Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Nov 26, 2025

Dependabot security update for playwright, with additional changes to ensure browsers install correctly in CI.

Changes

  • playwright: 1.28.1 → 1.56.1 (indirect dependency via package-lock.json)
  • @web/test-runner-playwright: ^0.11.0 → ^0.11.1
  • pretest script: Added npx playwright install --with-deps to auto-install browser binaries before test runs
"pretest": "npm run build && npx playwright install --with-deps"

The playwright install step is idempotent and ensures browsers are available in fresh CI environments.


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

…ll to pretest

Co-authored-by: llastflowers <55068883+llastflowers@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Nov 26, 2025

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • esm.ubuntu.com
    • Triggering command: /usr/lib/apt/methods/https /usr/lib/apt/methods/https (dns block)
  • https://api.github.com//advisories
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Bump playwright from 1.28.1 to 1.56.1 Bump playwright from 1.28.1 to 1.56.1 in the npm_and_yarn group across 1 directory Nov 26, 2025
Copilot finished work on behalf of llastflowers November 26, 2025 19:17
Copilot AI requested a review from llastflowers November 26, 2025 19:17
@llastflowers llastflowers marked this pull request as ready for review November 26, 2025 19:29
@llastflowers llastflowers requested a review from a team as a code owner November 26, 2025 19:29
Copilot AI review requested due to automatic review settings November 26, 2025 19:29
Copilot finished reviewing on behalf of llastflowers November 26, 2025 19:32
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades Playwright from 1.28.1 to 1.57.0 (not 1.56.1 as stated in the title) as part of a Dependabot security update. The upgrade addresses security vulnerabilities by updating both the direct dependency @web/test-runner-playwright and its transitive dependency playwright. Additionally, it modifies the test preparation workflow to ensure browser binaries are automatically installed in CI environments.

Key Changes:

  • Bumped @web/test-runner-playwright from 0.11.0 to 0.11.1, which updates the playwright dependency requirement from ^1.22.2 to ^1.53.0
  • Added npx playwright install --with-deps to the pretest script for automatic browser binary installation
  • Updated package-lock.json with resolved playwright version 1.57.0 and adjusted dependency tree (removal of peer dependency flags)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Updated @web/test-runner-playwright to 0.11.1 and added playwright browser installation step to pretest script
package-lock.json Resolved playwright to 1.57.0, updated @web/test-runner-playwright to 0.11.1, and adjusted dependency resolution (removed peer dependency flags for packages now pulled as direct dependencies)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@llastflowers llastflowers merged commit da616b7 into dependabot/npm_and_yarn/npm_and_yarn-0c3072c8cf Nov 26, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants