[dependabot]

Bumps the all-dependencies group with 17 updates in the / directory:

Package	From	To
@draggable/formeo-languages	3.10.2	3.11.0
@biomejs/biome	2.4.16	2.5.15
@commitlint/cli	21.0.2	21.2.3
@commitlint/config-conventional	21.0.2	21.2.3
@playwright/test	1.60.0	1.64.1
@semantic-release/changelog	6.0.3	7.0.0
@semantic-release/git	10.0.1	11.0.1
@semantic-release/github	12.0.8	12.0.10
@semantic-release/npm	13.1.5	13.2.0
@types/node	25.9.2	26.6.5
ace-builds	1.44.0	1.45.0
esbuild	0.28.1	0.28.2
jsdom	29.1.1	30.1.3
lefthook	2.1.9	2.2.2
sass-embedded	1.100.0	1.105.2
vite	8.0.16	8.3.4
zod	4.4.3	4.6.7

Updates @draggable/formeo-languages from 3.10.2 to 3.11.0

Release notes

Sourced from @​draggable/formeo-languages's releases.

v3.11.0

3.11.0 (2026-10-06)

Features

• table repeating rows and input group keys (86b5e9e), closes Draggable/formeo#349

Changelog

Sourced from @​draggable/formeo-languages's changelog.

3.11.0 (2026-10-06)

Features

• table repeating rows and input group keys (86b5e9e), closes Draggable/formeo#349

Commits

• a5f06ab chore(release): 3.11.0 [skip ci]
• 771bf23 Merge pull request #94 from Draggable/feat/table-repeat-keys
• 86b5e9e feat: table repeating rows and input group keys
• See full diff in compare view

Updates @biomejs/biome from 2.4.16 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

• #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

• 0b4c11f ci: release (#11815)
• ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
• 034366d chore: update codspeed logo in readme (#12019)
• 717db8c feat(lint): add noMisplacedListElements (#11917)
• 089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
• 1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
• faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
• b2b4400 chore: update sponsors (#11973)
• ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
• 1b9479e feat(lint): add useLogicalProperties rule (#10816)
• Additional commits viewable in compare view

Updates @commitlint/cli from 21.0.2 to 21.2.3

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

New Contributors

• @​lazerg made their first contribution in conventional-changelog/commitlint#4954
• @​escapedcat with @​Copilot made their first contribution in conventional-changelog/commitlint#4959
• @​dylanpulver made their first contribution in conventional-changelog/commitlint#4957
• @​maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

• parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517
• fix(container): resolve packages from TypeScript configs by @​Guflly in conventional-changelog/commitlint#4914
• fix(resolve-extends): support Yarn Plug'n'Play by @​Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

• docs: fix typos in comments and JSDoc by @​maxtaran2010 in conventional-changelog/commitlint#4880

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.3 (2026-09-19)

Bug Fixes

• lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/cli

21.2.1 (2026-07-08)

Note: Version bump only for package @​commitlint/cli

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

21.1.0 (2026-06-23)

Features

• cli: add --default-config flag to lint without a config file (#4805) (7af27ba), closes #3662

Commits

• 95d4056 v21.2.3
• a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
• d00d190 v21.2.2
• f2e8dae chore: update dependency typescript to v7 (#4886)
• 5769d9f docs: fix typos in comments and JSDoc (#4880)
• 6e20041 v21.2.1
• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• 6f1c0af v21.1.0
• 7af27ba feat(cli): add --default-config flag to lint without a config file (#4805)
• Additional commits viewable in compare view

Updates @commitlint/config-conventional from 21.0.2 to 21.2.3

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

New Contributors

• @​lazerg made their first contribution in conventional-changelog/commitlint#4954
• @​escapedcat with @​Copilot made their first contribution in conventional-changelog/commitlint#4959
• @​dylanpulver made their first contribution in conventional-changelog/commitlint#4957
• @​maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

• parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517
• fix(container): resolve packages from TypeScript configs by @​Guflly in conventional-changelog/commitlint#4914
• fix(resolve-extends): support Yarn Plug'n'Play by @​Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

• docs: fix typos in comments and JSDoc by @​maxtaran2010 in conventional-changelog/commitlint#4880

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.3 (2026-09-19)

Bug Fixes

• rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/config-conventional

21.2.0 (2026-06-30)

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

21.1.0 (2026-06-23)

Note: Version bump only for package @​commitlint/config-conventional

Commits

• 95d4056 v21.2.3
• 9f5f7bc fix(rules): report the case that matched in case rule failure messages (#4962)
• d00d190 v21.2.2
• 3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
• f2e8dae chore: update dependency typescript to v7 (#4886)
• 1b4e5bc v21.2.0
• fdb566f feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...
• 6f1c0af v21.1.0
• See full diff in compare view

Updates @playwright/test from 1.60.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

• ES Module (#414) (e154214)

BREAKING CHANGES

• @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
• the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

• Replaced xo with prettier with default configuration; following newly established convention
• Replaced nyc with c8 for code coverage
• Replaced lodash with lodash-es for proper esm support

Related Issue

• semantic-release/semantic-release#2133
• semantic-release/semantic-release#4032

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

• ES Module (#414) (e154214)

BREAKING CHANGES

• @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
• the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits

• b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
• 0563e5d chore(deps): update to the latest semantic-release version (#417)
• e154214 feat: ES Module (#414)
• 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
• 1c48000 test: remove codecov (#399)
• 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
• 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
• e7c79f8 chore(deps): update dependency nyc to v17 (#392)
• 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
• 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.

Updates @semantic-release/git from 10.0.1 to 11.0.1

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

• deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

• ES Module (#544) (4d704a2), closes #491 #490

BREAKING CHANGES

• @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
• the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

• update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

v11.0.0-beta.1

11.0.0-beta.1 (2026-07-17)

Features

• ES Module (#526) (e523946), closes #491 #490

BREAKING CHANGES

• @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
• the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits

• b39d5c6 fix(deps): update dependency execa to v10 (#564)
• 9dd61f1 chore(deps): lock file maintenance (#470)
• c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
• b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
• d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
• 16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
• 8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
• e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
• 4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
• 7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.

Updates @semantic-release/github from 12.0.8 to 12.0.10

Release notes

Sourced from @​semantic-release/github's releases.

v12.0.10

12.0.10 (2026-09-21)

Bug Fixes

• deps: update dependency @​octokit/plugin-paginate-rest to v15 (#1284) (a63f458)

v12.0.9

12.0.9 (2026-07-01)

Bug Fixes

• asset-upload: stop setting content-length header manually (241f966), closes #1224
• local-undici: always use the locally installed undici instead of the node built-in version (40973e3), closes #1224
• publish: handle content-length header properly for asset uploads (#1260) (28e3741), closes #1224 #1224

Commits

• a63f458 fix(deps): update dependency @​octokit/plugin-paginate-rest to v15 (#1284)
• f5f6d0e build(deps): bump brace-expansion (#1300)
• eaffbba build(deps): bump undici from 6.27.0 to 6.28.1 (#1301)
• 07686dc chore(deps): update dependency undici to v7.29.0 [security] (#1283)
• 9f010ee build(deps-dev): bump baseline-browser-mapping from 2.10.42 to 2.11.25 (#1295)
• 81eeeca build(deps-dev): bump js-yaml from 3.15.0 to 3.15.2 (#1294)
• 43c2210 build(deps-dev): bump fast-uri from 3.1.4 to 3.1.8 (#1290)
• e703272 build(deps-dev): bump browserslist from 4.28.4 to 4.29.0 (#1291)
• e7f4b4b chore(deps): update dependency prettier to v3.9.8 (#1298)
• 2e9e42b chore(deps): update dependency prettier to v3.9.7 (#1296)
• Additional commits viewable in compare view

Updates @semantic-release/npm from 13.1.5 to 13.2.0

Release notes

Sourced from @​semantic-release/npm's releases.

v13.2.0

13.2.0 (2026-09-21)

Features

• trusted-publishing: add support for CircleCI (fb35b81)

Commits

• 5ef76be Merge pull request #1212 from Thomaash/trusted-publishing--circleci
• 1a4bdda chore(deps): lock file maintenance (#1232)
• 886ec16 chore(deps): update dependency prettier to v3.9.8 (#1231)
• 0388a4d chore(deps): update dependency prettier to v3.9.7 (#1230)
• fb35b81 feat(trusted-publishing): add support for CircleCI
• f5cca0a chore(deps): lock file maintenance (#1229)
• 095f289 chore(deps): update dependency p-retry to v8.0.1 (#1227)
• bb003a4 chore(deps): lock file maintenance (#1228)
• ca0b340 chore(deps): update dependency got to v16 (#1226)
• 22a1e17 chore(deps): lock file maintenance (#1225)
• Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 26.6.5

Commits

• See full diff in compare view

Updates ace-builds from 1.44.0 to 1.45.0

Changelog

Sourced from ace-builds's changelog.

1.45.0 (2026-10-16)

Features

• better support of variable width fonts

Bug Fixes

• allow string modes in createEditSession types (#5972) (64f5ed4)
• avoid repeated document reads during search highlighting (#5994) (078a211)
• support a leading lookbehind in rules with token arrays (#6007) (80fe26a), closes #6001
• V-001 security vulnerability (#6009) (62d5ffd)

Commits

• 6ef1170 package 16.10.26
• See full diff in compare view

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & ...

  Description has been truncated