Skip to content

Bump the bun group across 1 directory with 32 updates - #377

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-8e91996b90
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/bun-8e91996b90

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown

Bumps the bun group with 32 updates in the / directory:

Package From To
@hraness/soundfish 0.7.0 0.8.0
@noble/hashes 2.2.0 2.4.0
@paper-design/shaders 0.0.77 0.0.81
@vercel/blob 2.8.0 2.8.1
chromium-bidi 12.1.0 17.0.2
effect 3.22.1 4.0.3
motion 12.42.0 14.1.0
playwright-core 1.62.0 1.64.0
react 19.2.3 19.3.0
@types/react 19.2.17 19.3.0
react-dom 19.2.3 19.3.0
@types/react-dom 19.2.3 19.3.0
three 0.183.2 0.186.1
typescript 6.0.3 7.0.2
zod 4.4.3 4.6.6
@antithesishq/bombadil 0.7.2 0.7.8
@eslint/js 9.39.5 10.0.1
@native-sdk/cli 0.5.3 0.10.1
@types/bun 1.3.14 1.4.2
@types/node 24.13.3 26.6.5
@types/react 19.2.17 19.3.0
@types/react-dom 19.2.3 19.3.0
@vitejs/plugin-react 6.0.5 6.1.2
agent-browser 0.32.3 0.39.0
eslint 9.39.5 10.12.0
fast-check 4.9.0 4.10.2
tldraw 5.2.5 5.5.2
typescript-eslint 8.67.0 8.71.1
vite 8.2.1 8.3.4
posthog-js 1.422.5 1.438.7
satori 0.33.4 0.47.1
@babel/core 7.29.7 8.0.7
@stylexjs/babel-plugin 0.19.0 0.19.1
@stylexjs/stylex 0.19.0 0.19.1

Updates @hraness/soundfish from 0.7.0 to 0.8.0

Commits

Updates @noble/hashes from 2.2.0 to 2.4.0

Release notes

Sourced from @​noble/hashes's releases.

2.4.0

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Full Changelog: paulmillr/noble-hashes@2.3.0...2.4.0

2.3.0

Improve speed:

  • +10-45% 32b inputs across all hashes
  • +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac
  • 2.2x argon
  • +20% pbkdf2 and hkdf

Other changes:

  • Better error messages and stricter type checks everywhere
  • Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).
  • blake2.compress renamed to _compress (marked internal).
  • Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-hashes@2.2.0...2.3.0

Changelog

Sourced from @​noble/hashes's changelog.

2.4.0 (2026-08-27)

Security and correctness

  • Protect passed options against mutation / pollution
  • keccakprg: fail until entropy is added
  • webcrypto: reject output sizes which crashed engine
  • blake3: fix tree merging for multi-terabyte streams
  • Improve zeroization

Misc

  • Speed-up Argon2 by 20%
  • Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.
  • Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1
  • nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

2.3.0 (2026-08-06)

Performance

  • Improved 32-byte input performance across all hashes by 10–45%.
  • Improved SHA-3 and SHAKE by 40%, one-megabyte KangarooTwelve, MarsupilamiFourteen, and TurboSHAKE by 50%, and KMAC by 20%.
  • Improved Argon2 performance by 2.2×.
  • Improved PBKDF2 and HKDF performance by 20%.

Other changes

  • Added better error messages and stricter type checks throughout the package.
  • Fixed HMAC._cloneInto so it preserves canXOF in issue #134, reported by @​ChALkeR, and corrected an Argon2d typo in issue #135.
  • Renamed blake2.compress to the internal _compress method.
  • Reduced unpacked on-disk size from 869 KB to 665 KB by disabling less-relevant source maps.
Commits

Updates @paper-design/shaders from 0.0.77 to 0.0.81

Updates @vercel/blob from 2.8.0 to 2.8.1

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Changelog

Sourced from @​vercel/blob's changelog.

2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Commits

Updates chromium-bidi from 12.1.0 to 17.0.2

Release notes

Sourced from chromium-bidi's releases.

chromium-bidi: v17.0.2

17.0.2 (2026-07-06)

Bug Fixes

  • various build issues found by releasing after the gn migration (#4208) (a4677ce)

chromium-bidi: v17.0.1

17.0.1 (2026-07-06)

Bug Fixes

  • adjust npm publish after gn migration (185a2a7)

chromium-bidi: v17.0.0

⚠ BREAKING CHANGES

  • chrome: update the pinned browser version to 152.0.7923.0 (#4194)
  • chrome: update the pinned browser version to 151.0.7888.0 (#4174)
  • chrome: update the pinned browser version to 150.0.7863.0 (#4164)

Features

  • chrome: update the pinned browser version to 150.0.7863.0 (#4164) (257e79e)
  • chrome: update the pinned browser version to 151.0.7888.0 (#4174) (b66d6ba)
  • chrome: update the pinned browser version to 152.0.7923.0 (#4194) (fededde)
  • implement digitalCredentials.setVirtualWalletBehavior (#4196) (9046114)

Bug Fixes

  • network: don't retain information on the heap (#4147) (1290f1e)

Performance Improvements

chromium-bidi: v16.0.1

16.0.1 (2026-05-12)

Bug Fixes

chromium-bidi: v16.0.0

16.0.0 (2026-05-12)

... (truncated)

Changelog

Sourced from chromium-bidi's changelog.

17.0.2 (2026-07-06)

Bug Fixes

  • various build issues found by releasing after the gn migration (#4208) (a4677ce)

17.0.1 (2026-07-06)

Bug Fixes

  • adjust npm publish after gn migration (185a2a7)

17.0.0 (2026-07-06)

⚠ BREAKING CHANGES

  • chrome: update the pinned browser version to 152.0.7923.0 (#4194)
  • chrome: update the pinned browser version to 151.0.7888.0 (#4174)
  • chrome: update the pinned browser version to 150.0.7863.0 (#4164)

Features

  • chrome: update the pinned browser version to 150.0.7863.0 (#4164) (257e79e)
  • chrome: update the pinned browser version to 151.0.7888.0 (#4174) (b66d6ba)
  • chrome: update the pinned browser version to 152.0.7923.0 (#4194) (fededde)
  • implement digitalCredentials.setVirtualWalletBehavior (#4196) (9046114)

Bug Fixes

  • network: don't retain information on the heap (#4147) (1290f1e)

Performance Improvements

16.0.1 (2026-05-12)

Bug Fixes

16.0.0 (2026-05-12)

... (truncated)

Commits
  • 237806b chore(main): release chromium-bidi 17.0.2 (#4209)
  • a4677ce fix: various build issues found by releasing after the gn migration (#4208)
  • 6cf9429 build: delete create-release.sh (#4207)
  • e337483 test: deflake flaky tests on macos (#4206)
  • 604ce1f chore(main): release chromium-bidi 17.0.1 (#4204)
  • 817928b build: remove fork from manual scripts (#4205)
  • 185a2a7 build: fix npm publish after gn migration (#4203)
  • b511b62 chore(main): release chromium-bidi 17.0.0 (#4202)
  • 9046114 feat: implement digitalCredentials.setVirtualWalletBehavior (#4196)
  • 96ea483 build(spec): update WebDriverBiDi types and add screencast command stubs (#4201)
  • Additional commits viewable in compare view

Updates effect from 3.22.1 to 4.0.3

Release notes

Sourced from effect's releases.

effect@4.0.3

Patch Changes

  • #8977 b4e5af8 Thanks @​kitlangton! - Prevent crashes and premature interruption when Effect.cached, Effect.cachedWithTTL, and Effect.cachedInvalidateWithTTL are synchronously re-entered.

  • #8982 b8d6e7a Thanks @​Yi-111-a! - Export CliOutput.displayWidth to measure terminal-cell widths using the same logic as built-in CLI help and tables.

  • #8933 89d5c88 Thanks @​tim-smart! - Respect NO_COLOR in CLI prompts and the command wizard, suppressing color and style escapes while preserving cursor and redraw controls.

  • #8941 66257d2 Thanks @​Tanner-Scadden! - Hand cluster shards off one at a time when Sharding shuts down, after their entities and singletons have stopped, so live runners can take them over sooner. The handoff is best effort: its wait is bounded, and if it times out, releaseAll attempts to release the remaining locks. A runner that is shutting down no longer acquires new shards, and releasing a shard no longer waits forever on an entity whose id is also active on another shard.

  • #8940 cd2ab19 Thanks @​Tanner-Scadden! - Fix cluster shard handoffs. Interrupts and stream acknowledgements now reach requests still draining on the previous owner, and RpcServer accepts acknowledgements for active streams after a client's EOF. Volatile requests sent during a handoff wait, for at most shardLockExpiration, until the shard can be served instead of repeatedly failing with EntityNotAssignedToRunner.

  • #8897 ca068ce Thanks @​effect-bot! - Add separate migration and storage layers to cluster SQL storage so applications can use tables migrated by an owner connection.

  • #8895 f686000 Thanks @​tim-smart! - Serialize SchemaError as a compact object containing its tag and formatted message in JSON logs and Node inspection, without dumping schema AST nodes.

  • #8968 e052f1b Thanks @​sledorze! - Avoid a redundant map copy when Context.add rebases an overlay chain.

  • #8487 c755b69 Thanks @​fubhy! - Add TestCrypto.layer, which provides deterministic random operations derived from a seed while preserving a platform crypto service's digest implementation.

  • #8935 ebe487f Thanks @​tim-smart! - Turn Crypto.randomUUIDv4 and Crypto.randomUUIDv7 into functions accepting an optional { format: "hex" | "bytes" } option. Call them with () for the default lowercase, hyphenated UUID string, or with { format: "bytes" } for a 16-byte Uint8Array.

  • #8926 63bfad8 Thanks @​effect-bot! - Fix DurableDeferred.raceAll and DurableDeferred.into so a workflow branch continues after its result is recorded instead of stalling until a concurrently parked sibling is woken. The effect passed to DurableDeferred.into now counts as in-flight work, so a parked sibling no longer suspends the run while it runs.

  • #8921 8598157 Thanks @​devangpratap! - Fix Duration.fromInputUnsafe throwing on infinite nanosecond totals. It now returns an infinite duration, and Duration.fromInput returns Some instead of None.

  • #8972 76a03f7 Thanks @​devangpratap! - Fix Duration.times throwing when a nanosecond-backed duration is multiplied by a fractional or non-finite number. Fractional results round to the nearest nanosecond.

  • #8900 182e26d Thanks @​effect-bot! - Add a noFollow option to FileSystem.open to reject symlinks at the final path component. Supported on Node and Bun on POSIX; Windows and Deno return BadArgument. Add { position } to File.read and File.readAlloc for concurrent reads that leave the cursor unchanged.

  • #8885 a46592a Thanks @​effect-bot! - Preserve duplicate slashes in query values when FindMyWay normalizes request paths.

  • #8986 1d3419e Thanks @​jayhemnani9910! - Fix histogram exporters to retain all finite boundaries and overflow observations in OTLP, and emit a single +Inf bucket in Prometheus.

  • #8932 e00eaae Thanks @​tim-smart! - Defer terminal input acquisition until a prompt needs user input, so constant fallback prompts leave piped stdin untouched.

  • #8888 133ceb2 Thanks @​RhysSullivan! - Return empty 200 text/event-stream responses for MCP HTTP request POSTs when cancellation withholds every reply. Return 500 for other request POSTs that end without a response.

  • #8924 a494a64 Thanks @​effect-bot! - Add McpServer.layerHttp({ allowSubscriptions: false }) to disable v2026_07_28 subscriptions while keeping request-scoped progress and log notifications.

  • #8890 d6082a2 Thanks @​tim-smart! - Send MCP cancellation notifications for interrupted server-to-client requests instead of internal RPC control messages.

  • #8925 ee3a350 Thanks @​effect-bot! - Prevent MCP subscriptions from receiving deferred list-change notifications emitted before they subscribed, while preserving coalesced runtime changes.

  • #8955 7ba976c Thanks @​effect-bot! - Allow interrupted activities to run again when the in-memory workflow engine replays a preempted execution.

  • #8973 9dbd07e Thanks @​fubhy! - Accept address inputs in Dns.reverse and name server inputs in the platform Dns services, and add Dns.nameServerFromInput.

  • #8953 d4f7dc3 Thanks @​fubhy! - Add TLSA records to effect/net/Dns, with a Schema.DnsTlsaRecord schema whose JSON codec encodes the certificate association data as hex. The Node.js Dns service queries them with resolveTlsa (Node.js 22.15 or 23.9 and later); Bun, Deno, and older Node.js versions fail TLSA queries with Unsupported.

... (truncated)

Changelog

Sourced from effect's changelog.

4.0.3

Patch Changes

  • #8977 b4e5af8 Thanks @​kitlangton! - Prevent crashes and premature interruption when Effect.cached, Effect.cachedWithTTL, and Effect.cachedInvalidateWithTTL are synchronously re-entered.

  • #8982 b8d6e7a Thanks @​Yi-111-a! - Export CliOutput.displayWidth to measure terminal-cell widths using the same logic as built-in CLI help and tables.

  • #8933 89d5c88 Thanks @​tim-smart! - Respect NO_COLOR in CLI prompts and the command wizard, suppressing color and style escapes while preserving cursor and redraw controls.

  • #8941 66257d2 Thanks @​Tanner-Scadden! - Hand cluster shards off one at a time when Sharding shuts down, after their entities and singletons have stopped, so live runners can take them over sooner. The handoff is best effort: its wait is bounded, and if it times out, releaseAll attempts to release the remaining locks. A runner that is shutting down no longer acquires new shards, and releasing a shard no longer waits forever on an entity whose id is also active on another shard.

  • #8940 cd2ab19 Thanks @​Tanner-Scadden! - Fix cluster shard handoffs. Interrupts and stream acknowledgements now reach requests still draining on the previous owner, and RpcServer accepts acknowledgements for active streams after a client's EOF. Volatile requests sent during a handoff wait, for at most shardLockExpiration, until the shard can be served instead of repeatedly failing with EntityNotAssignedToRunner.

  • #8897 ca068ce Thanks @​effect-bot! - Add separate migration and storage layers to cluster SQL storage so applications can use tables migrated by an owner connection.

  • #8895 f686000 Thanks @​tim-smart! - Serialize SchemaError as a compact object containing its tag and formatted message in JSON logs and Node inspection, without dumping schema AST nodes.

  • #8968 e052f1b Thanks @​sledorze! - Avoid a redundant map copy when Context.add rebases an overlay chain.

  • #8487 c755b69 Thanks @​fubhy! - Add TestCrypto.layer, which provides deterministic random operations derived from a seed while preserving a platform crypto service's digest implementation.

  • #8935 ebe487f Thanks @​tim-smart! - Turn Crypto.randomUUIDv4 and Crypto.randomUUIDv7 into functions accepting an optional { format: "hex" | "bytes" } option. Call them with () for the default lowercase, hyphenated UUID string, or with { format: "bytes" } for a 16-byte Uint8Array.

  • #8926 63bfad8 Thanks @​effect-bot! - Fix DurableDeferred.raceAll and DurableDeferred.into so a workflow branch continues after its result is recorded instead of stalling until a concurrently parked sibling is woken. The effect passed to DurableDeferred.into now counts as in-flight work, so a parked sibling no longer suspends the run while it runs.

  • #8921 8598157 Thanks @​devangpratap! - Fix Duration.fromInputUnsafe throwing on infinite nanosecond totals. It now returns an infinite duration, and Duration.fromInput returns Some instead of None.

  • #8972 76a03f7 Thanks @​devangpratap! - Fix Duration.times throwing when a nanosecond-backed duration is multiplied by a fractional or non-finite number. Fractional results round to the nearest nanosecond.

  • #8900 182e26d Thanks @​effect-bot! - Add a noFollow option to FileSystem.open to reject symlinks at the final path component. Supported on Node and Bun on POSIX; Windows and Deno return BadArgument. Add { position } to File.read and File.readAlloc for concurrent reads that leave the cursor unchanged.

  • #8885 a46592a Thanks @​effect-bot! - Preserve duplicate slashes in query values when FindMyWay normalizes request paths.

  • #8986 1d3419e Thanks @​jayhemnani9910! - Fix histogram exporters to retain all finite boundaries and overflow observations in OTLP, and emit a single +Inf bucket in Prometheus.

  • #8932 e00eaae Thanks @​tim-smart! - Defer terminal input acquisition until a prompt needs user input, so constant fallback prompts leave piped stdin untouched.

  • #8888 133ceb2 Thanks @​RhysSullivan! - Return empty 200 text/event-stream responses for MCP HTTP request POSTs when cancellation withholds every reply. Return 500 for other request POSTs that end without a response.

  • #8924 a494a64 Thanks @​effect-bot! - Add McpServer.layerHttp({ allowSubscriptions: false }) to disable v2026_07_28 subscriptions while keeping request-scoped progress and log notifications.

  • #8890 d6082a2 Thanks @​tim-smart! - Send MCP cancellation notifications for interrupted server-to-client requests instead of internal RPC control messages.

  • #8925 ee3a350 Thanks @​effect-bot! - Prevent MCP subscriptions from receiving deferred list-change notifications emitted before they subscribed, while preserving coalesced runtime changes.

  • #8955 7ba976c Thanks @​effect-bot! - Allow interrupted activities to run again when the in-memory workflow engine replays a preempted execution.

  • #8973 9dbd07e Thanks @​fubhy! - Accept address inputs in Dns.reverse and name server inputs in the platform Dns services, and add Dns.nameServerFromInput.

... (truncated)

Commits
  • 967a7dc Version Packages (#8887)
  • 4fcdede Clarify native Array.fromAsync in Stream examples (#8989)
  • 84f48df Omit cumulative min/max from delta histogram points in OtlpMetrics (#8987)
  • 1d3419e Fix histogram export dropping or duplicating the overflow bucket (#8986)
  • b4e5af8 fix(effect): handle synchronous re-entrancy in Effect.cached* (#8977)
  • b8d6e7a cli: export the terminal display-width measure as CliOutput.displayWidth (#8982)
  • b630acd Revert "Add an explicit maxDepth option to Context.makeUnsafe (#8969)"
  • 0b17b9e Support WebSocket handshake headers alongside subprotocols (#8978)
  • f9f7a5a feat(rpc): report socket ping timeouts through an onPingTimeout option (#8976)
  • 4b1f4aa Add an explicit maxDepth option to Context.makeUnsafe (#8969)
  • Additional commits viewable in compare view

Updates motion from 12.42.0 to 14.1.0

Changelog

Sourced from motion's changelog.

[14.1.0] 2026-10-09

Added

  • animateLayout: Layout animations for vanilla JS.

Fixed

  • Delay animation start when main thread held to prevent visual jumps.
  • Fix whileHover/whileTap getting stuck after Fast Refresh reorders siblings.
  • scroll/useScroll: Fix reporting of elastic overscroll.
  • AnimatePresence: Fix popLayout when rendering into another window or iframe.
  • animate: Fix JS animations jumping ahead when played after a pause at non-1 speed.
  • Allow layout animations inside dragged elements.

[14.0.0] 2026-10-02

Changed

  • Removed internal APIs restored in 13.5.1 for compatibility with framer-motion 13.0–13.4. Future removed internal APIs won't cause cross-compatibility issues since pinning internal framer-motion, motion-dom and motion-utils dependencies.

[13.5.1] 2026-10-02

Changed

  • <motion>: Fall back to the attribute in readSVGValue when computed style is empty.
  • <motion>: Internal changes to animateChanges for size reductions.

Fixed

  • scroll: Temporarily reverted removal of internal observeTimeline API to fix compatibility with previous 13.x APIs. Moving to pinned dependencies before removing in 14.x.
  • styleEffect: Cleaning up an earlier value no longer removes a value that was bound to the same key after it.
  • svgEffect: No longer writes transforms and origins as attributes.
  • <motion>: inherit={false} now correctly not inheriting parent animations.
  • <motion>: Fix sortNodePosition throwing when a sibling hasn't mounted

[13.5.0] 2026-10-01

Added

  • spring: Now accepts negative bounce (0--1) to define overdamped springs.

Changed

  • <m>: 20% smaller.
  • useSpring: 10% smaller.
  • scroll/useScroll: Use main thread for all offset animations.

Fixed

... (truncated)

Commits
  • b497798 v14.1.0
  • 2f236b0 Latest
  • 73a21d3 Merge pull request #3912 from motiondivision/claude/project-thread-tvp91y
  • 34bad0f Export animateLayout from motion
  • 5c5073a Merge pull request #3895 from motiondivision/proto/issue-1630
  • 1def636 Merge pull request #3901 from motiondivision/claude/project-thread-teqyqt
  • b62d551 Merge pull request #3911 from motiondivision/claude/project-thread-vl8yhx
  • 2feb17a Remove isTreeAnimationBlocked
  • 0bbe422 Simplify isReversed flex axis check in scroll info
  • 97a6003 Merge pull request #3896 from motiondivision/claude/project-thread-op72nq
  • Additional commits viewable in compare view

Updates playwright-core from 1.62.0 to 1.64.0

Release notes

Sourced from playwright-core's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
  • 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
  • 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
  • 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
  • dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

Bumps the bun group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hraness/soundfish](https://github.com/hraness/soundfish/tree/HEAD/npm/soundfish) | `0.7.0` | `0.8.0` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.2.0` | `2.4.0` |
| @paper-design/shaders | `0.0.77` | `0.0.81` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.0` | `2.8.1` |
| [chromium-bidi](https://github.com/GoogleChromeLabs/chromium-bidi) | `12.1.0` | `17.0.2` |
| [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) | `3.22.1` | `4.0.3` |
| [motion](https://github.com/motiondivision/motion) | `12.42.0` | `14.1.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.62.0` | `1.64.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [three](https://github.com/mrdoob/three.js) | `0.183.2` | `0.186.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.6` |
| [@antithesishq/bombadil](https://github.com/antithesishq/bombadil) | `0.7.2` | `0.7.8` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.5` | `10.0.1` |
| [@native-sdk/cli](https://github.com/vercel-labs/native) | `0.5.3` | `0.10.1` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.6.5` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.5` | `6.1.2` |
| [agent-browser](https://github.com/vercel-labs/agent-browser) | `0.32.3` | `0.39.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.12.0` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.9.0` | `4.10.2` |
| [tldraw](https://github.com/tldraw/tldraw) | `5.2.5` | `5.5.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.71.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.4` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.422.5` | `1.438.7` |
| [satori](https://github.com/vercel/satori) | `0.33.4` | `0.47.1` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.7` | `8.0.7` |
| [@stylexjs/babel-plugin](https://github.com/facebook/stylex) | `0.19.0` | `0.19.1` |
| [@stylexjs/stylex](https://github.com/facebook/stylex) | `0.19.0` | `0.19.1` |



Updates `@hraness/soundfish` from 0.7.0 to 0.8.0
- [Commits](https://github.com/hraness/soundfish/commits/HEAD/npm/soundfish)

Updates `@noble/hashes` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Changelog](https://github.com/paulmillr/noble-hashes/blob/main/CHANGELOG.md)
- [Commits](paulmillr/noble-hashes@2.2.0...2.4.0)

Updates `@paper-design/shaders` from 0.0.77 to 0.0.81

Updates `@vercel/blob` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.1/packages/blob)

Updates `chromium-bidi` from 12.1.0 to 17.0.2
- [Release notes](https://github.com/GoogleChromeLabs/chromium-bidi/releases)
- [Changelog](https://github.com/GoogleChromeLabs/chromium-bidi/blob/main/CHANGELOG.md)
- [Commits](GoogleChromeLabs/chromium-bidi@chromium-bidi-v12.1.0...chromium-bidi-v17.0.2)

Updates `effect` from 3.22.1 to 4.0.3
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@4.0.3/packages/effect)

Updates `motion` from 12.42.0 to 14.1.0
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.42.0...v14.1.0)

Updates `playwright-core` from 1.62.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.0...v1.64.0)

Updates `react` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `three` from 0.183.2 to 0.186.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `zod` from 4.4.3 to 4.6.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.6)

Updates `@antithesishq/bombadil` from 0.7.2 to 0.7.8
- [Release notes](https://github.com/antithesishq/bombadil/releases)
- [Changelog](https://github.com/antithesishq/bombadil/blob/main/CHANGELOG.md)
- [Commits](antithesishq/bombadil@v0.7.2...v0.7.8)

Updates `@eslint/js` from 9.39.5 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@native-sdk/cli` from 0.5.3 to 0.10.1
- [Release notes](https://github.com/vercel-labs/native/releases)
- [Changelog](https://github.com/vercel-labs/native/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/native@v0.5.3...v0.10.1)

Updates `@types/bun` from 1.3.14 to 1.4.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@types/node` from 24.13.3 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `agent-browser` from 0.32.3 to 0.39.0
- [Release notes](https://github.com/vercel-labs/agent-browser/releases)
- [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/agent-browser@v0.32.3...v0.39.0)

Updates `eslint` from 9.39.5 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.5...v10.12.0)

Updates `fast-check` from 4.9.0 to 4.10.2
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.10.2/packages/fast-check)

Updates `tldraw` from 5.2.5 to 5.5.2
- [Release notes](https://github.com/tldraw/tldraw/releases)
- [Changelog](https://github.com/tldraw/tldraw/blob/main/RELEASES.md)
- [Commits](tldraw/tldraw@v5.2.5...v5.5.2)

Updates `typescript-eslint` from 8.67.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `vite` from 8.2.1 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `posthog-js` from 1.422.5 to 1.438.7
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.422.5...posthog-js@1.438.7)

Updates `satori` from 0.33.4 to 0.47.1
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.33.4...0.47.1)

Updates `@babel/core` from 7.29.7 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-core)

Updates `@stylexjs/babel-plugin` from 0.19.0 to 0.19.1
- [Release notes](https://github.com/facebook/stylex/releases)
- [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md)
- [Commits](facebook/stylex@0.19.0...0.19.1)

Updates `@stylexjs/stylex` from 0.19.0 to 0.19.1
- [Release notes](https://github.com/facebook/stylex/releases)
- [Changelog](https://github.com/facebook/stylex/blob/main/CHANGELOG.md)
- [Commits](facebook/stylex@0.19.0...0.19.1)

---
updated-dependencies:
- dependency-name: "@hraness/soundfish"
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@noble/hashes"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@paper-design/shaders"
  dependency-version: 0.0.81
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: chromium-bidi
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: effect
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: motion
  dependency-version: 14.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: playwright-core
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: three
  dependency-version: 0.186.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: zod
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@antithesishq/bombadil"
  dependency-version: 0.7.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: "@native-sdk/cli"
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: agent-browser
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: fast-check
  dependency-version: 4.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: tldraw
  dependency-version: 5.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: posthog-js
  dependency-version: 1.438.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: satori
  dependency-version: 0.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@babel/core"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bun
- dependency-name: "@stylexjs/babel-plugin"
  dependency-version: 0.19.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@stylexjs/stylex"
  dependency-version: 0.19.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@vercel

vercel Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
slopcamera Error Error Oct 14, 2026 4:27pm UTC
slopcamera-api Ready Ready Preview Oct 14, 2026 4:27pm UTC

Request Review

This branch had an error being deployed

1 failed and 1 active deployments
Preview – slopcamera-api — 2b69cb2d Deployed Oct 14, 2026 by vercel[bot]
Preview – slopcamera — 2b69cb2d Deployed Oct 14, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants