build(deps): bump the npm group across 1 directory with 8 updates by dependabot[bot] · Pull Request #18 · https-quantumblockchainai-atlassian-net/anubis

dependabot · 2026-05-04T09:44:31Z

Bumps the npm group with 8 updates in the / directory:

Package	From	To
preact	`10.29.0`	`10.29.1`
@commitlint/cli	`20.5.0`	`20.5.2`
baseline-browser-mapping	`2.10.8`	`2.10.23`
cssnano	`7.1.3`	`7.1.7`
cssnano-preset-advanced	`7.0.11`	`7.0.15`
esbuild	`0.27.4`	`0.28.0`
playwright	`1.52.0`	`1.59.1`
prettier	`3.8.1`	`3.8.3`

Updates preact from 10.29.0 to 10.29.1

Release notes

Sourced from preact's releases.

10.29.1

Fixes

Create a unique event-clock for each Preact instance on a page. (#5068, thanks @JoviDeCroock)

Fix incorrect DOM order with conditional ContextProvider and inner keys (#5067, thanks @JoviDeCroock)

Maintenance

fix: Remove postinstall script for playwright setup (#5063, thanks @rschristian)

chore: speed up tests by using playwright instead of webdriverio (#5060, thanks @marvinhagemeister)

chore: migrate remaining .js -> .jsx files (#5059, thanks @marvinhagemeister)

chore: rename .test.js -> .test.jsx when JSX is used (#5058, thanks @marvinhagemeister)

Migrate from biome to oxfmt (#5033, thanks @JoviDeCroock)

Commits

4dc9b50 10.29.1 (#5071)
0560f9a Create a unique event-clock for each Preact instance on a page. (#5068)
cda06de Fix incorrect DOM order with conditional ContextProvider and inner keys (#506...
c859700 fix: Remove postinstall script for playwright setup (#5063)
110966a Merge pull request #5060 from preactjs/playwright
20a9be1 chore: speed up tests by using playwright instead of webdriverio
dacefd5 Merge pull request #5059 from preactjs/jsx-migrate2
2a61642 chore: migrate remaining .js -> .jsx files
71ecde6 Merge pull request #5058 from preactjs/jsx-tests
cd1c4af chore: rename *.js -> *.jsx when JSX is used
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @commitlint/cli from 20.5.0 to 20.5.2

Release notes

Sourced from @commitlint/cli's releases.

v20.5.2

20.5.2 (2026-04-25)

Just minor dep updates before the next breaking change

Chore & Docs

chore: remove codesandbox ci integration by @escapedcat in conventional-changelog/commitlint#4680

docs: add Windows UTF-8 encoding note to getting started guide by @Chessing234 in conventional-changelog/commitlint#4699

docs: improve parserPreset documentation with examples and options reference by @Chessing234 in conventional-changelog/commitlint#4700

docs: fix subject-case rule default from 'always' to 'never' by @Chessing234 in conventional-changelog/commitlint#4703

New Contributors

@Chessing234 made their first contribution in conventional-changelog/commitlint#4699

Full Changelog: conventional-changelog/commitlint@v20.5.1...v20.5.2

v20.5.1

20.5.1 (2026-03-31)

Bug Fixes

fix(cz-commitlint): add VS16 to single character emojis by @mrt181 in conventional-changelog/commitlint#4666

fix(cz-commitlint): handle modifiers correctly by @mrt181 in conventional-changelog/commitlint#4667

Reverts

Revert "fix: update dependency global-directory to v5 (#4671)" by @escapedcat in conventional-changelog/commitlint#4677

Core & co

chore: deps and CI improvements by @escapedcat in conventional-changelog/commitlint#4660

ci: restore push on all branches, avoid duplicate runs by @escapedcat in conventional-changelog/commitlint#4665

Full Changelog: conventional-changelog/commitlint@v20.5.0...v20.5.1

Changelog

Sourced from @commitlint/cli's changelog.

20.5.2 (2026-04-25)

Note: Version bump only for package @commitlint/cli

Commits

7fe86b2 v20.5.2
See full diff in compare view

Updates baseline-browser-mapping from 2.10.8 to 2.10.23

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

Remove process.loadEnfFile() from main script by @tonypconway in web-platform-dx/baseline-browser-mapping#112

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits

0544d03 Patch to 2.10.23 because browser or feature data changed
2e7b2aa Browser or feature data changed
0a152af Updating static site
62f1580 Patch to 2.10.22 because browser or feature data changed
28f506e Browser or feature data changed
16e4c4f Updating static site
d17de12 Updating static site
8de0d27 Patch to 2.10.21 because browser or feature data changed
58a14ed Browser or feature data changed
1e26fa1 Updating static site
Additional commits viewable in compare view

Updates cssnano from 7.1.3 to 7.1.7

Release notes

Sourced from cssnano's releases.

v.7.1.7

This release is idnetical to the previous one, but is being published to ensure that the latest versions of postcss-normalize-repeat-style and postcss-normalize-positions are uploaded to the npm registry.

v7.1.6

New feature

feat(postcss-minify-selectors): fold selector lists into :is() (#1703) by @dkryaklin in cssnano/cssnano#1775

Bug fixes

fix: update colordx and autoprefixer

fix: update postcss peer dependency by @ludofischer in cssnano/cssnano#1779 Solves possible security issue

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.5...cssnano@7.1.6

v7.1.5

Bug Fixes

fix(postcss-reduce-idents): support counter-set property by @dkryaklin in cssnano/cssnano#1765

fix(postcss-convert-values): add transformCustomProperties option by @dkryaklin in cssnano/cssnano#1769

fix(postcss-colormin): add transformCustomProperties option by @dkryaklin in cssnano/cssnano#1768

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.4...cssnano@7.1.5

v7.1.4

Bug Fixes

Update color conversion library to @colordx/core to fix rounding errors in color conversions #1755

Commits

6afa2c9 chore: create new versions to fix missing dependencies
80e57b9 Publish cssnano 7.1.6
322ad33 fix: update postcss peer dependency
587f28d chore: pin codecov action
560b0fa chore: improve CI security
0fb105b fix: update postcss
3b6cf88 chore: update development deps
a133ac0 chore: update TypeScript
730b04b fix: update autoprefixer
a00036c fix: update colordx
Additional commits viewable in compare view

Updates cssnano-preset-advanced from 7.0.11 to 7.0.15

Commits

6afa2c9 chore: create new versions to fix missing dependencies
80e57b9 Publish cssnano 7.1.6
322ad33 fix: update postcss peer dependency
587f28d chore: pin codecov action
560b0fa chore: improve CI security
0fb105b fix: update postcss
3b6cf88 chore: update development deps
a133ac0 chore: update TypeScript
730b04b fix: update autoprefixer
a00036c fix: update colordx
Additional commits viewable in compare view

Updates esbuild from 0.27.4 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0
Add support for with { type: 'text' } imports (#4435)

The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:
import string from './example.txt' with { type: 'text' }
console.log(string)
Add integrity checks to fallback download path (#4343)

Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

Update the Go compiler from 1.25.7 to 1.26.1

This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

It now uses the new garbage collector that comes with Go 1.26.

The Go compiler is now more aggressive with allocating memory on the stack.

The executable format that the Go linker uses has undergone several changes.

The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

You can read the Go 1.26 release notes for more information.
v0.27.7
Fix lowering of define semantics for TypeScript parameter properties (#4421)

The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
// Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}
// New output (with --loader=ts --target=es2021)
class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.0
Add support for with { type: 'text' } imports (#4435)

The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:
import string from './example.txt' with { type: 'text' }
console.log(string)
Add integrity checks to fallback download path (#4343)

Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

Update the Go compiler from 1.25.7 to 1.26.1

This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

It now uses the new garbage collector that comes with Go 1.26.

The Go compiler is now more aggressive with allocating memory on the stack.

The executable format that the Go linker uses has undergone several changes.

The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

You can read the Go 1.26 release notes for more information.
0.27.7
Fix lowering of define semantics for TypeScript parameter properties (#4421)

The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
// Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}

... (truncated)

Commits

6a794df publish 0.28.0 to npm
64ee0ea fix #4435: support with { type: text } imports
ef65aee fix sort order in snapshots_packagejson.txt
1a26a8e try to fix test-old-ts, also shuffle CI tasks
556ce6c use '' instead of null to omit build hashes
8e675a8 ci: allow missing binary hashes for tests
7067763 Reapply "update go 1.25.7 => 1.26.1"
39473a9 fix #4343: integrity check for binary download
2025c9f publish 0.27.7 to npm
c6b586e fix typo in Makefile for @esbuild/win32-x64
Additional commits viewable in compare view

Updates playwright from 1.52.0 to 1.59.1

Release notes

Sourced from playwright's releases.

v1.59.1

Bug Fixes

[Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

Screencast recordings

Action annotations

Visual overlays

Real-time frame capture

Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:
await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();
Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:
await page.screencast.showActions({ position: 'top-right' });
screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:
// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
</tr></table> 

... (truncated)

Commits

d466ac5 chore: mark v1.59.1 (#40005)
530e7e5 cherry-pick(#4004): fix(cli): kill-all should kill dashboard
9aa216c cherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...
01b2b15 cherry-pick(#39980): chore: more release notes fixes
a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
0c65a75 cherry-pick(#39968): chore: screencast.showActions api
f04155b cherry-pick(#39958): chore: release notes for langs v1.59
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for playwright since your current version.

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

d7108a7 Release 3.8.3
177f908 Prevent trailing comma in SCSS if() function (#18471)
1cd4066 Release @prettier/plugin-oxc@0.1.4
a8700e2 Update oxc-parser to v0.125.0
752157c Fix tests
053fd41 Bump Prettier dependency to 3.8.2
904c636 Clean changelog_unreleased
dc1f7fc Update dependents count
b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [preact](https://github.com/preactjs/preact) | `10.29.0` | `10.29.1` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.5.0` | `20.5.2` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.8` | `2.10.23` | | [cssnano](https://github.com/cssnano/cssnano) | `7.1.3` | `7.1.7` | | [cssnano-preset-advanced](https://github.com/cssnano/cssnano) | `7.0.11` | `7.0.15` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.4` | `0.28.0` | | [playwright](https://github.com/microsoft/playwright) | `1.52.0` | `1.59.1` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` | Updates `preact` from 10.29.0 to 10.29.1 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.29.0...10.29.1) Updates `@commitlint/cli` from 20.5.0 to 20.5.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.2/@commitlint/cli) Updates `baseline-browser-mapping` from 2.10.8 to 2.10.23 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.10.8...v2.10.23) Updates `cssnano` from 7.1.3 to 7.1.7 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.3...cssnano@7.1.7) Updates `cssnano-preset-advanced` from 7.0.11 to 7.0.15 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano-preset-advanced@7.0.11...cssnano-preset-advanced@7.0.15) Updates `esbuild` from 0.27.4 to 0.28.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.27.4...v0.28.0) Updates `playwright` from 1.52.0 to 1.59.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.52.0...v1.59.1) Updates `prettier` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.3) --- updated-dependencies: - dependency-name: preact dependency-version: 10.29.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@commitlint/cli" dependency-version: 20.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: baseline-browser-mapping dependency-version: 2.10.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: cssnano dependency-version: 7.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: cssnano-preset-advanced dependency-version: 7.0.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: esbuild dependency-version: 0.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: playwright dependency-version: 1.59.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 4, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm group across 1 directory with 8 updates#18

build(deps): bump the npm group across 1 directory with 8 updates#18
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-cb1d9feb44

dependabot Bot commented on behalf of github May 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 4, 2026

10.29.1

Fixes

Maintenance

v20.5.2

20.5.2 (2026-04-25)

Chore & Docs

New Contributors

v20.5.1

20.5.1 (2026-03-31)

Bug Fixes

Reverts

Core & co

20.5.2 (2026-04-25)

v2.9.3 - remove process.loadEnvFile()

What's Changed

v.7.1.7

v7.1.6

New feature

Bug fixes

v7.1.5

Bug Fixes

v7.1.4

Bug Fixes

v0.28.0

v0.27.7

0.28.0

0.27.7

v1.59.1

Bug Fixes

v1.59.0

🎬 Screencast

3.8.3

3.8.2

3.8.3

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

v2.9.3 - remove `process.loadEnvFile()`

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)