chore(deps): batch Dependabot updates (Playwright 1.64.1, oxc 0.154)

Merged
KA
1d ago
+356-338

Combines the eight open Dependabot PRs into one, with the lockfile regenerated once.

PRPackageFromTo
#1261actions/setup-java6.0.16.1.0
#1262react-dom (web-benchmark)19.3.019.3.1
#1263@vitest/expect5.0.35.0.5
#1264oxc-transform0.153.00.154.0
#1265@react-navigation/native-stack (mobile-benchmark)7.20.07.21.0
#1266@ai-sdk/provider4.0.264.0.28
#1267playwright-core (@e2e-dev/web)1.64.01.64.1
#1268oxc-parser0.153.00.154.0

Changes that weren't in the Dependabot PRs:

  • native-stack 7.21.0 needs @react-navigation/native ^7.5.1 and elements ^2.9.45. On its own it left two copies of elements in the lockfile, with the bottom tab navigator nested inside the stack. @react-navigation/native moves to 7.5.1 and bottom-tabs to 7.21.0 with it, so there is one elements again.
  • react moves to 19.3.1 next to react-dom, in the web benchmark and in docs/package.json. React only pairs identical versions. pnpm peers check now prints the same output as on main.
  • @oxc-project/runtime moves to 0.154.0 to stay on the same version as oxc-transform.
  • @e2e-dev/smol boots mcr.microsoft.com/playwright:v1.64.1-noble (packages/smol/src/provider.ts:15), so its Chromium still matches the web engine's, as AGENTS.md requires. Its unit test and docs/integrations/smol.mdx move with it.
  • The oxc version noted in the workaround comments in packages/e2e/src/config/typescript.ts now reads 0.154. I checked that oxc-transform 0.154.0 still prints export {}; for a CommonJS file with only type imports, so the workaround is still needed.
  • The setup-java sample in docs/ci/github-actions.mdx uses the same pin as the workflows.
  • Changeset: patch for e2e, @e2e-dev/web, @e2e-dev/smol.

Closes #1261, closes #1262, closes #1263, closes #1264, closes #1265, closes #1266, closes #1267, closes #1268.

Verified

Ran it locally: yes

  • pnpm test: green, including the web engine's crosscheck and axe conformance runs on Playwright 1.64.1. Neither expected.txt changed.
  • Testbed: 79 passed, 1 skipped. I used a copy of the config on port 4272 because a server from another worktree was holding 4271.
  • pnpm test:web-benchmark: 91 passed.
  • CI=1 pnpm --filter @e2e-dev/web-benchmark run test:agent --strict-cache, with no model key: 26 passed. The other 7 failed with MODEL_PROVIDER_FAILED / ASSERTION_FAILED: those steps have no recording and need a live model. #1130 got the same split on main. No REPLAY_STALE.
  • Mobile benchmark: only tsc --noEmit ran locally. I did not run the React Navigation bump on a simulator; mobile.yml covers it on iOS and Android.