[dependabot]

Bumps playwright from 1.64.0 to 1.65.1.

Release notes

Sourced from playwright's releases.

v1.65.1

Highlights

microsoft/playwright-python#3337 - chore: roll Node.js to 26.13.1 microsoft/playwright-python#3331 - devops(docker): install libatomic1 for the Node.js binary of the driver microsoft/playwright-python#3336 - fix(docker): upgrade base image packages during the build

The bundled Node.js 26.13.1 is a security release with fixes in tls, http, https and http2. The driver uses Node.js for its own network connections, for example connect_over_cdp to a wss:// endpoint.

The Docker images now include libatomic1, which the Node.js binary of the driver needs, and the latest security updates of the Ubuntu packages.

Browser Versions

• Chromium 158.0.8127.18
• Mozilla Firefox 159.0
• WebKit 27.2

This version was also tested against the following stable channels:

• Google Chrome 157
• Microsoft Edge 156

v1.65.0

🧾 Locator code in Python

A locator from locator.normalize() now converts to a string as Python code. Use it with page.get_by_ref() to turn an element that an agent picks from a page.aria_snapshot() in the "ai" mode into code for your test:

normalized = page.get_by_ref("e2").normalize()
print(str(normalized))
# get_by_role("button", name="Submit")

New APIs

• New option timeout in cdp_session.send().

Notable Fixes ⚠️

• Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.select_option() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert.

• Cookie matching now follows RFC 6265. With a URL, browser_context.cookies() and api_request_context.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name.

• Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use http_credentials.

• Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.get_by_role() with a name, locator.aria_snapshot() and expect(locator).to_match_aria_snapshot().

• String values of the params option in APIRequestContext requests are now appended to the query that the URL already has, instead of replacing it.

Announcements

... (truncated)

Commits

• eecddbc cherry-pick(#3337): chore: roll Node.js to 26.13.1
• 696ec60 cherry-pick(#3336): fix(docker): upgrade base image packages during the build
• ad6bc4b cherry-pick(#3333): devops(docker): publish stable images from the tip of a r...
• c0f3b22 cherry-pick(#3331): devops(docker): install libatomic1 for the Node.js binary...
• 18175f8 chore: roll Playwright to 1.65.0 (a1f35e1955) (#3327)
• 6bd6aaa devops: wait 7 days before Dependabot proposes pip updates (#3325)
• 1e2746c devops(bots): pin the shared actions to a commit SHA (#3319)
• 015115d fix(deps): remove unused pyee runtime dependency (#3316)
• df2bf0b chore: roll Playwright to 1.66.0-next (0ea3691032) (#3318)
• 989329c devops(roll): open the pull request with publish-calls (#3317)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

Deployment failed for project tinlyt-web with the following error:

Resource is limited - try again in 1 day (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/lloydcoders-projects?upgradeToPro=build-rate-limit

[vercel]

Deployment failed for project tinlyt-web with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/lloydcoders-projects?upgradeToPro=build-rate-limit