Bump @playwright/test from 1.57.0 to 1.62.1

[dependabot]

Bumps @playwright/test from 1.57.0 to 1.62.1.

Release notes

Sourced from @​playwright/test's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• Additional commits viewable in compare view

---

Note

Low Risk
Dev-only test dependency bump with no production runtime impact; run npm run test:playwright in packages/gui to confirm CI passes.

Overview
Bumps @playwright/test in packages/gui from 1.57.0 to 1.62.1, with matching package-lock.json updates so the test runner and its bundled playwright / playwright-core at 1.62.1 resolve under @playwright/test.

The lockfile also reclassifies the top-level playwright and playwright-core 1.57.0 entries from devOptional to optional, while optionalDependencies.playwright in package.json is unchanged at 1.57.0—so E2E tests use 1.62.1 via the devDependency tree, not the optional browser package pin.

^{Reviewed by Cursor Bugbot for commit 0e70769. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​playwright/​test@​1.57.0 ⏵ 1.62.1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[cursor]

Rollup package entry deleted from lockfile

High Severity

The node_modules/rollup entry and all @rollup/rollup-* platform-specific binary entries were completely removed from package-lock.json. However, rollup is still listed as a dev dependency in multiple workspace packages (packages/api, packages/api-react, packages/core, packages/icons, packages/wallets) at version 4.53.3, and the root package.json overrides it to 4.59.0. Running npm ci with this lockfile will fail to install rollup, breaking all package builds that depend on it.

 

[cursor]

Version specifier mismatch between package.json and lockfile

Medium Severity

The lockfile's packages section records "@playwright/test": "^1.58.2" (with caret) but packages/gui/package.json specifies "@playwright/test": "1.58.2" (exact version, no caret). The lockfile entry is expected to mirror the package.json specifier exactly. This mismatch means the lockfile is inconsistent and could resolve to a different version than intended on a fresh install.

Additional Locations (1)

• packages/gui/package.json#L113-L114

 

[cursor]

Playwright optional dependency not bumped alongside test package

Medium Severity

@playwright/test was bumped to 1.58.2 in devDependencies, but playwright remains at 1.57.0 in optionalDependencies (line 165). This creates two different versions of playwright in the dependency tree — 1.58.2 nested under @playwright/test and 1.57.0 at the root level. This version skew could cause browser binary mismatches or unexpected behavior when running tests.

 

[github-actions]

'This PR has been flagged as stale due to no activity for over 60
days. It will not be automatically closed, but it has been given
a stale-pr label and should be manually reviewed.'

[emlowe]

@dependabot rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.