Skip to content

chore(deps): update npm packages - #3108

Merged
fengmk2 merged 2 commits into
mainfrom
renovate/npm-packages
Oct 18, 2026
Merged

fengmk2 merged 2 commits into
mainfrom
renovate/npm-packages

Conversation

@renovate

@renovate renovate Bot commented Oct 18, 2026

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@ast-grep/napi (source) ^0.45.0 → ^0.51.0 age adoption passing confidence
@iconify/vue (source) 5.0.1 → 5.0.3 age adoption passing confidence
@nkzw/safe-word-list 3.1.0 → 3.1.2 age adoption passing confidence
es-module-lexer 3.0.3 → 3.0.4 age adoption passing confidence
fast-wrap-ansi 0.2.0 → 0.2.2 age adoption passing confidence
minimatch 10.2.4 → 10.2.6 age adoption passing confidence
pkg-types 2.3.0 → 2.3.3 age adoption passing confidence
playwright (source) 1.62.1 → 1.64.1 age adoption passing confidence
reka-ui 2.9.9 → 2.11.0 age adoption passing confidence
tailwindcss (source) 4.3.0 → 4.3.3 age adoption passing confidence
vitepress-plugin-group-icons 1.7.5 → 1.7.7 age adoption passing confidence
vitepress-plugin-llms 1.13.1 → 1.14.0 age adoption passing confidence
vue (source) 3.5.35 → 3.5.44 age adoption passing confidence
wrangler (source) 4.127.1 → 4.151.0 age adoption passing confidence
zod (source) 4.6.5 → 4.6.7 age adoption passing confidence

Release Notes

ast-grep/ast-grep (@​ast-grep/napi)

v0.51.0

Compare Source

  • fix(cli): use ast-grep name in project setup hint #3001
  • fix: replace deprecated serde_yaml with serde-saphyr #2999
  • fix(deps): update rust crate tree-sitter-haskell to 0.24.0 #2988
  • fix(cli): preserve files when update-all writes fail #2995
  • Revise security policy for clarity and updates a7d3f69
  • fix: update wasm linting ea55463

v0.50.0

Compare Source

7 October 2026

  • feat(outline): add Java annotation type and element rules #2955
  • fix(outline): report Java private/protected fields in the outline #2950
  • feat(outline): add Java enum member rule #2954
  • chore(deps): update dependency @​types/node to v24.19.1 #2983
  • chore(deps): update dependency dprint to v0.60.1 #2984
  • feat(outline): add Java module declaration rule #2956
  • chore(deps): update rust crate termimad to v0.35.5 #2925
  • chore(deps): update rust crate napi-derive to v3.6.10 #2936
  • chore(deps): update dependency @​napi-rs/cli to v3.10.6 #2922
  • chore(deps): update dependency chalk to v6.0.1 #2979
  • chore(deps): update rust crate tokio to v1.53.2 #2981
  • chore(deps): update rust crate thiserror to v2.0.21 #2966
  • chore(deps): update dependency oxlint to v1.86.0 #2967
  • chore(deps): update rust crate smallvec to v1.16.2 #2968
  • feat(outline): add Java wildcard-import outline rules #2948
  • fix(outline): capture C/C++ declarator identifier names #2946
  • feat(cli): add trust and revoke custom language policies #2972
  • refactor(cli): extract custom language policy #2977
  • feat(cli): add custom language loading policy #2971
  • fix(schema): reject null relation fields #2969
  • chore(deps): update rust crate clap_complete to v4.6.11 #2965
  • chore(deps): update rust crate clap to v4.6.7 #2964
  • chore(deps): update rust crate napi to v3.13.0 #2932
  • chore(deps): update dependency @​types/node to v24.13.6 #2941
  • feat(language): add Zig support #2942
  • fix: require opt-in for custom language libraries #2960
  • refactor: parse default run through app #2962
  • feat(outline): add Java record_declaration rule #2945
  • chore(deps): update rust crate toml_edit to v0.25.15 #2937
  • chore(deps): update rust crate smallvec to v1.16.1 #2920
  • chore(deps): update dependency @​types/node to v24.13.4 #2931
  • chore(deps): update dependency dprint to v0.57.4 #2926
  • chore(deps): update dependency oxlint to v1.82.0 #2928
  • chore(deps): update dependency oxlint to v1.81.0 #2919
  • chore(deps): update rust crate termimad to v0.35.3 #2921
  • chore(deps): update dependency dprint to v0.57.1 #2923
  • chore(deps): update dependency @​ast-grep/napi to v0.45.3 #2918
  • feat(outline): add Java record_declaration rule (#​2945) #2944
guybedford/es-module-lexer (es-module-lexer)

v3.0.4

Compare Source

What's Changed

Full Changelog: guybedford/es-module-lexer@3.0.3...3.0.4

43081j/fast-wrap-ansi (fast-wrap-ansi)

v0.2.2

Compare Source

What's Changed

Full Changelog: 43081j/fast-wrap-ansi@0.2.1...0.2.2

isaacs/minimatch (minimatch)

v10.2.6

Compare Source

v10.2.5

Compare Source

microsoft/playwright (playwright)

v1.64.1

Compare Source

Bug Fixes
  • #​43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #​43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});
  • New fps option in testOptions.video, recordVideo and
    screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
  • New style option takes CSS declarations for the point marker, the target
    highlight and the action title. It replaces the fontSize option, which is now deprecated.
  • The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
  • Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
    quality.
  • All video options are also available in Playwright MCP and playwright-cli.

🎯 Test runner

  • New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

    // playwright.config.ts
    import { defineConfig, devices } from '@playwright/test';
    
    export default defineConfig({
      projects: [
        { name: 'chromium', use: devices['Desktop Chrome'] },
        { name: 'firefox', use: devices['Desktop Firefox'], default: false },
        { name: 'webkit', use: devices['Desktop Safari'], default: false },
      ],
    });
    npx playwright test                     # runs chromium only
    npx playwright test --project=firefox   # runs firefox
    npx playwright test --project="*"       # runs all three, for example on CI
  • New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

    npx playwright test --shuffle
    # Running 42 tests using 4 workers, shuffle seed 271828182
    # ...
    
    # Pass the seed to reproduce the same order.
    npx playwright test --shuffle 271828182
  • New lock option in test.describe.configure() adds test locks to all tests in a file or a group:

    test.describe.configure({ lock: 'user-settings' });
  • New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

    // playwright.config.ts
    export default defineConfig({
      expect: {
        toHaveScreenshot: { type: 'webp' },
      },
    });

🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);

New APIs

Breaking changes ⚠️

  • screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:

    // playwright.config.ts
    export default defineConfig({
      use: {
        ...devices['Desktop Chrome'],
        screen: undefined,
      },
    });
  • JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.

  • --update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.

  • Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions

  • Chromium 156.0.8078.4
  • Mozilla Firefox 157.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 155
  • Microsoft Edge 155

v1.63.0

Compare Source

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group.
Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments,
and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API
steps, the subtitle is the locator or the navigation url — for example, Click with subtitle getByRole('button').
Both are rendered next to the step title in the trace viewer and the HTML report.

🖼️ Aria and screen snapshots in traces

The snapshots option of tracing.start() and the testOptions.trace fixture option now accept an
object selecting what to capture on every action:

// playwright.config.ts
export default defineConfig({
  use: {
    trace: {
      mode: 'on',
      snapshots: { dom: true, aria: true, screen: true }
    },
  },
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context
Locators
const response = await request.get<User>('/api/users/42');
const user = await response.json(); // typed as User
Test runner
  • New standalone testOptions.reducedMotion, testOptions.forcedColors and testOptions.contrast options.
  • New --add-reporter command line option appends a reporter on top of the ones configured in playwright.config, instead of replacing them like --reporter does.
  • New omitTags option for the list, line, dot, github and junit reporters suppresses the tags that are automatically appended to test titles.
Command line
  • npx playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
  • npx playwright codegen --http-credentials records against pages behind HTTP authentication.
Miscellaneous
  • New built-in perfetto reporter writes a Trace Event Format file for the Perfetto UI or chrome://tracing, rendering the test run as a timeline with a lane per worker.
  • The HTML report renders a duration waterfall next to test steps.

Announcements

  • ⚠️ The experimental @playwright/experimental-ct-react, @playwright/experimental-ct-react17 and @playwright/experimental-ct-vue packages will no longer be updated. Follow the migration guide to move to the stories model introduced in 1.62. Story ids passed to fixtures.mount() can now be typed through the generated Stories registry.
  • ⚠️ Ubuntu 20.04 is not supported anymore.
  • 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

Browser Versions

  • Chromium 153.0.8010.12
  • Mozilla Firefox 155.0
  • WebKit 26.6

This version was also tested against the following stable channels:

  • Google Chrome 153
  • Microsoft Edge 153
unovue/reka-ui (reka-ui)

v2.11.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v2.10.5

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v2.10.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v2.10.3

Compare Source

No significant changes

    View changes on GitHub

v2.10.2

Compare Source

   🐞 Bug Fixes
  • DateField,TimeField: Advance segment focus in DOM order in RTL  -  by @​61021 and Claude Opus 5 (1M context) in #​2813 (868cb)
  • DismissableLayer: Keep body pointer-events locked when the last scroll lock releases  -  by @​61021 and Claude Opus 5 (1M context) in #​2832 (a24ea)
  • Drawer: Track drags in non-dismissable directions so the drawer pulls elastically  -  by @​zernonia and Claude Opus 5 (1M context) in #​2854 (719d5)
  • IME: Process Android soft-keyboard composition live for filters  -  by @​benjamincanac in #​2806 (4e40e)
  • NumberField: Allow backspacing through a formatted unit suffix  -  by @​lazerg and Lazizbek Ergashev in [#​2851

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • "before 10am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​ast-grep/​napi@​0.45.3 ⏵ 0.51.0911008494100

View full report

@cloudflare-workers-and-pages

Copy link
Copy Markdown

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-npm-packages-viteplus-dev.voidzero-docs.workers.dev (commit f24cfd6)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://ac3511f7-viteplus-dev.voidzero-docs.workers.dev f24cfd6 2026-10-18T16:59:06.496Z Visit the dashboard ↗

@github-actions

Copy link
Copy Markdown
Contributor

CLI artifact sizes (f24cfd6)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact Format Base PR Change
packages/cli/dist Directory total 2.11 MiB 2.11 MiB 0 B (0.00%)
packages/core/dist Directory total 4.08 MiB 4.08 MiB 0 B (0.00%)
Combined package dist Directory total 6.19 MiB 6.19 MiB 0 B (0.00%)
vp (Linux x64) Binary 7.15 MiB 7.15 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 3.33 MiB 3.33 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 34.72 MiB 34.72 MiB 0 B (0.00%)
NAPI (Linux x64) gzip -9 13.84 MiB 13.84 MiB 0 B (0.00%)
vp (macOS ARM64) Binary 4.74 MiB 4.74 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 2.85 MiB 2.85 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 41.65 MiB 41.65 MiB 0 B (0.00%)
NAPI (macOS ARM64) gzip -9 18.01 MiB 18.01 MiB 0 B (0.00%)
vp (Windows x64) Binary 5.21 MiB 5.21 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 2.44 MiB 2.44 MiB 0 B (0.00%)
NAPI (Windows x64) Binary 30.77 MiB 30.77 MiB 0 B (0.00%)
NAPI (Windows x64) gzip -9 12.54 MiB 12.54 MiB -9 B (-0.00%)
Trampoline (Windows x64) Binary 13.50 KiB 13.50 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 7.09 KiB 7.09 KiB -1 B (-0.01%)
Installer (Windows x64) Binary 3.63 MiB 3.63 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 1.78 MiB 1.78 MiB 0 B (0.00%)

@fengmk2
fengmk2 merged commit 474a534 into main Oct 18, 2026
120 checks passed
@fengmk2
fengmk2 deleted the renovate/npm-packages branch October 18, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant