Build driver from source instead of downloading from CDN

.azure-pipelines/publish.yml

@@ -40,6 +40,10 @@ extends:
           inputs:
             versionSpec: '3.9'
           displayName: 'Use Python'
+        - task: NodeTool@0
+          inputs:
+            versionSpec: '24.x'
+          displayName: 'Use Node.js'
         - script: |
             python -m pip install --upgrade pip
             pip install -r local-requirements.txt
@@ -60,7 +64,7 @@ extends:
             targetPath: $(Build.ArtifactStagingDirectory)/esrp-build
         steps:
           - checkout: none
-          - task: EsrpRelease@9
+          - task: EsrpRelease@11
             inputs:
               connectedservicename: 'Playwright-ESRP-PME'
               usemanagedidentity: true

.claude/skills/playwright-roll/SKILL.md

@@ -15,7 +15,7 @@ The Python port is hand-written code in `playwright/_impl/`, plus a generator (`
 
 1. introspects the Python `_impl` classes via `inspect`,
 2. emits typed wrapper classes into `playwright/{async,sync}_api/_generated.py`, and
-3. diffs the introspected surface against `playwright/driver/package/api.json` (downloaded inside the new driver wheel).
+3. diffs the introspected surface against `playwright/driver/package/api.json` (built into the new driver from source).
 
 Anything in `api.json` that is missing or differently typed in `_impl/` causes generation to fail. Three resolutions:
 
@@ -52,18 +52,25 @@ There is sometimes no `vX.Y.0` tag for the latest release (the bots cut release
 - If `python3-venv` is missing system-wide, use `uv venv env` instead, then `uv pip install --python env/bin/python --upgrade pip`. Don't try to `apt install` — sudo is denied in the harness.
 - Always activate the venv before any `pip`, `pytest`, `mypy`, or `pre-commit` invocation.
 
-### 2. Bump the driver and download it
+### 2. Bump the driver and build it from source
 
 ```sh
 # Edit setup.py
 driver_version = "<new>"     # e.g. "1.59.1"
 
 source env/bin/activate
-python -m build --wheel       # downloads the new driver from cdn.playwright.dev
+python -m build --wheel       # clones microsoft/playwright @ v<new> and builds the driver from source
 playwright install chromium   # NOT --with-deps; sudo is denied
 ```
 
-The wheel build prints `Fetching https://cdn.playwright.dev/builds/driver/playwright-<new>-linux.zip` and unpacks the driver under `playwright/driver/package/`. From this point, `playwright/driver/package/api.json` reflects the new release.
+The wheel build clones `microsoft/playwright` at tag `v<new>` into
+`driver/playwright-src`, runs `npm ci && npm run build`, and runs upstream's
+`utils/build/build-playwright-driver.sh` to produce the per-platform driver
+bundles (`driver/playwright-<new>-*.zip`), then unpacks the driver under
+`playwright/driver/package/`. From this point,
+`playwright/driver/package/api.json` reflects the new release. This requires
+**Node.js, npm, git and bash** on PATH; the first build is slow (full upstream
+build + per-platform Node downloads).
 
 ### 3. Identify the commit range
 

.github/workflows/ci.yml

@@ -17,15 +17,54 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  build-driver:
+    name: Build driver
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+    - uses: actions/checkout@v6
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+    - name: Build driver bundles from source
+      run: |
+        VERSION="$(grep -oP 'driver_version = "\K[^"]+' setup.py)"
+        bash scripts/build_driver.sh "$VERSION"
+    - name: Upload driver bundles
+      uses: actions/upload-artifact@v4
+      with:
+        name: driver-bundles
+        path: driver/playwright-*.zip
+        if-no-files-found: error
+        # The bundles are already-compressed zips; skip re-compression.
+        compression-level: 0
+        retention-days: 1
+
   infra:
     name: Lint
+    needs: build-driver
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python
       uses: actions/setup-python@v6
       with:
         python-version: "3.10"
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+    - name: Download driver bundles
+      uses: actions/download-artifact@v4
+      with:
+        name: driver-bundles
+        path: driver/
+    - name: Verify driver bundles
+      shell: bash
+      run: |
+        count="$(ls driver/playwright-*.zip 2>/dev/null | wc -l)"
+        test "$count" -eq 6 || { echo "Expected 6 driver bundles in driver/, found $count"; ls -la driver/ || true; exit 1; }
     - name: Install dependencies & browsers
       run: |
         python -m pip install --upgrade pip
@@ -43,6 +82,7 @@ jobs:
 
   build:
     name: Build
+    needs: build-driver
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -91,11 +131,21 @@ jobs:
           browser: chromium
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python
       uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
+    - name: Download driver bundles
+      uses: actions/download-artifact@v4
+      with:
+        name: driver-bundles
+        path: driver/
+    - name: Verify driver bundles
+      shell: bash
+      run: |
+        count="$(ls driver/playwright-*.zip 2>/dev/null | wc -l)"
+        test "$count" -eq 6 || { echo "Expected 6 driver bundles in driver/, found $count"; ls -la driver/ || true; exit 1; }
     - name: Install dependencies & browsers
       run: |
         python -m pip install --upgrade pip
@@ -125,6 +175,7 @@ jobs:
 
   test-stable:
     name: Stable
+    needs: build-driver
     timeout-minutes: 45
     strategy:
       fail-fast: false
@@ -138,11 +189,21 @@ jobs:
           browser-channel: msedge
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python
       uses: actions/setup-python@v6
       with:
         python-version: "3.10"
+    - name: Download driver bundles
+      uses: actions/download-artifact@v4
+      with:
+        name: driver-bundles
+        path: driver/
+    - name: Verify driver bundles
+      shell: bash
+      run: |
+        count="$(ls driver/playwright-*.zip 2>/dev/null | wc -l)"
+        test "$count" -eq 6 || { echo "Expected 6 driver bundles in driver/, found $count"; ls -la driver/ || true; exit 1; }
     - name: Install dependencies & browsers
       run: |
         python -m pip install --upgrade pip
@@ -166,43 +227,14 @@ jobs:
       if: matrix.os == 'ubuntu-latest'
       run: xvfb-run pytest tests/async --browser=chromium --browser-channel=${{ matrix.browser-channel }} --timeout 90
 
-  build-conda:
-    name: Conda Build
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-22.04, macos-latest, windows-2022]
-    runs-on: ${{ matrix.os }}
-    defaults:
-      run:
-        # `setup-miniconda` activates the env only for login shells; using
-        # `bash -el` (recommended by the action) ensures `conda` and the
-        # installed `conda-build` are on PATH on every OS, including Windows
-        # where the default shell is pwsh and skips the activation hooks.
-        shell: bash -el {0}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-      - name: Get conda
-        uses: conda-incubator/setup-miniconda@v3
-        with:
-          python-version: '3.12'
-          channels: conda-forge
-          miniconda-version: latest
-      - name: Prepare
-        run: conda install -n base "conda-build>=26" conda-verify
-      - name: Build
-        run: conda build .
-
   test_examples:
     name: Examples
     runs-on: ubuntu-22.04
     defaults:
       run:
         working-directory: examples/todomvc/
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python
       uses: actions/setup-python@v6
       with:

.github/workflows/publish_docker.yml

@@ -15,9 +15,9 @@ jobs:
       contents: read    # This is required for actions/checkout to succeed
     environment: Docker
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Azure login
-      uses: azure/login@v2
+      uses: azure/login@v3
       with:
         client-id: ${{ secrets.AZURE_DOCKER_CLIENT_ID }}
         tenant-id: ${{ secrets.AZURE_DOCKER_TENANT_ID }}
@@ -28,8 +28,12 @@ jobs:
       uses: actions/setup-python@v6
       with:
         python-version: "3.10"
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
     - name: Set up Docker QEMU for arm64 docker builds
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@v4
       with:
         platforms: arm64
     - name: Install dependencies & browsers

.github/workflows/test_docker.yml

@@ -30,11 +30,15 @@ jobs:
           - ubuntu-24.04
           - ubuntu-24.04-arm
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python
       uses: actions/setup-python@v6
       with:
         python-version: "3.10"
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
@@ -53,6 +57,10 @@ jobs:
         docker exec "${CONTAINER_ID}" pip install -r local-requirements.txt
         docker exec "${CONTAINER_ID}" pip install -r requirements.txt
         docker exec "${CONTAINER_ID}" pip install -e .
+        # build.sh (above) already built the driver bundles into driver/ on the
+        # host. The repo is bind-mounted into the container, so this in-container
+        # wheel build reuses those bundles (setup.py skips the source build when
+        # the zip already exists) and therefore needs no Node.js in the image.
         docker exec "${CONTAINER_ID}" python -m build --wheel
         docker exec "${CONTAINER_ID}" xvfb-run pytest tests/sync/
         docker exec "${CONTAINER_ID}" xvfb-run pytest tests/async/