chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #25 · cahaseler/EMPACT

Features

update to effect 3.10 (#729) (10aca41)

`v3.9.1`

Bug Fixes

Valibot peer dependency to support dist-tags (#723) (3ab415e)

ianvs/prettier-plugin-sort-imports (@ianvs/prettier-plugin-sort-imports)

`v4.7.1`

What's Changed

Fixes

Fix: Vue preprocessor: Support variations in block syntax by @ccondrup in IanVS#247

Dependencies

feat(plugin-oxc): support v0.1.x by @CHC383 in IanVS#249

Docs

Add note for how to specify subpath import regex to README by @jasikpark in IanVS#243

New Contributors

@jasikpark made their first contribution in IanVS#243
@ccondrup made their first contribution in IanVS#247
@CHC383 made their first contribution in IanVS#249

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.7.0...v4.7.1

`v4.7.0`

What's Changed

This project began as a fork because I wanted a plugin that would not move side-effect imports around and mess with my CSS cascade. So its first and most distinguishing feature is that side-effect imports do not move, and other imports are not sorted across them.

This works fine in most cases, but some people have side-effect imports that they know can be sorted safely. For those, there is now an "escape hatch" option named importOrderSafeSideEffects. It is an array of glob pattern strings (similar to importOrder) which, when they match against a side-effect import, allow that import to be sorted as if it were a standard import.

Suggestions for safe use:

Use ^ at the start of your pattern and $ at the end, to avoid accidentally matching part of an import name. For example, "^server-only$", to avoid matching against import "not-server-only".
Use extreme caution if matching against relative files or CSS files. If you decide to sort CSS imports and a file ever imports more than one CSS file, your cascade may change.
You can still use // prettier-ignore to stop sorting a particular import that would otherwise be sorted.

Feedback on this feature is welcome.

Features

Add importOrderSafeSideEffects option by @IanVS in IanVS#240

Internal

Clean up options & remove explicit function types by @IanVS in IanVS#239

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.6.3...v4.7.0

`v4.6.3`

What's Changed

Revert "fix: conditionally register ember and oxc parsers when depend… by @IanVS in IanVS#237

Full Changelog: IanVS/prettier-plugin-sort-imports@4.6.2...v4.6.3

`v4.6.2`

What's Changed

fix: conditionally register ember and oxc parsers when dependencies available by @jahands in IanVS#234

New Contributors

@jahands made their first contribution in IanVS#234

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.6.1...4.6.2

`v4.6.1`

What's Changed

Do not warn for markdown code blocks by @IanVS in IanVS#232

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.6.0...v4.6.1

`v4.6.0`

What's Changed

Be more tolerant of babel parse errors by @IanVS in IanVS#230
Add support for ember template tags by @IanVS in IanVS#231

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.5.1...v4.6.0

`v4.5.1`

What's Changed

Fixes

Short-circuit before parsing by @IanVS in IanVS#224

Internal

Upgrade development dependencies by @IanVS in IanVS#223

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.5.0...v4.5.1

`v4.5.0`

What's Changed

Add @prettier/plugin-oxc support by @Marsup in IanVS#221
Print full stacktrace when babel parsing errors are encountered

New Contributors

@Marsup made their first contribution in IanVS#221

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.4.2...v4.5.0

`v4.4.2`

What's Changed

Update peerDeps to allow prettier v4. by @cpojer in IanVS#210
[Internal] Update prettier dev dependency to 4.0 alpha by @IanVS in IanVS#211

New Contributors

@cpojer made their first contribution in IanVS#210

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.4.1...v4.4.2

`v4.4.1`

What's Changed

fix: catch babel parse errors by @michaelfaith in IanVS#198

New Contributors

@michaelfaith made their first contribution in IanVS#198

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.4.0...v4.4.1

`v4.4.0`

What's Changed

Enhancements

Re-add importOrderCaseSensitive option for case-sensitive sorting by @acnebs in IanVS#184
Throw an error when no matching sortOrder group by @IanVS in IanVS#192

Maintenance

Switch from yarn to pnpm by @IanVS in IanVS#178
Remove unused @babel/core, update babel deps by @IanVS in IanVS#191

New Contributors

@acnebs made their first contribution in IanVS#184

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.3.1...v4.4.0

microsoft/playwright (@playwright/test)

`v1.62.1`

`v1.62.0`

🧱 New component testing model

Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a

gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates
to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) /
unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an
AbortSignal, letting you
cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);

await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot()
can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');

// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and locator.screenshot() also accept webp as a type,
where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before
reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded,
fixed, or failing through a TestRun object:

class MyReporter {
  async preprocess({ config, suite, testRun }) {
    for (const test of suite.allTests()) {
      if (shouldSkip(test))
        testRun.skip(test);
    }
  }
}

🔁 Isolated retries

New testConfig.retryStrategy controls when failed tests are retried. The default
'immediate' retries as soon as a worker is free; 'isolated' runs all retries at the end,
one by one in a single worker, to minimize interference with the rest of the suite:

// playwright.config.ts
export default defineConfig({
  retries: 2,
  retryStrategy: 'isolated',
});

New APIs

Browser and Context

New option credentials includes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.

Actions

New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scroll-into-view.

Network

New apiResponse.timing() returns resource timing information for an API response.

Evaluation

New locator.waitForFunction() waits until a function — called with the matching element — returns a truthy value.
page.evaluate() and related methods now accept functions as evaluate arguments.
page.addInitScript() / browserContext.addInitScript() now accept functions as init-script arguments.

Command line & MCP

Playwright now bundles the Playwright MCP server and playwright-cli, runnable via npx playwright mcp and npx playwright cli.

Reporters

The HTML report's Merge files grouping — previously only a UI toggle — can now be enabled from the config with the new mergeFiles reporter option:

// playwright.config.ts
export default defineConfig({
  reporter: [['html', { mergeFiles: true }]],
});

Announcements

⚠️ Debian 11 is not supported anymore.

Browser Versions

Chromium 151.0.7922.34
Mozilla Firefox 153.0
WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 151
Microsoft Edge 151

`v1.61.1`

`v1.61.0`

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
Supported expect.soft.poll(...).
New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
New -G command line shorthand for --grep-invert.

🛠️ Other improvements

Playwright now supports Ubuntu 26.04.
HAR and trace recordings now include WebSocket requests.

Browser Versions

Chromium 149.0.7827.55
Mozilla Firefox 151.0
WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 149
Microsoft Edge 149

`v1.60.0`

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

Event browser.on('context') — fired when a new context is created on the browser.
BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

[webSocketRoute.protocols()](https://playwr

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 10pm every weekday,before 5am every weekday,every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2024-11-20T00:11:04Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
empact	❌ Failed (Inspect)			Nov 20, 2024 0:11am

github-advanced-security · 2024-12-06T11:57:27Z

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

sonarqubecloud · 2026-05-12T09:54:40Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-05-14T21:26:42Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-06-14T00:59:34Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-06-16T07:55:48Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-08-14T16:56:19Z

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)
E Maintainability Rating on New Code (required ≥ A)