chore(deps-dev): bump the bundled group with 3 updates (#812)

Bumps the bundled group with 3 updates:
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk),
[core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js)
and [puppeteer](https://github.com/puppeteer/puppeteer).

Updates `@modelcontextprotocol/sdk` from 1.25.2 to 1.25.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/typescript-sdk/releases"><code>@​modelcontextprotocol/sdk</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v1.25.3</h2>
<h2>What's Changed</h2>
<ul>
<li>[v1.x backport] Use correct schema for client sampling validation
when tools are present by <a
href="https://github.com/olaservo"><code>@​olaservo</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1407">modelcontextprotocol/typescript-sdk#1407</a></li>
<li>fix: prevent Hono from overriding global Response object (v1.x) by
<a href="https://github.com/mattzcarey"><code>@​mattzcarey</code></a> in
<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1411">modelcontextprotocol/typescript-sdk#1411</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.25.2...v1.25.3">https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.25.2...v1.25.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/modelcontextprotocol/typescript-sdk/commit/ced75351af16850ea82fca478b921abc4a5385e4"><code>ced7535</code></a>
1.25.3</li>
<li><a
href="https://github.com/modelcontextprotocol/typescript-sdk/commit/6e8f7e1a43a819ae230373c62b82228dafd892c6"><code>6e8f7e1</code></a>
fix: prevent Hono from overriding global Response object (v1.x) (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1411">#1411</a>)</li>
<li><a
href="https://github.com/modelcontextprotocol/typescript-sdk/commit/12ae856cee6ca58499cce24e80f650e78a0c7610"><code>12ae856</code></a>
[v1.x backport] Use correct schema for client sampling validation when
tools ...</li>
<li>See full diff in <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.25.2...v1.25.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `core-js` from 3.47.0 to 3.48.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/zloirock/core-js/releases/tag/v3.48.0">3.48.0 -
2026.01.21</a></h3>
<ul>
<li>Changes <a
href="https://github.com/zloirock/core-js/compare/v3.47.0...v3.48.0">v3.47.0...v3.48.0</a>
(126 commits)</li>
<li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code>
upsert proposal</a>:
<ul>
<li>Built-ins:
<ul>
<li><code>Map.prototype.getOrInsert</code></li>
<li><code>Map.prototype.getOrInsertComputed</code></li>
<li><code>WeakMap.prototype.getOrInsert</code></li>
<li><code>WeakMap.prototype.getOrInsertComputed</code></li>
</ul>
</li>
<li>Moved to stable ES, <a
href="https://github.com/tc39/proposals/commit/131e53d6c9e658c6439831a167ed3f7897daf160">January
2026 TC39 meeting</a></li>
<li>Added <code>es.</code> namespace modules, <code>/es/</code> and
<code>/stable/</code> namespaces entries</li>
</ul>
</li>
<li>Use <code>CreateDataProperty</code> /
<code>CreateDataPropertyOrThrow</code> in some missed cases, <a
href="https://redirect.github.com/zloirock/core-js/issues/1497">#1497</a></li>
<li>Minor fix / optimization in the <code>RegExp</code> constructor (NCG
and <code>dotAll</code>) polyfill</li>
<li>Added some more workarounds for a Safari &lt; 13 bug with silent
ignore of non-writable array <code>.length</code></li>
<li>Added detection of a Webkit <a
href="https://bugs.webkit.org/show_bug.cgi?id=297532">bug</a>:
<code>Iterator.prototype.flatMap</code> throws on iterator without
<code>return</code> method</li>
<li>Added detection of a V8 ~ Chromium &lt; 144 <a
href="https://issues.chromium.org/issues/454630441">bug</a>:
<code>Uint8Array.prototype.setFromHex</code> throws an error on
length-tracking views over ResizableArrayBuffer</li>
<li>Compat data improvements:
<ul>
<li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code>
upsert proposal</a> features marked as <a
href="https://issues.chromium.org/issues/434977728#comment4">shipped in
V8 ~ Chrome 145</a></li>
<li><a href="https://github.com/tc39/proposal-joint-iteration">Joint
iteration proposal</a> features marked as <a
href="https://bugzilla.mozilla.org/show_bug.cgi?id=2003333#c8">shipped
in FF148</a></li>
<li><a
href="https://github.com/tc39/proposal-iterator-sequencing"><code>Iterator.concat</code></a>
marked as shipped in Bun 1.3.7</li>
<li>Added <a
href="https://github.com/mozilla/rhino/releases/tag/Rhino1_9_0_Release">Rhino
1.9.0</a> compat data</li>
<li>Added <a
href="https://github.com/denoland/deno/releases/tag/v2.6.0">Deno 2.6</a>
compat data mapping</li>
<li>Added Opera Android <a
href="https://forums.opera.com/topic/87267/opera-for-android-93">93</a>
and <a
href="https://forums.opera.com/topic/87678/opera-for-android-94">94</a>
compat data mapping</li>
<li>Added Electron 41 compat data mapping</li>
<li><code>Iterator.prototype.flatMap</code> marked as supported from
Safari 26.2 and Bun 1.2.21 because of a <a
href="https://bugs.webkit.org/show_bug.cgi?id=297532">bug</a>: throws on
iterator without <code>return</code> method</li>
<li><code>Uint8Array.prototype.setFromHex</code> marked as supported
from V8 ~ Chromium 144 because of a <a
href="https://issues.chromium.org/issues/454630441">bug</a>: throws an
error on length-tracking views over ResizableArrayBuffer</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zloirock/core-js/commit/5d657da9e5ab5ac2f1657ba81821ecc50960b3ad"><code>5d657da</code></a>
v3.48.0</li>
<li><a
href="https://github.com/zloirock/core-js/commit/5644e73d977a0fc2e3bc9354aed678a4ce6ee0b1"><code>5644e73</code></a>
Add bug detection for <code>Uint8Array.prototype.setFromHex</code></li>
<li><a
href="https://github.com/zloirock/core-js/commit/804a10e6e54e03c1e426b0788bae1282dface839"><code>804a10e</code></a>
Merge pull request <a
href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1501">#1501</a>
from zloirock/flat-map-fix</li>
<li><a
href="https://github.com/zloirock/core-js/commit/45d7fe314e97d65eff26ceb9b6ae1849c856bb20"><code>45d7fe3</code></a>
Add bug detection to Iterator flatMap method</li>
<li><a
href="https://github.com/zloirock/core-js/commit/efd9c2f14c2cd4d26a4893a60ab8ef5313de0c26"><code>efd9c2f</code></a>
move <code>Map</code> upsert proposal to stable ES</li>
<li><a
href="https://github.com/zloirock/core-js/commit/dcb938dc68ff4ef957095712be2f3d7cc3985caa"><code>dcb938d</code></a>
update the year and normalize the copyright wording</li>
<li><a
href="https://github.com/zloirock/core-js/commit/5454a5d20f468dd4556441c85cbecd437adb40c3"><code>5454a5d</code></a>
add some more workarounds for a Safari &lt; 13 bug with silent ignore of
non-wri...</li>
<li><a
href="https://github.com/zloirock/core-js/commit/73d4b6c4f5c729aad6ff1be7648f8a51a0aed38a"><code>73d4b6c</code></a>
add some more <code>createProperty</code> cases</li>
<li><a
href="https://github.com/zloirock/core-js/commit/9c89290d70612e6ac9f7ebf6215f63dc71965693"><code>9c89290</code></a>
fix: spec compliance for Array.prototype.flat and flatMap</li>
<li><a
href="https://github.com/zloirock/core-js/commit/e3774ce67d77fe3bd5f89aa36488ef5ebbb0ba35"><code>e3774ce</code></a>
fix: use createProperty in Array.prototype.filter</li>
<li>Additional commits viewable in <a
href="https://github.com/zloirock/core-js/commits/v3.48.0/packages/core-js">compare
view</a></li>
</ul>
</details>
<br />

Updates `puppeteer` from 24.35.0 to 24.36.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/puppeteer/puppeteer/releases">puppeteer's
releases</a>.</em></p>
<blockquote>
<h2>puppeteer-core: v24.36.0</h2>
<h2><a
href="https://github.com/puppeteer/puppeteer/compare/puppeteer-core-v24.35.0...puppeteer-core-v24.36.0">24.36.0</a>
(2026-01-22)</h2>
<h3>🎉 Features</h3>
<ul>
<li>roll to Chrome 144.0.7559.96 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14587">#14587</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/35eaf7c21e0256453cde6d57692cacfba48cc1e3">35eaf7c</a>)</li>
<li>roll to Firefox 147.0 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14559">#14559</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/63dd0e401f67ebc2c831e93d60fdbf23fa15fb53">63dd0e4</a>)</li>
<li><strong>webdriver:</strong> use
<code>emulation.setClientHintsOverride</code> (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14588">#14588</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/d63dafde50d1f07e4c39b2ca53b7e7907109791e">d63dafd</a>)</li>
<li><strong>webdriver:</strong> use
<code>emulation.setTouchOverride</code> (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14566">#14566</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/e7268395411f6d02861c014a3ace2e3327e84d43">e726839</a>)</li>
</ul>
<h3>🛠️ Fixes</h3>
<ul>
<li>HTTPResponse.text() method expected to throw when content is
malformed (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14450">#14450</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/d967f6ce3bbe4bdc9303303b97f9b4f33743105b">d967f6c</a>)</li>
<li>roll to Firefox 147.0.1 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14574">#14574</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/c9bdb7a8e3c47965fa4abbccc0eb9ac06deb9d39">c9bdb7a</a>)</li>
</ul>
<h2>puppeteer: v24.36.0</h2>
<h2><a
href="https://github.com/puppeteer/puppeteer/compare/puppeteer-v24.35.0...puppeteer-v24.36.0">24.36.0</a>
(2026-01-22)</h2>
<h3>🎉 Features</h3>
<ul>
<li>roll to Chrome 144.0.7559.96 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14587">#14587</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/35eaf7c21e0256453cde6d57692cacfba48cc1e3">35eaf7c</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>The following workspace dependencies were updated
<ul>
<li>dependencies
<ul>
<li>puppeteer-core bumped from 24.35.0 to 24.36.0</li>
</ul>
</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md">puppeteer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/puppeteer/puppeteer/compare/puppeteer-v24.35.0...puppeteer-v24.36.0">24.36.0</a>
(2026-01-22)</h2>
<h3>🎉 Features</h3>
<ul>
<li>roll to Chrome 144.0.7559.96 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14587">#14587</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/35eaf7c21e0256453cde6d57692cacfba48cc1e3">35eaf7c</a>)</li>
<li>roll to Firefox 147.0 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14559">#14559</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/63dd0e401f67ebc2c831e93d60fdbf23fa15fb53">63dd0e4</a>)</li>
<li><strong>webdriver:</strong> use
<code>emulation.setClientHintsOverride</code> (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14588">#14588</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/d63dafde50d1f07e4c39b2ca53b7e7907109791e">d63dafd</a>)</li>
<li><strong>webdriver:</strong> use
<code>emulation.setTouchOverride</code> (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14566">#14566</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/e7268395411f6d02861c014a3ace2e3327e84d43">e726839</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>The following workspace dependencies were updated
<ul>
<li>dependencies
<ul>
<li>puppeteer-core bumped from 24.35.0 to 24.36.0</li>
</ul>
</li>
</ul>
</li>
</ul>
<h3>🛠️ Fixes</h3>
<ul>
<li>HTTPResponse.text() method expected to throw when content is
malformed (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14450">#14450</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/d967f6ce3bbe4bdc9303303b97f9b4f33743105b">d967f6c</a>)</li>
<li>roll to Firefox 147.0.1 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14574">#14574</a>)
(<a
href="https://github.com/puppeteer/puppeteer/commit/c9bdb7a8e3c47965fa4abbccc0eb9ac06deb9d39">c9bdb7a</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/c5fdc0c57ddc736439ed8f20a2ccc24647a896ff"><code>c5fdc0c</code></a>
chore: release main (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14558">#14558</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/514ef71fec32686446a2465dba9565ca88800f89"><code>514ef71</code></a>
test: skip a flaky test (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14599">#14599</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/d63dafde50d1f07e4c39b2ca53b7e7907109791e"><code>d63dafd</code></a>
feat(webdriver): use <code>emulation.setClientHintsOverride</code> (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14588">#14588</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/e7d3d0e51458da194e9b9c04f4a5112d9b59463b"><code>e7d3d0e</code></a>
chore(deps): bump lock to upgrade vulnerable tar package (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14598">#14598</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/a51345c0aa6fadab942f8ee49cbf1ba9b8fec7c5"><code>a51345c</code></a>
test: mark flaky tests (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14597">#14597</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/fd05d808006f85d571c7cbfad4edb8ae2de14d9c"><code>fd05d80</code></a>
chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14595">#14595</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/f6f8e0e0933d538c22fc632453e2c171bfc1216c"><code>f6f8e0e</code></a>
chore(deps): bump lodash from 4.17.21 to 4.17.23 in /website (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14596">#14596</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/35eaf7c21e0256453cde6d57692cacfba48cc1e3"><code>35eaf7c</code></a>
feat: roll to Chrome 144.0.7559.96 (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14587">#14587</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/a63847d707db3b948267078bbaf44dbd87023d7e"><code>a63847d</code></a>
test: update expectations (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14589">#14589</a>)</li>
<li><a
href="https://github.com/puppeteer/puppeteer/commit/de6df06114bda9fbdb7a176a5d9f93543d7f6450"><code>de6df06</code></a>
test: make test more robust (<a
href="https://redirect.github.com/puppeteer/puppeteer/issues/14592">#14592</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/puppeteer/puppeteer/compare/puppeteer-v24.35.0...puppeteer-v24.36.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alex Rudenko <alexrudenko@chromium.org>

Author: dependabot[bot]

package-lock.json

@@ -41,7 +41,7 @@
   "devDependencies": {
     "@eslint/js": "^9.35.0",
     "@google/genai": "^1.37.0",
-    "@modelcontextprotocol/sdk": "1.25.2",
+    "@modelcontextprotocol/sdk": "1.25.3",
     "@rollup/plugin-commonjs": "^29.0.0",
     "@rollup/plugin-json": "^6.1.0",
     "@rollup/plugin-node-resolve": "^16.0.3",
@@ -54,14 +54,14 @@
     "@typescript-eslint/eslint-plugin": "^8.43.0",
     "@typescript-eslint/parser": "^8.43.0",
     "chrome-devtools-frontend": "1.0.1570343",
-    "core-js": "3.47.0",
+    "core-js": "3.48.0",
     "debug": "4.4.3",
     "eslint": "^9.35.0",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
     "globals": "^17.0.0",
     "prettier": "^3.6.2",
-    "puppeteer": "24.35.0",
+    "puppeteer": "24.36.0",
     "rollup": "4.55.1",
     "rollup-plugin-cleanup": "^3.2.1",
     "rollup-plugin-license": "^3.6.0",

package.json

@@ -162,4 +162,5 @@ const excludedAttributes = new Set([
   'elementHandle',
   'children',
   'backendNodeId',
+  'loaderId',
 ]);

src/formatters/SnapshotFormatter.ts

@@ -6,7 +6,7 @@ Status:  [success - 200]
 - accept-language:<lang>
 - upgrade-insecure-requests:1
 - user-agent:<user-agent>
-- sec-ch-ua:"Chromium";v="<version>", "Not A(Brand";v="24"
+- sec-ch-ua:"Not(A:Brand";v="8", "Chromium";v="144"
 - sec-ch-ua-mobile:?0
 - sec-ch-ua-platform:"<os>"
 - accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7