chore(deps): update npm packages by renovate[bot] · Pull Request #3392 · voidzero-dev/vite-plus

renovate · 2026-11-08T16:26:48Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@ast-grep/napi (source)	`0.51.0` → `0.51.1`
@iconify/vue (source)	`5.0.1` → `5.0.5`
@nkzw/safe-word-list	`3.1.0` → `3.1.2`
bingo (source)	`^0.13.2` → `^0.15.0`
es-module-lexer	`3.0.3` → `3.0.4`
fast-wrap-ansi	`0.2.0` → `0.2.2`
mermaid	`12.2.0` → `12.3.0`
pkg-types	`2.3.0` → `2.4.0`
playwright (source)	`1.62.1` → `1.65.0`
reka-ui	`2.9.9` → `2.11.0`
tailwindcss (source)	`4.3.0` → `4.3.4`
vitepress-plugin-group-icons	`1.7.5` → `1.8.1`
vitepress-plugin-llms	`1.13.1` → `1.14.0`
vue (source)	`3.5.35` → `3.5.45`
wrangler (source)	`4.127.1` → `4.158.0`

Release Notes

ast-grep/ast-grep (@ast-grep/napi)

`v0.51.1`

Compare Source

fix(cli): report skipped files and reason in --inspect entity #3044
chore(deps): update rust crate tree-sitter-scala to v0.26.4 #3054
fix(dynamic): only replace metavariable sigils with the expando char #3052
fix(core): keep $ followed by a digit literal in fix templates #3045
fix(deps): update rust-wasm-bindgen monorepo #3046
Fix macOS universal2 wheel matching #3050
chore(deps): update rust crate napi-derive to v3.7.0 #3049
chore(deps): update rust crate napi to v3.16.1 #3047
fix(scan): bind utilDirs utils for --inline-rules and --rules #2943
fix(cli): percent-encode file paths in sarif uri #3042
chore(deps): update dependency node to v26 #3043
chore(deps): update dependency oxlint to v1.90.0 #3036
chore(deps): update astral-sh/setup-uv action to v10.3.3 #3040
chore(deps): update rust crate globset to v0.4.21 #3037
chore(deps): update rust crate ignore to v0.4.34 #3038
chore(deps): update dependency node to v26 #3039
fix(sarif): set the log version to 2.1.0 #3035
fix(cli): escape special characters in github format output #3034
chore(deps): update dependency web-tree-sitter to ^0.26.0 || ^0.27.0 #3019
chore(deps): update dependency dprint to v0.64.3 #3029
chore(deps): update rust crate smallvec to v1.16.4 #3030
chore(deps): update rust crate similar to v3.2.1 #3031
chore(deps): update rust crate tree-sitter-md to v0.5.4 #3032
fix(deps): update rust crate tree-sitter-dart to 0.3.0 #3033
chore(deps): update dependency oxlint to v1.89.0 #3018
chore(deps): update dependency @napi-rs/cli to v3.10.9 #3025
chore(deps): update rust crate napi-derive to v3.6.13 #3026
chore(deps): update rust crate napi to v3.15.0 #3028
chore(deps): update astral-sh/setup-uv action to v10.3.2 #3024
chore(deps): update dependency dprint to v0.64.1 #3017
chore(deps): update rust crate tokio to v1.54.1 #3020
refactor(cli): apply project defaults through InputArgs #3027
feat(cli): support no-ignore in project config #3003
fix(deps): update rust crate tree-sitter-php to 0.25.0 #3022
chore(deps): update rust crate tree-sitter to v0.27.1 #3014
chore(deps): update dependency @ast-grep/napi to v0.51.0 #3016
chore(deps): update rust crate tree-sitter-scala to v0.26.3 #3015
chore(deps): update astral-sh/setup-uv action to v10.3.0 #2938
chore(deps): update dependency @napi-rs/cli to v3.10.8 #3004
chore(deps): update rust crate toml_edit to v0.25.17 #3013
chore(deps): update rust crate smallvec to v1.16.3 #3011
chore(deps): update rust crate tokio-util to v0.7.20 #3012
chore(deps): update rust crate schemars to v1.2.3 #3009
chore(deps): update rust crate serde_json to v1.0.154 #3010
chore(deps): update dependency @types/node to v24.19.2 #3007
chore(deps): update dependency web-tree-sitter to ^0.27.0 #2914
chore(deps): update rust crate napi-derive to v3.6.12 #3008
chore(deps): update dependency smol-toml to v1.9.1 #2985
fix(deps): update rust-wasm-bindgen monorepo #2924
chore(deps): update rust crate tree-sitter-swift to v0.7.4 #2982
chore(deps): update rust crate napi-build to v2.6.0 #2987
chore(deps): update rust crate napi to v3.14.2 #2986
fix(config): reject unknown top-level keys in rule config #3006
fix(cli): report skipped files and reason in --inspect entity (#3044) #2990
fix(config): reject unknown top-level keys in rule config (#3006) #2963
Revert "chore(deps): update dependency node to v26 (#3039)" 6b5708a
fix: mark GlobalRules::insert crate pub only and unsafe e52c478
fix: fix web-tree-sitter 0.26 memory corruption ecb8578

