chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #1999 · stacksjs/ts-tokens

renovate · 2026-03-30T10:56:17Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@inquirer/prompts (source)	`^8.2.1` → `^8.7.2`	dependencies	minor
@playwright/test (source)	`^1.58.2` → `^1.63.0`	devDependencies	minor
@solana/spl-token	`^0.4.14` → `^0.4.15`	peerDependencies	patch
@solana/spl-token	`^0.4.14` → `^0.4.15`	devDependencies	patch
@solana/spl-token	`^0.4.14` → `^0.4.15`	dependencies	patch
@solana/wallet-adapter-react	`>=0.15.39` → `>=0.15.40`	peerDependencies	patch
@solana/wallet-adapter-react-ui	`>=0.9.39` → `>=0.9.40`	peerDependencies	patch
@solana/web3.js (source)	`^1.98.4` → `^1.99.0`	peerDependencies	minor
@solana/web3.js (source)	`^1.98.4` → `^1.99.0`	devDependencies	minor
@solana/web3.js (source)	`^1.98.4` → `^1.99.0`	dependencies	minor
@stacksjs/clapp	`^0.2.0` → `^0.2.16`	dependencies	patch
@storybook/react (source)	`^10.2.10` → `^10.6.0`	devDependencies	minor
@storybook/react-vite (source)	`^10.2.10` → `^10.6.0`	devDependencies	minor
@testing-library/react	`^16.3.2` → `^16.3.3`	devDependencies	patch
@types/bun (source)	`^1.3.9` → `^1.4.2`	devDependencies	minor
@types/node (source)	`^25.2.3` → `^25.9.7`	devDependencies	minor
@types/react (source)	`^19.2.14` → `^19.3.0`	devDependencies	minor
@types/react-dom (source)	`^19.2.3` → `^19.3.0`	devDependencies	minor
@types/vscode (source)	`^1.109.0` → `^1.137.0`	devDependencies	minor
@vitejs/plugin-vue (source)	`^6.0.0` → `^6.0.9`	devDependencies	patch
@vue/test-utils	`^2.4.6` → `^2.5.0`	devDependencies	minor
actions/checkout	`v6.0.2` → `v6.1.0`	action	minor
better-dx	`^0.2.6` → `^0.2.25`	devDependencies	patch
better-dx	`^0.2.15` → `^0.2.25`	devDependencies	patch
bun-plugin-dtsx (source)	`^0.11.1` → `^0.11.12`	devDependencies	patch
bunfig	`^0.15.6` → `^0.15.19`	peerDependencies	patch
happy-dom	`^20.6.2` → `^20.14.5`	devDependencies	minor
ora	`^9.3.0` → `^9.4.1`	dependencies	minor
oven-sh/setup-bun	`v2.1.2` → `v2.2.0`	action	minor
react (source)	`^19.2.4` → `^19.3.0`	peerDependencies	minor
react (source)	`^19.2.4` → `^19.3.0`	devDependencies	minor
react-dom (source)	`>=19.2.4` → `>=19.3.0`	peerDependencies	minor
react-dom (source)	`^19.2.4` → `^19.3.0`	devDependencies	minor
shivammathur/setup-php	`2.37.1` → `2.37.2`	action	patch
stacksjs/action-releaser	`v1.2.9` → `v1.2.11`	action	patch
storybook (source)	`^10.2.10` → `^10.6.0`	devDependencies	minor
vite (source)	`^7.1.0` → `^7.3.6`	devDependencies	minor
vscode	`^1.109.0` → `^1.137.0`	engines	minor
vue (source)	`^3.5.28` → `^3.5.42`	peerDependencies	patch
vue (source)	`^3.5.28` → `^3.5.42`	devDependencies	patch

Release Notes

SBoudrias/Inquirer.js (@inquirer/prompts)

`v8.7.2`

Compare Source

@inquirer/prompts@8.7.2

What's new

Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

Included

@inquirer/checkbox@^5.2.5
@inquirer/confirm@^6.3.2
@inquirer/editor@^5.3.3
@inquirer/expand@^5.1.5
@inquirer/input@^5.1.6
@inquirer/number@^4.2.3
@inquirer/password@^5.2.2
@inquirer/rawlist@^5.3.5
@inquirer/search@^4.3.3
@inquirer/select@^5.2.5

`v8.7.1`

Compare Source

@inquirer/prompts@8.7.1

What's new

All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

@inquirer/checkbox@^5.2.4
@inquirer/confirm@^6.3.1
@inquirer/editor@^5.3.2
@inquirer/expand@^5.1.4
@inquirer/input@^5.1.5
@inquirer/number@^4.2.2
@inquirer/password@^5.2.1
@inquirer/rawlist@^5.3.4
@inquirer/search@^4.3.2
@inquirer/select@^5.2.4

`v8.7.0`

Compare Source

@inquirer/prompts@8.7.0

What's new

password gains the toggleMask option (ctrl+t to reveal the typed value).
confirm now matches localized yes/no answers per-locale.
Prettified prompt and theme types for better IDE display.
Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

@inquirer/checkbox@^5.2.3
@inquirer/confirm@^6.3.0
@inquirer/editor@^5.3.1
@inquirer/expand@^5.1.3
@inquirer/input@^5.1.4
@inquirer/number@^4.2.1
@inquirer/password@^5.2.0
@inquirer/rawlist@^5.3.3
@inquirer/search@^4.3.1
@inquirer/select@^5.2.3

`v8.6.0`

Compare Source

@inquirer/prompts@8.6.0

The all-in-one prompts package, re-exporting every individual prompt at its latest version.

Highlights

This release rides on @inquirer/core@12.0.0, which makes the useState setter accept a reducer/updater function. It also brings a new initialValue option to search, plus fixes for number, confirm, and editor.

What's new

@inquirer/search — new initialValue?: string option to pre-fill the search input (#2205)

What's fixed

@inquirer/number — avoid floating-point step errors; accept explicit undefined as default (#2166, #2182)
@inquirer/confirm — accept explicit undefined as default (#2182)
@inquirer/editor — accept explicit undefined as default (#2182)

Included prompts

@inquirer/checkbox@5.2.2
@inquirer/confirm@6.2.0
@inquirer/editor@5.3.0
@inquirer/expand@5.1.2
@inquirer/input@5.1.3
@inquirer/number@4.2.0
@inquirer/password@5.1.2
@inquirer/rawlist@5.3.2
@inquirer/search@4.3.0
@inquirer/select@5.2.2

Note: This release depends on @inquirer/core@^12.0.0, which contains a breaking change to the useState setter type (it now accepts a reducer function). See the @inquirer/core@12.0.0 release notes for details.

`v8.5.2`

Compare Source

Fix security warnings in external-editor

`v8.5.1`

Compare Source

Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

`v8.5.0`

Compare Source

Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
Chore: Bump dependencies.

`v8.4.3`

Compare Source

Fix: Windows rendering bug
Fix: Preserve exact literal types in choices array (Typescript only)
Fix: Allow input default value to be of type undefined (Typescript only)
Bump dependencies

`v8.4.2`

Compare Source

Fix: some Windows terminals would freeze and not react to keypresses.

`v8.4.1`

Compare Source

Improve expand prompt type inferrence.

`v8.4.0`

Compare Source

Feat: Added a loading message while validating editor prompt input.
Type improvement: Better type inference with checkbox, search and expand prompts.
Fix: editor prompt not always properly handling editor path on windows.

`v8.3.2`

Compare Source

Fix broken 8.3.1 release process.

`v8.3.1`

Compare Source

Bump dependencies

`v8.3.0`

Compare Source

Fix: Keypresses happening before a prompt is rendered are now ignored.
Fix (checkbox): Element who're both checked and disabled are now always included in the returned array.
Feat (select/checkbox): Cursor will now hover disabled options of the list; but they still cannot be interacted with. This prevents the cursor jumping ahead in ways that can be confusing.
Feat: various new theme options to make all prompts content localizable.

Finally, see our new @inquirer/i18n package!

microsoft/playwright (@playwright/test)

🧱 New component testing model

Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a

gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates
to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) /
unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an
AbortSignal, letting you
cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);

await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot()
can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');

// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and locator.screenshot() also accept webp as a type,
where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before
reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded,
fixed, or failing through a TestRun object:

class MyReporter {
  async preprocess({ config, suite, testRun }) {
    for (const test of suite.allTests()) {
      if (shouldSkip(test))
        testRun.skip(test);
    }
  }
}

🔁 Isolated retries

New testConfig.retryStrategy controls when failed tests are retried. The default
'immediate' retries as soon as a worker is free; 'isolated' runs all retries at the end,
one by one in a single worker, to minimize interference with the rest of the suite:

// playwright.config.ts
export default defineConfig({
  retries: 2,
  retryStrategy: 'isolated',
});

New APIs

Browser and Context

New option credentials includes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.

Actions

New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scroll-into-view.

Network

New apiResponse.timing() returns resource timing information for an API response.

Evaluation

New locator.waitForFunction() waits until a function — called with the matching element — returns a truthy value.
page.evaluate() and related methods now accept functions as evaluate arguments.
page.addInitScript() / browserContext.addInitScript() now accept functions as init-script arguments.

Command line & MCP

Playwright now bundles the Playwright MCP server and playwright-cli, runnable via npx playwright mcp and npx playwright cli.

Reporters

The HTML report's Merge files grouping — previously only a UI toggle — can now be enabled from the config with the new mergeFiles reporter option:

// playwright.config.ts
export default defineConfig({
  reporter: [['html', { mergeFiles: true }]],
});

Announcements

⚠️ Debian 11 is not supported anymore.

Browser Versions

Chromium 151.0.7922.34
Mozilla Firefox 153.0
WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 151
Microsoft Edge 151

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
Supported expect.soft.poll(...).
New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
New -G command line shorthand for --grep-invert.

🛠️ Other improvements

Playwright now supports Ubuntu 26.04.
HAR and trace recordings now include WebSocket requests.

Browser Versions

Chromium 149.0.7827.55
Mozilla Firefox 151.0
WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 149
Microsoft Edge 149

`v1.60.0`

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

Event browser.on('context') — fired when a new context is created on the browser.
BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

New webError.location() mirrors consoleMessage.location().
consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

HTML reporter:
- npx playwright show-report accepts .zip files directly — no need to unzip first.
- Steps that contain attachments inside nested children show an indicator on the parent step.
- The repeatEachIndex is shown in the test header when non-zero.
Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

Removed long-deprecated APIs:
- Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
- handle option on BrowserContext.exposeBinding and Page.exposeBinding.
- logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
- Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

Chromium 148.0.7778.96
Mozilla Firefox 150.0.2
WebKit 26.4

This version was also tested against the following stable channels:

Google Chrome 147
Microsoft Edge 147

`v1.59.1`

Compare Source

Bug Fixes

[Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

`v1.59.0`

Compare Source

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

Screencast recordings
Action annotations
Visual overlays
Real-time frame capture
Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:

await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();

Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:

await page.screencast.showActions({ position: 'top-right' });

screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:

// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
    },
  },
});

Visual overlays — add chapter titles and custom HTML overlays on top of the page for richer narration:

await page.screencast.showChapter('Adding TODOs', {
  description: 'Type and press enter for each TODO',
  duration: 1000,
});

await page.screencast.showOverlay('<div style="color: red">Recording</div>');

Real-time frame capture — stream JPEG-encoded frames for custom processing like thumb

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added dependencies minor labels Mar 30, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 0512f10 to 07b658f Compare April 7, 2026 18:20

renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from d7fe6f2 to 693b4de Compare April 15, 2026 10:30

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0bf18a2 to 5e8162e Compare April 22, 2026 08:37

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from a59fd57 to 9636644 Compare April 29, 2026 14:48

renovate Bot force-pushed the renovate/all-minor-patch branch from 9636644 to 52c1cd3 Compare April 30, 2026 12:34

renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from c45a9b7 to 352a075 Compare May 14, 2026 16:42

renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 5397b68 to c81df56 Compare May 20, 2026 16:41

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 191b569 to 2b2b573 Compare May 27, 2026 18:06

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 35b6761 to c4b6ef2 Compare June 4, 2026 17:13

chore(deps): update all non-major dependencies

1bdfea7

Navigation Menu

Uh oh!

chore(deps): update all non-major dependencies - #1999

chore(deps): update all non-major dependencies#1999
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

@​inquirer/prompts@8.7.2

What's new

Included

@​inquirer/prompts@8.7.1

What's new

Included

@​inquirer/prompts@8.7.0

What's new

Included

@​inquirer/prompts@8.6.0

Highlights

What's new

What's fixed

Included prompts

🧱 New component testing model

🛑 Cancel operations with AbortSignal

🖼️ WebP screenshots

🧩 Custom test filtering with Reporter.preprocess()

🔁 Isolated retries

New APIs

Browser and Context

Actions

Network

Evaluation

Command line & MCP

Reporters

Announcements

Browser Versions

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

Test runner

🛠️ Other improvements

Browser Versions

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

Locators and Assertions

Network

Errors and Reporting

Test runner

🛠️ Other improvements

Breaking Changes ⚠️

Browser Versions

Bug Fixes

🎬 Screencast

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 30, 2026 •

edited

Loading

@inquirer/prompts@8.7.2

@inquirer/prompts@8.7.1

@inquirer/prompts@8.7.0

@inquirer/prompts@8.6.0