chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #44 · sidclawhq/platform

dependabot · 2026-04-17T21:44:41Z

Bumps the dev-dependencies group with 6 updates in the / directory:

Package	From	To
@playwright/test	`1.58.2`	`1.59.1`
lefthook	`2.1.4`	`2.1.6`
turbo	`2.8.20`	`2.9.6`
@types/pg	`8.11.11`	`8.20.0`
@vitest/coverage-v8	`4.1.0`	`4.1.4`
postcss	`8.5.8`	`8.5.10`

Updates @playwright/test from 1.58.2 to 1.59.1

Release notes

Sourced from @playwright/test's releases.

v1.59.1

Bug Fixes

[Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

Screencast recordings

Action annotations

Visual overlays

Real-time frame capture

Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:
await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();
Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:
await page.screencast.showActions({ position: 'top-right' });
screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:
// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
</tr></table> 

... (truncated)

Commits

d466ac5 chore: mark v1.59.1 (#40005)
530e7e5 cherry-pick(#4004): fix(cli): kill-all should kill dashboard
9aa216c cherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...
01b2b15 cherry-pick(#39980): chore: more release notes fixes
a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
0c65a75 cherry-pick(#39968): chore: screencast.showActions api
f04155b cherry-pick(#39958): chore: release notes for langs v1.59
Additional commits viewable in compare view

Updates lefthook from 2.1.4 to 2.1.6

Release notes

Sourced from lefthook's releases.

v2.1.6

Changelog

bf73ea2f1ea5468c9af7a6f06b5ef8cd43e66040 fix(packaging): do not pipe stdout and stderr (#1382)

04da00697cd8a6241023c1962feb720eeaa62698 fix(windows): normalize lefthook path for sh script (#1383)

de9597a1bf456d2cf0fbcb8816858b6e5cf6b609 fix: log full scoped name for skipped jobs (#1291)

eb3e70dbbd2442200ec8ff2140a3ee9daa7d9e70 fix: normalize root to always include trailing slash before path replacement (#1381)

f90f3f570ef9227ddf345a79cec687dac41a5d31 fix: skip pty allocation when stdout is not a terminal (#1393)

v2.1.5

Changelog

afac466157f88b5a5f9d03eb28acc90b095a4b5d chore(golangci-lint): upgrade to 2.11.4 (#1362)

f8e73b947e2eefd6950d6a19c20bbde19070809d chore: fix golangci-lint version lookup

4564da343b1497f73f8a82f6104e1b5903f8a081 chore: move golangci-lint version to .tool-versions (#1349)

236a5bd07c650aaa882963d68ab5e5e654a47681 chore: small cleanup (#1370)

5ddf2206dd23e826c5434392e034fa7db523cd3d deps: April 2026 (#1375)

e26c719f5a85e8ff35871e9724649714d6f05c13 fix: git repository merge issue (#1372)

3503a3b102c2b41c298e1e7dc6549181508518a6 fix: prevent lefthook run from overwriting global hooks (#1371)

f3fc175f6c638fd54ab49b8d7c060898f936c934 fix: use pre-push stdin for push file detection (#1368)

Changelog

Sourced from lefthook's changelog.

2.1.6 (2026-04-16)

fix: normalize lefthook path for sh script (#1383) by @AndrewKahr

fix: normalize root to always include trailing slash before path replacement (#1381) by @Copilot

fix: skip pty allocation when stdout is not a terminal (#1393) by @technicalpickles

docs: upgrade docmd (#1391) by @mrexox

fix: log full scoped name for skipped jobs (#1291) by @scop

fix: do not pipe stdout and stderr (#1382) by @mrexox

2.1.5 (2026-04-06)

deps: April 2026 (#1375) by @mrexox

docs: update documentation and docs for claude (#1373) by @mrexox

fix: git repository merge issue (#1372) by @mrexox

fix: use pre-push stdin for push file detection (#1368) by @supitsdu

chore: small cleanup (#1370) by @mrexox

fix: prevent lefthook run from overwriting global hooks (#1371) by @ivy

chore: upgrade to 2.11.4 (#1362) by @scop

chore: fix golangci-lint version lookup by @mrexox

chore: move golangci-lint version to .tool-versions (#1349) by @scop

Commits

679ce27 2.1.6: fixes for Windows and AI tools execution
04da006 fix(windows): normalize lefthook path for sh script (#1383)
eb3e70d fix: normalize root to always include trailing slash before path replacemen...
f90f3f5 fix: skip pty allocation when stdout is not a terminal (#1393)
1481e9d docs: upgrade docmd (#1391)
de9597a fix: log full scoped name for skipped jobs (#1291)
bf73ea2 fix(packaging): do not pipe stdout and stderr (#1382)
4cec579 2.1.5: prevent overwriting global hooks and fix pre-push for sha256 repos
5ddf220 deps: April 2026 (#1375)
0c16199 docs: update documentation and docs for claude (#1373)
Additional commits viewable in compare view

Updates turbo from 2.8.20 to 2.9.6

Release notes

Sourced from turbo's releases.

Turborepo v2.9.6

What's Changed

create-turbo

chore: Update dependencies found in audits by @anthonyshew in vercel/turborepo#12586

Examples

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in vercel/turborepo#12585

Changelog

docs: Add Bun equivalent for updating dependencies by @anthonyshew in vercel/turborepo#12580

fix: Mention turbo.json in concurrency error message by @anthonyshew in vercel/turborepo#12582

fix: Surface actionable message when remote cache is requested but not linked by @anthonyshew in vercel/turborepo#12584

chore: Delete agents app by @anthonyshew in vercel/turborepo#12587

fix: Load custom CA certificates in fast webpki-only HTTP client by @anthonyshew in vercel/turborepo#12591

docs: Remove pre-release badges by @anthonyshew in vercel/turborepo#12592

Full Changelog: vercel/turborepo@v2.9.5...v2.9.6

Turborepo v2.9.6-canary.3

What's Changed

Changelog

chore: Delete agents app by @anthonyshew in vercel/turborepo#12587

fix: Load custom CA certificates in fast webpki-only HTTP client by @anthonyshew in vercel/turborepo#12591

Full Changelog: vercel/turborepo@v2.9.6-canary.2...v2.9.6-canary.3

Turborepo v2.9.6-canary.2

What's Changed

create-turbo

chore: Update dependencies found in audits by @anthonyshew in vercel/turborepo#12586

Examples

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in vercel/turborepo#12585

Changelog

fix: Surface actionable message when remote cache is requested but not linked by @anthonyshew in vercel/turborepo#12584

Full Changelog: vercel/turborepo@v2.9.6-canary.1...v2.9.6-canary.2

Turborepo v2.9.6-canary.1

What's Changed

@turbo/telemetry

fix: Suppress telemetry alert when running on Vercel by @anthonyshew in vercel/turborepo#12576

... (truncated)

Commits

77bca2b publish 2.9.6 to registry
5a8f2e8 release(turborepo): 2.9.6-canary.3 (#12593)
861efa8 docs: Remove pre-release badges (#12592)
28db7d0 fix: Load custom CA certificates in fast webpki-only HTTP client (#12591)
b412177 release(turborepo): 2.9.6-canary.2 (#12588)
9018c65 chore: Delete agents app (#12587)
5d19186 chore: Update dependencies found in audits (#12586)
8338f42 fix: Add missing @types/node to with-svelte example apps (#12585)
219b602 fix: Surface actionable message when remote cache is requested but not linked...
aba98af release(turborepo): 2.9.6-canary.1 (#12583)
Additional commits viewable in compare view

Updates @types/pg from 8.11.11 to 8.20.0

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.0 to 4.1.4

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

... (truncated)

Commits

ac04bac chore: release v4.1.4
2dc0d62 chore: release v4.1.3
fc6f482 chore: release v4.1.2
1f2d318 chore: release v4.1.1
aaf9f18 fix(coverage): simplify provider types (#9931)
See full diff in compare view

Updates postcss from 8.5.8 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

Changelog

Sourced from postcss's changelog.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

Commits

33b9790 Release 8.5.10 version
536c79e Escape </style> in CSS output (#2074)
afa96b2 Update dependencies (#2073)
effe88b Typo (#2072)
3ee79a2 Thread model (#2071)
2e0683d Create incident response docs (#2070)
fe88ac2 Release 8.5.9 version
c551632 Avoid RegExp when we can use simple JS
89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
6ceb8a4 Create SECURITY.md
Additional commits viewable in compare view

…ith 6 updates Bumps the dev-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.4` | `2.1.6` | | [turbo](https://github.com/vercel/turborepo) | `2.8.20` | `2.9.6` | | [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.11.11` | `8.20.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.0` | `4.1.4` | | [postcss](https://github.com/postcss/postcss) | `8.5.8` | `8.5.10` | Updates `@playwright/test` from 1.58.2 to 1.59.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.59.1) Updates `lefthook` from 2.1.4 to 2.1.6 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.4...v2.1.6) Updates `turbo` from 2.8.20 to 2.9.6 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.20...v2.9.6) Updates `@types/pg` from 8.11.11 to 8.20.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg) Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/coverage-v8) Updates `postcss` from 8.5.8 to 8.5.10 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.10) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.59.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: lefthook dependency-version: 2.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: turbo dependency-version: 2.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@types/pg" dependency-version: 8.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: postcss dependency-version: 8.5.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-27T17:14:23Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 17, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-a5bd8c1c02 branch from e08eaca to a04bf62 Compare April 20, 2026 16:12

dependabot Bot closed this Apr 27, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-a5bd8c1c02 branch April 27, 2026 17:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates#44

chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates#44
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-a5bd8c1c02

dependabot Bot commented on behalf of github Apr 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.59.1

Bug Fixes

v1.59.0

🎬 Screencast

v2.1.6

Changelog

v2.1.5

Changelog

2.1.6 (2026-04-16)

2.1.5 (2026-04-06)

Turborepo v2.9.6

What's Changed

create-turbo

Examples

Changelog

Turborepo v2.9.6-canary.3

What's Changed

Changelog

Turborepo v2.9.6-canary.2

What's Changed

create-turbo

Examples

Changelog

Turborepo v2.9.6-canary.1

What's Changed

@​turbo/telemetry

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.2

8.5.10

8.5.9

8.5.10

8.5.9

Uh oh!

dependabot Bot commented on behalf of github Apr 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 17, 2026 •

edited

Loading

`@turbo/telemetry`