Skip to content

chore(deps): bump the npm-server-minor-patch group in /server with 9 updates - #131

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/npm-server-minor-patch-65fb69a2ea
Closed

chore(deps): bump the npm-server-minor-patch group in /server with 9 updates#131
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/npm-server-minor-patch-65fb69a2ea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-server-minor-patch group in /server with 9 updates:

Package From To
@fastify/cors 11.2.0 11.3.0
@fastify/helmet 13.0.2 13.1.0
bonjour-service 1.3.0 1.4.4
fastify 5.8.5 5.10.0
@playwright/test 1.60.0 1.62.0
@vitest/coverage-v8 4.1.6 4.1.10
fast-check 4.8.0 4.9.0
tsx 4.22.4 4.23.1
vitest 4.1.6 4.1.10

Updates @fastify/cors from 11.2.0 to 11.3.0

Release notes

Sourced from @​fastify/cors's releases.

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

Commits
  • 2c60caa Bumped v11.3.0
  • cf4986e chore: bump @​types/node in the dev-dependencies-typescript group (#411)
  • 816d054 test: remove remaining tap-style assertions from vary tests (#410)
  • 20507ea chore(package.json): fix delvedor's personal url (#409)
  • 6fe85c4 docs(readme): update request origin link (#408)
  • 57bdc65 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)
  • a8ae57d chore: update depedabot setting
  • 4d34798 chore(.gitattributes): retain binary file eol style (#402)
  • 675ebef refactor(types): migrate from tsd to tstyche (#403)
  • ef25e0b ci: add lock-threads workflow (#401)
  • Additional commits viewable in compare view

Updates @fastify/helmet from 13.0.2 to 13.1.0

Release notes

Sourced from @​fastify/helmet's releases.

v13.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-helmet@v13.0.2...v13.1.0

Commits
  • 33d89a3 Bumped v13.1.0
  • 6a7ecf2 docs: fix broken links (#314)
  • 1e0ccb7 chore: bump @​types/node in the dev-dependencies-typescript group (#315)
  • 51d6e89 chore(package.json): fix delvedor's personal url
  • 6ac42ed chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#312)
  • 9eb465c chore: update depedabot setting
  • 6f506da refactor(types): migrate from tsd to tstyche (#307)
  • 0c3d73d ci: add lock-threads workflow (#306)
  • 8ae7182 build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#303)
  • 307b579 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#304)
  • Additional commits viewable in compare view

Updates bonjour-service from 1.3.0 to 1.4.4

Release notes

Sourced from bonjour-service's releases.

1.4.4

What's Changed

New Contributors

Full Changelog: onlxltd/bonjour-service@1.4.3...1.4.4

1.4.3

Full Changelog: onlxltd/bonjour-service@1.4.2...1.4.3

Update for index.ts to fix imports #79 Thanks to @​andersk & @​Nerivec for their work identifying this issue.

1.4.1

What's Changed

Full Changelog: onlxltd/bonjour-service@1.4.0...1.4.1

1.4.0

What's Changed

New Contributors

Full Changelog: onlxltd/bonjour-service@1.3.0...1.4.0

Commits
  • e72ca10 Update yarn.lock
  • 693311c Merge branch 'dependabot/npm_and_yarn/js-yaml-4.3.0'
  • 2f0b012 Merge branch 'dependabot/npm_and_yarn/tar-7.5.22'
  • f870315 Bump js-yaml from 4.2.0 to 4.3.0
  • a17fe30 Bump tar from 7.5.16 to 7.5.22
  • 38fadf7 Export classes as types too, not just values
  • ee3a3c0 Update for imports
  • 1eda77d Update .npmignore
  • d7746b1 Update yarn.lock
  • 6fe0a0d Bump js-yaml from 4.1.1 to 4.2.0
  • Additional commits viewable in compare view

Updates fastify from 5.8.5 to 5.10.0

Release notes

Sourced from fastify's releases.

v5.10.0

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.9.0...v5.10.0

v5.9.0

What's Changed

... (truncated)

Commits
  • 94bcbcc Bumped v5.10.0
  • c47975e docs: Update import for page consistency (#6771)
  • 82952b8 docs: Logging.md with per-route log level info (#6627)
  • 6ac2e95 fix: derive request.port from request.host (#6680)
  • 5f4871f perf: reduce per-request overhead in the request lifecycle (#6831)
  • ec4bc66 chore: Bump fast-json-stringify to v7 (#6800)
  • d0b649d docs: fix incorrect hook count in Hooks.md (eight -> ten) (#6825)
  • 826c807 docs: fix incorrect defaults and code examples in Server.md (#6805)
  • 6f63ce9 fix: use ContentType to detect json and charset in reply.send (#6830)
  • 75d74e1 feat: introduce log controller layer (#6580)
  • Additional commits viewable in compare view

Updates @playwright/test from 1.60.0 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table>

... (truncated)

Commits
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • 2934858 fix: correct pending navigation log spacing (#41949)
  • 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
  • bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
  • 15c4f55 fix(mcp): identify downloads explicitly (#41933)
  • f5fa967 fix(network): request.postData() returns null for empty string body override ...
  • 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
  • 244a1ff feat(firefox): roll to r1538 (#41938)
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.1.6 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates fast-check from 4.8.0 to 4.9.0

Release notes

Sourced from fast-check's releases.

Shrinkable entityGraph and few performance chips

[Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate
  • (PR#7071) Performance: Early exit on empty tuple in fc.entityGraph

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.9.0

Shrinkable entityGraph and few performance chips [Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate

... (truncated)

Commits
  • 0d3c254 🔖 Update CHANGELOG.md for fast-check@4.9.0, @​fast-check/packaged@​0.7.1 (#7124)
  • bd85efe ⬆️ Update dependency @​types/node to ^24.13.3 (#7118)
  • a0596ab ⬆️ Update dependency vitest to ^4.1.10 (#7119)
  • 3c085da ⬆️ Update dependency prettier to v3.9.4 (#7114)
  • 6538ff0 👥 Add jneidel as doc contributor (#7108)
  • 8096ab0 👥 Add makeeno as doc contributor (#7104)
  • 13fd4a6 ✏️ Typo in type EntityGraphContraints (#7088)
  • 36e70d2 ⬆️ Update dependency @​microsoft/api-extractor to ^7.58.9 (#7080)
  • 451ede0 ⬆️ Update dependency vitest to ^4.1.8 (#7074)
  • 949564d ⚡️ Early exit on empty tuple in fc.entityGraph (#7071)
  • Additional commits viewable in compare view

Updates tsx from 4.22.4 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

  • support tsImport after global preload (8d4ffc2)
  • watch: avoid clearing piped output (95d0672)
  • watch: treat script and dependency paths literally (79fddde)

Performance Improvements

  • index transform cache lazily (e818ad6)
  • load esbuild lazily in CLI (d067938)
  • map Node TypeScript formats directly (cdcc623)
  • use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

  • avoid redundant filesystem probes during module resolution (

@dependabot
chore(deps): bump the npm-server-minor-patch group
adbb641 
Bumps the npm-server-minor-patch group in /server with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.2.0` | `11.3.0` |
| [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.0.2` | `13.1.0` |
| [bonjour-service](https://github.com/onlxltd/bonjour-service) | `1.3.0` | `1.4.4` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.10.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.6` | `4.1.10` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.8.0` | `4.9.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.10` |


Updates `@fastify/cors` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/fastify/fastify-cors/releases)
- [Commits](fastify/fastify-cors@v11.2.0...v11.3.0)

Updates `@fastify/helmet` from 13.0.2 to 13.1.0
- [Release notes](https://github.com/fastify/fastify-helmet/releases)
- [Commits](fastify/fastify-helmet@v13.0.2...v13.1.0)

Updates `bonjour-service` from 1.3.0 to 1.4.4
- [Release notes](https://github.com/onlxltd/bonjour-service/releases)
- [Commits](onlxltd/bonjour-service@1.3.0...1.4.4)

Updates `fastify` from 5.8.5 to 5.10.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.10.0)

Updates `@playwright/test` from 1.60.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.0)

Updates `@vitest/coverage-v8` from 4.1.6 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `fast-check` from 4.8.0 to 4.9.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.9.0/packages/fast-check)

Updates `tsx` from 4.22.4 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.1)

Updates `vitest` from 4.1.6 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: "@fastify/helmet"
  dependency-version: 13.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: bonjour-service
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: fastify
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-server-minor-patch
- dependency-name: fast-check
  dependency-version: 4.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-server-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-server-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026
@dependabot
dependabot Bot requested a review from thewrz as a code owner August 2, 2026 01:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026
@thewrz thewrz mentioned this pull request Aug 2, 2026
Closed
1 task
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot attempted to update this pull request, but because the branch dependabot/npm_and_yarn/server/npm-server-minor-patch-65fb69a2ea is protected it was unable to do so.

This was referenced Aug 2, 2026
Merged
Merged
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

The group that created this PR has been removed from your configuration.

@dependabot dependabot Bot closed this Aug 2, 2026
@thewrz

thewrz commented Aug 2, 2026

Copy link
Copy Markdown
Collaborator

This was written agentically; verify its assertions and edit accordingly:

Closing — superseded by #142.

#127 edited server/package.json and server/package-lock.json, which put this PR into CONFLICTING. Rather than run a rebase round-trip (external pushes to a Dependabot branch cause it to auto-close), #142 lands the same bumps directly as a lockfile-only refresh within the existing ranges — including all nine from this group.

#142 additionally verifies under a real node:24 container with a server boot check, since fastify moved three minors and fastify-plugin went major.

🤖 Co-authored by Claude Opus 5 (1M context).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@thewrz thewrz Awaiting requested review from thewrz thewrz is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thewrz