Bump the patch-minor group with 34 updates

[dependabot]

Bumps the patch-minor group with 34 updates:

Package	From	To
@biomejs/biome	2.5.5	2.5.6
@astrojs/check	0.9.9	0.9.10
@astrojs/cloudflare	14.1.4	14.1.5
@astrojs/mdx	7.0.3	7.0.4
astro	7.1.3	7.1.4
browserslist	4.28.4	4.28.7
libphonenumber-js	1.13.8	1.13.9
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
react-hook-form	7.80.0	7.83.0
sanitize-html	2.17.5	2.17.6
xstate	5.32.4	5.32.5
@playwright/test	1.61.1	1.62.0
@storybook/addon-links	10.4.6	10.5.5
@storybook/addon-themes	10.4.6	10.5.5
@storybook/addon-vitest	10.4.6	10.5.5
@storybook/builder-vite	10.4.6	10.5.5
@storybook/react	10.4.6	10.5.5
@storybook/react-vite	10.4.6	10.5.5
@types/node	26.1.0	26.1.2
@vitest/coverage-v8	4.1.9	4.1.10
baseline-browser-mapping	2.10.41	2.11.5
lightningcss	1.32.0	1.33.0
satteri	0.9.4	0.9.5
storybook	10.4.6	10.5.5
vitest	4.1.9	4.1.10
wrangler	4.107.0	4.114.0
@astrojs/starlight	0.41.4	0.41.5
astro-og-canvas	0.12.0	0.13.0
starlight-theme-flexoki	0.2.2	0.2.3
@hono/node-server	2.0.11	2.0.12
@vitejs/plugin-react	6.0.3	6.0.4
tsx	4.23.0	4.23.1
vite	8.1.3	8.1.5

Updates @biomejs/biome from 2.5.5 to 2.5.6

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.6

2.5.6

Patch Changes

• #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

• #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

   .example {
     value: outer(
       1,
       /* comment */
       nested(
  -      first,
  -      second
  -    )
  +        first,
  +        second
  +      )
     );
   }

• #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

• #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

• #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

• #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

• #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

• #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

• #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

  The following statements are now reported:

  type AsyncCallback = () => Promise<void>;
  declare const callback: AsyncCallback;
  callback();
  [1, 2, 3].map(async (value) => value);

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.6

Patch Changes

• #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

• #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

   .example {
     value: outer(
       1,
       /* comment */
       nested(
  -      first,
  -      second
  -    )
  +        first,
  +        second
  +      )
     );
   }

• #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

• #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

• #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

• #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

• #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

• #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

• #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

  The following statements are now reported:

  type AsyncCallback = () => Promise<void>;
  declare const callback: AsyncCallback;
  callback();
  [1, 2, 3].map(async (value) => value);

• #10973 9cb044c Thanks @​ematipico! - Fixed false positives in noMisleadingReturnType when generic-constraint, normalization, substitution, or structural return-type comparison cannot complete. The rule now suppresses diagnostics rather than suggesting a return type derived from partial information. For example, this unresolved return type is no longer reported:

... (truncated)

Commits

• 1139f1c ci: release (#11022)
• 781d68d feat(lint/js): add noRestrictedProperties (#9806)
• See full diff in compare view

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

• #17447 b01a692 Thanks @​ocavue! - Update dependency yargs to version 18. See the yargs changelog for details.

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

• #17447 b01a692 Thanks @​ocavue! - Update dependency yargs to version 18. See the yargs changelog for details.

Commits

• 112d3ea [ci] release (#17469)
• b01a692 chore(deps): update yargs to v18 (#17447)
• 3652d1c chore: merge main into next
• 8062391 chore(deps): dedupe vite installations (#16788)
• ce88423 Dedupe vite (#16787)
• b8061a6 refactor: use TypeScript project service in ESLint (#16623)
• 5a8cd09 refactor: update tsconfig to use TypeScript project references (#16505)
• See full diff in compare view

Updates @astrojs/cloudflare from 14.1.4 to 14.1.5

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.1.5

Patch Changes

• #17376 0216368 Thanks @​astrobot-houston! - Fixes a bug where an explicit cache: { enabled: false } in your wrangler config was overridden and forced to true when a Workers cache provider was configured

• Updated dependencies []:

  • @​astrojs/underscore-redirects@​1.0.3

Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.1.5

Patch Changes

• #17376 0216368 Thanks @​astrobot-houston! - Fixes a bug where an explicit cache: { enabled: false } in your wrangler config was overridden and forced to true when a Workers cache provider was configured

• Updated dependencies []:

  • @​astrojs/underscore-redirects@​1.0.3

Commits

• 112d3ea [ci] release (#17469)
• 2e83040 [ci] format
• 0216368 fix(cloudflare): respect explicit cache.enabled: false in wrangler config (...
• fbffc96 Fix Container API build errors when using the Cloudflare adapter's workerd pr...
• See full diff in compare view

Updates @astrojs/mdx from 7.0.3 to 7.0.4

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​7.0.4

Patch Changes

• #17514 41a00dd Thanks @​gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

Changelog

Sourced from @​astrojs/mdx's changelog.

7.0.4

Patch Changes

• #17514 41a00dd Thanks @​gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

Commits

• 112d3ea [ci] release (#17469)
• 41a00dd fix(mdx): emit HTML attribute casing on the Sätteri MDX path (#17514)
• See full diff in compare view

Updates astro from 7.1.3 to 7.1.4

Release notes

Sourced from astro's releases.

astro@7.1.4

Patch Changes

• #17488 d4f266d Thanks @​emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

• #17472 4dc590c Thanks @​astrobot-houston! - Adds the missing background prop to the <Image /> and <Picture /> component types. The prop already worked at runtime, but was absent from the types, causing astro check to report that background does not exist on the component props

• #17292 0fc519d Thanks @​astrobot-houston! - Fixes missing scoped styles for child components inside client:only islands in production builds

• #17421 f1448de Thanks @​iamkaleemsajjad-hue! - Fixes session runtime errors being silently swallowed by console.error instead of routing through Astro's logger

• #17421 f1448de Thanks @​iamkaleemsajjad-hue! - Fixes a session being left in a partial state after a storage failure during session.regenerate(), preventing unnecessary storage reads on subsequent operations

• #17517 82bf7e2 Thanks @​Hashim1999164! - Prevents a visible terminal window from popping up on Windows when the dev server runs in background mode. The detached child process is now spawned with windowsHide: true, so console-subsystem grandchildren (such as workerd.exe) no longer get a new focus-stealing window allocated by Windows Terminal.

• #17510 eaa1fb0 Thanks @​astrobot-houston! - Fixes the glob() loader watcher so negation patterns like !docs/drafts/** correctly exclude files during development, matching the behavior of the initial scan. Previously, negations were treated as independent matchers, causing unrelated files (including .astro/data-store.json) to be ingested as collection entries

• #17511 704e570 Thanks @​astrobot-houston! - Fixes TypeScript path aliases from tsconfig.json not resolving in astro.config.ts

Changelog

Sourced from astro's changelog.

7.1.4

Patch Changes

• #17488 d4f266d Thanks @​emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

• #17472 4dc590c Thanks @​astrobot-houston! - Adds the missing background prop to the <Image /> and <Picture /> component types. The prop already worked at runtime, but was absent from the types, causing astro check to report that background does not exist on the component props

• #17292 0fc519d Thanks @​astrobot-houston! - Fixes missing scoped styles for child components inside client:only islands in production builds

• #17421 f1448de Thanks @​iamkaleemsajjad-hue! - Fixes session runtime errors being silently swallowed by console.error instead of routing through Astro's logger

• #17421 f1448de Thanks @​iamkaleemsajjad-hue! - Fixes a session being left in a partial state after a storage failure during session.regenerate(), preventing unnecessary storage reads on subsequent operations

• #17517 82bf7e2 Thanks @​Hashim1999164! - Prevents a visible terminal window from popping up on Windows when the dev server runs in background mode. The detached child process is now spawned with windowsHide: true, so console-subsystem grandchildren (such as workerd.exe) no longer get a new focus-stealing window allocated by Windows Terminal.

• #17510 eaa1fb0 Thanks @​astrobot-houston! - Fixes the glob() loader watcher so negation patterns like !docs/drafts/** correctly exclude files during development, matching the behavior of the initial scan. Previously, negations were treated as independent matchers, causing unrelated files (including .astro/data-store.json) to be ingested as collection entries

• #17511 704e570 Thanks @​astrobot-houston! - Fixes TypeScript path aliases from tsconfig.json not resolving in astro.config.ts

Commits

• 112d3ea [ci] release (#17469)
• 82bf7e2 fix(astro): hide console window for background dev server on Windows (#17517)
• 0fc519d fix(css): preserve styles for child components of client:only islands during ...
• d4f266d fix(build): deduplicate CSS assets between prerender and SSR environments (#1...
• fbffc96 Fix Container API build errors when using the Cloudflare adapter's workerd pr...
• eaa1fb0 Fix glob() loader watcher ignoring negation patterns, causing unrelated files...
• 704e570 Fix tsconfig path aliases not resolving in astro.config.ts (#17418) (#17511)
• 898f008 chore: use star import consistently (#17473)
• 8e2b64b [ci] format
• f1448de fix(sessions): route session diagnostics through AstroLogger and reset partia...
• Additional commits viewable in compare view

Updates browserslist from 4.28.4 to 4.28.7

Release notes

Sourced from browserslist's releases.

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

Changelog

Sourced from browserslist's changelog.

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

Commits

• b637868 Release 4.28.7 version
• 313f465 Update dependencies
• c935c5a Fix regexp performance
• d7e9e65 Rewrite structure parsing to make it always fast
• ec4a55e Fix import order
• ea97420 Make RegExp faster
• f9914ad Fix prototype write
• f2931a3 Fix unbounded memory growth
• 49b3d72 Release 4.28.6 version
• 0f90a94 Update dependencies
• Additional commits viewable in compare view

Updates libphonenumber-js from 1.13.8 to 1.13.9

Changelog

Sourced from libphonenumber-js's changelog.

1.13.9 / 17.7.2026

• Updated metadata to version 9.0.35:
  • Updated alternate formatting data for country calling code(s): 995
  • Updated phone metadata for region code(s): AC, CN, FO, GE, IR, KE, SE, UG, ZW
  • Updated short number metadata for region code(s): FR
  • Updated geocoding data for country calling code(s): 86 (en, zh)
  • Updated carrier data for country calling code(s): 61 (en), 86 (en, zh), 93 (en, fa), 247 (en), 250 (en), 254 (en), 256 (en), 263 (en), 298 (en), 420 (en), 976 (en), 995 (en)

Commits

• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-hook-form from 7.80.0 to 7.83.0

Release notes

Sourced from react-hook-form's releases.

Version 7.83.0

⚡ Improvements

• enhance getEventValue to handle file inputs (#13289)
• type perf: improve TypeScript performance with a hard cap at 10 levels of recursive type depth (#13529)
• type perf: improve type performance (#13528)

🐞 Fixes

• fix: clear internal errors state on argument-less clearErrors() (#13613)
• fix: preserve dirtyFields reference stability (#13612)
• fix: old checkbox/radio elements polluting internal field state (#13080)
• fix(useController): re-subscribe onChange/onBlur when control changes (#13603)
• fix(types): allow validation messages to be defined even if their related value is undefined (#13287)

Thanks to @​candymask0712, @​wanxiankai, @​bluebill1049, @​EduardF1, @​johnstrand, and @​in-ch for their contributions! 🎉

Version 7.82.0

🚀 feat: add opt-in delayError option for setValue (#13337)

setValue("firstName", "Bill", {
  delayError: 500, // delay validation error updates by 500ms
  shouldValidate: true
});

⚡ perf: improve getDirtyFields performance (#13590)

• Improved dirty field calculation, especially for larger forms and deeply nested values.

🐞 fix: expose resetDefaultValues through form context (#13598)

const { resetDefaultValues } = useFormContext();
resetDefaultValues();

🐞 fix: setValue with shouldDirty now correctly updates dirty state when the form is disabled (#13594) 🐞 fix: preserve dirtyFields boolean values for registered array fields (#13586) 🐞 fix: restore FieldArray component export (#13596) 🧪 test: migrate test suite to Playwright and improve delayError test reliability (#13589)

thanks to @​candymask0712, @​wanxiankai, @​a-y-ibrahim, @​ankit1324 & @​abnud11

Version 7.81.0

⚜️ feat: FieldArray component (#13394)

</tr></table> 

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.83.0] - 2026-07-25

Improvements

• Enhance getEventValue to handle file inputs
• Improve TypeScript performance with a hard cap at 10 levels of recursive type depth

Fixed

• Clear internal errors state on argument-less clearErrors()
• Preserve dirtyFields reference stability
• Old checkbox/radio elements polluting internal field state
• useController not re-subscribing onChange/onBlur when control changes
• Allow validation messages to be defined even if their related value is undefined

[7.82.0] - 2026-07-18

Added

• Opt-in delayError option for setValue to delay validation error updates

Fixed

• Expose resetDefaultValues through form context
• setValue with shouldDirty not updating dirty state correctly when the form is disabled
• Preserve dirtyFields boolean values for registered array fields
• Restore FieldArray component export

Performance

• Improve getDirtyFields performance, especially for larger forms and deeply nested values

[7.81.0] - 2026-07-05

Added

• FieldArray component built on useFieldArray for controlled field-array rendering

Fixed

• clearErrors changing the name value from form.subscribe
• reset triggering subscribe with the latest name instead of undefined
• setValues leaving stale elements behind when shrinking a field array
• flatten preserving Date values as leaf nodes
• useFieldArray min length validation error changing location in the errors object
• useController not reflecting a cleared parent object in controlled fields

Security

• Harden unset() against prototype-path traversal (__proto__ / constructor / prototype), matching the existing set() guard

... (truncated)

Commits

• ca8106d 7.83.0
• 69da954 🐞 fix: clear internal errors state on argument-less clearErrors() (#13613)
• d96c5ce 🐞 fix: preserve dirtyFields reference stability (#13612)
• ee7593e 🧪 update old checkbox/radio elements polluting internal field state e2e spec ...
• 2726d81 🐞 fix: old checkbox/radio elements polluting internal field state (#13080)
• 4ca98df ✋ fix repo grammar to prevent those silly one line prs
• d920e93 🧪 add test for enhance getEventValue to handle file inputs (#13289)
• 2ebc8d0 🍖 enhance getEventValue to handle file inputs (#13289)
• 6a38628 ☎️ type perf: improve ts perf with hardcap at 10 depth (#13529)
• ac8a3d0 🐞 fix(useController): resubscribe onChange/onBlur when control changes (#13603)
• Additional commits viewable in compare view

Updates sanitize-html from 2.17.5 to 2.17.6

Changelog

Sourced from sanitize-html's changelog.

2.17.6 (2026-07-10)

Fixes

• Allow transformTags to emit text when textFilter is set, even if the tag is initially empty. This is consistent with the documentation. Thanks to spokodev for the fix.

Security

• Fixed an XSS/allowlist bypass in which the contents of a raw-text element (textarea or xmp) nested inside an svg or math root were re-emitted without HTML-escaping. sanitize-html treated that content as inert raw text because htmlparser2 10.x classified raw-text elements by tag name and ignored the namespace, but a real HTML5 parser treats textarea/xmp as ordinary foreign elements inside SVG/MathML and re-parses their contents as live markup. As a result, markup and event-handler attributes that the allowlist never permitted (for example <svg><textarea><img src=x onerror=alert(1)>) could survive sanitization and execute in the browser. This is now fixed on two fronts: htmlparser2 was upgraded to 12.x, which is namespace-aware and parses textarea/xmp inside SVG/MathML as ordinary elements, so their non-allowlisted children (such as the injected img) are dropped by the allowlist instead of being preserved as raw text; and any raw-text content sanitize-html still emits for these tags (at HTML integration points such as foreignObject/mtext, or outside foreign content) is always HTML-escaped. The default configuration is not affected; the precondition is an allowedTags that includes svg or math together with textarea or xmp. Thanks to khoadb175 for responsibly disclosing the vulnerability.
• Fixed a mutation-XSS / allowedTags bypass affecting configurations that allow the textarea or xmp raw-text tags. htmlparser2 10.x did not recognize an end tag with a trailing solidus (e.g. </textarea/>) as closing the element, so it kept the following markup as raw text, but a spec-compliant browser treats </textarea/> as a valid close and parses that markup as a live element. Because raw-text content was re-emitted without escaping, a payload such as <textarea></textarea/><img src=x onerror=...> could smuggle non-allowlisted, executable markup through the sanitizer. The default configuration was not affected. This is now defended at two layers: htmlparser2 was upgraded to 12.x, whose tokenizer closes these end tags correctly, and the raw text sanitize-html emits for these tags is always escaped so no < can reopen a tag when the output is re-parsed (textarea, an RCDATA element whose entities htmlparser2 decodes, is escaped like normal text, while xmp, a raw-text element, has only its angle brackets escaped to avoid double-encoding already-encoded entities). Because htmlparser2 is ESM-only from version 11 onward, sanitize-html now requires Node.js >=22.12.0 (the first 22.x release in which require() of an ES module is available unflagged). Thanks to bibu123456 for reporting the vulnerability and Kayiz-PT for coordinating the disclosure (GHSA-jxwj-j7wr-gfrw).

Commits

• See full diff in compare view

Updates xstate from 5.32.4 to 5.32.5

Release notes

Sourced from xstate's releases.

xstate@5.32.5

Patch Changes

• #5603 345e04c Thanks @​xianjianlf2! - Sending an event to a stopped actor no longer throws when the event contains unserializable data (e.g. circular references). Previously, the development-only warning that an event was sent to a stopped actor used JSON.stringify on the event, which could throw and mask the intended warning. The warning is now emitted safely regardless of the event's contents.

Commits

• c25dba0 Version Packages (#5604)
• b669e95 fix(xstate-vue): correct vitest include glob so tests are discovered (#5607)
• 345e04c fix(core): don't throw when warning about unserializable event sent to stoppe...
• See full diff in compare view

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🟢	Lines	90.97% (🎯 85%) 🟰 ±0%	907 / 997
🟢	Statements	90.22% (🎯 85%) 🟰 ±0%	960 / 1064
🟢	Functions	89.33% (🎯 85%) 🟰 ±0%	335 / 375
🟢	Branches	85.19% (🎯 80%) 🟰 ±0%	564 / 662

File Coverage

No changed files found.

Generated in workflow #155 for commit 80c0e13 by the Vitest Coverage Report Action

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
⚠️ Deployment skipped View logs	web	80c0e13	Aug 04 2026, 12:38 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	docs	80c0e13	Aug 04 2026, 12:38 PM

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.