chore(deps): bump puppeteer from 24.43.1 to 25.4.0 in /server

[dependabot]

Bumps puppeteer from 24.43.1 to 25.4.0.

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

• add browser-level PWA install/launch/uninstall APIs (#15235) (4a48c8a)
• expose Explicit Resource Management (using) (#15027) (a1ca86b)
• expose handled getter on Dialog (#15225) (be6f726)
• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

🛠️ Fixes

• combine duplicate BiDi response headers instead of overwriting (#15203) (16ec165)
• don't throw in checkVisibility for a detached text node (#15197) (89683ac)
• roll to Chrome 150.0.7871.115 (#15223) (3232cd4)
• roll to Chrome 150.0.7871.46 (#15196) (30d4100)
• roll to Chrome 150.0.7871.49 (#15220) (633d55d)
• roll to Firefox 152.0.5 (#15219) (5de975a)

puppeteer: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.3.0 to 25.4.0

puppeteer-core: v25.3.0

25.3.0 (2026-07-01)

🎉 Features

• support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

• handle swaps without a timer (#15198) (2356a15)
• normalize duplicate set-cookie headers using newline (#15173) (55787d5)
• roll to Firefox 152.0.3 (#15158) (2d64852)

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.4.0 (2026-07-27)

🎉 Features

• add browser-level PWA install/launch/uninstall APIs (#15235) (4a48c8a)
• expose Explicit Resource Management (using) (#15027) (a1ca86b)
• expose handled getter on Dialog (#15225) (be6f726)
• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.3.0 to 25.4.0

🛠️ Fixes

• combine duplicate BiDi response headers instead of overwriting (#15203) (16ec165)
• don't throw in checkVisibility for a detached text node (#15197) (89683ac)
• roll to Chrome 150.0.7871.115 (#15223) (3232cd4)
• roll to Chrome 150.0.7871.46 (#15196) (30d4100)
• roll to Chrome 150.0.7871.49 (#15220) (633d55d)
• roll to Firefox 152.0.5 (#15219) (5de975a)

25.3.0 (2026-07-01)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.5 to 3.0.6

🎉 Features

• support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

... (truncated)

Commits

• f5b96c5 chore: release main (#15201)
• 29a6e7c chore(webmcp): Update WebMCP to Chrome 151 implementation (#15146)
• 4a48c8a feat: add browser-level PWA install/launch/uninstall APIs (#15235)
• ffe1c91 chore(deps): bump the all group with 5 updates (#15262)
• 06442ae feat: roll to Chrome 151.0.7922.47 (#15237)
• 7c72827 chore(deps): bump svgo from 3.3.3 to 3.3.4 in /website (#15253)
• 83b0e31 chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /website (#15254)
• 0ebbd98 chore(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website (#15255)
• befa16f chore(deps): bump body-parser from 1.20.5 to 1.20.6 in /website (#15256)
• 8af689d chore(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /website (#15257)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Dependabot attempted to update this pull request, but because the branch dependabot/npm_and_yarn/server/puppeteer-25.4.0 is protected it was unable to do so.

[thewrz]

This was written agentically; verify its assertions:

Closing as superseded by #153 (merged as 4bc264f), which landed this bump together with every other open advisory fix. The per-package PRs could not merge individually: branch protection requires the audit check green and an up-to-date branch, and each bot PR inherited the red audit from the advisories the others fixed. #153 resolves all of them in one step (npm audit --audit-level=high → 0 vulnerabilities on main).

🤖 Co-authored by Claude Fable 5.1.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.