[dependabot]

Bumps the development group with 4 updates in the /web directory: @playwright/test, @types/node, orval and vite.

Updates @playwright/test from 1.62.1 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits

• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
• 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
• 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
• 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
• dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
• Additional commits viewable in compare view

Updates @types/node from 26.4.0 to 26.6.4

Commits

• See full diff in compare view

Updates orval from 8.26.0 to 8.41.0

Release notes

Sourced from orval's releases.

Release v8.41.0

What's Changed

• refactor(core): drop unused seenMockIndexKeys in tags writers by @​irontaek in orval-labs/orval#4254
• fix(effect): drop non-primitive enum members and serialize via toJsLiteral (GHSA-f96w-763g-hg7v) by @​melloware in orval-labs/orval#4256
• fix(zod): keep allOf-$ref object defaults with tuples inline (#4255) by @​melloware in orval-labs/orval#4257
• chore: bump vite+ from 0.3.3 to 1.0.0 by @​snebjorn in orval-labs/orval#4258
• fix(core): qualify Blob/File with globalThis when a component shadows them (#4259) by @​melloware in orval-labs/orval#4260
• fix(effect): merge nullable and open allOf members in Effect 4 output by @​LouisCuvelier in orval-labs/orval#4261
• fix(effect): skip length and pattern checks on a string const by @​LouisCuvelier in orval-labs/orval#4262
• fix(zod): skip length, bound and pattern checks on a const by @​LouisCuvelier in orval-labs/orval#4263
• fix(effect): render a false schema as S.Never, optional when not required by @​LouisCuvelier in orval-labs/orval#4264
• chore(deps): update @​scalar/json-magic and @​scalar/openapi-parser by @​melloware in orval-labs/orval#4265
• chore(samples): run mcp petstore sample container as non-root user by @​melloware in orval-labs/orval#4266
• fix(zod): apply a scalar parent type to an allOf member without one by @​melloware in orval-labs/orval#4268
• feat(core): allow mock generators with TypeScript single-file schemas by @​melloware in orval-labs/orval#4269
• Release v8.41.0 by @​github-actions[bot] in orval-labs/orval#4270

New Contributors

• @​irontaek made their first contribution in orval-labs/orval#4254

Full Changelog: orval-labs/orval@v8.40.0...v8.41.0

Release v8.40.0

What's Changed

• fix(core): stringify empty objects as {} by @​melloware in orval-labs/orval#4245
• feat(query): prefetch through queryClient.query() on TanStack Query 5.102+ by @​iamAdarshh in orval-labs/orval#4246
• fix(core): stringify nullable object parts in form data by @​giaBaoJS in orval-labs/orval#4247
• feat(core): validate primitive response schemas by @​pj-workspace in orval-labs/orval#4249
• fix(core): drop non-primitive enum members and serialize from their value (GHSA-v36f-hqj9-q8rr) by @​melloware in orval-labs/orval#4251
• fix(core): disambiguate duplicate operation names by @​ErfanBagheri404 in orval-labs/orval#4250
• feat(orval): add workspaceExports to filter workspace index exports by @​melloware in orval-labs/orval#4252
• feat(effect): support Effect 4 schema output (#3878) by @​LouisCuvelier in orval-labs/orval#4248
• Release v8.40.0 by @​github-actions[bot] in orval-labs/orval#4253

New Contributors

• @​iamAdarshh made their first contribution in orval-labs/orval#4246
• @​LouisCuvelier made their first contribution in orval-labs/orval#4248

Full Changelog: orval-labs/orval@v8.39.0...v8.40.0

Release v8.39.0

What's Changed

• fix(samples): give swr-with-zod reusable zod schemas their own directory by @​melloware in orval-labs/orval#4219
• refactor(core): type isFunction without any, as remeda did by @​wadakatu in orval-labs/orval#4216
• fix(core): accept infinite query variants in mutationInvalidates warning by @​melloware in orval-labs/orval#4218
• feat(query): page infinite queries through a request body property by @​melloware in orval-labs/orval#4220
• refactor(orval): share one yaml catalog loader between pnpm and yarn by @​wadakatu in orval-labs/orval#4221
• fix(query): guard infinite page param merge under exactOptionalPropertyTypes by @​melloware in orval-labs/orval#4224
• perf(core): bundle each mutator once instead of once per operation by @​melloware in orval-labs/orval#4225
• feat(zod): apply namingConvention.properties to zod schemas by @​melloware in orval-labs/orval#4227

... (truncated)

Commits

• cd0ac80 chore(release): bump version to v8.41.0 (#4270)
• 8f3b853 feat(core): allow mock generators with TypeScript single-file schemas (#4269)
• 67ce46f fix(zod): apply a scalar parent type to an allOf member without one (#4268)
• a3e4d85 chore(samples): run mcp petstore sample container as non-root user (#4266)
• 327e8bd chore(deps): update @​scalar/json-magic and @​scalar/openapi-parser (#4265)
• 47d6cc4 fix(effect): render a false schema as S.Never, optional when not required (#4...
• a32f110 fix(zod): skip length, bound and pattern checks on a const (#4263)
• 21b0680 fix(effect): skip length and pattern checks on a string const (#4262)
• cf1640b fix(effect): merge nullable and open allOf members in Effect 4 output (#4261)
• e88ba77 fix(core): qualify Blob/File with globalThis when a component shadows them (#...
• Additional commits viewable in compare view

Updates vite from 7.3.6 to 7.3.7

Release notes

Sourced from vite's releases.

v7.3.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.7 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (a0a3339)
• html: filename passed to transformIndexHtml should not include queries (#23653) (8d479f9)
• server: store ids to safeModulePaths rather than URLs (#23656) (f0d76c7)

Commits

• 284f6b5 release: v7.3.7
• f0d76c7 fix(server): store ids to safeModulePaths rather than URLs (#23656)
• a0a3339 fix(deps): update launch-editor to v2.14.2 (#23654)
• 8d479f9 fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
vite	[>= 8.a, < 9]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.