chore(deps): update all non-major by snapiz · Pull Request #20 · timayz/timada

snapiz · 2025-09-01T09:27:05Z

This PR contains the following updates:

Package	Type	Update	Change
@playwright/test (source)	devDependencies	minor	`1.55.0` -> `1.56.0`
@types/node (source)	devDependencies	minor	`24.3.0` -> `24.7.2`
anyhow	dependencies	patch	`1.0.99` -> `1.0.100`
axum	dependencies	patch	`0.8.4` -> `0.8.6`
clap	dependencies	patch	`4.5.45` -> `4.5.48`
config	dependencies	patch	`0.15.14` -> `0.15.18`
evento	dependencies	minor	`1.0.0-alpha.17` -> `1.3.0`
playwright (source)	dependencies	minor	`1.55.0` -> `1.56.0`
playwright-core (source)	dependencies	minor	`1.55.0` -> `1.56.0`
rust	final	minor	`1.89-alpine` -> `1.90-alpine`
sea-query	dependencies	patch	`1.0.0-rc.11` -> `1.0.0-rc.14`
sea-query-sqlx	dependencies	patch	`0.8.0-rc.8` -> `0.8.0-rc.9`
serde (source)	dependencies	patch	`1.0.219` -> `1.0.228`
tracing-subscriber (source)	dependencies	patch	`0.3.19` -> `0.3.20`
undici-types (source)	dependencies	minor	`7.15.0` -> `7.16.0`

Release Notes

microsoft/playwright (@playwright/test)

`v1.56.0`

Compare Source

Playwright Agents

Introducing Playwright Agents, three custom agent definitions designed to guide LLMs through the core process of building a Playwright test:

🎭 planner explores the app and produces a Markdown test plan
🎭 generator transforms the Markdown plan into the Playwright Test files
🎭 healer executes the test suite and automatically repairs failing tests

Run npx playwright init-agents with your client of choice to generate the latest agent definitions:

##### Generate agent files for each agentic loop
##### Visual Studio Code
npx playwright init-agents --loop=vscode

##### Claude Code
npx playwright init-agents --loop=claude

##### opencode
npx playwright init-agents --loop=opencode

[!NOTE]
VS Code v1.105 (currently on the VS Code Insiders channel) is needed for the agentic experience in VS Code. It will become stable shortly, we are a bit ahead of times with this functionality!

Learn more about Playwright Agents

New APIs

New methods page.consoleMessages() and page.pageErrors() for retrieving the most recent console messages from the page
New method page.requests() for retrieving the most recent network requests from the page
Added --test-list and --test-list-invert to allow manual specification of specific tests from a file

UI Mode and HTML Reporter

Added option to 'html' reporter to disable the "Copy prompt" button
Added option to 'html' reporter and UI Mode to merge files, collapsing test and describe blocks into a single unified list
Added option to UI Mode mirroring the --update-snapshots options
Added option to UI Mode to run only a single worker at a time

Breaking Changes

Event browserContext.on('backgroundpage') has been deprecated and will not be emitted. Method browserContext.backgroundPages() will return an empty list

Miscellaneous

Aria snapshots render and compare input placeholder
Added environment variable PLAYWRIGHT_TEST to Playwright worker processes to allow discriminating on testing status

Browser Versions

Chromium 141.0.7390.37
Mozilla Firefox 142.0.1
WebKit 26.0

`v1.55.1`

Compare Source

Highlights

#37479 - [Bug]: Upgrade Chromium to 140.0.7339.186.
#37147 - [Regression]: Internal error: step id not found.
#37146 - [Regression]: HTML reporter displays a broken chip link when there are no projects.
#37137 - Revert "fix(a11y): track inert elements as hidden".
#37532 - chore: do not use -k option

Browser Versions

Chromium 140.0.7339.186
Mozilla Firefox 141.0
WebKit 26.0

This version was also tested against the following stable channels:

Google Chrome 139
Microsoft Edge 139

dtolnay/anyhow (anyhow)

`v1.0.100`

Compare Source

Teach clippy to lint formatting arguments in bail!, ensure!, anyhow! (#426)

tokio-rs/axum (axum)

`v0.8.6`

Compare Source

`v0.8.5`: axum v0.8.5

Compare Source

fixed: Reject JSON request bodies with trailing characters after the JSON document (#3453)
added: Implement OptionalFromRequest for Multipart (#3220)
added: Getter methods Location::{status_code, location}
added: Support for writing arbitrary binary data into server-sent events (#3425)]
added: middleware::ResponseAxumBodyLayer for mapping response body to axum::body::Body (#3469)
added: impl FusedStream for WebSocket (#3443)
changed: The sse module and Sse type no longer depend on the tokio feature (#3154)
changed: If the location given to one of Redirects constructors is not a valid header value, instead of panicking on construction, the IntoResponse impl now returns an HTTP 500, just like Json does when serialization fails (#3377)
changed: Update minimum rust version to 1.78 (#3412)

clap-rs/clap (clap)

`v4.5.48`

Compare Source

Documentation

Add a new CLI Concepts document as another way of framing clap
Expand the typed_derive cookbook entry

`v4.5.47`

Compare Source

Features

Added impl FromArgMatches for ()
Added impl Args for ()
Added impl Subcommand for ()
Added impl FromArgMatches for Infallible
Added impl Subcommand for Infallible

Fixes

(derive) Update runtime error text to match clap

`v4.5.46`

Compare Source

Features

Expose StyledStr::push_str

rust-cli/config-rs (config)

`v0.15.18`

Compare Source

Fixes

Improve consistency between missing field error messages

`v0.15.17`

Compare Source

Features

corn file format support

`v0.15.16`

Compare Source

Performance

Allow more build parallelism by depending on serde_core

`v0.15.15`

Compare Source

Fixes

(json5) Correctly deserialize null (regressed in 0.15.14)

timayz/evento (evento)

`v1.3.0`

Compare Source

Features

evento: impl subscribe run once (#116) (dc90469)

`v1.2.0`

Compare Source

Features

evento: impl subscription gracefully shutdown (#113) (67117e7)

`v1.1.1`

Compare Source

Bug Fixes

deps: update rust crate sea-query to 1.0.0-rc.14 (#110) (d1579cd)

`v1.1.0`

Features

deps: update all non-major (#109) (f70daef)

`v1.0.0`

Compare Source

⚠ BREAKING CHANGES

full rewritte

Miscellaneous Chores

full rewrite (#107) (e052f57)

`v1.0.0-alpha.18`

Compare Source

Features

evento: use bincode instead of cbor (#104) (df5d00f)

serde-rs/serde (serde)

`v1.0.228`

Compare Source

Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

`v1.0.227`

Compare Source

Documentation improvements (#2991)

`v1.0.226`

Compare Source

Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @Mingun)

`v1.0.225`

Compare Source

Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @rcrisanti)

`v1.0.224`

Compare Source

Remove private types being suggested in rustc diagnostics (#2979)

`v1.0.223`

Compare Source

Fix serde_core documentation links (#2978)

`v1.0.222`

Compare Source

Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @aytey)

`v1.0.221`

Compare Source

Documentation improvements (#2973)
Deprecate serde_if_integer128! macro (#2975)

`v1.0.220`

Compare Source

Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @osiewicz)

tokio-rs/tracing (tracing-subscriber)

`v0.3.20`: tracing-subscriber 0.3.20

Compare Source

Security Fix: ANSI Escape Sequence Injection (CVE-TBD)

Impact

Previous versions of tracing-subscriber were vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged, potentially allowing attackers to:

Manipulate terminal title bars
Clear screens or modify terminal display
Potentially mislead users through terminal manipulation

In isolation, impact is minimal, however security issues have been found in terminal emulators that enabled an attacker to use ANSI escape sequences via logs to exploit vulnerabilities in the terminal emulator.

Solution

Version 0.3.20 fixes this vulnerability by escaping ANSI control characters in when writing events to destinations that may be printed to the terminal.

Affected Versions

All versions of tracing-subscriber prior to 0.3.20 are affected by this vulnerability.

Recommendations

Immediate Action Required: We recommend upgrading to tracing-subscriber 0.3.20 immediately, especially if your application:

Logs user-provided input (form data, HTTP headers, query parameters, etc.)
Runs in environments where terminal output is displayed to users

Migration

This is a patch release with no breaking API changes. Simply update your Cargo.toml:

[dependencies]
tracing-subscriber = "0.3.20"

Acknowledgments

We would like to thank zefr0x who responsibly reported the issue at security@tokio.rs.

If you believe you have found a security vulnerability in any tokio-rs project, please email us at security@tokio.rs.

nodejs/undici (undici-types)

`v7.16.0`

Compare Source

What's Changed

Drop npm token, use OIDC instead by @mcollina in #4447
fetch: instantiate readableStream in extractBody with sync methods by @Uzlopak in #4350
fix: remove async on [kClose] and [kDestroy], only return Promise by @Uzlopak in #4450
fetch: make consumeBody sync by @Uzlopak in #4449
perf: make client.connect() sync by @Uzlopak in #4455
fetch: remove promise in exported fetch by @Uzlopak in #4452
fix(#4451): implement http2 cookie support by @metcoder95 in #4453
test: cache store tests should properly be skipped by @Uzlopak in #4463
test: fix IPv6 skip check for test/client.js by @Uzlopak in #4466
test: remove skip check for AbortSignal.timeout, as it exists since node18 by @Uzlopak in #4464
test: investigate macos failing by @Uzlopak in #4467
test: remove obsolete < node v18 test case for http2 by @Uzlopak in #4461
perf: avoid intermediate promise on BodyReadable.dump by @Uzlopak in #4459
test: remove skip check for long-lived-abort-controller test (was flaky 10 months ago) by @Uzlopak in #4465
test: remove skip checks for existance of global available Blob and File by @Uzlopak in #4460
perf (fetch): use less promises for ReadableStream by @Uzlopak in #4457
fix: catch synchronous errors in request callbacks by @mcollina in #4443
fix: avoid instanceof MockNotMatchedError by @Uzlopak in #4474
eventsource: remove promise for #reconnect method by @Uzlopak in #4469
feat: make UndiciErrors reliable to instanceof by @Uzlopak in #4472
chore: call super() after type checks by @Uzlopak in #4475
chore: FixedQueue does not need special constructor by @Uzlopak in #4476
fix: buildAndValidateMockOptions should always get an object passed and always return an object by @Uzlopak in #4479
fix: remove unused ResponseStatusCodeError by @Uzlopak in #4473
chore: pool and dispatcherbase dont need constructor, use no array helper functions by @Uzlopak in #4477
lint: avoid unintented use of globals in code and tests, improve test for installing/overwriting globals by @Uzlopak in #4478
test: fix macos flakyness by @Uzlopak in #4468
fix: 'no-referrer-when-downgrade' in determineRequestsReferrer should return referrerURL by @Uzlopak in #4482
fix: deflake cache-fastimers-fix.js by @Uzlopak in #4491
fix: improve validation of IP addresses as trustworthy, correct ipv4 check by @Uzlopak in #4489
test (pool.js): fix flakyness of clientTtl test by @Uzlopak in #4494
test (eventsource): refactor tests for eventsource, speed them up by @Uzlopak in #4493
fix: remove useless catch in client-h1.js by @Uzlopak in #4481
test: skip flaky encoding test on macos and node20 by @Uzlopak in #4497
fix: implement proper stale-while-revalidate behavior per RFC 5861 by @mcollina in #4492
test (websocket): speed up test/websocket/issue-2679.js by @Uzlopak in #4501
webidl: fix existing and add missing buffer source converters by @Renegade334 in #4503
use real wpt test server by @KhafraDev in #4486
test: another try to fix flaky macos and node 20 by @Uzlopak in #4490
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #4507
build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @dependabot[bot] in #4509
fix writing to websocketstream with SharedArrayBuffer/SharedArrayBuff… by @KhafraDev in #4504
test: use faketimers for test/client-keep-alive, refactor a little by @Uzlopak in #4499
build(deps): bump github/codeql-action from 3.29.7 to 3.30.0 by @dependabot[bot] in #4510
build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in #4508
fix(h2): adjust :scheme on h2 requests by @metcoder95 in #4454
chore: use lowercase filenames, remove unused verifyVersion.js by @Uzlopak in #4514
chore: refactor workflows by @Uzlopak in #4513
chore: use [] instead of new Array(0) by @Uzlopak in #4435
change webidl attribute to bitwise flag by @KhafraDev in #4505
chore: make also cache-tests integrated as a submodule by @Uzlopak in #4517
ci: fine grained test nodejs workflow by @Uzlopak in #4516
feat: Support for capping the number of origins in Agent by @JoshMock in #4365
wpt: properly handle write permissions errors in wpt-runner setup by @Uzlopak in #4518
fetch: process content-encoding header only if relevant by @Uzlopak in #4496
websocket: always emit error event by @KhafraDev in #4521
refactor: parseHttpDate by @Uzlopak in #4421
fix: wpt should use master branch by @Uzlopak in #4524
fix: shell command built from environment values by @ptrgits in #4392
example: use metcoders https-pem for the example by @Uzlopak in #4436
Disable SIMD for PPC64 architecture, add UNDICI_NO_WASM_SIMD env to facilitate testing by @mcollina in #4530
fix: make error symbols non enumerable by @Uzlopak in #4531

New Contributors

@Renegade334 made their first contribution in #4503
@JoshMock made their first contribution in #4365
@ptrgits made their first contribution in #4392

Full Changelog: nodejs/undici@v7.15.0...v7.16.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

## [0.2.1](v0.2.0...v0.2.1) (2025-08-16) ### Bug Fixes * **market:** use sqlite instead of heed ([#14](#14)) ([38b958a](38b958a))

Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>

snapiz · 2025-10-13T09:28:48Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package evento@1.0.0-alpha.17 --precise 1.3.0
    Updating crates.io index
error: failed to select a version for `sea-query-sqlx`.
    ... required by package `evento v1.3.0`
    ... which satisfies dependency `evento = "^1.0.0-alpha.17"` of package `timada v0.2.1 (/tmp/renovate/repos/github/timayz/timada)`
versions that meet the requirements `^0.8.0-rc.9` are: 0.8.0-rc.9

all possible versions conflict with previously selected packages.

  previously selected package `sea-query-sqlx v0.8.0-rc.8`
    ... which satisfies dependency `sea-query-sqlx = "^0.8.0-rc.8"` (locked to 0.8.0-rc.8) of package `timada-market v0.2.1 (/tmp/renovate/repos/github/timayz/timada/crates/market)`
    ... which satisfies path dependency `timada-market` (locked to 0.2.1) of package `timada v0.2.1 (/tmp/renovate/repos/github/timayz/timada)`

failed to select a version for `sea-query-sqlx` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/market/Cargo.toml --package evento@1.0.0-alpha.17 --precise 1.3.0
    Updating crates.io index
error: failed to select a version for `sea-query-sqlx`.
    ... required by package `evento v1.3.0`
    ... which satisfies dependency `evento = "^1.0.0-alpha.17"` of package `timada v0.2.1 (/tmp/renovate/repos/github/timayz/timada)`
versions that meet the requirements `^0.8.0-rc.9` are: 0.8.0-rc.9

all possible versions conflict with previously selected packages.

  previously selected package `sea-query-sqlx v0.8.0-rc.8`
    ... which satisfies dependency `sea-query-sqlx = "^0.8.0-rc.8"` (locked to 0.8.0-rc.8) of package `timada-market v0.2.1 (/tmp/renovate/repos/github/timayz/timada/crates/market)`
    ... which satisfies path dependency `timada-market` (locked to 0.2.1) of package `timada v0.2.1 (/tmp/renovate/repos/github/timayz/timada)`

failed to select a version for `sea-query-sqlx` which could resolve this conflict

snapiz and others added 19 commits April 4, 2022 22:20

Initial commit

257eba3

chore: update LICENSE

14e0fbf

chore: fix setup project (#2)

4b1845c

feat(liteventd): improve subscribe api (#3)

c2c1170

feat(liteventd): impl load and save (#4)

afcd0ea

feat(liteventd): add load-save (#5)

1754be0

feat(liteventd): impl subscribe (#6)

3d99b27

feat/liteventd/add-rust-features (#7)

e761dff

fix(liteventd): incorrect stream order (#8)

e948b90

chore(liteventd): rename derive to macro (#9)

5a7c02d

chore: setup market (#10)

ef0fa47

chore: setup e2e (#11)

915a8c7

chore: setup ci (#12)

c36f4a6

fix(docker): add missing data folder (#13)

3fd48d4

fix(market): use sqlite instead of heed (#14)

38b958a

chore(release): 0.2.1

14b3b3a

## [0.2.1](v0.2.0...v0.2.1) (2025-08-16) ### Bug Fixes * **market:** use sqlite instead of heed ([#14](#14)) ([38b958a](38b958a))

chore: add traefik (#17)

1edc8cb

chore(deps): update all non-major (#16)

8a90405

Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>

chore: add local https (#18)

d5b4169

snapiz force-pushed the renovate/all-minor-patch branch 2 times, most recently from 100262f to a04cc27 Compare September 15, 2025 09:26

snapiz force-pushed the renovate/all-minor-patch branch 2 times, most recently from b6dbd0f to 092ec23 Compare September 29, 2025 09:26

snapiz force-pushed the renovate/all-minor-patch branch from 092ec23 to 6fc1eb6 Compare October 6, 2025 09:27

chore(deps): update all non-major

7edd8f4

snapiz force-pushed the renovate/all-minor-patch branch from 6fc1eb6 to 7edd8f4 Compare October 13, 2025 09:28

snapiz closed this Aug 15, 2026

snapiz force-pushed the main branch from fee5076 to a5edd26 Compare August 15, 2026 15:29

snapiz deleted the renovate/all-minor-patch branch August 15, 2026 15:34

Navigation Menu

chore(deps): update all non-major - #20

chore(deps): update all non-major#20
snapiz wants to merge 20 commits into
mainfrom
renovate/all-minor-patch

snapiz commented Sep 1, 2025 •

edited

Loading

Uh oh!

snapiz commented Oct 13, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

snapiz commented Sep 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Playwright Agents

New APIs

UI Mode and HTML Reporter

Breaking Changes

Miscellaneous

Browser Versions

Highlights

Browser Versions

v0.8.5: axum v0.8.5

Documentation

Features

Fixes

Features

Fixes

Features

Performance

Fixes

Features

Features

Bug Fixes

Features

⚠ BREAKING CHANGES

Miscellaneous Chores

Features

v0.3.20: tracing-subscriber 0.3.20

Impact

Solution

Affected Versions

Recommendations

Migration

Acknowledgments

What's Changed

New Contributors

Configuration

Uh oh!

snapiz commented Oct 13, 2025

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

snapiz commented Sep 1, 2025 •

edited

Loading

`v0.8.5`: axum v0.8.5

`v0.3.20`: tracing-subscriber 0.3.20