chore(deps-dev): bump the dev-dependencies group with 6 updates
Bumps the dev-dependencies group with 6 updates:
| Package | From | To |
|---|---|---|
| @axe-core/playwright | 4.11.3 | 4.12.1 |
| @playwright/test | 1.61.0 | 1.61.1 |
| @types/node | 26.0.0 | 26.0.1 |
| typescript-eslint | 8.61.1 | 8.62.0 |
| vite | 8.0.16 | 8.1.0 |
| wrangler | 4.103.0 | 4.105.0 |
Updates @axe-core/playwright from 4.11.3 to 4.12.1
Commits
- See full diff in compare view
Updates @playwright/test from 1.61.0 to 1.61.1
Release notes
Sourced from @playwright/test's releases.
v1.61.1
Bug Fixes
- #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
- #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
- #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
- #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
- #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks
Commits
39e3553cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...4328122chore: mark v1.61.1 (#41404)2c29a94fix(tracing): stop recording websocket frames outside of chunks (#41398)4324b19cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend041e7e3cherry-pick(#41364): fix(har):WebSocketmessage timestamps should be in mi...b8a0fc3cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...b5a3175cherry-pick(#41319): fix(loader): support other node versionsd4724a9cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image- See full diff in compare view
Updates @types/node from 26.0.0 to 26.0.1
Commits
- See full diff in compare view
Updates typescript-eslint from 8.61.1 to 8.62.0
Release notes
Sourced from typescript-eslint's releases.
v8.62.0
8.62.0 (2026-06-22)
🚀 Features
- remove redundant package.json "files" (#12444)
🩹 Fixes
- add "files" to rule-schema-to-typescript-types (#12441)
❤️ Thank You
- Kirk Waiblinger
@kirkwaiblingerSee GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
Changelog
Sourced from typescript-eslint's changelog.
8.62.0 (2026-06-22)
🚀 Features
- remove redundant package.json "files" (#12444)
❤️ Thank You
- Kirk Waiblinger
@kirkwaiblingerSee GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
Commits
54e2857chore(release): publish 8.62.081e4c26feat: remove redundant package.json "files" (#12444)- See full diff in compare view
Updates vite from 8.0.16 to 8.1.0
Release notes
Sourced from vite's releases.
create-vite@8.1.0
Please refer to CHANGELOG.md for details.
plugin-legacy@8.1.0
Please refer to CHANGELOG.md for details.
v8.1.0
Please refer to CHANGELOG.md for details.
plugin-legacy@8.1.0-beta.0
Please refer to CHANGELOG.md for details.
v8.1.0-beta.0
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
8.1.0 (2026-06-23)
Features
- extend
server.fs.denylist with common files (#22707) (61ba8fd)- update rolldown to 1.1.2 (#22695) (4f008a6)
- use
~for Rolldown (#22693) (9928722)Bug Fixes
- bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
- cache falsy values in perEnvironmentState (#22715) (0e91e79)
- glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
- html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
- optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
- resolved build options should be kept as a getter (#22691) (3527191)
- server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
- use literal envPrefix queries for Vite Task (#22706) (da72733)
- warn on deprecated envFile (#22555) (ed7b283)
Code Refactoring
- client: inline dev-id value in CSS selector (#22736) (57f59bc)
- remove unused removeRawQuery util (#22724) (403cc60)
- use
rolldownOptionsproperty for chunkImportMap (#22692) (8e8816c)8.1.0-beta.0 (2026-06-15)
Features
import.meta.globsupportcaseSensitiveoption (#21707) (2ad6737)- add warning to discourage Vite with yarn pnp (#21906) (3fbb55a)
- build: chunk importmap (#21580) (e180312)
- css: support lightningcss plugin dependency (#21748) (0b7aaed)
- deps: bump
@vitejs/devtoolspeer dependency version (#22542) (d2c2bc0)- html: add
html.additionalAssetSourcesoption (#21412) (a41404b)- integrate with Vite Task for zero-config build caching (#22453) (f8d75f7)
- rename
server.hmroptions toserver.wsoptions (#21357) (9ce3036)- server: support multiple hosts in __VITE_ADDITIONAL_SERVER_ALLOWED_HOSTS (#21501) (735f9a1)
- track dependencies when loading config with native (#22602) (a7e2da8)
- types: add more precise typing for known
querytypes to match knownastypes (#21863) (cc39e55)- update rolldown to 1.1.1 (#22593) (8a13d63)
- wasm: direct .wasm imports (WASM ESM Integration) (#21779) (c23d85b)
Bug Fixes
- apply correct fs restrictions for pnpm gvs (#22415) (092320b)
- css: support external CSS with lightningcss (#18389) (d64a1a5)
- deps: update all non-major dependencies (#22637) (44bb9d9)
- deps: update all non-major dependencies (#22681) (f4f0633)
- html: insert import map before modulepreload that is not self-close tag (#21409) (e399c89)
- optimizer: preserve sourcemaps for transformed optimized deps with follow-up transforms (#22428) (1298951)
... (truncated)
Commits
5909efdfix: allow multiplebindCLIShortcutscalls with shortcut merging (#21103)39a0a15chore(deps): update rolldown-related dependencies (#21095)6a34ac3fix(deps): update all non-major dependencies (#21096)02ceaecchore(deps): update dependency@rollup/plugin-commonjsto v29 (#21099)572aacarelease: v7.2.2728c8eefix: revert "refactor: use fs.cpSync (#21019)" (#21081)a532e68release: v7.2.182d2d6cfix(worker): some worker asset was missing (#21074)f83264frefactor(build): renameindexOfMatchInSlicetofindPreloadMarker(#21054)8293de0release: v7.2.0- Additional commits viewable in compare view
Updates wrangler from 4.103.0 to 4.105.0
Release notes
Sourced from wrangler's releases.
