fix(deps): update dependency @playwright/mcp to ^0.0.76

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
@playwright/mcp (source)	dependencies	patch	^0.0.68 → ^0.0.76	0.0.77

---

Release Notes

microsoft/playwright-mcp (@​playwright/mcp)

v0.0.76

Compare Source

What's New

New Tools

• browser_video_show_actions / browser_video_hide_actions — Overlay action annotations on the recorded video, or hide them again (#​40914)

Tool Improvements

• Remote endpoint — remoteEndpoint now accepts a ConnectOptions object, not just a URL string (#​40964)
• --output-max-size — Cap the size of tool responses, with post-response disk eviction of oversized output (#​41031)
• --browser — Support moz-firefox BiDi channels (#​41126)

Bug Fixes

• Support remoteHeaders for the remote browser endpoint (#​40828, #​41156)
• Use waitUntil: 'commit' when navigating back/forward (#​41153)
• Report invalid tool arguments instead of failing opaquely (#​40979)
• Use a writable cache directory for MCP user data instead of the browsers path (#​40961)
• Disconnect the tracked browser when the browser tracker is disposed (#​40967)
• Report a missing ffmpeg distinctly from a missing browser (#​40867)
• Don't mark the response as closed when there are no open tabs (#​40743)
• Validate user-provided regex patterns in MCP tools (#​40752)
• Pass the time parameter to page.evaluate when waiting for a timeout (#​41037)
• Add path-traversal checks to static file serving routes (#​40715)

v0.0.75

Compare Source

Bug Fixes

• Serialize shared browser launch in --isolated mode (#​40709)
• Forward browser-level CDP commands in extension mode (#​40706)

v0.0.74

Compare Source

What's New

Browser Extension

• The extension now supports managing multiple tabs when used with --extension (#​40678)

Tool Improvements

• browser_take_screenshot — Skip the base64 image in the response when filename is explicitly provided (#​40577)

Bug Fixes

• Auto-recover when the remote browser disconnects mid-session (#​40652)
• Recover from page renderer crash (#​40617)
• Anchor aria-ref regex in target resolution (#​40610)
• Propagate abort signal to stop test execution (#​40582)

v0.0.73

Compare Source

What's New

Distribution

• Playwright MCP is now published to the official MCP Registry on each release (#​1585)

Bug Fixes

• Resolve extension channel and executablePath from CLI flags and environment variables (#​40572)
• Propagate --browser channel on the --extension path (#​40567)
• Handle null viewport in dashboard annotate-screenshot (#​40569)

v0.0.72

Compare Source

What's New

Tool Improvements

• browser_network_requests — Now returns a numbered list of requests; use the new browser_network_request tool with the index to fetch full details (headers/body) or a single part. Both tools accept a filename option to write the output to a file (#​40447, #​40454)
• browser_run_code → browser_run_code_unsafe — Renamed to make the sandbox-escape implication explicit (#​40496)

Bug Fixes

• Surface unhandled rejections in browser_run_code_unsafe instead of crashing the server (#​40452)
• Detect the installed extension in non-default Chrome profiles (#​40471)
• Ignore browser config (channel, headless, viewport, etc.) when attaching to the extension (#​40475)

v0.0.71

Compare Source

What's New

New Tools

• browser_drop — Expose Locator.drop as an MCP tool for completing drag-and-drop operations onto a target (#​40367)

Tool Improvements

• browser_network_requests — Added responseBody and responseHeaders options; binary bodies are rendered as a placeholder using mime-type detection (microsoft/playwright@f0be0b17)
• browser_evaluate — Accept plain expressions in addition to function bodies (#​39979)

Browser Extension

• Tab group syncing — Connected tabs are grouped into a green "Playwright" tab group (#​1514, #​1551)

Bug Fixes

• Disable CDP timeout for extension connection so long handshakes don't fail (#​40265)
• Ensure --proxy-server overrides the proxy set in the config file (#​40212)
• Merge user-supplied ignoreDefaultArgs with persistent mode defaults instead of replacing them (#​40026)

v0.0.70

Compare Source

• Maintenance release off 1.59 branch point

v0.0.69

Compare Source

What's New

New Tools

• browser_network_state_set — Toggle network offline mode for testing connectivity scenarios (#​39459)
• browser_video_chapter — Add a chapter marker to the video recording, showing a full-screen chapter card with blurred backdrop (#​39891)

Tool Improvements

• browser_mouse_click_xy — Added button, clickCount, and delay options for more precise mouse interaction control (#​39368, #​39465)
• browser_network_requests — Added filtering support and optional headers/body fields in responses (#​39672)
• Non-ref selectors — Tools now accept plain CSS/text selectors in addition to aria-ref handles (#​39581)

Other Changes

• Added mcpName field to package for MCP Registry ownership verification (#​1432)
• Chrome extension: inject public key into release zip to preserve Web Store extension ID (#​1462)

Bug Fixes

• Fix verify tools not working inside iframes (#​39374)
• Fix fs-based lock file not respected for Chromium family browsers (#​39377)
• Fix console entries being printed when --snapshot-mode=none is set (#​39378)
• Fix non-deterministic right-click behavior due to contextmenu/mouseup ordering (#​39416)
• Fix header value parsing when header contains colons in value (#​39401)
• Fix persistent context incorrectly using per-session isolation (#​39601)
• Fix navigation protocol allowlist replaced with blocklist for better coverage (#​39600)
• Fix malformed Unicode characters in MCP tool responses (#​39625)
• Fix toWellFormed() compatibility with Node.js 18 (#​39674)
• Fix empty cdpHeaders from environment overriding config file values (#​39866)
• Fix file path validation in browser_set_storage_state tool (#​39881)
• Fix Chrome for Testing executable location resolution in browser extension (#​39936)
• Fix extension inactivity timers not armed for pending tabs (#​1443)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.