Skip to content

fix(deps-dev): bump @playwright/test from 1.63.0 to 1.64.0 - #265

Merged
Coding-Dev-Tools merged 1 commit into
codex/engraphis-local-followup-20261013from
dependabot/npm_and_yarn/playwright/test-1.64.0
Oct 17, 2026
Merged

Coding-Dev-Tools merged 1 commit into
codex/engraphis-local-followup-20261013from
dependabot/npm_and_yarn/playwright/test-1.64.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps @playwright/test from 1.63.0 to 1.64.0.

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
  • 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
  • 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
  • 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
  • dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.63.0 to 1.64.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 16, 2026
@Coding-Dev-Tools
Coding-Dev-Tools changed the base branch from main to codex/engraphis-local-followup-20261013 October 17, 2026 13:15
@Coding-Dev-Tools
Coding-Dev-Tools merged commit 846277e into codex/engraphis-local-followup-20261013 Oct 17, 2026
29 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/playwright/test-1.64.0 branch October 17, 2026 13:16
Coding-Dev-Tools added a commit that referenced this pull request Oct 18, 2026
* docs(readme): pin chart to verified evidence commit

* fix(cli): distinguish memory sampling from partial word analysis

* fix(cli): distinguish memory sampling from partial word analysis

* fix(cli): distinguish memory sampling from partial word analysis

* fix(cli): distinguish memory sampling from partial word analysis

* fix: preserve dashboard graph traversal and historical dates

* fix: preserve dashboard graph traversal and historical dates

* fix(spec-crawl): prove policy conflicts and bound code-example detection

* fix(spec-crawl): prove policy conflicts and bound code-example detection

* fix(spec-crawl): prove policy conflicts and bound code-example detection

* fix(spec-crawl): prove policy conflicts and bound code-example detection

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* perf(spec-crawl): skip directive parsing without governing verbs

* perf(spec-crawl): skip directive parsing without governing verbs

* perf(spec-crawl): skip directive parsing without governing verbs

* perf(spec-crawl): skip directive parsing without governing verbs

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* fix(security): keep privilege detection linear across whitespace

* fix(security): keep privilege detection linear across whitespace

* fix(security): keep privilege detection linear across whitespace

* fix(security): keep privilege detection linear across whitespace

* fix(spec-crawl): match fence closing markers and lengths

* fix(spec-crawl): match fence closing markers and lengths

* fix(spec-crawl): match fence closing markers and lengths

* fix(spec-crawl): match fence closing markers and lengths

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* fix: refresh library paging after saved reorders

* fix: refresh library paging after saved reorders

* fix(spec-crawl): match inline backtick runs without rescanning

* fix(spec-crawl): match inline backtick runs without rescanning

* fix(spec-crawl): match inline backtick runs without rescanning

* fix(spec-crawl): match inline backtick runs without rescanning

* fix(history): preserve Unicode topics before candidate limits

Use a deterministic NULL-safe Python Unicode lower SQL function for closed-history candidate ordering, matching the existing final tokenizer instead of SQLite ASCII-only lower(). Register it once during Store construction, including encrypted and read-only connections. Keep all scope, privacy, temporal filters, the 500-record candidate window and 32-term expansion limit unchanged. Cover actual service/HTTP retrieval beyond 501 newer records, preserve sharp-s lower-versus-casefold behavior, exercise real SQLCipher reopen, and extend the closed-history eval with Unicode and negative controls.

* fix(history): preserve Unicode topics before candidate limits

Use a deterministic NULL-safe Python Unicode lower SQL function for closed-history candidate ordering, matching the existing final tokenizer instead of SQLite ASCII-only lower(). Register it once during Store construction, including encrypted and read-only connections. Keep all scope, privacy, temporal filters, the 500-record candidate window and 32-term expansion limit unchanged. Cover actual service/HTTP retrieval beyond 501 newer records, preserve sharp-s lower-versus-casefold behavior, exercise real SQLCipher reopen, and extend the closed-history eval with Unicode and negative controls.

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* fix(spec-crawl): require contradiction evidence and compare active prose

* fix(spec-crawl): require contradiction evidence and compare active prose

* fix(spec-crawl): require contradiction evidence and compare active prose

* fix(spec-crawl): require contradiction evidence and compare active prose

* fix(spec-crawl): avoid circular claims and retain source provenance

* fix(spec-crawl): avoid circular claims and retain source provenance

* fix(spec-crawl): avoid circular claims and retain source provenance

* fix(spec-crawl): avoid circular claims and retain source provenance

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* fix(spec-crawl): exclude examples from claim evidence queries

* fix(spec-crawl): exclude examples from claim evidence queries

* fix(spec-crawl): exclude examples from claim evidence queries

* fix(spec-crawl): exclude examples from claim evidence queries

* fix(spec-crawl): bind numeric qualifiers and preserve directive identity

* fix(spec-crawl): bind numeric qualifiers and preserve directive identity

* fix(spec-crawl): bind numeric qualifiers and preserve directive identity

* fix(spec-crawl): bind numeric qualifiers and preserve directive identity

* fix(security): exclude sensitive source ancestors before capture

* fix(security): cover valid URI userinfo and cyclic import links

* fix(security): exclude sensitive source ancestors before capture

* fix(security): exclude sensitive source ancestors before capture

* fix(security): cover valid URI userinfo and cyclic import links

* fix(imports): prune sensitive browser paths before traversal

* fix(security): exclude sensitive source ancestors before capture

* fix(security): cover valid URI userinfo and cyclic import links

* fix(imports): prune sensitive browser paths before traversal

* fix(security): cover valid URI userinfo and cyclic import links

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* fix(eval): enforce individual spec crawl metric floors

* fix(eval): enforce individual spec crawl metric floors

* fix(spec-crawl): ignore prose periods on bare scalar values

* fix(eval): enforce individual spec crawl metric floors

* fix(spec-crawl): ignore prose periods on bare scalar values

* fix(spec-crawl): ignore prose periods on bare scalar values

* fix(eval): enforce individual spec crawl metric floors

* fix(spec-crawl): ignore prose periods on bare scalar values

* fix(security): reject credential roots and account skipped uploads

* fix(security): reject credential roots and account skipped uploads

* fix(security): reject credential roots and account skipped uploads

* fix(security): reject credential roots and account skipped uploads

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* fix(spec-crawl): stabilize empty cluster response schema

* fix(spec-crawl): stabilize empty cluster response schema

* fix(imports): apply broad credential heuristics only to files

* fix(spec-crawl): stabilize empty cluster response schema

* fix(imports): apply broad credential heuristics only to files

* fix(imports): apply broad credential heuristics only to files

* fix(imports): distinguish browser directories from file basenames

* fix(spec-crawl): stabilize empty cluster response schema

* fix(imports): apply broad credential heuristics only to files

* fix(imports): distinguish browser directories from file basenames

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* test(imports): gate HTTP guard on optional server extra

* test(imports): gate HTTP guard on optional server extra

* test(imports): gate HTTP guard on optional server extra

* test(imports): gate HTTP guard on optional server extra

* fix(security): scan authenticated URI spans without regex

* fix(security): scan authenticated URI spans without regex

* fix(security): scan authenticated URI spans without regex

* fix(security): scan authenticated URI spans without regex

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* fix(spec): align supersession lineage with effective time

* fix(spec): align supersession lineage with effective time

* fix(spec): align supersession lineage with effective time

* fix(spec): align supersession lineage with effective time

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* docs(readme): pin chart to verified evidence commit

* test(spec-crawl): align memory floor failure assertion

* docs(evidence): bind offline fixtures to final policy and history fixes

* docs(readme): pin chart to verified evidence commit

* fix(deps-dev): update ruff requirement

Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.17.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps-dev): bump @playwright/test from 1.63.0 to 1.64.0

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.63.0 to 1.64.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps-dev): bump impeccable from 4.1.0 to 4.5.2

Bumps [impeccable](https://github.com/pbakaus/impeccable) from 4.1.0 to 4.5.2.
- [Release notes](https://github.com/pbakaus/impeccable/releases)
- [Changelog](https://github.com/pbakaus/impeccable/blob/main/docs/RELEASE-4.4.0.md)
- [Commits](pbakaus/impeccable@cli-v4.1.0...cli-v4.5.2)

---
updated-dependencies:
- dependency-name: impeccable
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): bump the codeql-action group with 3 updates

Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): bump actions/download-artifact from 8.0.1 to 8.0.2

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(release): align ruff version bound assertion with <0.18

* perf(core): wire factory DB encryption and batch recall reinforcement

* docs(evidence): bind offline fixtures to factory encryption and recall batching

* docs(readme): pin chart to verified evidence commit

* test(e2e): align Explore keyboard cursor assertions with non-isolating reveal

* test(imports): use write_bytes for Python 3.9 compatibility

* fix(deps-dev): bump tree-sitter-language-pack from 1.20.0 to 1.21.0 (#258)

* fix(deps-dev): bump tree-sitter-language-pack from 1.20.0 to 1.21.0

Bumps [tree-sitter-language-pack](https://github.com/xberg-io/tree-sitter-language-pack) from 1.20.0 to 1.21.0.
- [Release notes](https://github.com/xberg-io/tree-sitter-language-pack/releases)
- [Changelog](https://github.com/xberg-io/tree-sitter-language-pack/blob/main/CHANGELOG.md)
- [Commits](xberg-io/tree-sitter-language-pack@v1.20.0...v1.21.0)

---
updated-dependencies:
- dependency-name: tree-sitter-language-pack
  dependency-version: 1.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Keep new benchmark campaigns on the updated tree-sitter grammars

* fix: address verified release audit findings

Validated local candidate: e142e3158e06c92c00253266120496d33d111a92

- e142e3158e06c92c00253266120496d33d111a92 fix(packaging): align MCP install paths with the patched SDK floor
- e5631206443c0d069d3e9114bccb87111b89d602 fix(deps): require the patched MCP 1.30 transport

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>

* fix(deps): bump anchore/sbom-action from 0.24.2 to 0.24.3 (#259)

* fix(deps): bump anchore/sbom-action from 0.24.2 to 0.24.3

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.24.2 to 0.24.3.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@3ad7283...66cbf4b)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(release): validate immutable SBOM action pins across upgrades

* fix: address verified release audit findings

Validated local candidate: 0e9f6f2599167a5f235b298d39c87182356156f5

- 0e9f6f2599167a5f235b298d39c87182356156f5 fix(packaging): align MCP install paths with the patched SDK floor
- 3207cfa5af1c7309407b8d63f9ca304113dfcd66 fix(deps): require the patched MCP 1.30 transport

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Coding-Dev-Tools <algorithmictradingsolutions@gmail.com>

* fix(deps-dev): update ruff requirement from <0.17,>=0.15.22 to >=0.15.22,<0.18 (#264)

* fix(deps-dev): update ruff requirement

Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.17.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(release): align ruff version bound assertion with <0.18

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>

* fix(deps-dev): bump @playwright/test from 1.63.0 to 1.64.0 (#265)

Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.63.0 to 1.64.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* style(tests): trim inherited encryption fixture trailing blank line

* test: scope private-ledger monkeypatches before fixture cleanup

* fix(deps): bump the codeql-action group with 3 updates (#267)

Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 (#268)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(deps-dev): bump impeccable from 4.1.0 to 4.5.2 (#266)

Bumps [impeccable](https://github.com/pbakaus/impeccable) from 4.1.0 to 4.5.2.
- [Release notes](https://github.com/pbakaus/impeccable/releases)
- [Changelog](https://github.com/pbakaus/impeccable/blob/main/docs/RELEASE-4.4.0.md)
- [Commits](pbakaus/impeccable@cli-v4.1.0...cli-v4.5.2)

---
updated-dependencies:
- dependency-name: impeccable
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jaixii <algorithmictradingsolutions@gmail.com>

* fix: enforce source boundaries and release lifecycle contracts

* Bind specification source reads to checked file descriptors

* fix: preserve dashboard import diagnostics and graph controls

* docs: collect immutable offline evidence for reviewed release source

* docs: bind current benchmarks to immutable reviewed-source evidence

* test: cover canonical database aliases across scalar punctuation

* Fix Spec Crawl coverage and bounded conflict reporting

Normalize limited directive grammar while preserving concrete policy scope. Expose conflict and remediation limits consistently in cluster reports, Spec Studio and CLI, with before/after and transport/browser regressions.

* docs: publish fresh offline evidence for final spec crawl runtime

* docs: pin current offline evidence to published final runtime artifact

* Preserve resolved clarifications and recheck supersession scope

* Report empty procedural scopes and partial prompt analysis faithfully

* docs: publish fresh offline evidence for reviewed spec studio runtime

* docs: pin current offline evidence to published reviewed runtime artifact

* Reject candidate bytecode in configured Python cache prefixes

* Keep prefixed bytecode rejection portable on Windows

* test: reproduce coordinated directive omissions and false obligations

* fix: retain coordinated directive polarity and Boolean scope

* fix: keep compound normalization within each action

* Refresh offline evidence for coordinated policy runtime

* Pin current evidence references to canonical coordinated-runtime artifact

* test(spec-crawl): reproduce serial directive omissions and grouping

* fix(spec-crawl): preserve governed serial action lists

* fix(spec-crawl): keep scoped tail alternatives out of serial polarity

* fix(spec-crawl): resolve serial operators only from list syntax

* Refresh offline evidence for serial-comma policy runtime

* Pin current evidence references to canonical serial-policy runtime artifact

* fix: classify memory axes from masked policy prose

* Refresh offline evidence for masked-axis policy runtime

* Pin current evidence references to staged immutable masked-axis artifact

* fix: disclose memory audit bounds and analyze title ambiguity

* Enforce transport and scope authority for specification audit operations

* fix: keep title flag IDs distinct from content references

* Document transport limits, scoped remediation and bounded title analysis

* Refresh offline evidence for transport and scoped policy fixes

* Pin current evidence references to staged immutable transport and scope artifact

* Keep saved specification clarification titles free of resolved vague tokens

* Refresh offline evidence for neutral clarification titles

* Pin current evidence references to staged immutable neutral-title artifact

* Redact newly exposed nested URI credentials in one bounded scan

* Refresh offline evidence for nested URI redaction

* Pin current evidence references to staged immutable nested-uri-redaction artifact

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Josh W <jomie2k6@yahoo.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
Co-authored-by: Release Maintenance <release-maintenance@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant