Bump the minor-and-patch group across 2 directories with 6 updates

[dependabot]

Bumps the minor-and-patch group with 5 updates in the / directory:

Package	From	To
@inquirer/prompts	8.7.0	8.7.1
degit	3.8.0	3.10.0
inquirer	14.2.0	14.2.1
yeoman-generator	8.3.0	8.3.1
globals	17.11.0	17.12.0

Bumps the minor-and-patch group with 1 update in the /gui/next directory: @playwright/test.

Updates @inquirer/prompts from 8.7.0 to 8.7.1

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.1

What's new

• All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

• @inquirer/checkbox@^5.2.4
• @inquirer/confirm@^6.3.1
• @inquirer/editor@^5.3.2
• @inquirer/expand@^5.1.4
• @inquirer/input@^5.1.5
• @inquirer/number@^4.2.2
• @inquirer/password@^5.2.1
• @inquirer/rawlist@^5.3.4
• @inquirer/search@^4.3.2
• @inquirer/select@^5.2.4

Commits

• 5748bd9 chore: Publish new release
• 269ae73 fix: pin @​inquirer/type exactly in published manifests
• 927d6dd fix(@​inquirer/testing): keep keypress simulation working under TERM=dumb
• 2d813b1 chore(deps): Bump @​humanfs/node from 0.16.6 to 0.16.8 (#2245)
• 7affbc9 chore(deps-dev): Bump turbo from 2.10.9 to 2.10.11 in the build group (#2243)
• 56db989 chore(deps-dev): Bump oxfmt in the formatting group (#2242)
• 8e6bc3c chore(deps-dev): Bump the linting group with 2 updates (#2241)
• 427b7a1 chore(deps-dev): Bump the testing group with 3 updates (#2240)
• See full diff in compare view

Updates degit from 3.8.0 to 3.10.0

Release notes

Sourced from degit's releases.

v3.10.0

• Add GitHub Gist support: gist: shorthand, HTTPS and SSH URL forms (#21).

3.9.0

• Add Degit#doActions() for programmatic degit.json actions and make the constructor source-optional (#33).

Changelog

Sourced from degit's changelog.

[3.10.0]

• Add GitHub Gist support: gist: shorthand, HTTPS and SSH URL forms (#21).

[3.9.0]

• Add Degit#doActions() for programmatic degit.json actions and make the constructor source-optional (#33).

Commits

• d612369 chore(release): 3.10.0 (#491)
• bfc9a88 chore: ignore .agents/ directory (#490)
• 3faa44e feat: support GitHub Gists (#489)
• e9fff83 docs: add link references for changelog version headers (#487)
• b832667 Add release automation workflow (#486)
• c7bbc03 docs: remove ponytail agent rule and its AGENTS.md link
• b9f4a41 docs: add ponytail agent rule and link from AGENTS.md
• dfc0e08 chore(release): 3.9.0
• 706a22c feat: add Degit#doActions for standalone degit.json actions
• See full diff in compare view

Updates inquirer from 14.2.0 to 14.2.1

Release notes

Sourced from inquirer's releases.

inquirer@14.2.1

The umbrella package, bundling @inquirer/prompts and @inquirer/core.

What's new

• Published manifests now pin @inquirer/type to an exact version. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

• @inquirer/core@^12.0.2
• @inquirer/prompts@^8.7.1
• @inquirer/type@4.1.1 (pinned exactly)
• @inquirer/ansi@^2.0.8

Commits

• 5748bd9 chore: Publish new release
• 269ae73 fix: pin @​inquirer/type exactly in published manifests
• 927d6dd fix(@​inquirer/testing): keep keypress simulation working under TERM=dumb
• 2d813b1 chore(deps): Bump @​humanfs/node from 0.16.6 to 0.16.8 (#2245)
• 7affbc9 chore(deps-dev): Bump turbo from 2.10.9 to 2.10.11 in the build group (#2243)
• 56db989 chore(deps-dev): Bump oxfmt in the formatting group (#2242)
• 8e6bc3c chore(deps-dev): Bump the linting group with 2 updates (#2241)
• 427b7a1 chore(deps-dev): Bump the testing group with 3 updates (#2240)
• See full diff in compare view

Updates yeoman-generator from 8.3.0 to 8.3.1

Release notes

Sourced from yeoman-generator's releases.

v8.3.1

8.3.1 (2026-09-05)

Bug Fixes

• support delete in Storage proxy's (#1838) (f0372d3)

Changelog

Sourced from yeoman-generator's changelog.

8.3.1 (2026-09-05)

Bug Fixes

• support delete in Storage proxy's (#1838) (f0372d3)

Commits

• 0e0725e chore(main): release 8.3.1 (#1839)
• f0372d3 fix: support delete in Storage proxy's (#1838)
• 2d9a531 chore(deps): bump the codeql-action group with 4 updates (#1837)
• See full diff in compare view

Updates globals from 17.11.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

Commits

• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• See full diff in compare view

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view