[dependabot]

Bumps the frontend-dependencies group with 15 updates in the /web_ui directory:

Package	From	To
@xyflow/react	12.11.5	12.12.0
katex	0.18.4	0.19.1
unist-util-visit	5.1.0	5.2.0
@playwright/test	1.62.1	1.64.1
@stryker-mutator/core	10.0.0	10.1.1
@stryker-mutator/vitest-runner	10.0.0	10.1.1
@testing-library/dom	10.4.1	10.4.2
@testing-library/user-event	14.6.6	14.6.8
@types/node	22.20.1	22.20.5
eslint	10.9.1	10.13.0
eslint-plugin-react-refresh	0.5.5	0.5.7
fast-check	4.9.0	4.10.2
globals	17.11.0	17.13.0
typescript-eslint	8.68.0	8.72.1
vitest	4.1.11	4.1.12

Updates @xyflow/react from 12.11.5 to 12.12.0

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.12.0

Minor Changes

• #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

• #5998 91a4adf - Fix incorrect values during resize when shouldResize returns false

• Updated dependencies [91a4adf, 91a4adf]:

  • @​xyflow/system@​0.0.83

@​xyflow/react@​12.11.6

Patch Changes

• #5994 2350158 - Reset all properties in provider store when unmounting flow

• #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

• Updated dependencies [0117cc9]:

  • @​xyflow/system@​0.0.82

Changelog

Sourced from @​xyflow/react's changelog.

12.12.0

Minor Changes

• #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

• #5998 91a4adf - Fix incorrect values during resize when shouldResize returns false

• Updated dependencies [91a4adf, 91a4adf]:

  • @​xyflow/system@​0.0.83

12.11.6

Patch Changes

• #5994 2350158 - Reset all properties in provider store when unmounting flow

• #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

• Updated dependencies [0117cc9]:

  • @​xyflow/system@​0.0.82

Commits

• 8716946 chore(packages): bump
• 9fd41fd chore(packages): bump
• 19f9c2a fix(react/store): reset defaultEdgeOptions
• 2acefb5 fix(react/store): reset functions #5991
• See full diff in compare view

Updates katex from 0.18.4 to 0.19.1

Release notes

Sourced from katex's releases.

v0.19.1

0.19.1 (2026-10-23)

Bug Fixes

• allow percent sign in raw argument type (#4307) (6971e5c)

v0.19.0

0.19.0 (2026-10-01)

Documentation

• note strict changes shipped in 0.18.11 (#4300) (cbb1fce)

BREAKING CHANGES

• Missing character metrics now reported via strict with error code symbolNotInFont, changing warning formatting, calling any strict callbacks, and producing errors in strict: "error" mode. Also, strict callbacks returning undefined or null now warn instead of ignoring the issue (and no longer typecheck); return false or "ignore" to suppress warnings.

v0.18.11

0.18.11 (2026-10-01)

Features

• handle character metrics warnings via strict (#4243) (4237070)

v0.18.10

0.18.10 (2026-09-30)

Features

• make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

v0.18.9

0.18.9 (2026-09-23)

Features

• types: add contrib module declarations (#4250) (aafa187)

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

... (truncated)

Changelog

Sourced from katex's changelog.

0.19.1 (2026-10-23)

Bug Fixes

• allow percent sign in raw argument type (#4307) (6971e5c)

0.19.0 (2026-10-01)

Documentation

• note strict changes shipped in 0.18.11 (#4300) (cbb1fce)

BREAKING CHANGES

• Missing character metrics now reported via strict with error code symbolNotInFont, changing warning formatting, calling any strict callbacks, and producing errors in strict: "error" mode. Also, strict callbacks returning undefined or null now warn instead of ignoring the issue (and no longer typecheck); return false or "ignore" to suppress warnings.

0.18.11 (2026-10-01)

Features

• handle character metrics warnings via strict (#4243) (4237070)

0.18.10 (2026-09-30)

Features

• make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

0.18.9 (2026-09-23)

Features

• types: add contrib module declarations (#4250) (aafa187)

0.18.8 (2026-09-23)

Bug Fixes

• array: preserve trailing rows in align (#4283) (ddfcc29)

0.18.7 (2026-09-06)

... (truncated)

Commits

• 8000fbd chore(release): 0.19.1 [ci skip]
• 6971e5c fix: allow percent sign in raw argument type (#4307)
• 8f0d9bc chore: handle devicePixelRatio in screenshotter (#4303)
• faa8a4c docs(users): add Whiteboard (#4310)
• f18d73d docs(users): add Liubai (#4313)
• 4ffde03 chore(deps): bump github/codeql-action from 4.38.3 to 4.39.0 (#4314)
• cac2561 chore(deps): bump github/codeql-action from 4.38.2 to 4.38.3 (#4306)
• 6ea2dc9 chore(release): 0.19.0 [ci skip]
• cbb1fce docs: note strict changes shipped in 0.18.11 (#4300)
• d5bed9f chore(release): 0.18.11 [ci skip]
• Additional commits viewable in compare view

Updates unist-util-visit from 5.1.0 to 5.2.0

Release notes

Sourced from unist-util-visit's releases.

5.2.0

Add

• c1ed449 Add support for exit visitors

Performance

• f57c39f Fix performance around indexOf

Full Changelog: syntax-tree/unist-util-visit@5.1.0...5.2.0

Commits

• 2792aa8 5.2.0
• 2509e50 Refactor package.json
• e4e6eab Remove license year
• 0664599 Refactor .editorconfig
• c7ecc36 Update actions
• c6b8b62 Replace internal type utils w/ visit-parents
• c1ed449 Add support for exit visitors
• f57c39f Fix performance around indexOf
• f7b5768 Update dev-dependencies
• See full diff in compare view

Updates @playwright/test from 1.62.1 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @stryker-mutator/core from 10.0.0 to 10.1.1

Release notes

Sourced from @​stryker-mutator/core's releases.

v10.1.1

10.1.1 (2026-10-23)

Due to the below provenance issue in the release process, this is a re-release of v10.1.0.

For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078

v10.1.0

10.1.0 (2026-10-23)

Bug Fixes

• core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
• instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
• vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
• vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

• add opt-in mutation-phase test timing diagnostics with sidecar reporter (#5866) (201dce8)
• core: cli option for command runner (#6006) (aa7f3bb), closes #5153
• core: report mutant duration in the mutation report (#6252) (7284a4a), closes #5866 #5866
• vitest-runner: report test locations (#6188) (f2a49ff), closes #6186
• vitest-runner: support vitest pool options (#6268) (3073ea2), closes #6236 #5982 #6223
• vitest-runner: support vitest v5 (#6214) (10e2cca)

Changelog

Sourced from @​stryker-mutator/core's changelog.

10.1.1 (2026-10-23)

Note: Version bump only for package @​stryker-mutator/core

10.1.0 (2026-10-23)

Bug Fixes

• core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250

Features

• add opt-in mutation-phase test timing diagnostics with sidecar reporter (#5866) (201dce8)
• core: cli option for command runner (#6006) (aa7f3bb), closes #5153
• core: report mutant duration in the mutation report (#6252) (7284a4a), closes #5866 #5866

Commits

• 9591277 v10.1.1
• d6148ff v10.1.0
• c931a93 fix(core): prevent test runners racing to populate shared caches on startup (...
• 7284a4a feat(core): report mutant duration in the mutation report (#6252)
• 8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)
• aa7f3bb feat(core): cli option for command runner (#6006)
• 201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...
• 61c7a59 chore(deps): update dependency @​types/semver to v7.8.0 (#6165)
• See full diff in compare view

Updates @stryker-mutator/vitest-runner from 10.0.0 to 10.1.1

Release notes

Sourced from @​stryker-mutator/vitest-runner's releases.

v10.1.1

10.1.1 (2026-10-23)

Due to the below provenance issue in the release process, this is a re-release of v10.1.0.

For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078

v10.1.0

10.1.0 (2026-10-23)

Bug Fixes

• core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
• instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
• vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
• vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

• add opt-in mutation-phase test timing diagnostics with sidecar reporter (#5866) (201dce8)
• core: cli option for command runner (#6006) (aa7f3bb), closes #5153
• core: report mutant duration in the mutation report (#6252) (7284a4a), closes #5866 #5866
• vitest-runner: report test locations (#6188) (f2a49ff), closes #6186
• vitest-runner: support vitest pool options (#6268) (3073ea2), closes #6236 #5982 #6223
• vitest-runner: support vitest v5 (#6214) (10e2cca)

Changelog

Sourced from @​stryker-mutator/vitest-runner's changelog.

10.1.1 (2026-10-23)

Note: Version bump only for package @​stryker-mutator/vitest-runner

10.1.0 (2026-10-23)

Bug Fixes

• vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
• vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

• add opt-in mutation-phase test timing diagnostics with sidecar reporter (#5866) (201dce8)
• core: report mutant duration in the mutation report (#6252) (7284a4a), closes #5866 #5866
• vitest-runner: report test locations (#6188) (f2a49ff), closes #6186
• vitest-runner: support vitest pool options (#6268) (3073ea2), closes #6236 #5982 #6223
• vitest-runner: support vitest v5 (#6214) (10e2cca)

Commits

• 9591277 v10.1.1
• d6148ff v10.1.0
• cf5695e fix(vitest-runner): report mutant collection failures instead of surviving mu...
• 3073ea2 feat(vitest-runner): support vitest pool options (#6268)
• 6ad4adb fix(vitest-runner): do not select tests whose name only starts with a filtere...
• 10e2cca feat(vitest-runner): support vitest v5 (#6214)
• 7284a4a feat(core): report mutant duration in the mutation report (#6252)
• d763db3 chore(deps): update dependency vite to v8.3.2 (#6091)
• 8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)
• 201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...
• Additional commits viewable in compare view

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

• deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)

Commits

• 6049cc0 fix(deps): pin @​types/node to a TypeScript 4-compatible version (#1386)
• e395d5b Switch to trusted publishing (#1368)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.

Updates @testing-library/user-event from 14.6.6 to 14.6.8

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

• treat programmatic null input values as empty string (#1329) (1951eb7)

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

Commits

• 1951eb7 fix: treat programmatic null input values as empty string (#1329)
• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• See full diff in compare view

Updates @types/node from 22.20.1 to 22.20.5

Commits

• See full diff in compare view

Updates eslint from 10.9.1 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.5.5 to 0.5.7

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };

v0.5.6

• Support re-exporting namespace components (fixes #116)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };

0.5.6

• Support re-exporting namespace components (fixes #116)

Commits

• fd40d83 Add allowCompoundComponents option [publish] (#117)
• 620568a Support re-exporting namespace components (fixes #116) [publish]
• See full diff in compare view

Updates fast-check from 4.9.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

New plugin API and deprecations ahead of v5

[Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (P...

  Description has been truncated