[dependabot]

Bumps the minor-and-patch group with 20 updates:

Package	From	To
@langchain/core	1.2.14	1.2.17
@langchain/langgraph	1.4.18	1.4.21
@langchain/langgraph-sdk	1.12.0	1.12.3
@radix-ui/react-avatar	1.2.6	1.2.7
@radix-ui/react-dialog	1.1.23	1.2.0
@radix-ui/react-label	2.1.15	2.1.16
@radix-ui/react-separator	1.1.15	1.1.16
@radix-ui/react-slot	1.3.3	1.4.0
@radix-ui/react-switch	1.3.7	1.3.8
@radix-ui/react-tooltip	1.2.16	1.3.0
lucide-react	1.49.0	1.53.0
nuqs	2.10.1	2.10.2
react-syntax-highlighter	16.1.1	16.1.2
@playwright/test	1.63.0	1.64.0
dotenv	18.0.5	18.0.6
eslint	10.11.0	10.12.0
eslint-config-next	16.3.8	16.4.0
next	16.3.8	16.4.0
postcss	8.5.28	8.5.29
typescript-eslint	8.71.0	8.71.1

Updates @langchain/core from 1.2.14 to 1.2.17

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.17

Patch Changes

• #11849 b1d9c7a Thanks @​KyleCodes! - Preserve runtime context in ambient runnable config across tool calls, nested runnables, and streaming.

@​langchain/core@​1.2.16

Patch Changes

• #11847 bb50952 Thanks @​hntrl! - fix(core): expose branded class type for provider declarations

Commits

• 59776b1 chore: version packages (#11874)
• b1d9c7a fix(core): preserve ambient runtime context across tool calls (#11849)
• 5dfb0cb chore: version packages (#11848)
• bb50952 fix(core): expose branded class type for provider declarations (#11847)
• 5a86552 chore: version packages (#11826)
• 1b5ac16 fix(mcp-adapters): use a single underscore for server tool prefixes (#11845)
• 0552450 fix(mcp-adapters): keep the SDK error as cause after an HTTP→SSE fallback (#1...
• f2ff71c chore(deps): bump the minor-and-patch group across 1 directory with 48 update...
• 71ede02 chore(deps): bump the build-and-test group across 1 directory with 8 updates ...
• c4dba61 chore(deps): bump the langchain group across 1 directory with 4 updates (#11791)
• Additional commits viewable in compare view

Updates @langchain/langgraph from 1.4.18 to 1.4.21

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph@​1.4.21

Patch Changes

• #2966 0a035e1 Thanks @​eliornl! - fix(langgraph): isCommand no longer accepts plain objects, so JSON graph input shaped like { lg_name: "Command", goto, update } is treated as ordinary state input instead of a control directive. Command instances, including ones built by another installed copy of @langchain/langgraph, are still recognized. To pass a command as input, construct it with new Command(...).

• #2965 f4a7e6a Thanks @​eliornl! - fix(langgraph): require @langchain/langgraph-sdk 1.12.3 or later.

@​langchain/langgraph@​1.4.20

Patch Changes

• #2923 8adc03d Thanks @​eliornl! - give each update of a multi-update bulkUpdateState super-step its own task id, so a DeltaChannel keeps every update instead of only the first

• #2927 46584bc Thanks @​eliornl! - don't ask the checkpointer for the history of a DeltaChannel that was never written; it is empty, and the walk for it read every ancestor of the thread on every load. Only checkpoints whose metadata has delta_writes_versioned skip it: graphs with a DeltaChannel set it on new threads, where every DeltaChannel write has a version, so threads started by earlier versions keep reading as before. updateState now versions the writes it takes from the head, which also stops PostgresSaver from dropping them, and keeps the DeltaChannel writes it makes on a new thread.

• #2954 f9483ca Thanks @​eliornl! - exit durability no longer saves a checkpoint as its own parent when a run ends without running anything, such as replaying the newest checkpoint of a finished thread; with a DeltaChannel, reading such a thread crashed

• Updated dependencies [8d6e6cf, 413a9c7, 67cfdd2]:

  • @​langchain/langgraph-checkpoint@​1.1.6
  • @​langchain/langgraph-sdk@​1.12.2

@​langchain/langgraph@​1.4.19

Patch Changes

• #2906 9876bf0 Thanks @​eliornl! - read a subgraph's DeltaChannel with the checkpointer the parent resolved, instead of hydrating it empty; hydrating a written DeltaChannel without a checkpointer or config now throws instead of returning an empty value; state methods resolve the checkpointer the way a run does, so a checkpointer: false graph no longer writes state with a checkpointer lent through the config and has no task state in getState, and a checkpointer: true graph used as a root rejects state methods with the run's error; getState, getStateHistory and updateState use a checkpointer: true subgraph's namespace as its run stores it, so reads find its state and updates are no longer lost; resuming from a subgraph checkpoint returned by getState(config, { subgraphs: true }) now applies the resume value instead of re-firing the interrupt
• Updated dependencies [cca4806, 7343768]:
  • @​langchain/langgraph-sdk@​1.12.1

Changelog

Sourced from @​langchain/langgraph's changelog.

1.4.21

Patch Changes

• #2966 0a035e1 Thanks @​eliornl! - fix(langgraph): isCommand no longer accepts plain objects, so JSON graph input shaped like { lg_name: "Command", goto, update } is treated as ordinary state input instead of a control directive. Command instances, including ones built by another installed copy of @langchain/langgraph, are still recognized. To pass a command as input, construct it with new Command(...).

• #2965 f4a7e6a Thanks @​eliornl! - fix(langgraph): require @langchain/langgraph-sdk 1.12.3 or later.

1.4.20

Patch Changes

• #2923 8adc03d Thanks @​eliornl! - give each update of a multi-update bulkUpdateState super-step its own task id, so a DeltaChannel keeps every update instead of only the first

• #2927 46584bc Thanks @​eliornl! - don't ask the checkpointer for the history of a DeltaChannel that was never written; it is empty, and the walk for it read every ancestor of the thread on every load. Only checkpoints whose metadata has delta_writes_versioned skip it: graphs with a DeltaChannel set it on new threads, where every DeltaChannel write has a version, so threads started by earlier versions keep reading as before. updateState now versions the writes it takes from the head, which also stops PostgresSaver from dropping them, and keeps the DeltaChannel writes it makes on a new thread.

• #2954 f9483ca Thanks @​eliornl! - exit durability no longer saves a checkpoint as its own parent when a run ends without running anything, such as replaying the newest checkpoint of a finished thread; with a DeltaChannel, reading such a thread crashed

• Updated dependencies [8d6e6cf, 413a9c7, 67cfdd2]:

  • @​langchain/langgraph-checkpoint@​1.1.6
  • @​langchain/langgraph-sdk@​1.12.2

1.4.19

Patch Changes

• #2906 9876bf0 Thanks @​eliornl! - read a subgraph's DeltaChannel with the checkpointer the parent resolved, instead of hydrating it empty; hydrating a written DeltaChannel without a checkpointer or config now throws instead of returning an empty value; state methods resolve the checkpointer the way a run does, so a checkpointer: false graph no longer writes state with a checkpointer lent through the config and has no task state in getState, and a checkpointer: true graph used as a root rejects state methods with the run's error; getState, getStateHistory and updateState use a checkpointer: true subgraph's namespace as its run stores it, so reads find its state and updates are no longer lost; resuming from a subgraph checkpoint returned by getState(config, { subgraphs: true }) now applies the resume value instead of re-firing the interrupt
• Updated dependencies [cca4806, 7343768]:
  • @​langchain/langgraph-sdk@​1.12.1

Commits

• 37d863e chore: version packages (#2967)
• 0a035e1 fix(langgraph): stop treating plain-object input as a Command (#2966)
• 5abc406 chore: version packages (#2953)
• f9483ca fix(langgraph): don't save a checkpoint as its own parent in exit durability ...
• 8adc03d fix(langgraph): give each bulkUpdateState update its own task id (#2923)
• 46584bc fix(langgraph): don't walk history for a DeltaChannel that was never written ...
• 1cee82d chore: version packages (#2890)
• 9143976 chore(deps): bump the langchain group across 1 directory with 7 updates (#2933)
• 537f7eb chore(deps): bump the react group across 1 directory with 6 updates (#2937)
• 9876bf0 fix(langgraph): hydrate subgraph delta channels with the resolved checkpointe...
• See full diff in compare view

Updates @langchain/langgraph-sdk from 1.12.0 to 1.12.3

Release notes

Sourced from @​langchain/langgraph-sdk's releases.

@​langchain/langgraph-sdk@​1.12.3

Patch Changes

• #2956 218ea20 Thanks @​eliornl! - fix(sdk): copy defaultHeaders when constructing a Client instead of writing x-api-key into the caller's object. Previously, clients created from the same defaultHeaders object shared one set of headers, so a later client's API key was sent by earlier clients, and a client created with no API key could send another client's key to its own apiUrl.

@​langchain/langgraph-sdk@​1.12.2

Patch Changes

• #2944 413a9c7 Thanks @​thushanth-bengre-langchain! - fix(sdk): URL-encode caller-supplied identifiers (thread, assistant, run, cron and checkpoint IDs, subgraph namespaces) in request paths so an untrusted ID can't redirect a request to another endpoint. IDs containing reserved characters such as /, ?, #, % or spaces are now sent percent-encoded, so pass raw IDs rather than pre-encoded ones. . and .. are no longer accepted as IDs: the method rejects with an Invalid path segment error instead of sending a request.

• #2959 67cfdd2 Thanks @​casparb! - Export the Agent Server graph factory ServerRuntime type from @langchain/langgraph-sdk.

@​langchain/langgraph-sdk@​1.12.1

Patch Changes

• #2882 cca4806 Thanks @​buenjybar! - Fix useStream/StreamOrchestrator leaving stale, never-checkpointed messages visible after stop() cancels a run mid-turn. The buffer is now reconciled against the persisted thread state (refetching it when the caller needs authoritative thread state, otherwise falling back to the cached history) instead of only clearing on a thread switch or remount.

• #2918 7343768 Thanks @​brydar! - Stop the protocol SSE transport from retrying stream/events on 4xx responses (except 408 and 429): the stream now ends at once with the error. Protocol request errors now keep the HTTP status and response body text. The reconnect attempt counter now resets after every successful connect, so idle reconnects no longer use up maxReconnectAttempts.

Changelog

Sourced from @​langchain/langgraph-sdk's changelog.

1.12.3

Patch Changes

• #2956 218ea20 Thanks @​eliornl! - fix(sdk): copy defaultHeaders when constructing a Client instead of writing x-api-key into the caller's object. Previously, clients created from the same defaultHeaders object shared one set of headers, so a later client's API key was sent by earlier clients, and a client created with no API key could send another client's key to its own apiUrl.

1.12.2

Patch Changes

• #2944 413a9c7 Thanks @​thushanth-bengre-langchain! - fix(sdk): URL-encode caller-supplied identifiers (thread, assistant, run, cron and checkpoint IDs, subgraph namespaces) in request paths so an untrusted ID can't redirect a request to another endpoint. IDs containing reserved characters such as /, ?, #, % or spaces are now sent percent-encoded, so pass raw IDs rather than pre-encoded ones. . and .. are no longer accepted as IDs: the method rejects with an Invalid path segment error instead of sending a request.

• #2959 67cfdd2 Thanks @​casparb! - Export the Agent Server graph factory ServerRuntime type from @langchain/langgraph-sdk.

1.12.1

Patch Changes

• #2882 cca4806 Thanks @​buenjybar! - Fix useStream/StreamOrchestrator leaving stale, never-checkpointed messages visible after stop() cancels a run mid-turn. The buffer is now reconciled against the persisted thread state (refetching it when the caller needs authoritative thread state, otherwise falling back to the cached history) instead of only clearing on a thread switch or remount.

• #2918 7343768 Thanks @​brydar! - Stop the protocol SSE transport from retrying stream/events on 4xx responses (except 408 and 429): the stream now ends at once with the error. Protocol request errors now keep the HTTP status and response body text. The reconnect attempt counter now resets after every successful connect, so idle reconnects no longer use up maxReconnectAttempts.

Commits

• 1b803d9 chore: version packages (#2964)
• 218ea20 fix(sdk): copy defaultHeaders instead of writing x-api-key into the caller's ...
• 5abc406 chore: version packages (#2953)
• 67cfdd2 feat(sdk): export Agent Server graph factory runtime type (#2959)
• 413a9c7 fix(sdk): URL-encode identifiers in request paths to prevent endpoint redirec...
• 1cee82d chore: version packages (#2890)
• 9143976 chore(deps): bump the langchain group across 1 directory with 7 updates (#2933)
• 537f7eb chore(deps): bump the react group across 1 directory with 6 updates (#2937)
• 0ac79dc Revert "fix(sdk): URL-encode identifiers in request paths to prevent endpoint...
• 93dfc54 fix(sdk): URL-encode identifiers in request paths to prevent endpoint redirec...
• Additional commits viewable in compare view

Updates @radix-ui/react-avatar from 1.2.6 to 1.2.7

Changelog

Sourced from @​radix-ui/react-avatar's changelog.

1.2.7

• Updated dependencies: @radix-ui/react-primitive@2.1.11

Commits

• See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.23 to 1.2.0

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.2.0

• Added support for multiple aria-describedby attributes.
• Fixed nested, portalled layers being unusable inside a modal layer. A non-modal popover rendered inside a modal Dialog previously broke some user interactions because the modal layer's trapped FocusScope reclaimed focus, and its RemoveScroll only allowed scrolling within the modal content.
• Updated dependencies: @radix-ui/react-focus-scope@1.2.0, @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-portal@1.1.18

Commits

• See full diff in compare view

Updates @radix-ui/react-label from 2.1.15 to 2.1.16

Changelog

Sourced from @​radix-ui/react-label's changelog.

2.1.16

• Updated dependencies: @radix-ui/react-primitive@2.1.11

Commits

• See full diff in compare view

Updates @radix-ui/react-separator from 1.1.15 to 1.1.16

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.16

• Updated dependencies: @radix-ui/react-primitive@2.1.11

Commits

• See full diff in compare view

Updates @radix-ui/react-slot from 1.3.3 to 1.4.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.4.0

• Added support for multiple aria-describedby attributes.
• Fixed compatibility issues with React Server Components.

Commits

• See full diff in compare view

Updates @radix-ui/react-switch from 1.3.7 to 1.3.8

Changelog

Sourced from @​radix-ui/react-switch's changelog.

1.3.8

• Updated dependencies: @radix-ui/react-use-size@1.1.5, @radix-ui/react-primitive@2.1.11

Commits

• See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.16 to 1.3.0

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.3.0

• Added support for multiple aria-describedby attributes.
• Updated dependencies: @radix-ui/react-slot@1.4.0, @radix-ui/react-dismissable-layer@1.1.20, @radix-ui/react-visually-hidden@1.2.12, @radix-ui/react-primitive@2.1.11, @radix-ui/react-presence@1.1.11, @radix-ui/react-popper@1.3.8, @radix-ui/react-portal@1.1.18

Commits

• See full diff in compare view

Updates lucide-react from 1.49.0 to 1.53.0

Release notes

Sourced from lucide-react's releases.

Version 1.53.0

What's Changed

• chore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps group by @​dependabot[bot] in lucide-icons/lucide#4961
• chore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by @​dependabot[bot] in lucide-icons/lucide#4958
• fix(site): Fix reset button and rename absolute stroke width to non-scaling stroke by @​ericfennis in lucide-icons/lucide#4956
• chore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by @​dependabot[bot] in lucide-icons/lucide#4968
• chore(deps-dev): bump the angular-deps group across 1 directory with 11 updates by @​dependabot[bot] in lucide-icons/lucide#4960
• chore(categories): Add description field to categories by @​ericfennis in lucide-icons/lucide#4909
• feat(icons): added groceries icon by @​rrod497 in lucide-icons/lucide#4907
• fix(icons): changed pen-tool icon by @​karsa-mistmere in lucide-icons/lucide#4972
• feat(icons): added new hiking-stick icon by @​kamilasw in lucide-icons/lucide#4711
• feat(icons): added scratch-blocks icon by @​mc20000-01 in lucide-icons/lucide#4969
• fix(icons): changed soup and salad icons by @​karsa-mistmere in lucide-icons/lucide#4971

New Contributors

• @​mc20000-01 made their first contribution in lucide-icons/lucide#4969

Full Changelog: lucide-icons/lucide@1.52.0...1.53.0

Version 1.52.0

What's Changed

• fix(icons): changed wifi-cog icon by @​karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

• fix(site): persist icon customizer by @​karsa-mistmere in lucide-icons/lucide#4944
• chore(deps): Upgrade to vite 8 by @​ericfennis in lucide-icons/lucide#4950
• feat(icons): added rugby-ball icon by @​dev-mralph in lucide-icons/lucide#3496
• chore(deps): bump the react-deps group across 1 directory with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4951
• fix(react-native): stop forwarding arbitrary rest props to child shape elements by @​cipherprofessor in lucide-icons/lucide#4903
• test(lucide-solid): add Vite and SolidStart integration fixtures by @​ericfennis in lucide-icons/lucide#4884
• feat(icons): add door-closed-cog icon by @​ajaxjiang96 in lucide-icons/lucide#4905
• feat(icons): add text-align-justify-* icons by @​HectorZaGa in lucide-icons/lucide#4942
• chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @​dependabot[bot] in lucide-icons/lucide#4939
• chore(deps): Upgrade to vitest 5 by @​ericfennis in lucide-icons/lucide#4953
• feat(icons): added wind-arrow-up icon by @​jamesgpearce in lucide-icons/lucide#4501
• fix(github/actions): move to daily release flow by @​karsa-mistmere in lucide-icons/lucide#4911
• feat(@​lucide/solid): Support for Solid 2.0 RC by @​davedbase in lucide-icons/lucide#4751
• chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @​dependabot[bot] in lucide-icons/lucide#4954
• chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @​dependabot[bot] in lucide-icons/lucide#4949
• feat(icons): added armenian-dram icon by @​Elawphant in lucide-icons/lucide#4456
• feat(icons): add kazakh-tenge icon by @​hkayrad in lucide-icons/lucide#4925

New Contributors

• @​dev-mralph made their first contribution in lucide-icons/lucide#3496
• @​cipherprofessor made their first contribution in lucide-icons/lucide#4903
• @​HectorZaGa made their first contribution in lucide-icons/lucide#4942

... (truncated)

Commits

• 98331e2 chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)
• 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
• See full diff in compare view

Updates nuqs from 2.10.1 to 2.10.2

Release notes

Sourced from nuqs's releases.

v2.10.2

Bug fixes

• #1568 - keep pending query state in its transition lane, by @​franky47 (closes #1567)
• #1613 - keep flushed queue values until the adapter shows them, by @​franky47 (closes #1612)

Documentation

• #1100 - add UUID parser to the shadcn registry, by @​max-programming
• #1581 - address Vercel Doctor findings, by @​franky47
• #1589 - add Sury parser page, by @​DZakh
• #1592 - dependent bullets now show monthly sponsors, by @​franky47
• #1599 - refactor sponsors 💖, by @​franky47
• #1600 - add Notra to the sponsored "Used by" section, by @​franky47
• #1601 - add Neon as a sponsor 💖, by @​franky47
• #1605 - track AI traffic with Notra, by @​franky47

Other changes

• #1560 - add mutation testing coverage, by @​franky47
• #1561 - verify reduced mutation debt, by @​franky47
• #1571 - patch Next.js security vulnerabilities, by @​franky47
• #1574 - bump pnpm/action-setup from 6.0.9 to 6.0.10, by @​dependabot
• #1575 - allow stale mutation baselines, by @​franky47
• #1576 - compare mutation test files, by @​franky47
• #1577 - avoid redundant beta version bumps, by @​franky47
• #1584 - constrain Actions cache access, by @​franky47
• #1585 - bump vitest from 4.1.10 to 4.1.11, by @​dependabot
• #1586 - bump react-router-dom from 6.30.3 to 6.30.6, by @​dependabot
• #1588 - fix reported vulnerabilities, by @​franky47
• #1591 - instruct Claude to not add itself as commit co-author, by @​franky47
• #1593 - test against Next.js pull requests, by @​franky47
• #1594 - label Next.js PR matrix with emojis, by @​franky47
• #1603 - bump pnpm/action-setup from 6.0.9 to 6.1.0, by @​dependabot
• #1606 - bump next from 16.3.3 to 16.3.6, by @​dependabot
• #1607 - indicate that docs CI also runs tests, by @​franky47
• #1609 - bump compression from 1.8.1 to 1.8.2, by @​dependabot
• #1611 - use pnpm 12, by @​franky47
• #1615 - generate docs sources before lint, by @​franky47
• #1616 - patch Next.js September security vulnerabilities, by @​franky47

Thanks

Huge thanks to @​cainjonm, @​cursoragent, @​drpayyne, @​DZakh, @​max-programming, @​mezotv, and @​TheOrcDev for helping!

... (truncated)

Commits

• 07afd0f fix: keep flushed queue values until the adapter shows them (#1613)
• d369e43 doc: add Sury parsers page (#1589)
• 72f9cd0 chore(deps): bump react-router-dom from 6.30.3 to 6.30.6 (#1586)
• 0f425fc chore: compare mutation test files (#1576)
• 6c2290a chore: allow stale mutation baselines (#1575)
• d4df198 test: verify reduced mutation debt (#1561)
• c5329fc test: add mutation testing coverage (#1560)
• e4d5269 fix: keep pending query state in its transition lane (#1568)
• See full diff in compare view

Updates react-syntax-highlighter from 16.1.1 to 16.1.2

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.2

What's Changed

• fix: ESM still missing .js with highlight.js by @​Ronny-zzl in react-syntax-highlighter/react-syntax-highlighter#635

New Contributors

• @​Ronny-zzl made their first contribution in react-syntax-highlighter/react-syntax-highlighter#635

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.1.1...v16.1.2

Commits

• 26dbd6c version bump to 16.1.2
• 0c5da9e fix: ESM still missing .js with highlight.js (#635)
• See full diff in compare view

Updates @playwright/test from 1.63.0 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits

• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
• 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
• 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
• 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
• dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
• Additional commits viewable in compare view

Updates dotenv from 18.0.5 to 18.0.6

Changelog

Sourced from dotenv's changelog.

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

Commits

• 5d7cc39 18.0.6
• 750ba03 changelog
• caa14f0 Merge pull request #1069 from kevin9327/populate-parse-boolean-options
• a8b9720 fix: parse debug and override in populate like config does
• See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
langgraph-chat	Ready	Preview	Oct 12, 2026 2:43am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​16.3.8 ⏵ 16.4.0	+1		+1
	@​radix-ui/​react-label@​2.1.15 ⏵ 2.1.16
	@​radix-ui/​react-separator@​1.1.15 ⏵ 1.1.16	+1		+1
	eslint-config-next@​16.3.8 ⏵ 16.4.0			+2
	@​radix-ui/​react-slot@​1.3.3 ⏵ 1.4.0	+1		+1
	@​radix-ui/​react-avatar@​1.2.6 ⏵ 1.2.7			+1	-2
	@​radix-ui/​react-switch@​1.3.7 ⏵ 1.3.8
	@​radix-ui/​react-dialog@​1.1.23 ⏵ 1.2.0	+1		+1
	@​radix-ui/​react-tooltip@​1.2.16 ⏵ 1.3.0	+1		+1
	@​langchain/​langgraph-sdk@​1.12.0 ⏵ 1.12.3	+1		+1
	typescript-eslint@​8.71.0 ⏵ 8.71.1
	lucide-react@​1.49.0 ⏵ 1.53.0			+1
	postcss@​8.5.28 ⏵ 8.5.29	+1		+1
	react-syntax-highlighter@​16.1.1 ⏵ 16.1.2	+1			+6
	nuqs@​2.10.1 ⏵ 2.10.2
	@​langchain/​langgraph@​1.4.18 ⏵ 1.4.21	+1		+1
	eslint@​10.11.0 ⏵ 10.12.0	+1			-1
	dotenv@​18.0.5 ⏵ 18.0.6				+1
	@​langchain/​core@​1.2.14 ⏵ 1.2.17	+1			+1
	@​playwright/​test@​1.63.0 ⏵ 1.64.0

View full report