chore(deps): bump the production-dependencies group with 5 updates

[dependabot]

Bumps the production-dependencies group with 5 updates:

Package	From	To
@huggingface/transformers	4.1.0	4.2.0
marked	18.0.2	18.0.9
playwright	1.58.2	1.62.1
puppeteer-core	24.40.0	25.6.0
socks	2.8.8	2.8.9

Updates @huggingface/transformers from 4.1.0 to 4.2.0

Release notes

Sourced from @​huggingface/transformers's releases.

4.2.0

🚀 Transformers.js v4.2 — Tool calling, simpler internals, and privacy filtering

• Added tools to TextGenerationPipeline in #1655
• Use inputMetadata API for simplified internals in #1657
• Add support for OpenAI privacy filter model in #1658

Full Changelog: 4.1.0...4.2.0

Commits

• 54652ba [version] Update to 4.2.0
• ea88f89 Add support for OpenAI privacy filter model (#1658)
• b93766d Use inputMetadata API for simplified internals (#1657)
• 6eaf11a Added tools to TextGenerationPipeline (#1655)
• ca10e4d [version] Update to 4.1.0
• See full diff in compare view

Updates marked from 18.0.2 to 18.0.9

Release notes

Sourced from marked's releases.

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

• an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
• Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
• pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

• fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

• Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
• Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
• keep empty list after blockquote as a sibling block (#4004) (3f144a0)
• preserve code spans adjacent to tildes (#4012) (0de7188)
• Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
• treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

• Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
• Fix ordered lists after blockquotes (#4003) (33928d0)
• keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

• parse empty list item with trailing space (#3984) (b55410f)

v18.0.4

... (truncated)

Commits

• 8e858a4 chore(release): 18.0.9 [skip ci]
• 641e5df docs: explain partial extensions in use (#4033)
• 452f1ed fix: Fix spurious deeper nesting in a blockquote continuation (#4030)
• e8544e6 fix: an unmatched strong run before emphasis stays literal (#4008)
• 823093f fix: pedantic foo: and "word" emphasis parsing (#3999)
• 12a84a8 chore(release): 18.0.8 [skip ci]
• 3a1a706 chore(deps-dev): bump undici from 6.24.0 to 6.27.0 (#4042)
• 58ed4af chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#4032)
• 01539fb chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#4031)
• e1b6139 fix: fall back to default checkbox renderer when extension returns false (#4023)
• Additional commits viewable in compare view

Updates playwright from 1.58.2 to 1.62.1

Release notes

Sourced from playwright's releases.

v1.62.1

Bug Fixes

• #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
• #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
• #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
• #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
• #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

• 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
• 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
• 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
• 66c5cc9 chore: mark v1.62.1 (#42020)
• 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
• 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
• 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• Additional commits viewable in compare view

Updates puppeteer-core from 24.40.0 to 25.6.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v25.6.0

25.6.0 (2026-08-11)

🎉 Features

• expose custom Logger to launch/connect (#15324) (ffe68ee)

🛠️ Fixes

• cdp: do not fail a per-frame fan-out when an OOP iframe goes away (#15300) (e29c4e7)
• roll to Chrome 151.0.7922.76 (#15295) (5c78fe3)
• roll to Chrome 151.0.7922.77 (#15308) (321aa69)
• roll to Firefox 153.0.3 (#15294) (6c0a749)

🏗️ Refactor

• pass logger though the constructors (#15297) (76c2a8d)
• use logger that is passed down (#15302) (3b1339e)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.1.0 to 3.2.0

puppeteer-core: v25.5.0

25.5.0 (2026-08-04)

🎉 Features

• roll to Firefox 153.0 (#15258) (6a54140)
• track dialog status (#15266) (9a6f646)

🛠️ Fixes

• disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278) (5dc2964)
• do not override the user agent when nothing is emulated (#15274) (39c4653)
• forward headers to browserURL HTTP discovery and WebSocket connection (#15238) (948d870)
• reject PWA access if network conditions are configured (#15271) (6eb2b8c)
• roll to Chrome 151.0.7922.71 (#15272) (a7f07db)
• roll to Firefox 153.0.1 (#15269) (dd365cc)

📄 Documentation

... (truncated)

Changelog

Sourced from puppeteer-core's changelog.

25.6.0 (2026-08-11)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.1.0 to 3.2.0

🎉 Features

• expose custom Logger to launch/connect (#15324) (ffe68ee)

🛠️ Fixes

• cdp: do not fail a per-frame fan-out when an OOP iframe goes away (#15300) (e29c4e7)
• roll to Chrome 151.0.7922.76 (#15295) (5c78fe3)
• roll to Chrome 151.0.7922.77 (#15308) (321aa69)
• roll to Firefox 153.0.3 (#15294) (6c0a749)

🏗️ Refactor

• pass logger though the constructors (#15297) (76c2a8d)
• use logger that is passed down (#15302) (3b1339e)

25.5.0 (2026-08-04)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.6 to 3.1.0

🎉 Features

... (truncated)

Commits

• d484e21 chore: release main (#15296)
• cd7308c chore: add linux arm64 to daily job (#15327)
• fc984bd feat: allow downloading CfT linux-arm64 (#15325)
• ffe68ee feat: expose custom Logger to launch/connect (#15324)
• 0d9c964 chore: fix logger docs and force logger usege via type (#15323)
• ab032a9 chore: remove other instance of debug (#15317)
• b42f4bb chore: refactor logger part 4 (#15315)
• 0d17d33 chore: refactor logger part 3 (#15314)
• 93fd92c chore: refactor logger part 2 (#15313)
• 1192a6d chore: refactor logger part 1 (#15312)
• Additional commits viewable in compare view

Updates socks from 2.8.8 to 2.8.9

Commits

• c191a5c 2.8.9
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.