wrangler@4.105.0
Minor Changes
#14311
34e0cefThanks@sherryliu-lsy! - Add Google Artifact Registry support tocontainers registries configure
wrangler containers registries configurenow recognizes*-docker.pkg.dev(Google Artifact Registry) domains.
- The Google service account email is the public credential, supplied with
--gar-email. It must match theclient_emailin the service account key.- The service account JSON key is the private credential. It is provided via stdin (a file path, raw JSON, or base64) or an interactive prompt (a file path or base64) — never as a CLI flag, so it does not appear in shell history. The key is validated against
--gar-emailand stored base64-encoded.- Secret reuse inherits the existence-first flow: when the target Secrets Store secret already exists, it is reused by reference and the key is not required. In that case the email cannot be verified locally; it is validated against the key when images are pulled.
<path-to-key>.json | npx wrangler@latest containers registries configure <region>-docker.pkg.dev --gar-email=<service-account-email> --secret-name=Google_Service_Account_JSON_KeyPatch Changes
#14424
5f40dd5Thanks@MattieTK! - Bumpam-i-vibingfrom 0.4.0 to 0.5.0This updates the agentic environment detection library to the latest version, which adds detection for the Pi coding agent (
earendil-works/pi).#14406
3b743c1Thanks@dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
Dependency From To workerd 1.20260623.1 1.20260625.1 #14343
daa5389Thanks@th0m! - Use digest-pinned image references for Dockerfile container deploysDockerfile-backed container deploys now use the pushed image digest when deploying the container application. This lets snapshot-enabled container apps pass Cloudchamber validation while keeping local, non-pushed builds and registry image URI deploys unchanged.
#14394
8a5cf8cThanks@Partha-Shankar! - fix(d1): escapemigrationsTableNameand filenames in SQLite queriesD1 migration commands in both
wranglerand@cloudflare/vitest-pool-workersinterpolated themigrationsTableNameconfig value and migration filenames directly into SQL strings without any escaping. This meant:
- A table name such as
my"tablewould produce invalid SQL inCREATE TABLE,SELECT, andINSERTstatements, and- A migration filename containing an apostrophe (e.g.
what's-new.sql) would break theINSERT INTO ... VALUES ('...')statement appended after each migration inwrangler.Both identifiers are now properly escaped before interpolation:
migrationsTableNameis wrapped in double-quotes with internal double-quotes doubled (SQL-standard identifier quoting), and migration filenames used as string literals have their single-quotes doubled before insertion.Updated dependencies [
3b743c1]:
- miniflare@4.20260625.0
wrangler@4.104.0
Minor Changes
- #14369
e312decThanks@edmundhung! - AddgetEnv()tocreateTestHarness()Worker handles
... (truncated)
Commits
70d97d9Version Packages (#14401)5f40dd5[wrangler] Bump am-i-vibing from 0.4.0 to 0.5.0 (#14424)3b743c1Bump workerd from 1.20260623.1 to 1.20260625.1 in the workerd-and-workers-typ...10543c1[wrangler] interpolate current date to fix brittle test (#14421)76cc8d6extremely minor refactor of versions upload/deploy validation (#14400)daa5389Use digest-pinned images for Dockerfile container deploys (#14343)34e0cefCC-7948 Update wrangler CLI to support GAR (#14311)8a5cf8c[wrangler] fix(d1): escape migrationsTableName and filenames in SQLite querie...ec856a1Version Packages (#14370)fab565fBump workerd from 1.20260621.1 to 1.20260623.1 in the workerd-and-workers-typ...- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Summary by cubic
Updates the dev toolchain (vite, wrangler, @playwright/test, @axe-core/playwright, typescript-eslint, @types/node) to latest minor/patch versions for better build reliability, test stability, and accessibility checks. No runtime changes.
- Dependencies
vite8.0.16 → 8.1.0: integrates Vite Task caching, updates Rolldown.wrangler4.103.0 → 4.105.0: bumpsworkerd/miniflare, fixes D1 migration escaping, adds GAR support.@playwright/test1.61.0 → 1.61.1: bug fixes for expect, tracing, and Node loader.@axe-core/playwright4.11.3 → 4.12.1: upgradesaxe-coreto 4.12.1.typescript-eslint8.61.1 → 8.62.0: minor fixes and cleanup.@types/node26.0.0 → 26.0.1: patch typings update.