Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 8, 2025

Bumps the dependencies-minor group with 4 updates: @oddbird/css-anchor-positioning, @playwright/test, @types/react and @types/react-dom.

Updates @oddbird/css-anchor-positioning from 0.6.1 to 0.7.0

Release notes

Sourced from @​oddbird/css-anchor-positioning's releases.

v0.7.0

What's Changed

New Contributors

Full Changelog: oddbird/css-anchor-positioning@v0.6.1...v0.7.0

Commits
  • 40f3a89 v0.7.0
  • db16313 Work with anchor and target inside same shadow root (#353)
  • b18b8ed Merge pull request #352 from oddbird/dependabot/npm_and_yarn/dev-9d451710aa
  • ea505c5 Merge pull request #351 from oddbird/dependabot/npm_and_yarn/prod-8404f4c51f
  • d4bbb67 chore(deps-dev): Bump the dev group with 13 updates
  • ae3512f chore(deps): Bump the prod group with 2 updates
  • 2f9b4c5 Merge pull request #348 from oddbird/dependabot/npm_and_yarn/npm_and_yarn-f5c...
  • 98ccee3 chore(deps-dev): Bump vite in the npm_and_yarn group across 1 directory
  • 15ebcc0 Merge pull request #346 from oddbird/dependabot/github_actions/actions/setup-...
  • 2cc99a6 Merge pull request #347 from oddbird/dependabot/github_actions/actions/setup-...
  • Additional commits viewable in compare view

Updates @playwright/test from 1.55.1 to 1.56.0

Release notes

Sourced from @​playwright/test's releases.

v1.56.0

Playwright Agents

Introducing Playwright Agents, three custom agent definitions designed to guide LLMs through the core process of building a Playwright test:

  • 🎭 planner explores the app and produces a Markdown test plan
  • 🎭 generator transforms the Markdown plan into the Playwright Test files
  • 🎭 healer executes the test suite and automatically repairs failing tests

Run npx playwright init-agents with your client of choice to generate the latest agent definitions:

# Generate agent files for each agentic loop
# Visual Studio Code
npx playwright init-agents --loop=vscode
# Claude Code
npx playwright init-agents --loop=claude
# opencode
npx playwright init-agents --loop=opencode

[!NOTE] VS Code v1.105 (currently on the VS Code Insiders channel) is needed for the agentic experience in VS Code. It will become stable shortly, we are a bit ahead of times with this functionality!

Learn more about Playwright Agents

New APIs

UI Mode and HTML Reporter

  • Added option to 'html' reporter to disable the "Copy prompt" button
  • Added option to 'html' reporter and UI Mode to merge files, collapsing test and describe blocks into a single unified list
  • Added option to UI Mode mirroring the --update-snapshots options
  • Added option to UI Mode to run only a single worker at a time

Breaking Changes

Miscellaneous

  • Aria snapshots render and compare input placeholder
  • Added environment variable PLAYWRIGHT_TEST to Playwright worker processes to allow discriminating on testing status

Browser Versions

  • Chromium 141.0.7390.37
  • Mozilla Firefox 142.0.1
  • WebKit 26.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​playwright/test since your current version.


Updates @types/react from 19.2.0 to 19.2.2

Commits

Updates @types/react-dom from 19.2.0 to 19.2.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies-minor group with 4 updates: [@oddbird/css-anchor-positioning](https://github.com/oddbird/css-anchor-positioning), [@playwright/test](https://github.com/microsoft/playwright), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom).


Updates `@oddbird/css-anchor-positioning` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/oddbird/css-anchor-positioning/releases)
- [Changelog](https://github.com/oddbird/css-anchor-positioning/blob/main/CHANGELOG.md)
- [Commits](oddbird/css-anchor-positioning@v0.6.1...v0.7.0)

Updates `@playwright/test` from 1.55.1 to 1.56.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.55.1...v1.56.0)

Updates `@types/react` from 19.2.0 to 19.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.0 to 19.2.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@oddbird/css-anchor-positioning"
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-minor
- dependency-name: "@playwright/test"
  dependency-version: 1.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies-minor
- dependency-name: "@types/react"
  dependency-version: 19.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2025
@fossabot
Copy link

fossabot bot commented Oct 8, 2025

fossabot is Thinking

@fossabot
Copy link

fossabot bot commented Oct 8, 2025

✓ Safe to upgrade

I recommend merging this upgrade because all four packages involve minor or patch version updates with no breaking changes detected. The CSS anchor positioning polyfill upgrade from v0.6.1 to v0.7.0 maintains compatibility with the existing popover implementation, Playwright test framework upgrade to v1.56.0 introduces a deprecation for a feature not used in this codebase, and the TypeScript definition patches for React and React DOM align type safety with the existing React 19.2.0 runtime without introducing compatibility issues.