bingo-js/bingo (bingo)

`v0.15.0`

Compare Source

Minor Changes

#495 1e0acec Thanks @michaelfaith! - Added exports conditions to the package to establish a strict public API.
In addition to the primary entry point, the package.json is also exported.
#495 1e0acec Thanks @michaelfaith! - Updated supported versions of node to ^22.15.0 || ^24.15.0 || >=26.0.0, removing support for EoL versions.

Patch Changes

#509 89223e9 Thanks @michaelfaith! - Declared sideEffects: false to the package.json.
Updated dependencies [1e0acec, 1e0acec, 89223e9]:
- bingo-fs@0.7.0
- bingo-requests@0.6.0
- bingo-systems@0.8.0

`v0.14.0`

Compare Source

Minor Changes

#480 471336b Thanks @mike-4040! - Declare zod as an optional peer dependency

bingo and the input-from-* packages list zod (^4.4.3) under both dependencies and optional peerDependencies.
Package managers that support peers with defaults, such as pnpm and Yarn, give bingo the project's own copy of zod and warn when its version falls outside the supported range.
Projects that use zod only through bingo get it installed as a regular dependency.

guybedford/es-module-lexer (es-module-lexer)

`v3.0.4`

Compare Source

What's Changed

perf(lexer): reduce TS lookahead work by @BridgeAR in #258
fix(parser): preserve complete import attribute metadata by @BridgeAR in #260
fix(ts): lex / after a postfix non-null assertion as division by @guybedford in #263
ci: add release and publish workflows by @guybedford in #264

Full Changelog: guybedford/es-module-lexer@3.0.3...3.0.4

43081j/fast-wrap-ansi (fast-wrap-ansi)

`v0.2.2`

Compare Source

What's Changed

chore: fix typescript build by @43081j in #95

Full Changelog: 43081j/fast-wrap-ansi@0.2.1...0.2.2

mermaid-js/mermaid (mermaid)

`v12.3.0`

Compare Source

Minor Changes

#8164 592d0e4 Thanks @filipsajdak! - feat: add the open-arrow and hollow-circle edge markers, so a notation can tell two kinds of flow apart by whether the head is filled
#8165 5c8aa5d Thanks @filipsajdak! - feat: add the BPMN element shapes - events, gateways, activities, data objects, data stores and text annotations - each reporting where a line meets what is drawn
#8470 692d22a Thanks @openmindednewby! - feat: flowchart edges accept a step number (e1@{ step: 1 }); a dot travels the edges in step order and loops, hidden under prefers-reduced-motion
#8478 56aa105 Thanks @openmindednewby! - feat: add flowchart.stepDuration to set how many seconds each step of the flowchart step animation lasts
#8479 800f7ef Thanks @openmindednewby! - feat: highlight the flowchart edge whose step is playing, in sync with the step animation dot
#8480 50d6294 Thanks @openmindednewby! - feat: add flowchart.stepNumbers to show each step edge's number in a badge

Patch Changes

#8443 2ff8286 Thanks @knsv-bot! - fix: agentflow renders the a[/…/] short form as an input instead of falling back to a task with a SHAPE_UNSUPPORTED warning
#8661 b200b27 Thanks @pbrolin47! - fix: Bump DOMPurify to 3.4.17 to address GHSA-55q2-fjhq-7xh7 and GHSA-6688-9rhm-gjv2
#8633 686f350 Thanks @sidharthv96! - chore: Remove the uuid dependency and the unused legacy ER diagram renderer
#8661 7eec083 Thanks @pbrolin47! - fix: Stop an edge from a node inside a subgraph from crossing an edge from the subgraph itself to the same node with ELK 0.10+ (e.g. outer --> a with da --> a, or three --> two with two --> c2)
#8532 42d3760 Thanks @Devehab! - fix: upgrade bundled elkjs from 0.9.3 to 0.12.0, which is licensed EPL-2.0 OR GPL-3.0-or-later, so GPL-3.0 projects can ship mermaid with ELK
#8162 d5ca27a Thanks @filipsajdak! - fix(swimlanes): size a lane that holds a nested subgraph (TB drew it as an empty 0x0 box, and likewise an outer group holding lanes), and grow LR and RL lanes by the nested group's padding
#8405 b4299f2 Thanks @filipsajdak! - fix: do not draw a stray empty swimlane when a node is listed in two lanes, and warn about it and about a subgraph nested in a lane
#8385 37d0ace Thanks @filipsajdak! - fix(swimlanes): keep two arrowheads that land on one face of a node apart when a sibling edge is straightened
#8385 38e810a Thanks @filipsajdak! - fix(swimlanes): an edge routed round the outside of a diamond now arrives at one of its vertices instead of ending in empty space beside it
#8385 25d7e31 Thanks @filipsajdak! - fix(swimlanes): a second edge leaving a diamond on the same level as its target now leaves from a free vertex instead of running beside the first
#8171 a4750b4 Thanks @filipsajdak! - fix: dock a swimlane edge on the shape it points at, so a line reaches an event's ring instead of stopping at the room its caption reserves
#8385 67315b9 Thanks @filipsajdak! - fix: an edge label no longer pushes the nodes it joins a rank apart
#8385 21a1f5c Thanks @filipsajdak! - fix(swimlanes): stop the crossing cleanup from joining two routes at a corner so they read as one line
#8385 e14bc3a Thanks @filipsajdak! - fix(swimlanes): an edge no longer arrives at the vertex of a hexagon that another edge leaves from
#8459 edd162f Thanks @Yun-seoung! - fix: Allow flowchart edge IDs regardless of whitespace after the node shape

Edge IDs may no longer contain [ ] ( ) { } |.
#8402 4f2bade Thanks @pcp-cmd! - fix: Render use case include and extend relationship labels with UML guillemets.

microsoft/playwright (playwright)

`v1.65.0`

Compare Source

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  reporter: [
    ['failures'],
    ['html', { onlyFailures: true }],
  ],
});

🎯 Test runner

New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:
```
test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});
```
test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:
```
test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});
```
New PLAYWRIGHT_TRANSFORM_CACHE_DIR environment variable sets the directory for transpiled test files, for example on a Linux machine shared with other users.

New APIs

New options timeout and signal in cdpSession.send().
New testRun.mode() returns the execution mode of a suite during reporter.preprocess().

Breaking Changes ⚠️

TypeScript class fields now follow useDefineForClassFields from your tsconfig.json, the same as tsc. It is enabled for ES2022 and later targets, and when target is not specified. A field initializer that reads a constructor parameter property now fails, because the initializer runs first:
```
class LoginPage {
  // TypeError: Cannot read properties of undefined (reading 'getByRole')
  readonly submit = this.page.getByRole('button', { name: 'Submit' });

  constructor(private readonly page: Page) {}
}
```
Move the initialization to the constructor, or set "useDefineForClassFields": false in your tsconfig.json.
Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.selectOption() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert.
A sharded run now fails with "No tests found" when no tests match across all shards. Pass --pass-with-no-tests to allow this. An empty shard still passes when other shards have tests.
Cookie matching now follows RFC 6265. With a URL, browserContext.cookies() and apiRequestContext.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name.
Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use httpCredentials.
Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.getByRole() with a name, locator.ariaSnapshot() and expect(locator).toMatchAriaSnapshot().
String and URLSearchParams values of the params option in APIRequestContext requests are now appended to the query that the URL already has, instead of replacing it.
.css, .less and .scss imports in test files now load as empty modules instead of being removed, so the imported file must exist.
The blob reporter again deletes the content of its output directory before it writes the report. Playwright 1.64 kept reports with other names.
Test locations of imported calls such as test( in CommonJS output now point to the start of the callee, for example a.spec.ts:3:7 instead of a.spec.ts:3:11. This is the same as in ESM.

Announcements

⚠️ Playwright no longer tests on Node.js 20. Use Node.js 22, 24 or 26, as listed in the system requirements.
🐳 Docker images now include Node.js 26 instead of Node.js 24, and the latest patch of Chromium on the same branch.

Browser Versions

Chromium 158.0.8127.18
Mozilla Firefox 159.0
WebKit 27.2

This version was also tested against the following stable channels:

Google Chrome 157
Microsoft Edge 156

`v1.64.1`

Compare Source

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

`v1.64.0`

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});

New fps option in testOptions.video, recordVideo and
screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
New style option takes CSS declarations for the point marker, the target
highlight and the action title. It replaces the fontSize option, which is now deprecated.
The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
quality.
All video options are also available in Playwright MCP and playwright-cli.

🎯 Test runner

New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

// playwright.config.ts
import { defineConfig, devices } from '@playwright/test';

export default defineConfig({
  projects: [
    { name: 'chromium', use: devices['Desktop Chrome'] },
    { name: 'firefox', use: devices['Desktop Firefox'], default: false },
    { name: 'webkit', use: devices['Desktop Safari'], default: false },
  ],
});

npx playwright test                     # runs chromium only
npx playwright test --project=firefox   # runs firefox
npx playwright test --project="*"       # runs all three, for example on CI

New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

npx playwright test --shuffle
# Running 42 tests using 4 workers, shuffle seed 271828182
# ...

# Pass the seed to reproduce the same order.
npx playwright test --shuffle 271828182

New lock option in test.describe.configure() adds test locks to all tests in a file or a group:
```
test.describe.configure({ lock: 'user-settings' });
```

New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

// playwright.config.ts
export default defineConfig({
  expect: {
    toHaveScreenshot: { type: 'webp' },
  },
});

🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);

New APIs

New page.getByRef() locates an element by its aria ref, such as e2, reported by page.ariaSnapshot() in the 'ai' mode.
New option includeShadow in page.content() and frame.content() serializes open shadow roots as declarative shadow DOM.
New option signCount sets the initial signature counter of a virtual credential. credentials.create() and credentials.get() return the current signCount, and it is saved and restored together with the credentials in the storage state.
New fullConfig.filteredProjects lists the projects that were selected to run after applying the --project filter. It is available in global setup and reporters.

New apiRequestContext.addCookies(), apiRequestContext.cookies() and apiRequestContext.clearCookies() manage cookies of a request context, mirroring the BrowserContext methods:

await request.addCookies([{ name: 'session-id', value: '42', url: 'https://example.com' }]);
console.log(await request.cookies('https://example.com'));
await request.clearCookies({ name: 'session-id' });

Breaking changes ⚠️

screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:
```
// playwright.config.ts
export default defineConfig({
  use: {
    ...devices['Desktop Chrome'],
    screen: undefined,
  },
});
```
JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.
--update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.
Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions

Chromium 156.0.8078.4
Mozilla Firefox 157.0
WebKit 27.2

This version was also tested against the following stable channels:

Google Chrome 155
Microsoft Edge 155

`v1.63.0`

Compare Source

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-11-08T16:28:09Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/bingo@0.13.2 ⏵ 0.15.0	⁺³		⁺¹

View full report

cloudflare-workers-and-pages · 2026-11-08T16:28:17Z

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-npm-packages-viteplus-dev.voidzero-docs.workers.dev (commit `522d502`)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://1e81bcf4-viteplus-dev.voidzero-docs.workers.dev	`522d502`	2026-11-08T21:57:24.592Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://f296e23d-viteplus-dev.voidzero-docs.workers.dev	`fdc4a2f`	2026-11-08T16:28:08.160Z	Visit the dashboard ↗

github-actions · 2026-11-08T16:36:05Z

CLI artifact sizes (`522d502`)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact	Format	Base	PR	Change
`packages/cli/dist`	Directory total	2.33 MiB	2.33 MiB	0 B (0.00%)
`packages/core/dist`	Directory total	4.08 MiB	4.08 MiB	0 B (0.00%)
Combined package dist	Directory total	6.41 MiB	6.41 MiB	0 B (0.00%)
`vp` (Linux x64)	Binary	8.31 MiB	8.31 MiB	0 B (0.00%)
`vp` (Linux x64)	gzip -9	3.80 MiB	3.80 MiB	0 B (0.00%)
NAPI (Linux x64)	Binary	36.20 MiB	36.20 MiB	0 B (0.00%)
NAPI (Linux x64)	gzip -9	14.44 MiB	14.44 MiB	0 B (0.00%)
`vp` (macOS ARM64)	Binary	5.42 MiB	5.42 MiB	0 B (0.00%)
`vp` (macOS ARM64)	gzip -9	3.23 MiB	3.23 MiB	0 B (0.00%)
NAPI (macOS ARM64)	Binary	43.01 MiB	43.01 MiB	0 B (0.00%)
NAPI (macOS ARM64)	gzip -9	18.64 MiB	18.64 MiB	0 B (0.00%)
`vp` (Windows x64)	Binary	6.16 MiB	6.16 MiB	0 B (0.00%)
`vp` (Windows x64)	gzip -9	2.85 MiB	2.85 MiB	0 B (0.00%)
NAPI (Windows x64)	Binary	32.33 MiB	32.33 MiB	0 B (0.00%)
NAPI (Windows x64)	gzip -9	13.23 MiB	13.23 MiB	+1 B (+0.00%)
Trampoline (Windows x64)	Binary	13.50 KiB	13.50 KiB	0 B (0.00%)
Trampoline (Windows x64)	gzip -9	7.09 KiB	7.09 KiB	0 B (0.00%)
Installer (Windows x64)	Binary	4.66 MiB	4.66 MiB	0 B (0.00%)
Installer (Windows x64)	gzip -9	2.23 MiB	2.23 MiB	-1 B (-0.00%)

chore(deps): update npm packages

3351741

renovate Bot force-pushed the renovate/npm-packages branch from fdc4a2f to 3351741 Compare November 8, 2026 21:55

chore: update lockfiles

522d502

Navigation Menu

Repository navigation

chore(deps): update npm packages - #3392

chore(deps): update npm packages#3392
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/npm-packages

renovate Bot commented Nov 8, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Nov 8, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Nov 8, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 8, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor Changes

Patch Changes

Minor Changes

What's Changed

What's Changed

Minor Changes

Patch Changes

🥟 Run tests with Bun

🚨 Reports with only failures

🎯 Test runner

New APIs

Breaking Changes ⚠️

Announcements

Browser Versions

Bug Fixes

🧰 WebMCP

🎬 Better videos

🎯 Test runner

🪆 Locator.within()

New APIs

Breaking changes ⚠️

Browser Versions

🔒 Test locks

Configuration

Uh oh!

socket-security Bot commented Nov 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cloudflare-workers-and-pages Bot commented Nov 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-npm-packages-viteplus-dev.voidzero-docs.workers.dev (commit 522d502)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Uh oh!

github-actions Bot commented Nov 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CLI artifact sizes (522d502)

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Nov 8, 2026 •

edited

Loading

socket-security Bot commented Nov 8, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Nov 8, 2026 •

edited

Loading

Preview URL: https://renovate-npm-packages-viteplus-dev.voidzero-docs.workers.dev (commit `522d502`)

github-actions Bot commented Nov 8, 2026 •

edited

Loading

CLI artifact sizes (`522d502`)