Bump the minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
papaparse	5.5.4	5.7.0
@sveltejs/vite-plugin-svelte	7.1.2	7.3.0
playwright	1.61.0	1.62.1
svelte	5.56.3	5.56.10
vite	8.0.16	8.2.2
wrangler	4.106.0	4.127.0

Updates papaparse from 5.5.4 to 5.7.0

Release notes

Sourced from papaparse's releases.

5.7.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Add the `downloadTimeout` option to abort slow remote requests after a configurable duration (https://github.com/mholt/PapaParse/pull/1138)

Thanks @​Kocayilmaz for contributing it

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

• Remove jQuery as dependency (#1137)

Thanks @​Kocayilmaz for contributing it

Changelog

Sourced from papaparse's changelog.

5.7.0

Features

• Add the downloadTimeout option to abort slow remote requests after a configurable duration (#1138, #786)

5.6.1

Bug Fixes

• Call transformHeader only once per header in streaming mode (#1130)
• Prevent header de-duplication from running again after resuming parsing (#1135)

5.6.0

Features

• Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

• Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)
• Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)

Commits

• 555c1c1 Minor version bump
• a5cc2dc Patch version bump
• 29e3a09 Add downloadTimeout option to abort slow remote requests (#1138)
• 2e20001 Use tabs for identation on comment
• b98bd0e Simplify comments
• a869cd9 Fix header de-duplication re-running on every resumed row (#1135)
• b3b6a64 Remove coment describing old behaviour
• 8dd3318 call transformHeader once per header in streaming mode (#1130)
• e6c2b7b Update CHANGELOG
• bc382b7 Minor version bump
• Additional commits viewable in compare view

Updates @sveltejs/vite-plugin-svelte from 7.1.2 to 7.3.0

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.3.0

Minor Changes

• feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

• fix: don't log inline config when encountering unexpected options (#1376)

@​sveltejs/vite-plugin-svelte@​7.2.0

Minor Changes

• feat(inspector): add a context menu with current component stack (#1370)

@​sveltejs/vite-plugin-svelte@​7.1.4

Patch Changes

• fix: enforce ltr styles for inspector (#1324)

@​sveltejs/vite-plugin-svelte@​7.1.3

Patch Changes

• fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.3.0

Minor Changes

• feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

• fix: don't log inline config when encountering unexpected options (#1376)

7.2.0

Minor Changes

• feat(inspector): add a context menu with current component stack (#1370)

7.1.4

Patch Changes

• fix: enforce ltr styles for inspector (#1324)

7.1.3

Patch Changes

• fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

Commits

• e6a89fc Version Packages (#1377)
• 2eeef7e feat: pass environment to dynamicCompileOptions (#1386)
• f92b24a fix(deps): update dependency magic-string to v1 (#1381)
• d3d4052 fix: don't log inline config when encountering unexpected options (#1376)
• c9feef6 chore: add type annotations to Inspector.svelte (#1372)
• 02981fd Version Packages (#1371)
• 4158aa2 feat: context menu with component stack (#1370)
• c867a3a Version Packages (#1368)
• dbdb255 fix: inspector rtl host styles (#1324)
• 694bc95 chore(deps): update dependency typescript to v6 (#1315)
• Additional commits viewable in compare view

Updates playwright from 1.61.0 to 1.62.1

Release notes

Sourced from playwright's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• Additional commits viewable in compare view

Updates svelte from 5.56.3 to 5.56.10

Release notes

Sourced from svelte's releases.

svelte@5.56.10

Patch Changes

• fix: preserve CSS escape sequences when printing selectors (#18667)

• fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

• fix: transform expressions inside labeled statements during server compilation (#18617)

• docs: clarify that context lookup includes the current component and all ancestors (#18581)

• fix: apply CSS custom properties with falsy values on components (#18634)

• fix: correctly print {#await ... catch x} et al (#18645)

• fix: ignore comments of Program node during migration script (#18656)

• fix: reliably resolve append_style to its correct root (#18614)

• fix: clean up removed capture event handlers from spread attributes (#18618)

• fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

• fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

• fix: give effect teardowns the value from before the first write in a flush (#18620)

• fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

• fix: preserve namespaces in CSS type selectors (#18678)

• fix: increment private state fields through a non-this receiver (#18622)

• chore: deduplicate client and server context helpers (#18580)

• fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

• fix: allow custom elements to receive async values as props (#18661)

• fix: strip comments from inline style values in linear time (#18553)

• fix: prevent declaration comments from breaking server derived references (#18641)

• perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

• fix: preserve short-circuiting for logical assignments to private state fields (#18594)

svelte@5.56.9

Patch Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.10

Patch Changes

• fix: preserve CSS escape sequences when printing selectors (#18667)

• fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

• fix: transform expressions inside labeled statements during server compilation (#18617)

• docs: clarify that context lookup includes the current component and all ancestors (#18581)

• fix: apply CSS custom properties with falsy values on components (#18634)

• fix: correctly print {#await ... catch x} et al (#18645)

• fix: ignore comments of Program node during migration script (#18656)

• fix: reliably resolve append_style to its correct root (#18614)

• fix: clean up removed capture event handlers from spread attributes (#18618)

• fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

• fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

• fix: give effect teardowns the value from before the first write in a flush (#18620)

• fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

• fix: preserve namespaces in CSS type selectors (#18678)

• fix: increment private state fields through a non-this receiver (#18622)

• chore: deduplicate client and server context helpers (#18580)

• fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

• fix: allow custom elements to receive async values as props (#18661)

• fix: strip comments from inline style values in linear time (#18553)

• fix: prevent declaration comments from breaking server derived references (#18641)

• perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

• fix: preserve short-circuiting for logical assignments to private state fields (#18594)

5.56.9

... (truncated)

Commits

• 56a036f Version Packages (#18640)
• 545205b perf: make async blocker analysis linear (#18549)
• 950e2a8 fix: strip comments from inline style values in linear time (#18553)
• ffc0e6e fix: release last_propagated_event after event propagation settles (#18569)
• 2f684fe docs: clarify that context lookup includes the current component and all ance...
• 3feb34a chore: deduplicate client/server context helpers (#18580)
• 24130c1 fix: parse nth-child of syntax without whitespace after of (#18611)
• a166761 fix: treat concise arrow function bodies as implicit returns when calculating...
• a4c60cc fix: append_styles resolving to document.head in WC (#18614)
• ee1249b fix: preserve renderer type in copy() during SSR (#18616)
• Additional commits viewable in compare view

Updates vite from 8.0.16 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
• css: don't pass empty targets to lightningcss (#23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
• deps: update all non-major dependencies (#23217) (ba958bd)
• deps: update rolldown-related dependencies (#23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
• use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#23231) (b4d66fe)
• module-runner: add TLA circular import case (#23299) (4a261f2)
• module-runner: simplify server-hmr tests (#23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

8.2.1 (2026-08-06)

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

... (truncated)

Commits

• de1111a release: v8.2.2
• cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
• 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
• 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
• 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
• 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
• 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
• 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
• 599b44b test(module-runner): simplify server-hmr tests (#23300)
• 4a261f2 test(module-runner): add TLA circular import case (#23299)
• Additional commits viewable in compare view

Updates wrangler from 4.106.0 to 4.127.0

Release notes

Sourced from wrangler's releases.

wrangler@4.127.0

Minor Changes

• #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

  The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

  {
    "workflows": [
      {
        "binding": "MY_WORKFLOW",
        "name": "my-workflow",
        "class_name": "MyWorkflow",
        "concurrency": { "limit": 10 }
      }
    ]
  }

Patch Changes

• #15367 412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260825.1	^5.20260826.1
  workerd	1.20260825.1	1.20260826.1

• #15375 92874f6 Thanks @​WillTaylorDev! - Upload wrangler preview modules as multipart form data

  wrangler preview used to base64 the bundle, its modules, and any sourcemaps into a single JSON request body. Base64 inflates content by a third, so a Worker with a large sourcemap could exceed the API request size limit and fail to deploy.

  The preview deployment request is now multipart/form-data. The deployment settings travel in a metadata part and each module follows as its own part carrying raw bytes, matching how wrangler deploy already uploads a Worker.

• Updated dependencies [412c79e]:

  • miniflare@5.20260826.0-alpha

wrangler@4.126.0

Minor Changes

• #15332 d1cc3af Thanks @​pombosilva! - Add default_retention to Workflow bindings for configuring how long instances are retained

  Workflow instances are retained for an account-wide default period after they finish. You can now set a per-Workflow default in your Wrangler configuration, applied to instances that do not specify their own retention:

  {
    "workflows": [

... (truncated)

Commits

• a831498 Version Packages (#15372)
• fe265f8 [wrangler] Add per-workflow concurrency limit config (#15356)
• 92874f6 WC-5857 [wrangler] Upload preview deployments as multipart form data (#15375)
• e9df120 Support multiple named Workers in the build output (#15371)
• 5377aae Version Packages (#15354)
• e56d2e6 Revert "Version Packages" (#15355)
• d765e10 Version Packages (#15291)
• 433fa98 [wrangler] Add pull request title to preview deployment annotations (#15307)
• ad89456 [wrangler] Add hyperdrive planetscale signature command (#15065)
• d589d30 [wrangler] Pause automatic skills installation offers (#15296)
• Additional commits viewable in compare view