What we checked

  • CSS anchor positioning polyfill upgraded from 0.6.1 to 0.7.0 (minor version) - used for popover navigation component [1]
  • Dynamic import of CSS anchor positioning polyfill uses standard API that remains stable across minor versions [2]
  • CSS anchor positioning usage limited to basic anchor-name and anchor() functions, not affected by known bugs with pseudo-elements or position-try-order [3]
  • Playwright upgraded from 1.55.1 to 1.56.0 - deprecates backgroundpage feature which is not used in this codebase [4]
  • TypeScript React definitions upgraded from 19.2.0 to 19.2.2 (patch) - maintains alignment with React 19.2.0 runtime without API changes [5]
  • Node.js engine requirement is >=20, confirming compatibility with updated dependencies [6]

Dependency Usage

This Next.js application uses Playwright for end-to-end testing of screenshot functionality and routing, while the CSS anchor positioning polyfill enables modern popover UI components with cross-browser compatibility through dynamic loading. The TypeScript type definitions for React and React DOM provide development-time type safety across the React-based application but are not directly imported at runtime. Overall, the architecture follows a modern web development pattern with comprehensive test coverage and progressive enhancement for cutting-edge CSS features.

  • @​playwright/test: playwright.config.ts:1 - The code is configuring Playwright test settings, specifically setting the test directory to "./tests" and importing configuration utilities like defineConfig and devices from the Playwright testing framework to customize test execution parameters.
  • @​playwright/test: tests/screenshots.test.ts:1 - This code is importing the expect and test utilities from Playwright's testing framework to set up a test suite, likely for testing screenshots or routing in a Next.js application.
Other Usages (2)

These usages were analyzed but no breaking changes were detected:

@​playwright/test

Changes

The @​playwright/test update introduces a new AI agent system with three agents (planner, generator, healer) for automated test creation and maintenance, while deprecating the browserContext.on('backgroundpage') event. The update also adds new methods for retrieving console messages, page errors, and network requests, plus expanded CLI options for test selection and snapshot management.

View 21 more changes
  • @​wkillerud made their first contribution in Work with anchor and target inside same shadow root oddbird/css-anchor-positioning#353 (vv0.7.0, release notes)
  • Introduced Playwright Agents, a set of three custom agent definitions to help guide LLMs in creating Playwright tests (vv1.56.0, release notes)
  • 🎭 planner explores the app and produces a Markdown test plan (vv1.56.0, release notes)
  • 🎭 generator transforms the Markdown plan into the Playwright Test files (vv1.56.0, release notes)
  • 🎭 healer executes the test suite and automatically repairs failing tests (vv1.56.0, release notes)
  • Introduced new command npx playwright init-agents for generating the latest agent definitions (vv1.56.0, release notes)
  • Added new CLI command npx playwright init-agents with optional --loop=vscode parameter for initializing agents (vv1.56.0, release notes)
  • Added npx playwright init-agents --loop=claude command to initialize agents with Claude (vv1.56.0, release notes)
  • Added npx playwright init-agents --loop=opencode command for initializing agents with a loop option (vv1.56.0, release notes)
  • New methods page.consoleMessages() and page.pageErrors() for retrieving the most recent console messages from the page (vv1.56.0, release notes)
  • New method page.requests() for retrieving the most recent network requests from the page (vv1.56.0, release notes)
  • Added --test-list and --test-list-invert to allow manual specification of specific tests from a file (vv1.56.0, release notes)
  • Added option to 'html' reporter to disable the "Copy prompt" button (vv1.56.0, release notes)
  • Added option to 'html' reporter and UI Mode to merge files, collapsing test and describe blocks into a single unified list (vv1.56.0, release notes)
  • Added option to UI Mode mirroring the --update-snapshots options (vv1.56.0, release notes)
  • Added option to UI Mode to run only a single worker at a time (vv1.56.0, release notes)
  • Aria snapshots render and compare input placeholder (vv1.56.0, release notes)
  • Added environment variable PLAYWRIGHT_TEST to Playwright worker processes to allow discriminating on testing status (vv1.56.0, release notes)
  • Chromium 141.0.7390.37 (vv1.56.0, release notes)
  • Mozilla Firefox 142.0.1 (vv1.56.0, release notes)
  • WebKit 26.0 (vv1.56.0, release notes)
References (6)

[1]: CSS anchor positioning polyfill upgraded from 0.6.1 to 0.7.0 (minor version) - used for popover navigation component

"@oddbird/css-anchor-positioning": "0.7.0",

[2]: Dynamic import of CSS anchor positioning polyfill uses standard API that remains stable across minor versions

const { default: polyfill } = await import(

[3]: CSS anchor positioning usage limited to basic anchor-name and anchor() functions, not affected by known bugs with pseudo-elements or position-try-order

anchor-name: --navigation-popover-anchor;

[4]: Playwright upgraded from 1.55.1 to 1.56.0 - deprecates backgroundpage feature which is not used in this codebase

"@playwright/test": "1.56.0",

[5]: TypeScript React definitions upgraded from 19.2.0 to 19.2.2 (patch) - maintains alignment with React 19.2.0 runtime without API changes

"@types/react": "19.2.2",

[6]: Node.js engine requirement is >=20, confirming compatibility with updated dependencies

"node": ">=20"


fossabot analyzed this PR using static analysis and dependency research.

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​react-dom@​19.2.0 ⏵ 19.2.1100 +110075 +195 +1100
Updated@​types/​react@​19.2.0 ⏵ 19.2.2100 +110079 +196 +1100
Updated@​oddbird/​css-anchor-positioning@​0.6.1 ⏵ 0.7.098 +2100100 +193 +6100
Updated@​playwright/​test@​1.55.1 ⏵ 1.56.010010010099100

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-minor-568189b20d branch October 13, 2025 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants