[dependabot]

Bumps the npm-minor-patch group in /tests/web-a11y with 2 updates: @axe-core/playwright and @playwright/test.

Updates @axe-core/playwright from 4.12.1 to 4.14.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.14.0

What's Changed

• docs(webdriverjs): update chrome options in example by @​G-Rath in dequelabs/axe-core-npm#1401
• chore: merge master into develop by @​attest-team-ci in dequelabs/axe-core-npm#1417
• ci: create the release tag when publishing to production by @​Garbee in dequelabs/axe-core-npm#1418
• chore: bump brace-expansion by @​dependabot[bot] in dequelabs/axe-core-npm#1419
• chore: bump tar and lerna by @​dependabot[bot] in dequelabs/axe-core-npm#1420
• chore: migrate from npm workspaces to pnpm by @​Garbee in dequelabs/axe-core-npm#1421
• chore(deps): upgrade dependencies and audit engine floors in CI by @​Garbee in dequelabs/axe-core-npm#1430
• chore: bump chromedriver from 152.0.0 to 152.0.1 in the browser-drivers group by @​dependabot[bot] in dequelabs/axe-core-npm#1435
• chore: bump the webdriverio group with 6 updates by @​dependabot[bot] in dequelabs/axe-core-npm#1434
• chore: bump eslint from 10.8.1 to 10.9.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1437
• fix: exempt axe-core from the pnpm release-age cooldown by @​Garbee in dequelabs/axe-core-npm#1441
• feat: Update axe-core to v4.14.0 by @​attest-team-ci in dequelabs/axe-core-npm#1456
• chore: bump postcss-selector-parser from 7.1.5 to 7.1.6 by @​dependabot[bot] in dequelabs/axe-core-npm#1457
• chore: bump puppeteer from 25.8.0 to 25.12.0 in the puppeteer group by @​dependabot[bot] in dequelabs/axe-core-npm#1451
• chore: bump proxy-addr from 2.0.7 to 2.0.8 by @​dependabot[bot] in dequelabs/axe-core-npm#1458
• chore: bump nx from 23.1.1 to 23.2.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1459
• chore: bump adm-zip from 0.6.0 to 0.6.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1443
• chore: bump the webdriverio group across 1 directory with 7 updates by @​dependabot[bot] in dequelabs/axe-core-npm#1449
• ci: provide pnpm via action-setup in release workflows by @​Garbee in dequelabs/axe-core-npm#1461
• chore: RC v4.14.0 by @​attest-team-ci in dequelabs/axe-core-npm#1463
• fix(cli): restore bin paths and lint published package tarballs (#1467) by @​Garbee in dequelabs/axe-core-npm#1468
• chore: release v4.14.0 by @​axe-core in dequelabs/axe-core-npm#1479

New Contributors

• @​G-Rath made their first contribution in dequelabs/axe-core-npm#1401

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Release 4.13.0

What's Changed

• ci: use pat instead of github token by @​Garbee in dequelabs/axe-core-npm#1334
• chore: bump nyc from 17.1.0 to 18.0.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1311
• chore: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1354
• chore: pin node by @​Garbee in dequelabs/axe-core-npm#1355
• test: fix webdriverio esmTest.mjs by @​straker in dequelabs/axe-core-npm#1356
• chore: disable dependabot rebase strategy by @​Garbee in dequelabs/axe-core-npm#1344
• chore: bump actions/checkout from 6 to 6.0.2 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1357
• ci: increase timeout for axe-core update by @​Garbee in dequelabs/axe-core-npm#1360
• chore: exclude test/release from npm workspaces by @​Garbee in dequelabs/axe-core-npm#1361
• chore: bump axios from 1.14.0 to 1.17.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1358
• chore: merge master into develop by @​michael-siek in dequelabs/axe-core-npm#1362
• chore: declare @​eslint/js and group eslint deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1348
• chore: bump actions/checkout from 6.0.2 to 6.0.3 in the gha-low-risk group by @​dependabot[bot] in dequelabs/axe-core-npm#1363
• chore: group browser-driver and jest deps for dependabot by @​Garbee in dequelabs/axe-core-npm#1365
• chore: bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in dequelabs/axe-core-npm#1301
• chore: bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in dequelabs/axe-core-npm#1305
• chore: bump fast-xml-parser from 5.5.1 to 5.8.0 by @​dependabot[bot] in dequelabs/axe-core-npm#1325
• chore: bump lodash from 4.17.21 to 4.18.1 by @​dependabot[bot] in dequelabs/axe-core-npm#1337

... (truncated)

Changelog

Sourced from @​axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

• exempt axe-core from the pnpm release-age cooldown (#1441) (0bcb185), closes #1346 #1346 #1442 #1346

Features

• Update axe-core to v4.14.0 (#1456) (dccfe7a)

4.13.0 (2026-08-10)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)
• update axe-core to v4.13.0 (#1413) (399c5d7), closes #1412

Commits

• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @playwright/test from 1.61.1 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions