Skip to content

build(deps-dev): Bump the npm-app-patch-minor group across 1 directory with 6 updates - #462

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/npm-app-patch-minor-4ed0521188
Open

build(deps-dev): Bump the npm-app-patch-minor group across 1 directory with 6 updates#462
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/npm-app-patch-minor-4ed0521188

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-app-patch-minor group with 6 updates in the /app directory:

Package From To
@axe-core/playwright 4.12.1 4.13.0
@playwright/test 1.62.1 1.63.0
@types/node 24.13.3 24.13.5
axe-core 4.12.1 4.13.0
electron 43.3.0 43.7.1
electron-playwright-helpers 2.1.0 2.3.1

Updates @axe-core/playwright from 4.12.1 to 4.13.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.13.0

What's Changed

Full Changelog: dequelabs/axe-core-npm@v4.11.3...v4.13.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.13.0 (2026-08-10)

Features

Commits

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates @types/node from 24.13.3 to 24.13.5

Commits

Updates axe-core from 4.12.1 to 4.13.0

Release notes

Sourced from axe-core's releases.

Release 4.13.0

In summary, this release adds:

  1. Support Element Internals: A modern way for building accessible component libraries Axe-core is the first accessibility tool to support this major new web feature! Thanks to RedHat and Adobe for working with us to figure out the right way forward.

  2. A new Swedish translation, thanks to our a community contribution

  3. A new Finish contribution (not open source), thanks to our Scandinavian partner

  4. 10 False positives closed, including all the critical ones!

  5. And 13 updates to get Axe-core consistent with the latest web standards

This release is one of the bigger changes we've done in a few years, so likely issue numbers are going to change in adopting this version.

Features

  • aria-actions: add aria-actions to allowed ARIA attributes (#5200) (029655d), closes #4584 #5199, references #5215 #5215
  • aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#5246) (518f3cc), closes #3341
  • aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#5259) (d8b1ea5)
  • aria-roles: add sectionheader and sectionfooter roles (#5238) (c36c109), closes #4734, references #4734
  • aria/get-aria-value: new function to get aria values of a node (#5109) (a7d8f3e), references #5042
  • aria/has-attr-value: new function to check if node has aria value (#5136) (61f2624), references #5109
  • aria: support role=image as equivalent to role=img (#5248) (5aa8aaf), closes #4656, references #5272
  • checks/aria: support ARIA element internals properties (#5172) (9b7f754)
  • checks/label: support ARIA element internals properties (#5170) (21c5f8b)
  • checks/navigation: support ARIA element internals properties (#5167) (2c3a98f)
  • commons/aria: support ARIA element internals properties (#5171) (31f09e7)
  • commons/dom: support ARIA element internals properties (#5163) (f0a12cf)
  • commons/forms: support ARIA element internals properties (#5165) (27a4686)
  • commons/matches/fromPrimative: deprecate in favor of correct spelling (#5270) (31cfb2e)
  • commons/text: support ARIA element internals properties (#5169) (e841a33)
  • commons/text: support form-associated labels via element internals (#5182) (57cfe0a), closes #5045, references #5170 #5039 #5151 #5039
  • dom/getResolvedRefs: new function to get the resolved virtual nodes of idrefs (#5151) (489cdea), references #5109
  • element-internals: enable ElementInternals by default (#5284) (2740d42), closes #5277
  • i18n: Add Swedish locale (#5190) (dcd13f2), references #5189
  • matches: add inSectioningContent, hasChild, and isSummaryForDetails matches (#5262) (c47cdcd)
  • rules: support ARIA element internals properties (#5168) (065baf7)
  • standards/ariaAttrs: add caseInsensitive property for attributes (#5224) (bcd791c)

Bug Fixes

  • aria-allowed-role: allow roles on a non-details summary (#5242) (3bd9875), closes #3911, references #3443 #3911
  • aria-allowed-role: restrict figure roles with child figcaption (#5240) (178a635), closes #3443
  • aria-prohibited-attr: visible aria-labelledby requires review only (#5285) (fd6fa9f)
  • axe.d.ts: make enabled property of RuleMetadata optional (#5129) (90fce18)
  • color-contrast: fix various stacking context bugs (#5214) (d5e5b04), references #8 #5213

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.13.0 (2026-08-05)

Features

  • aria-actions: add aria-actions to allowed ARIA attributes (#5200) (029655d), closes #4584 #5199, references #5215 #5215
  • aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#5246) (518f3cc), closes #3341
  • aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#5259) (d8b1ea5)
  • aria-roles: add sectionheader and sectionfooter roles (#5238) (c36c109), closes #4734, references #4734
  • aria/get-aria-value: new function to get aria values of a node (#5109) (a7d8f3e), references #5042
  • aria/has-attr-value: new function to check if node has aria value (#5136) (61f2624), references #5109
  • aria: support role=image as equivalent to role=img (#5248) (5aa8aaf), closes #4656, references #5272
  • checks/aria: support ARIA element internals properties (#5172) (9b7f754)
  • checks/label: support ARIA element internals properties (#5170) (21c5f8b)
  • checks/navigation: support ARIA element internals properties (#5167) (2c3a98f)
  • commons/aria: support ARIA element internals properties (#5171) (31f09e7)
  • commons/dom: support ARIA element internals properties (#5163) (f0a12cf)
  • commons/forms: support ARIA element internals properties (#5165) (27a4686)
  • commons/matches/fromPrimative: deprecate in favor of correct spelling (#5270) (31cfb2e)
  • commons/text: support ARIA element internals properties (#5169) (e841a33)
  • commons/text: support form-associated labels via element internals (#5182) (57cfe0a), closes #5045, references #5170 #5039 #5151 #5039
  • dom/getResolvedRefs: new function to get the resolved virtual nodes of idrefs (#5151) (489cdea), references #5109
  • element-internals: enable ElementInternals by default (#5284) (2740d42), closes #5277
  • i18n: Add Swedish locale (#5190) (dcd13f2), references #5189
  • matches: add inSectioningContent, hasChild, and isSummaryForDetails matches (#5262) (c47cdcd)
  • rules: support ARIA element internals properties (#5168) (065baf7)
  • standards/ariaAttrs: add caseInsensitive property for attributes (#5224) (bcd791c)

Bug Fixes

  • aria-allowed-role: allow roles on a non-details summary (#5242) (3bd9875), closes #3911, references #3443 #3911
  • aria-allowed-role: restrict figure roles with child figcaption (#5240) (178a635), closes #3443
  • aria-prohibited-attr: visible aria-labelledby requires review only (#5285) (fd6fa9f)
  • axe.d.ts: make enabled property of RuleMetadata optional (#5129) (90fce18)
  • color-contrast: fix various stacking context bugs (#5214) (d5e5b04), references #8 #5213
  • gather-internals: handle non-HTMLElement nodes (#5161) (06e84c3)
  • get-selector: escape control characters in attribute selectors (#5273) (4b60ac5), closes #5204 #5204
  • image-alt: allow whitespace alt on presentational images (#5218) (c5dd0ef), closes #5216
  • landmark-unique: exclude section/form with non-landmark roles from landmark match (#5085) (c5fd013), closes #4722 #5064
  • name the image role in role-img-alt and svg-img-alt metadata (#5279) (995a269), closes #5272, references #5248 #5248
  • standards: update aria-errormessage and aria-details to be idrefs (#5157) (fb94f8a)
Commits
  • 1cc54b9 chore(release): v4.13.0 (#5288)
  • a1c9ebb chore(release): 4.13.0
  • 98400d7 test(arialabelledby-text): cover closed shadow DOM and out-of-tree idrefs (#5...
  • bcd791c feat(standards/ariaAttrs): add caseInsensitive property for attributes (#5224)
  • fd6fa9f fix(aria-prohibited-attr): visible aria-labelledby requires review only (#5285)
  • 013ee82 ci: increase wait-for-npm-ready timeout for publish scan delay (#5286)
  • c5fd013 fix(landmark-unique): exclude section/form with non-landmark roles from landm...
  • dcd13f2 feat(i18n): Add Swedish locale (#5190)
  • a713bd8 test(hasAriaValue): reenable skipped test due to firefox crash (#5229)
  • fb94f8a fix(standards): update aria-errormessage and aria-details to be idrefs (#5157)
  • Additional commits viewable in compare view

Updates electron from 43.3.0 to 43.7.1

Release notes

Sourced from electron's releases.

electron v43.7.1

Release Notes for v43.7.1

Fixes

  • Fixed a main-process crash when an app called loadURL() again right after a load failed because the renderer process exited before the page committed. #53944 (Also in 44, 45)
  • Fixed a memory leak on Windows when app.getPreferredSystemLanguages() was called. #53867 (Also in 44, 45)
  • Fixed a potential UAF in app.getPreferredSystemLanguages() on Windows. #53866 (Also in 44, 45)
  • Fixed a renderer crash when an iframe was removed right after loading with nodeIntegrationInSubFrames enabled and sandbox disabled, e.g. on pages that embed Meta Pixel. #53884 (Also in 42, 44, 45)
  • Fixed a Windows renderer crash when no default locale could be determined. #53948
  • Fixed webContents.capturePage() on offscreen windows returning an image resampled to the display's scale factor instead of rendered at the window's offscreen.deviceScaleFactor. #53818 (Also in 44, 45)

electron v43.7.0

Release Notes for v43.7.0

Features

  • Added initiatorOrigin to webRequest and protocol handler requests, DownloadItem.getInitiatorOrigin(), and a trailing frame argument to the will-download and preconnect session events. #53704 (Also in 44, 45)
  • Added the ELECTRON_DEBUG_DRAGGABLE_REGIONS environment variable, which visualizes and logs draggable regions in unpackaged apps to help debug custom title bars. #53633 (Also in 44, 45)

Fixes

  • File System Access permission requests and the file-system-access-restricted event are scoped to the requesting document, grants are reset when the origin's last page closes, and write access works in in-memory sessions. #53694 (Also in 42, 44, 45)
  • Fixed session.setPermissionCheckHandler receiving the top-level origin and a null webContents for hid and usb checks made from a subframe. #53689 (Also in 42, 44, 45)
  • Fixed webContents.on(), removeListener() and removeAllListeners() throwing "Object has been destroyed" for console-message listeners after the WebContents was destroyed. #53496 (Also in 42, 44, 45)
  • Fixed a crash on Linux when process.env was written while another thread was reading the environment, and a memory leak when a worker thread exits. #53510 (Also in 42, 44, 45)
  • Fixed a possible crash on Windows when a file dialog was shown for a window that was being closed at the same time. #53584 (Also in 42, 44, 45)
  • Fixed a renderer crash when the main process sent IPC to, or a page navigated, a same-process window.open() child whose contextIsolation differed from its opener's. #53540 (Also in 42, 44, 45)
  • Fixed an issue where the browser-side check that blocks drag and drop between cross-site frames of the same page was disabled. #53750 (Also in 44, 45)
  • Fixed crashes in setDisplayMediaRequestHandler when the granted frame had been destroyed or another tab was granted by id. #53671 (Also in 42, 44, 45)
  • Fixed several non-functional DevTools integrations: the Security panel's "View certificate" button, Ctrl+wheel zooming inside DevTools, and DevTools keyboard shortcuts (e.g. F8) while the inspected page has focus. #53631 (Also in 44, 45)
  • Internal <webview>, window.close() and executeJavaScript reply IPCs are validated against the sending frame. #53726 (Also in 42, 44, 45)
  • <webview> without allowpopups also blocks links opened into a new window by modifier-click, and such windows navigate as the clicking document rather than as a browser-initiated load. #53718 (Also in 42, 44, 45)
  • getUserMedia with chromeMediaSource: 'desktop' no longer accepts WebContents source ids; use chromeMediaSource: 'tab' with webContents.getMediaSourceId() or setDisplayMediaRequestHandler to capture a WebContents. #53707 (Also in 42, 44, 45)
  • nodeIntegrationInWorker now applies only to workers created by frames that themselves have Node integration; enable nodeIntegrationInSubFrames to keep Node in workers created by subframes. #53712 (Also in 42, 44, 45)
  • openExternal permission requests started by a frame that has since gone away are attributed to that frame's origin rather than to the navigating page. #53698 (Also in 42, 44, 45)
  • pointerLock and keyboardLock permission requests now report the requesting frame, and execCommand('paste') requires user activation in the frame that calls it. #53701 (Also in 42, 44, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, libyuv, PDFium and V8. #53766
  • Fixed a renderer crash that could occur when printing from an iframe. #53761 (Also in 44, 45)
  • Fixed the app becoming unresponsive when a page has a very large number of app-region draggable elements. #53632 (Also in 44, 45)
  • Updated Node.js to v24.21.0. #53777

electron v43.6.0

Release Notes for v43.6.0

Features

  • Added a badge property to MenuItem on macOS 14+ for showing a count or custom text badge next to a menu item's label. #53045 (Also in 44)
  • Added webContents.caretBrowsingEnabled for toggling caret browsing in a WebContents. #53034 (Also in 44)

... (truncated)

Commits
  • 2ffda47 chore: cherry-pick 4b33582833e5 from chromium (#53948)
  • 69cd212 fix: post navigations started while a dead renderer is torn down (#53944)
  • 4513466 test: avoid exit race in utility process DNS spec (#53933)
  • 1a2fe29 docs: remove outdated Linux quirk documentation (#53920)
  • 58a7258 build: retry SAS key generation in checkout action (#53908)
  • e71b936 build: let script/lint.js skip ignore roots that are not directories (#53895)
  • 5d3f005 fix: crash when a node-integrated iframe is removed before its loop starts (#...
  • 9f5f723 fix: potential UAF in GetPreferredLanguages on Windows (#53866)
  • 4beadd9 build: update PGO profiles (#53870)
  • 28e6a07 fix: several small memory leaks in Windows code (#53867)
  • Additional commits viewable in compare view

Updates electron-playwright-helpers from 2.1.0 to 2.3.1

Release notes

Sourced from electron-playwright-helpers's releases.

v2.3.1

2.3.1 (2026-08-08)

Bug Fixes

  • show docs, refactor, test and style commits in the changelog (dbce4a7)

v2.3.0

2.3.0 (2026-08-08)

Features

  • explain more errors, with the fix to make, not just the symptom (cd6f20a)

v2.2.4

2.2.4 (2026-08-08)

v2.2.3

2.2.3 (2026-08-08)

Bug Fixes

  • report why a menu property failed to serialize (a109e88)

v2.2.2

2.2.2 (2026-08-08)

Bug Fixes

  • report the real cause when a Linux build's package.json can't be read (4a0c48b)

v2.2.1

2.2.1 (2026-08-08)

Bug Fixes

  • give electronWaitForFunction a real timeout instead of looping forever (f40fd8f)

v2.2.0

2.2.0 (2026-08-08)

Bug Fixes

  • describe both causes of a garbage-collected promise, not just one (c7029c1)
  • upgrade jsdoc-to-markdown for Node.js 22+ compatibility (d48995e)

... (truncated)

Changelog

Sourced from electron-playwright-helpers's changelog.

2.3.1 (2026-08-08)

Bug Fixes

  • show docs, refactor, test and style commits in the changelog (dbce4a7)

2.3.0 (2026-08-08)

Features

  • explain more errors, with the fix to make, not just the symptom (cd6f20a)

2.2.4 (2026-08-08)

2.2.3 (2026-08-08)

Bug Fixes

  • report why a menu property failed to serialize (a109e88)

2.2.2 (2026-08-08)

Bug Fixes

  • r...

    Description has been truncated

@dependabot
build(deps-dev): Bump the npm-app-patch-minor group across 1 director…
bf1e91d 
…y with 6 updates

Bumps the npm-app-patch-minor group with 6 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.12.1` | `4.13.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.13.5` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.12.1` | `4.13.0` |
| [electron](https://github.com/electron/electron) | `43.3.0` | `43.7.1` |
| [electron-playwright-helpers](https://github.com/spaceagetv/electron-playwright-helpers) | `2.1.0` | `2.3.1` |



Updates `@axe-core/playwright` from 4.12.1 to 4.13.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/dequelabs/axe-core-npm/commits/v4.13.0)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@types/node` from 24.13.3 to 24.13.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `axe-core` from 4.12.1 to 4.13.0
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.12.1...v4.13.0)

Updates `electron` from 43.3.0 to 43.7.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.3.0...v43.7.1)

Updates `electron-playwright-helpers` from 2.1.0 to 2.3.1
- [Release notes](https://github.com/spaceagetv/electron-playwright-helpers/releases)
- [Changelog](https://github.com/spaceagetv/electron-playwright-helpers/blob/main/docs/CHANGELOG.md)
- [Commits](spaceagetv/electron-playwright-helpers@v2.1.0...v2.3.1)

---
updated-dependencies:
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-patch-minor
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-patch-minor
- dependency-name: "@types/node"
  dependency-version: 24.13.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-app-patch-minor
- dependency-name: axe-core
  dependency-version: 4.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-patch-minor
- dependency-name: electron
  dependency-version: 43.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-patch-minor
- dependency-name: electron-playwright-helpers
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-app-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants