deps(web)(deps-dev): bump the dev-minor group across 1 directory with 13 updates

[dependabot]

Bumps the dev-minor group with 9 updates in the / directory:

Package	From	To
@analogjs/vite-plugin-angular	2.5.2	2.6.2
@analogjs/vitest-angular	2.5.2	2.6.2
@axe-core/playwright	4.11.3	4.12.1
@playwright/test	1.60.0	1.61.1
@types/node	24.12.4	24.13.2
@vitest/browser-playwright	4.1.7	4.1.9
knip	6.14.2	6.23.0
lint-staged	17.0.5	17.0.8
prettier	3.8.3	3.9.3

Updates @analogjs/vite-plugin-angular from 2.5.2 to 2.6.2

Release notes

Sourced from @​analogjs/vite-plugin-angular's releases.

v2.6.2

2.6.2 (2026-06-25)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)
• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)
• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)
• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)
• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

v2.6.2-beta.5

2.6.2-beta.5 (2026-06-25)

Bug Fixes

• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

v2.6.2-beta.4

2.6.2-beta.4 (2026-06-25)

Bug Fixes

• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)

v2.6.2-beta.3

2.6.2-beta.3 (2026-06-25)

Bug Fixes

• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)

v2.6.2-beta.2

2.6.2-beta.2 (2026-06-16)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)

v2.6.2-beta.1

2.6.2-beta.1 (2026-06-16)

Bug Fixes

... (truncated)

Changelog

Sourced from @​analogjs/vite-plugin-angular's changelog.

2.6.2 (2026-06-25)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)
• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)
• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)
• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)
• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

2.6.2-beta.5 (2026-06-25)

Bug Fixes

• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

2.6.2-beta.4 (2026-06-25)

Bug Fixes

• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)

2.6.2-beta.3 (2026-06-25)

Bug Fixes

• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)

2.6.2-beta.2 (2026-06-16)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)

2.6.2-beta.1 (2026-06-16)

Bug Fixes

• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)

2.6.1 (2026-06-11)

Bug Fixes

• vite-plugin-angular: import NgModule/tuple exports from their defining file in fastCompile (#2370) (dafa025)
• vite-plugin-angular: parse skipped .ts files as TypeScript in vitest sourcemap plugin (#2367) (ba284a8)
• vite-plugin-angular: skip rolldown dep optimizer transform in test mode and close transformer (#2373) (756d510)
• vite-plugin-angular: treat the vitest run command as a single run instead of watch mode (#2374) (931200a)

2.6.1-beta.4 (2026-06-11)

... (truncated)

Commits

• 70869a7 chore: release 2.6.2 [skip ci]
• cfdb9e8 Merge pull request #2391 from analogjs/beta
• e5da749 chore: release 2.6.2-beta.5 [skip ci]
• f115390 fix(vite-plugin-angular): resolve non-standalone component scope in fastCompi...
• 6f93fa1 chore: release 2.6.2-beta.4 [skip ci]
• 8d0f053 fix(vite-plugin-angular): cover legacy compliance fixtures + fix surfaced DI ...
• e0da2e0 chore: release 2.6.2-beta.3 [skip ci]
• 8ca1d0b fix(vite-plugin-angular): emit fastCompile providers referenced by a const (#...
• 39fa344 docs: update Zerops deployment guide (#2387)
• c7e8a24 build: reference tsconfig.spec.json from package solution tsconfigs (#2384)
• Additional commits viewable in compare view

Updates @analogjs/vitest-angular from 2.5.2 to 2.6.2

Release notes

Sourced from @​analogjs/vitest-angular's releases.

v2.6.2

2.6.2 (2026-06-25)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)
• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)
• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)
• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)
• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

v2.6.2-beta.5

2.6.2-beta.5 (2026-06-25)

Bug Fixes

• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

v2.6.2-beta.4

2.6.2-beta.4 (2026-06-25)

Bug Fixes

• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)

v2.6.2-beta.3

2.6.2-beta.3 (2026-06-25)

Bug Fixes

• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)

v2.6.2-beta.2

2.6.2-beta.2 (2026-06-16)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)

v2.6.2-beta.1

2.6.2-beta.1 (2026-06-16)

Bug Fixes

... (truncated)

Changelog

Sourced from @​analogjs/vitest-angular's changelog.

2.6.2 (2026-06-25)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)
• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)
• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)
• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)
• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

2.6.2-beta.5 (2026-06-25)

Bug Fixes

• vite-plugin-angular: resolve non-standalone component scope in fastCompile (#2390) (f115390)

2.6.2-beta.4 (2026-06-25)

Bug Fixes

• vite-plugin-angular: cover legacy compliance fixtures + fix surfaced DI emit bugs (#2389) (8d0f053)

2.6.2-beta.3 (2026-06-25)

Bug Fixes

• vite-plugin-angular: emit fastCompile providers referenced by a const (#2388) (8ca1d0b)

2.6.2-beta.2 (2026-06-16)

Bug Fixes

• create-analog: update Node.js compat with Angular v22 and @​angular/animations deprecation (#2375) (9282770)

2.6.2-beta.1 (2026-06-16)

Bug Fixes

• vite-plugin-angular: @​Service detection and external styleUrl preprocessing in fastCompile (#2383) (bb789c1)

2.6.1 (2026-06-11)

Bug Fixes

• vite-plugin-angular: import NgModule/tuple exports from their defining file in fastCompile (#2370) (dafa025)
• vite-plugin-angular: parse skipped .ts files as TypeScript in vitest sourcemap plugin (#2367) (ba284a8)
• vite-plugin-angular: skip rolldown dep optimizer transform in test mode and close transformer (#2373) (756d510)
• vite-plugin-angular: treat the vitest run command as a single run instead of watch mode (#2374) (931200a)

2.6.1-beta.4 (2026-06-11)

... (truncated)

Commits

• 70869a7 chore: release 2.6.2 [skip ci]
• cfdb9e8 Merge pull request #2391 from analogjs/beta
• e5da749 chore: release 2.6.2-beta.5 [skip ci]
• f115390 fix(vite-plugin-angular): resolve non-standalone component scope in fastCompi...
• 6f93fa1 chore: release 2.6.2-beta.4 [skip ci]
• 8d0f053 fix(vite-plugin-angular): cover legacy compliance fixtures + fix surfaced DI ...
• e0da2e0 chore: release 2.6.2-beta.3 [skip ci]
• 8ca1d0b fix(vite-plugin-angular): emit fastCompile providers referenced by a const (#...
• 39fa344 docs: update Zerops deployment guide (#2387)
• c7e8a24 build: reference tsconfig.spec.json from package solution tsconfigs (#2384)
• Additional commits viewable in compare view

Updates @axe-core/playwright from 4.11.3 to 4.12.1

Changelog

Sourced from @​axe-core/playwright's changelog.

4.12.1 (2026-06-22)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)

Commits

• See full diff in compare view

Updates @playwright/test from 1.60.0 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

• #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

• 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
• 4328122 chore: mark v1.61.1 (#41404)
• 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
• 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
• 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
• b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
• b5a3175 cherry-pick(#41319): fix(loader): support other node versions
• d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• Additional commits viewable in compare view

Updates @types/node from 24.12.4 to 24.13.2

Commits

• See full diff in compare view

Updates @vitest/browser-playwright from 4.1.7 to 4.1.9

Release notes

Sourced from @​vitest/browser-playwright's releases.

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• 675b434 fix(browser): remove orphaned Playwright route when same module is mocked via...
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.7 to 4.1.9

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates axe-core from 4.11.4 to 4.12.1

Release notes

Sourced from axe-core's releases.

Release 4.12.1

Bug FixesThis release does not impact axe results.

• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

Release 4.12.0

In this release you'll find:

1. A new aria-tab-name rule that tests role="tab" elements have an accessible name
2. The landmark-complementary-is-top-level rule is deprecated, as ARIA no longer requires this
3. Preparations for Element Internal support (behind a feature flag)
4. Various other bug fixes for target-size, scrollable-region-focusable, and more

This release can see reveal new issues, as well as close out a few existing ones that might have come from false positives or the now deprecated rule.

Features

• add gather-internals.js external script (#5099) (c61d58b), closes #5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
• axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
• core: expose normalizeRunOptions (#4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
• getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
• list,listitem: support element internals role (#5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
• rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
• utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
• aria-conditional-attr: add support for radio (#5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#4987) (48ca955), closes #4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (ea7202c), closes #4704
• DqElement: avoid calling constructors with cloneNode (#5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#5096) (3a012a1)
• locale: ensure all subtags are correctly set (#5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#5066) (1229a6e), closes #5065
• target-size: ignore widgets that are inline with other inline elements (#5000) (a8dd81b)
• utils/getAncestry: escape node name (#5079) (d1fabaa), closes #5078
• utils: Add null check to parseCrossOriginStylesheet, closes #5074 (#5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#5059) (edc6ce2), closes #5030

Changelog

Sourced from axe-core's changelog.

4.12.1 (2026-06-09)

Bug Fixes

• axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

4.12.0 (2026-06-01)

Features

• add gather-internals.js external script (#5099) (c61d58b), closes #5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
• axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
• core: expose normalizeRunOptions (#4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
• getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
• list,listitem: support element internals role (#5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
• rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
• utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
• aria-conditional-attr: add support for radio (#5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#4987) (48ca955), closes #4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (ea7202c), closes #4704
• DqElement: avoid calling constructors with cloneNode (#5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#5096) (3a012a1)
• locale: ensure all subtags are correctly set (#5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#5066) (1229a6e), closes #5065
• target-size: ignore widgets that are inline with other inline elements (#5000) (a8dd81b)
• utils/getAncestry: escape node name (#5079) (d1fabaa), closes #5078
• utils: Add null check to parseCrossOriginStylesheet, closes #5074 (#5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#5059) (edc6ce2), closes #5030

Commits

• 5d002cc chore(release): 4.12.1 (#5152)
• c3fe4b5 chore(release): 4.12.1
• 4dfeaed test: support with-aria-* attributes on testutils-element (#5137)
• 7eb3d2d fix(axe.d.ts): make enabled property of RuleMetadata optional (#5129)
• 0feedd3 chore: migrate Karma to Web Test Runner (#5121)
• e260c7e ci: continue-on-error for text_examples (#5124)
• 90e6c45 ci: continue-on-error for text_examples
• 0016ef9 chore(release): v4.12.0 (#5122)
• 1e9df5a chore(release): 4.12.0
• 75bf772 feat(getRules): include rule enabled state in returned objects (#5118)
• Additional commits viewable in compare view

Updates knip from 6.14.2 to 6.23.0

Release notes

Sourced from knip's releases.

Release 6.23.0

• feat: add customCss to Starlight plugin (

[dependabot]

Labels

The following labels could not be found: web. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.