[dependabot]

Bumps the development group with 9 updates in the / directory:

Package	From	To
@playwright/test	1.63.0	1.65.0
@types/node	22.20.4	22.20.5
acorn	8.18.0	8.19.0
datatables.net-dt	3.1.2	3.1.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
svelte	5.57.1	5.57.3
vite	8.3.1	8.3.7
vue	3.5.43	3.5.45

Updates @playwright/test from 1.63.0 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

• There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
• Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
• Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
• Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

• New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

  test('restart the server', { lock: '-exclusive-' }, async () => {
    // No other test runs while this one is running.
  });

• test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

  test('upload a file', async ({ page }) => {
    test.skip('Not implemented yet');
  });

... (truncated)

Commits

• a1f35e1 chore: mark v1.65.0 (#43925)
• a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
• 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
• daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
• 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
• 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
• 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
• d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
• 6e3f5ff docs: release notes for v1.65 (#43874)
• aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
• Additional commits viewable in compare view

Updates @types/node from 22.20.4 to 22.20.5

Commits

• See full diff in compare view

Updates acorn from 8.18.0 to 8.19.0

Commits

• 0e0ece7 Mark version 8.19.0
• c912cf2 Disallow additional subscripts before arrow in async arrow functions
• f180fd7 Add Unicode v18 support (#1458)
• ab47d42 Update test case for unexpected identifier character (#1456)
• f53ee5f Add a contributing.md file
• 5bd50cd Compare expression end instead of identity in parseSubscripts
• efd7a21 Delete trailing space
• e79ec9e Adjust dubious handling of doubleProto tracking in parseMaybeAssign
• 93e8b90 Upgrade some dependencies with known issues
• f065b20 Upgrade github actions to get rid of warning
• Additional commits viewable in compare view

Updates datatables.net-dt from 3.1.2 to 3.1.5

Release notes

Sourced from datatables.net-dt's releases.

3.1.5

DataTables source 3.1.5

3.1.4

DataTables source 3.1.4

3.1.3

DataTables source 3.1.3

Commits

• 9e795ce Release 3.1.5
• a4c21c6 Build: Examples list for StateRestore updated
• c61b84b Fix: Allow UUIDs to be used as selectors for -api row() without throwing an...
• be9e2b9 Dev: Remove daft error from previous commit
• 62ca5bd Fix: CommonJS loader, when a window object already exists, will no longer t...
• 06a9957 Fix: Initialisation via jQuery().dataTable() and then accessing the `.api()...
• 52ea5ed Fix: Ajax response with 204 header should still result in a success callback
• 557a331 Fix: util.is.element() would throw an error if null was passed in
• 60547b4 Fix: Typescript - In -init layout if an object based feature was used insid...
• 2b7e494 Fix: Typescript - -init search, -init columns.search and `-init searchCol...
• Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates svelte from 5.57.1 to 5.57.3

Release notes

Sourced from svelte's releases.

svelte@5.57.3

Patch Changes

• fix: use the first valid fallback role in role for a11y checks (#19045)

• chore: remove obsolete code (#19051)

• fix: keep creating state sources for property checks during component init (#18949)

• fix: skip redundant attribute writes during hydration (#18869)

• fix: track missing state property checks in unowned deriveds (#18944)

• fix: devalue link in hydratable_serialization_failed error (#18999)

svelte@5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.3

Patch Changes

• fix: use the first valid fallback role in role for a11y checks (#19045)

• chore: remove obsolete code (#19051)

• fix: keep creating state sources for property checks during component init (#18949)

• fix: skip redundant attribute writes during hydration (#18869)

• fix: track missing state property checks in unowned deriveds (#18944)

• fix: devalue link in hydratable_serialization_failed error (#18999)

5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

... (truncated)

Commits

• 23bb146 Version Packages (#18947)
• 356c876 chore: better async derived labels (#19068)
• 3c032ad chore: DRY out batch intersection logic (#19061)
• 5bd3e3c chore: add new batch.#is_skipped method (#19058)
• 91b5110 fix: use the first valid fallback role in role for a11y checks (#19045)
• 50e3d28 chore: remove obsolete code (#19051)
• bd762fb fix: skip redundant attribute writes during hydration (#18869)
• 40bb084 chore: more passing async tests (#19014)
• a841a29 chore: bring over passing async-eager tests (#19011)
• 4473857 chore: bring over more tests that already pass on main (#19007)
• Additional commits viewable in compare view

Updates vite from 8.3.1 to 8.3.7

Release notes

Sourced from vite's releases.

v8.3.7

Bug Fixes

• deps: update Rolldown to v1.2.18 (#24038) (517affb)

Miscellaneous Chores

• enable more lint rules (#24035) (72f86e5)

Tests

• use onTestFinished for tear downs (#24003) (a579e35)

Build System

• generate sourcemaps in shim-deps plugin (#24023) (c02138c)

v8.3.6

Bug Fixes

• await overlapping plugin container close calls (#23935) (175bbeb)
• build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
• build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
• bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
• bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
• deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
• deps: update all non-major dependencies (#23896) (46b91c5)
• deps: update all non-major dependencies (#23966) (b3cb057)
• deps: update rolldown-related dependencies (#23868) (a63eb87)
• deps: update rolldown-related dependencies (#23967) (0105733)
• dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
• html: remove adjacent module tags on the first line (#23823) (eab1dc2)
• ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
• optimizer: detect cache dir precisely (#23912) (cc9bc21)
• optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
• respect build.sourcemap from environment (#23879) (82e7aa0)
• server: escape HTML attributes (#23995) (a270391)
• server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
• ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
• use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
• wasm: reject .wasm outside server.fs (#23914) (64e2467)
• watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
• worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

• build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)
• css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.7 (2026-11-09)

Bug Fixes

• deps: update Rolldown to v1.2.18 (#24038) (517affb)

Miscellaneous Chores

• enable more lint rules (#24035) (72f86e5)

Tests

• use onTestFinished for tear downs (#24003) (a579e35)

Build System

• generate sourcemaps in shim-deps plugin (#24023) (c02138c)

8.3.6 (2026-11-05)

Bug Fixes

• await overlapping plugin container close calls (#23935) (175bbeb)
• build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
• build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
• bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
• bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
• deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
• deps: update all non-major dependencies (#23896) (46b91c5)
• deps: update all non-major dependencies (#23966) (b3cb057)
• deps: update rolldown-related dependencies (#23868) (a63eb87)
• deps: update rolldown-related dependencies (#23967) (0105733)
• dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
• html: remove adjacent module tags on the first line (#23823) (eab1dc2)
• ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
• optimizer: detect cache dir precisely (#23912) (cc9bc21)
• optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
• respect build.sourcemap from environment (#23879) (82e7aa0)
• server: escape HTML attributes (#23995) (a270391)
• server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
• ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
• use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
• wasm: reject .wasm outside server.fs (#23914) (64e2467)
• watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
• worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

• build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)
• css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

... (truncated)

Commits

• 5def936 release: v8.3.7 (#24040)
• 517affb fix(deps): update Rolldown to v1.2.18 (#24038)
• 72f86e5 chore: enable more lint rules (#24035)
• c02138c build: generate sourcemaps in shim-deps plugin (#24023)
• a579e35 test: use onTestFinished for tear downs (#24003)
• 0fd9a29 release: v8.3.6 (#23996)
• eab1dc2 fix(html): remove adjacent module tags on the first line (#23823)
• a270391 fix(server): escape HTML attributes (#23995)
• 7139ef3 fix(worker): keep chunks conflicted with unused workers that are still used b...
• 0fdd81e fix(optimizer): resolve subpath imports (#) with Vite's resolver (#23959)
• Additional commits viewable in compare view

Updates vue from 3.5.43 to 3.5.45

Release notes

Sourced from vue's releases.

v3.5.45

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.45 (2026-11-05)

Bug Fixes

• compiler-core: copy loc in cloneLoc instead of recomputing it (#16092) (3cee79a), closes #16091
• compiler-dom: preserve static boolean binding semantics (#16055) (05db7e8), closes #16051
• compiler-sfc: respect catch and switch lexical scopes (fix #16098) (#16101) (0f20152)
• hmr: retry reloads after pending async roots resolve (#16060) (fbaa794)
• hydration: only update component el when replacing its host node (#16001) (51fd0cb)
• KeepAlive: cache a resolved Suspense child right away (#16119) (716a29e)
• KeepAlive: unmount a child deactivated before it was cached (#15981) (02d2c2b)
• reactivity: run onScopeDispose in a stopped scope (#16108) (21dd33c)
• runtime-core: anchor on the async placeholder when a component root has no el (#16122) (b5abf8c)
• runtime-core: call directive mounted hooks with the latest binding (#16120) (6416207), closes #12460 #12482
• runtime-core: remove the placeholder of an unmounted pending async component (#15982) (2b9a0bb)
• runtime-core: render nothing for a component whose async setup rejects (#16111) (f64bfa5)
• runtime-core: skip stopped error boundaries for async failures (#16061) (0326ed8)
• runtime-dom: treat disablepictureinpicture and disableremoteplayback as boolean attributes (#15952) (ef81ddc)
• suspense: do not mount the fallback after the boundary is unmounted (#15939) (4fd6a6b)
• suspense: drop the unmount hooks of a pending branch when the boundary is unmounted (d04b662)
• suspense: enter transitions nested in the pending branch on reveal (#16121) (b8074de), closes #12435 #15294
• suspense: keep a discarded component marked unmounted (1dc8cdf)
• suspense: keep the async root update retry across a discarded pending branch (#16107) (06bea73)
• suspense: keep the internal cleanup of a discarded component (79b80b7)
• suspense: keep the timeout counting when the root is switched again while pending (#16143) (a045acd)
• suspense: patch same-root updates of nested boundaries in retained content (#16109) (2dbcea8), closes #15878
• suspense: release parent dep on suspensible unmount (#15870) (46e5dbf)
• suspense: resolve async deps whose pending cycle was discarded (#15980) (f7d0811)
• suspense: resolve the boundary when an async setup rejects without an error handler in dev (#16110) (a14aa0b)
• suspense: skip a root replacement in a retained nested boundary showing its fallback (#16125) (a47af77)
• suspense: skip the out-in afterLeave of an unmounted boundary (#16115) (85e71c0), closes #11037 #11059
• transition: handle leave immediately done in out-in mode (#11824) (70599b5), closes #15727
• transition: switch modes around a keyed suspense boundary (#16124) (ff0b341)
• types: add dialog closedby attribute (#16064) (24c9d0b)
• v-model: respect number modifier for Set select values (0ff253b)

Performance Improvements

• compiler-sfc: skip unused tsconfig include enumeration (#15899) (1612403), closes #15898
• compiler-ssr: render static style attributes at compile time (#16010) (2629c89)
• mark internal initializers as pure (#16012) (34fbeb1)
• runtime-core: copy raw attrs when setup context attrs are passed as vnode props (#16129) (823c744)

3.5.44 (2026-10-13)

Bug Fixes

• compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
• compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
• compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)

... (truncated)

Commits

• 8b479a8 release: v3.5.45
• 9f9b71c chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#16150)
• 1d718d2 chore(deps): update dependency @​types/node to v26 (#16087)
• 68583ce chore(deps): bump undici from 8.9.0 to 8.12.3 (#16149)
• 91f2625 chore(deps): bump fast-uri from 3.1.0 to 3.1.9 (#16148)
• a8ab1f8 chore(deps): update build (#15918)
• a0d1388 chore(deps): update dependency minimatch to v11 [security] (#16145)
• 923f70d fix(deps): update compiler (#15920)
• 3cb1161 chore(deps): update lint (#15921)
• 0ce9e16 chore(deps): update dawidd6/action-download-artifact action to v28 (#16086)
• Additional commits viewable in compare view