from 4.5.0 to 4.5.1

Release notes

Sourced from nuxt's releases.

v4.5.1

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

  • nitro: Replace island teleports in a single html pass (#35515)
  • nuxt: Add vue.optionsApi and disable it for v5+ (#35791)
  • nuxt: Without pages, skip client plugins that require routing (#35794)
  • nuxt: Skip payload revival plugin when ssr: false (#35782)

🩹 Fixes

  • nitro: Read rspack dev output fs lazily for server entry (#35740)
  • rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#35568)
  • nuxt: Return global route for useRoute in detached effect scope (#35659)
  • nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#35661)
  • nuxt: Render client components in nested server components (#35669)
  • nuxt: Preserve explicit useFetch method inference (#35671)
  • nuxt: Revalidate cached route payloads instead of using force-cache (#35672)
  • nuxt: Correct default export detection in plugin metadata (#35676)
  • nuxt: Clear hide/reset timeouts in set() (#35534)
  • kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#33845)
  • nuxt: Preserve trailing slash in NuxtLink href when unset (#35501)
  • nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#35656)
  • nuxt: Filter plugin dependencies by build target (#35682)
  • nuxt: Reload real page module on HMR of JSX render-function pages (#35678)
  • nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#35690)
  • kit: Surface module load errors instead of masking as missing (#35497)
  • nuxt: Type auto-imported $fetch with nitro's $Fetch (#35704)
  • nuxt: Don't reference app config sources in shared and node tsconfigs (#35673)
  • vite: Resolve SSR inlined CSS module class name mismatch (#35610)
  • nuxt: Generate layout types even when pages module is disabled (#35717)
  • nitro: Skip resource hints for stylesheets already rendered as blocking links (#35691)
  • kit: Dedupe layers that are both auto-scanned and explicitly extended (#35712)
  • nuxt: Don't apply scroll behaviour after a subsequent nav (#35719)
  • vite: Ensure server sourcemap-preserver plugin actually runs (#35680)
  • vite: Preserve css suffix when extracting ssr inline styles (#35714)
  • nuxt: Watch external component directories in development (#35652)
  • nuxt: Don't exclude client entry module from style extraction (#35720)
  • nuxt: Amend cleanup command in NUXT_B7014 error message (#35735)
  • nuxt: Only pull in vue-router when there are island pages (#35739)
  • vite: Suppress external warnings for internal vite-node paths (#35744)

... (truncated)

Commits
  • 452dd50 v4.5.1
  • 581651f fix(nuxt): reject top-level as prop for islands
  • ee6c846 fix(nuxt): reject reserved template island prop under runtime compiler
  • ad624a7 fix(nuxt): case-fold route rule keys to match folded lookups
  • 4e35ae9 fix(nitro): bound island props and v-for to prevent unauthenticated DoS
  • 352135f fix(nuxt): remove dev error overlay when error is cleared (#35821)
  • b1a8e93 fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (#35834)
  • df55902 fix(nuxt): convert inline route rules exactly or drop with a warning (#35455)
  • 083b750 fix(nuxt): warn when an imports preset from cannot be resolved (#35799)
  • 61eb637 perf(nuxt): skip payload revival plugin when ssr: false (#35782)
  • Additional commits viewable in compare view

Updates playwright from 1.61.1 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

Bumps the all-npm-dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@antfu/eslint-config](https://github.com/antfu/eslint-config) | `9.1.0` | `9.2.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` |
| [@tabler/icons-vue](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-vue) | `3.45.0` | `3.46.0` |
| [@tanstack/vue-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/vue-virtual) | `3.13.33` | `3.13.35` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.2` | `26.1.2` |
| [daisyui](https://github.com/saadeghi/daisyui/tree/HEAD/packages/daisyui) | `5.7.0` | `5.7.4` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.1.1` | `30.0.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.1.0` | `17.2.0` |
| [meta-json-schema](https://github.com/dongchengjie/meta-json-schema) | `1.19.28` | `1.19.29` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.5.0` | `4.5.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.7` | `3.3.8` |


Updates `@antfu/eslint-config` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/antfu/eslint-config/releases)
- [Commits](antfu/eslint-config@v9.1.0...v9.2.0)

Updates `@playwright/test` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.0)

Updates `@tabler/icons-vue` from 3.45.0 to 3.46.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Commits](https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-vue)

Updates `@tanstack/vue-virtual` from 3.13.33 to 3.13.35
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/vue-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/vue-virtual@3.13.35/packages/vue-virtual)

Updates `@types/node` from 24.13.2 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `daisyui` from 5.7.0 to 5.7.4
- [Release notes](https://github.com/saadeghi/daisyui/releases)
- [Changelog](https://github.com/saadeghi/daisyui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/saadeghi/daisyui/commits/v5.7.4/packages/daisyui)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `jsdom` from 29.1.1 to 30.0.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.1.1...v30.0.0)

Updates `lint-staged` from 17.1.0 to 17.2.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.1.0...v17.2.0)

Updates `meta-json-schema` from 1.19.28 to 1.19.29
- [Release notes](https://github.com/dongchengjie/meta-json-schema/releases)
- [Changelog](https://github.com/dongchengjie/meta-json-schema/blob/main/CHANGELOG.md)
- [Commits](dongchengjie/meta-json-schema@v1.19.28...v1.19.29)

Updates `nuxt` from 4.5.0 to 4.5.1
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt)

Updates `playwright` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vue-tsc` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.8/packages/tsc)

---
updated-dependencies:
- dependency-name: "@antfu/eslint-config"
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@tabler/icons-vue"
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@tanstack/vue-virtual"
  dependency-version: 3.13.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: daisyui
  dependency-version: 5.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: jsdom
  dependency-version: 30.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: lint-staged
  dependency-version: 17.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: meta-json-schema
  dependency-version: 1.19.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 28, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 28, 2026

Copy link
Copy Markdown

Deploying metacubexd with  Cloudflare Pages  Cloudflare Pages

Latest commit: f42d0a3
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 28, 2026
@kunish
kunish merged commit 7b9bc68 into main Aug 1, 2026
3 of 4 checks passed
@kunish
kunish deleted the dependabot/npm_and_yarn/all-npm-dependencies-74d08b4520 branch August 1, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant