chore(deps-dev): bump the development group with 6 updates by dependabot[bot] · Pull Request #22 · ByteWorthyLLC/vqol

dependabot · 2026-07-01T10:11:30Z

Bumps the development group with 6 updates:

Package	From	To
lighthouse	`13.3.0`	`13.4.0`
playwright	`1.60.0`	`1.61.1`
svelte	`5.56.1`	`5.56.4`
svelte-check	`4.5.0`	`4.7.1`
vite	`8.0.16`	`8.1.2`
vitest	`4.1.8`	`4.1.9`

Updates lighthouse from 13.3.0 to 13.4.0

Release notes

Sourced from lighthouse's releases.

v13.4.0

Full Changelog

We expect this release to ship in the DevTools of Chrome 151, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

Thomas Steiner @tomayac

KS Nithin @Nithin0620

Emanuele @emazack

Kirtikumar Anandrao Ramchandani @KirtiRamchandani

Rin @RinZ27

Michael Hablich @natorion

Core

canonical: improve validation for invalid URLs (#16765)

llms-txt: allow leading whitespace for header check (#17057)

geolocation-on-start: mention geolocation element (#16835)

add public Lighthouse types entrypoint (#17028)

match scripts to network requests using frameId (#16774)

config: import LH types (#17048)

driver: add ExecutionContext.evaluateOnObject (#17050)

driver: check if usage data exists before using (#17033)

Report

fix performance gauge label, improve load animation (#17045)

decouple link creation from link details rendering (#17049)

viewer: persist dark mode when when changing langauge (#17063)

Deps

upgrade deps (#17070)

upgrade typescript to 6.0.3 (#17060)

upgrade terser to 5.48.0 (#17059)

upgrade esbuild to 0.28.0 (#17058)

upgrade trace_engine to 0.0.65 (#17046)

upgrade puppeteer to 25.0.2 (#17019)

Clients

viewer: prevent toast showing on load (#17069)

viewer: clear github auth token on 401 error (#17064)

viewer: disable agentic-browsing in PSI api call (#17041)

I18n

... (truncated)

Changelog

Sourced from lighthouse's changelog.

13.4.0 (2026-06-09)

Full Changelog

We expect this release to ship in the DevTools of Chrome 151, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

Thomas Steiner @tomayac

KS Nithin @Nithin0620

Emanuele @emazack

Kirtikumar Anandrao Ramchandani @KirtiRamchandani

Rin @RinZ27

Michael Hablich @natorion

Core

canonical: improve validation for invalid URLs (#16765)

llms-txt: allow leading whitespace for header check (#17057)

geolocation-on-start: mention geolocation element (#16835)

add public Lighthouse types entrypoint (#17028)

match scripts to network requests using frameId (#16774)

config: import LH types (#17048)

driver: add ExecutionContext.evaluateOnObject (#17050)

driver: check if usage data exists before using (#17033)

Report

fix performance gauge label, improve load animation (#17045)

decouple link creation from link details rendering (#17049)

viewer: persist dark mode when when changing langauge (#17063)

Deps

upgrade deps (#17070)

upgrade typescript to 6.0.3 (#17060)

upgrade terser to 5.48.0 (#17059)

upgrade esbuild to 0.28.0 (#17058)

upgrade trace_engine to 0.0.65 (#17046)

upgrade puppeteer to 25.0.2 (#17019)

Clients

viewer: prevent toast showing on load (#17069)

viewer: clear github auth token on 401 error (#17064)

viewer: disable agentic-browsing in PSI api call (#17041)

I18n

... (truncated)

Commits

cb79bea v13.4.0 (#17073)
c0ac986 i18n: import (#17071)
6894326 tests: exclude origin-isolation-coop-present smoke test (#17072)
6c9c6ae deps: upgrade deps (#17070)
2a52414 clients(viewer): prevent toast showing on load (#17069)
3a52f71 core: match scripts to network requests using frameId (#16774)
85c711d core(geolocation-on-start): mention geolocation element (#16835)
5bbddf0 core(llms-txt): allow leading whitespace for header check (#17057)
eb3d98a clients(viewer): clear github auth token on 401 error (#17064)
19b38e5 report(viewer): persist dark mode when when changing langauge (#17063)
Additional commits viewable in compare view

Updates playwright from 1.60.0 to 1.61.1

Release notes

Sourced from playwright's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
Additional commits viewable in compare view

Updates svelte from 5.56.1 to 5.56.4

Release notes

Sourced from svelte's releases.

svelte@5.56.4

Patch Changes

fix: include wrapping parentheses in {@const} declarator end position (#18436)

fix: always unset reactivity context after restoring it (#18453)

fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

svelte@5.56.3

Patch Changes

fix: ignore errors that occur in destroyed effects (#18384)

fix: type BigInts in $state.snapshot(...) return values (#18388)

svelte@5.56.2

Patch Changes

fix: properly track effect end node for async sibling component (#18371)

fix: prevent false-positive reactivity loss warning (#18373)

chore: bump esrap dependency (#18372)

fix: ignore declaration tags for animation directive (#18366)

fix: reject pending async deriveds on discard (#18308)

Changelog

Sourced from svelte's changelog.

5.56.4

Patch Changes

fix: include wrapping parentheses in {@const} declarator end position (#18436)

fix: always unset reactivity context after restoring it (#18453)

fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

5.56.3

Patch Changes

fix: ignore errors that occur in destroyed effects (#18384)

fix: type BigInts in $state.snapshot(...) return values (#18388)

5.56.2

Patch Changes

fix: properly track effect end node for async sibling component (#18371)

fix: prevent false-positive reactivity loss warning (#18373)

chore: bump esrap dependency (#18372)

fix: ignore declaration tags for animation directive (#18366)

fix: reject pending async deriveds on discard (#18308)

Commits

eae50df Version Packages (#18435)
36ae062 fix: always unset reactivity context after restoring it (#18453)
a6985bc fix: strip ? from optional parameters in svelte lang ts (#18448)
c4daa49 fix: include wrapping parentheses in {@const} declarator end (#18436)
0510174 fix: make SvelteURLSearchParams notifications accurate (#18425)
8ea3ee8 chore(deps-dev): bump esbuild from 0.25.11 to 0.28.1 (#18427)
a9f4854 Version Packages (#18389)
71a6515 fix: check boundary exists before calling error handler in async derived (#18...
3d83c9a fix: add bigint to Primitive type for $state.snapshot (#18388)
51baf1c Version Packages (#18357)
Additional commits viewable in compare view

Updates svelte-check from 4.5.0 to 4.7.1

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.1

Patch Changes

fix: correctly parse --tsgo-experimental-api flag (#3067)

svelte-check@4.7.0

Minor Changes

feat: add --config option (#3066)

feat: svelte-check tsgo support with experimental api (#3036)

Patch Changes

fix: load esm version of Vite (#3065)

fix: stop excluding workspaces under dot-prefixed ancestors (#3037)

Updated dependencies [7a3464b, a2561fc]:

@sveltejs/load-config@0.2.0

svelte-check@4.6.0

Minor Changes

feat: support reading Svelte config from vite.config.js/ts (#3031)

Patch Changes

Updated dependencies [151cf45]:

@sveltejs/load-config@0.1.1

Commits

32556db Version Packages (#3069)
4e52661 fix (svelte-check): --tsgo-experimental-api option is not honored (#3067)
fbb1291 Version Packages (#3059)
3a1e384 feat: svelte-check tsgo support with experimental api (#3036)
8a6f155 fix(svelte-check): stop excluding workspaces under dot-prefixed ancestors (#3...
7659b0f perf: remove lodash (#3038)
a2561fc feat: enable passing Svelte config file paths (#3066)
7a3464b fix: load esm version of Vite (#3065)
459d031 fix(svelte2tsx): don't crash on array binding holes in destructured exports (...
9407413 build: bump mocha to v11.7.6 (#3042)
Additional commits viewable in compare view

Updates vite from 8.0.16 to 8.1.2

Release notes

Sourced from vite's releases.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.2 (2026-06-30)

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)

restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)

revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

8.1.1 (2026-06-30)

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)

bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)

bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)

css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)

css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)

deps: update all non-major dependencies (#22734) (e635f49)

deps: update all non-major dependencies (#22804) (8837400)

deps: update rolldown-related dependencies (#22591) (2ce6677)

escape ids with multiple null bytes (#22687) (833fc30)

hide console window when running 'net use' on Windows (#22698) (92b63f2)

ignore bundled config temp dir (#22800) (043a810)

invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)

optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)

optimizer: scanner should resolve input from root (#22769) (9722b07)

resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)

return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)

server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)

use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

8.1.0 (2026-06-23)

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)

... (truncated)

Commits

ba31193 release: v8.1.2
0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
4ae9e14 release: v8.1.1
8f925e2 fix(bundledDev): skip plugin transform hooks for rolldown-lazy stub modules (...
c088511 test: enable "manual chunk path" test and remove "worker.format error" test (...
62bd7af feat: update dynamic import warning to link to Vite docs (#22823)
2dafd3b refactor(css): remove lightningcss null byte bug workaround (#22822)
Additional commits viewable in compare view

Updates vitest from 4.1.8 to 4.1.9

Release notes

Sourced from vitest's releases.

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

Commits

a7a61e7 chore: release v4.1.9 (#10598)
934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development group with 6 updates: | Package | From | To | | --- | --- | --- | | [lighthouse](https://github.com/GoogleChrome/lighthouse) | `13.3.0` | `13.4.0` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.1` | `5.56.4` | | [svelte-check](https://github.com/sveltejs/language-tools) | `4.5.0` | `4.7.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | Updates `lighthouse` from 13.3.0 to 13.4.0 - [Release notes](https://github.com/GoogleChrome/lighthouse/releases) - [Changelog](https://github.com/GoogleChrome/lighthouse/blob/main/changelog.md) - [Commits](GoogleChrome/lighthouse@v13.3.0...v13.4.0) Updates `playwright` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `svelte` from 5.56.1 to 5.56.4 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.4/packages/svelte) Updates `svelte-check` from 4.5.0 to 4.7.1 - [Release notes](https://github.com/sveltejs/language-tools/releases) - [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.5.0...svelte-check@4.7.1) Updates `vite` from 8.0.16 to 8.1.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.2/packages/vite) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) --- updated-dependencies: - dependency-name: lighthouse dependency-version: 13.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: playwright dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: svelte dependency-version: 5.56.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: svelte-check dependency-version: 4.7.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: vite dependency-version: 8.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-01T10:11:31Z

Labels

The following labels could not be found: auto-merge, dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions Bot merged commit 2f4e7be into main Jul 1, 2026
4 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/development-f81793b5a3 branch July 1, 2026 10:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the development group with 6 updates#22

chore(deps-dev): bump the development group with 6 updates#22
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-f81793b5a3

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

v13.4.0

New contributors

Core

Report

Deps

Clients

I18n

13.4.0 (2026-06-09)

New contributors

Core

Report

Deps

Clients

I18n

v1.61.1

Bug Fixes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

svelte@5.56.4

Patch Changes

svelte@5.56.3

Patch Changes

svelte@5.56.2

Patch Changes

5.56.4

Patch Changes

5.56.3

Patch Changes

5.56.2

Patch Changes

svelte-check@4.7.1

Patch Changes

svelte-check@4.7.0

Minor Changes

Patch Changes

svelte-check@4.6.0

Minor Changes

Patch Changes

v8.1.2

v8.1.1

create-vite@8.1.0

plugin-legacy@8.1.0

v8.1.0

plugin-legacy@8.1.0-beta.0

v8.1.0-beta.0

8.1.2 (2026-06-30)

Bug Fixes

8.1.1 (2026-06-30)

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

8.1.0 (2026-06-23)

Features

v4.1.9

🐞 Bug Fixes

View changes on GitHub

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants