Skip to content

chore(deps-dev): bump the npm-development group across 1 directory with 9 updates#361

Merged
brendanjryan merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-development-8c2e422f6a
Apr 18, 2026
Merged

chore(deps-dev): bump the npm-development group across 1 directory with 9 updates#361
brendanjryan merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-development-8c2e422f6a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026 •
edited
Loading

Bumps the npm-development group with 9 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.27.1 1.29.0
@playwright/test 1.58.2 1.59.1
browserslist 4.28.1 4.28.2
elysia 1.4.27 1.4.28
file-type 21.3.2 22.0.1
playwright 1.58.2 1.59.1
rolldown 1.0.0-rc.12 1.0.0-rc.15
testcontainers 11.11.0 11.14.0
zile 0.0.24 0.0.25

Updates @modelcontextprotocol/sdk from 1.27.1 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

Commits

Updates @playwright/test from 1.58.2 to 1.59.1

Release notes

Sourced from @​playwright/test's releases.

v1.59.1

Bug Fixes

  • [Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

  • Screencast recordings
  • Action annotations
  • Visual overlays
  • Real-time frame capture
  • Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:

await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();

Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:

await page.screencast.showActions({ position: 'top-right' });

screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:

// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
</tr></table>

... (truncated)

Commits
  • d466ac5 chore: mark v1.59.1 (#40005)
  • 530e7e5 cherry-pick(#4004): fix(cli): kill-all should kill dashboard
  • 9aa216c cherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...
  • 01b2b15 cherry-pick(#39980): chore: more release notes fixes
  • a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
  • 99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
  • 43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
  • 62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
  • 0c65a75 cherry-pick(#39968): chore: screencast.showActions api
  • f04155b cherry-pick(#39958): chore: release notes for langs v1.59
  • Additional commits viewable in compare view

Updates browserslist from 4.28.1 to 4.28.2

Release notes

Sourced from browserslist's releases.

4.28.2

Changelog

Sourced from browserslist's changelog.

4.28.2

Commits

Updates elysia from 1.4.27 to 1.4.28

Release notes

Sourced from elysia's releases.

1.4.28

What's new

Feature:

  • #1803 stream response with pull based backpressure
  • #1802 handle range header for file/blob response
  • #1722, #1741 direct ReadableStream perf blow-up

Bug fix:

  • #1805 dynamic imports inside .guard not registering routes
  • #1771 breaks Bun HTML imports
  • #1797 await mapped error response promise
  • #1794 merge app cookie config into route cookie validator config
  • #1796 check custom parser by full name
  • #1795 write transformed cookie value to cookie entry directly
  • #1793 use cookie schema for cookie noValidate check
  • #1792 throw ValidationError instead of boolean in response encode path
  • detect HTML bundle when inline response is Promise

Change:

  • #1613 export ElysiaTypeCustomErrors
  • remove Bun specific built
  • export AnySchema, UnwrapSchema, ModelsToTypes from root
  • conditional set headers of String and Object when no set.headers is set

New Contributors

Full Changelog: elysiajs/elysia@1.4.27...1.4.28

Changelog

Sourced from elysia's changelog.

1.4.28 - 17 Mar 2025

Feature:

  • #1803 stream response with pull based backpressure
  • #1802 handle range header for file/blob response
  • #1722, #1741 direct ReadableStream perf blow-up

Bug fix:

  • #1805 dynamic imports inside .guard not registering routes
  • #1771 breaks Bun HTML imports
  • #1797 await mapped error response promise
  • #1794 merge app cookie config into route cookie validator config
  • #1796 check custom parser by full name
  • #1795 write transformed cookie value to cookie entry directly
  • #1793 use cookie schema for cookie noValidate check
  • #1792 throw ValidationError instead of boolean in response encode path
  • detect HTML bundle when inline response is Promise

Change:

  • #1613 export ElysiaTypeCustomErrors
  • remove Bun specific built
  • export AnySchema, UnwrapSchema, ModelsToTypes from root
  • conditional set headers of String and Object when no set.headers is set
Commits

Updates file-type from 21.3.2 to 22.0.1

Release notes

Sourced from file-type's releases.

v22.0.1

  • Fix: Work around esbuild resolving Node-only imports ce4262f

sindresorhus/file-type@v22.0.0...v22.0.1

v22.0.0

Breaking

  • Requires Node.js 22

  • Dropped Node.js stream.Readable support from fileTypeFromStream() and fileTypeStream()

    // Before
import fs from 'node:fs';
fileTypeFromStream(fs.createReadStream('file.mp4'));
// After
import fs from 'node:fs';
import {Readable} from 'node:stream';
fileTypeFromStream(Readable.toWeb(fs.createReadStream('file.mp4')));

  • Sub-exports (e.g. file-type/core) have been removed. Import everything from file-type directly.

  • The ReadableStreamWithFileType type has been removed. Use AnyWebReadableByteStreamWithFileType instead.

  • Several MIME types have been corrected or normalized:

    Type Old MIME New MIME
    lz application/x-lzip application/lzip
    lnk application/x.ms.shortcut application/x-ms-shortcut
    Apple Alias application/x.apple.alias application/x-ft-apple.alias
    fbx application/x.autodesk.fbx application/x-ft-fbx
    Draco application/vnd.google.draco application/x-ft-draco

    MIME subtypes prefixed with x-ft- are custom types defined by this package (not IANA-registered).

Improvements

  • Added detection for Apple iWork files: .key (Keynote), .pages (Pages), .numbers (Numbers)

Fixes

  • Fixed LibreOffice OOXML files being incorrectly detected as ZIP when reading from streams

sindresorhus/file-type@v21.3.4...v22.0.0

... (truncated)

Commits

Updates playwright from 1.58.2 to 1.59.1

Release notes

Sourced from playwright's releases.

v1.59.1

Bug Fixes

  • [Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

  • Screencast recordings
  • Action annotations
  • Visual overlays
  • Real-time frame capture
  • Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:

await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();

Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:

await page.screencast.showActions({ position: 'top-right' });

screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:

// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
</tr></table>

... (truncated)

Commits
  • d466ac5 chore: mark v1.59.1 (#40005)
  • 530e7e5 cherry-pick(#4004): fix(cli): kill-all should kill dashboard
  • 9aa216c cherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...
  • 01b2b15 cherry-pick(#39980): chore: more release notes fixes
  • a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
  • 99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
  • 43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
  • 62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
  • 0c65a75 cherry-pick(#39968): chore: screencast.showActions api
  • f04155b cherry-pick(#39958): chore: release notes for langs v1.59
  • Additional commits viewable in compare view

Updates rolldown from 1.0.0-rc.12 to 1.0.0-rc.15

Release notes

Sourced from rolldown's releases.

v1.0.0-rc.15

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

v1.0.0-rc.14

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.0.0-rc.15] - 2026-04-09

🐛 Bug Fixes

  • prevent stack overflow in generate_transitive_esm_init on circular dependencies (#9041) by @​shulaoda

🚜 Refactor

  • agents: rename Spec-Driven Development to Context Engineering (#9036) by @​hyf0

[1.0.0-rc.14] - 2026-04-08

🚀 Features

  • rust: add disable_panic_hook feature to disable the panic hook (#9023) by @​sapphi-red
  • support inlineConst for CJS exports accessed through module.exports (#8976) by @​h-a-n-a

🐛 Bug Fixes

🚜 Refactor

  • generator: migrate ecma formatting from npx oxfmt to vp fmt (#9022) by @​shulaoda
  • generator: replace npx oxfmt with vp fmt for ecma formatting (#9021) by @​shulaoda

📚 Documentation

  • contrib-guide: mention that running tests on older Node.js version will have different stat results (#8996) by @​Claude

⚙️ Miscellaneous Tasks

... (truncated)

Commits

Updates testcontainers from 11.11.0 to 11.14.0

Release notes

Sourced from testcontainers's releases.

v11.14.0

Changes

🚀 Features

📖 Documentation

🧹 Maintenance

📦 Dependency Updates

v11.13.0

Changes

🚀 Features

📖 Documentation

🧹 Maintenance

📦 Dependency Updates

... (truncated)

Commits
  • afe8b72 Document LocalStack authentication requirements (#1295)
  • 841179f Only include TS files in test coverage paths (#1294)
  • 4b470b5 Add auto cleanup control for containers and compose (#1293)
  • 74b2453 Add support for running in parallel for distinct UIDs (#1276)
  • a6c5358 Bump the dependencies group across 14 directories with 13 updates (#1289)
  • d0a1df4 Bump the dependencies group across 1 directory with 21 updates (#1287)
  • e881d49 Bump mkdocs-material from 9.7.5 to 9.7.6 in the dependencies group (#1278)
  • 9c94bde Bump the dependencies group across 11 directories with 10 updates (#1279)
  • 6b78e96 Bump the dependencies group with 19 updates (#1280)
  • a20ac80 Fix etcd/vault repository.url in package.json (#1273)
  • Additional commits viewable in compare view

Updates zile from 0.0.24 to 0.0.25

Release notes

Sourced from zile's releases.

v0.0.25

Patch Changes

  • #36 df6abe3 Thanks @​jxom! - Fixed TypeScript 6 compatibility by adding rootDir to the generated tsconfig. Uses the computed common source directory from entry points as the default.
Changelog

Sourced from zile's changelog.

0.0.25

Patch Changes

  • #36 df6abe3 Thanks @​jxom! - Fixed TypeScript 6 compatibility by adding rootDir to the generated tsconfig. Uses the computed common source directory from entry points as the default.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 17, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 17, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​typescript/​native-preview@​7.0.0-dev.20260416.210010072100100
Updatedelysia@​1.4.27 ⏵ 1.4.28731008693 -1100
Updatedzile@​0.0.24 ⏵ 0.0.2579 +110099 +195 +1100
Updatedtestcontainers@​11.11.0 ⏵ 11.14.09510082 +195 +5100
Updatedbrowserslist@​4.28.1 ⏵ 4.28.298 +11009090100
Updated@​modelcontextprotocol/​sdk@​1.27.1 ⏵ 1.29.099 +110010097100
Updated@​playwright/​test@​1.58.2 ⏵ 1.59.110010010099100
Updatedplaywright@​1.58.2 ⏵ 1.59.110010010099100

View full report

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented Apr 17, 2026 •
edited
Loading

Open in StackBlitz

npm i https://pkg.pr.new/mppx@361

commit: 18bb493

@dependabot dependabot Bot changed the title chore(deps-dev): bump the npm-development group with 9 updates chore(deps-dev): bump the npm-development group across 1 directory with 9 updates Apr 17, 2026
@dependabot
chore(deps-dev): bump the npm-development group with 9 updates
18bb493 
Bumps the npm-development group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.29.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.1` | `4.28.2` |
| [elysia](https://github.com/elysiajs/elysia) | `1.4.27` | `1.4.28` |
| [file-type](https://github.com/sindresorhus/file-type) | `21.3.2` | `22.0.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-rc.12` | `1.0.0-rc.15` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node) | `11.11.0` | `11.14.0` |
| [zile](https://github.com/wevm/zile) | `0.0.24` | `0.0.25` |


Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...v1.29.0)

Updates `@playwright/test` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `browserslist` from 4.28.1 to 4.28.2
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.1...4.28.2)

Updates `elysia` from 1.4.27 to 1.4.28
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.27...1.4.28)

Updates `file-type` from 21.3.2 to 22.0.1
- [Release notes](https://github.com/sindresorhus/file-type/releases)
- [Commits](sindresorhus/file-type@v21.3.2...v22.0.1)

Updates `playwright` from 1.58.2 to 1.59.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.59.1)

Updates `rolldown` from 1.0.0-rc.12 to 1.0.0-rc.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.0.0-rc.15/packages/rolldown)

Updates `testcontainers` from 11.11.0 to 11.14.0
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases)
- [Commits](testcontainers/testcontainers-node@v11.11.0...v11.14.0)

Updates `zile` from 0.0.24 to 0.0.25
- [Release notes](https://github.com/wevm/zile/releases)
- [Changelog](https://github.com/wevm/zile/blob/main/CHANGELOG.md)
- [Commits](wevm/zile@v0.0.24...v0.0.25)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@playwright/test"
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: browserslist
  dependency-version: 4.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: elysia
  dependency-version: 1.4.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: file-type
  dependency-version: 22.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-development
- dependency-name: playwright
  dependency-version: 1.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: rolldown
  dependency-version: 1.0.0-rc.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: testcontainers
  dependency-version: 11.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: zile
  dependency-version: 0.0.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-development-8c2e422f6a branch from b64bd53 to 18bb493 Compare April 17, 2026 17:58
@brendanjryan brendanjryan merged commit 0df07ed into main Apr 18, 2026
8 checks passed
@brendanjryan brendanjryan deleted the dependabot/npm_and_yarn/npm-development-8c2e422f6a branch April 18, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@brendanjryan