[dependabot]

Bumps the minor-updates group with 4 updates in the / directory: hast-util-from-html, pagefind, @lhci/cli and @playwright/test.

Updates hast-util-from-html from 2.0.3 to 2.1.0

Release notes

Sourced from hast-util-from-html's releases.

2.1.0

Add

• 8bf4620 Update parse5

Full Changelog: syntax-tree/hast-util-from-html@2.0.3...2.1.0

Commits

• 3bf5643 2.1.0
• 773e155 Fix typo
• 8bf4620 Update parse5
• 10cd4fa Update example output in readme.md
• e7f4c30 Refactor package.json
• 51818ab Refactor actions
• 2458083 Refactor docs
• 2452071 Remove license year
• fe9c7d3 Refactor .prettierignore
• 80b4a3d Refactor .gitignore
• Additional commits viewable in compare view

Updates pagefind from 1.5.2 to 1.6.0

Release notes

Sourced from pagefind's releases.

v1.6.0

👋 A little overdue, but this release knocks out a healthy selection of bug reports, and includes a lot of work from the community. Thanks to everyone who contributed ❤️ - @​bglw

Multilingual Segmentation

Pagefind's extended build now segments Chinese, Japanese, and Thai pages with ICU4X, replacing the previous dependency (PR #1383). Alongside producing a smaller binary, ICU4X segments a lot closer to the Intl.Segmenter used in the browser on the search query (which is ICU4C). This closes out a mixture of latent and reported issues where the different segmentation between indexing and searching makes for iffy results. It's not perfect yet, but it's a darn sight closer.

Bonuses:

• Segmentation is smarter in languages such as Thai, and doesn't break inside a grapheme cluster
• Japanese katakana has special handling, but should still be improved over 1.5.2
• Japanese voiced and semi-voiced sound marks are no longer normalized into each other

Fewer Fragment Files

Pagefind now has an option to limit the total number of fragment files produced, for hosting providers that cap the number of uploaded files. Contributed in PR #1020 — thanks @​yakovsh !

This limit is set with --max-fragments / max_fragments, and applies per language. When applied, multiple fragments are bundled together and loaded as a set when required.

See 📘 Max fragments.

Explicit Sub-Result Titles

Added support for explicit sub-result titles. Any element with both an id and a data-pagefind-title attribute can be used as a sub-result (PR #1282 — thanks @​samuel-williams-shopify !)

See 📘 Defining a sub result explicitly.

Component UI

• Added a sort attribute to <pagefind-config>, to order results by a sort key (PR #1326)
• Added a max-sub-results attribute to <pagefind-searchbox> (PR #1324)
• Added a placeholder setter to <pagefind-searchbox> and <pagefind-modal-trigger> (PR #1321)
• configureInstance now applies to an instance that already exists but has not loaded yet (PR #1323)
• Fixed the UI language being resolved after the first render, which could flash the wrong translations (PR #1332)
• Fixed component cleanup after being disconnected (PR #1322)
• Fixed IME composition keystrokes support (PR #1284 — thanks @​oharu121 !)
• Fixed the modal staying open when clicking a result for the current page (PR #1327)
• Fixed the filter panel checkbox shrinking when its label wraps (PR #1166 — thanks @​mbrambilla !)
• Hid the keyboard shortcut badge on touch-only devices (PR #1325)

Search Results & Options

• Added an excerptEllipsis option to mark the truncated ends of excerpts (PR #1320)
  • See 📘 Excerpt ellipsis
• Fixed phrase search across diacritic variants, so searching "cafe latte" can match a page containing café latte (PR #1386 — thanks @​sean0407 !)
• Fixed filters not matching values containing escaped characters such as quotes or backslashes (PR #1392)
• Fixed compound words being counted twice in metadata coverage, which could overvalue a metadata match (PR #1319)
• Fixed a bug which could build excerpts from the wrong words (PR #1318)
• Fixed decoding for HTML entities in the automatic image and image_alt metadata (PR #1393 — thanks @​digilist !)

... (truncated)

Changelog

Sourced from pagefind's changelog.

v1.6.0 (November 1, 2026)

👋 A little overdue, but this release knocks out a healthy selection of bug reports, and includes a lot of work from the community. Thanks to everyone who contributed ❤️ - @​bglw

Multilingual Segmentation

Pagefind's extended build now segments Chinese, Japanese, and Thai pages with ICU4X, replacing the previous dependency (PR #1383). Alongside producing a smaller binary, ICU4X segments a lot closer to the Intl.Segmenter used in the browser on the search query (which is ICU4C). This closes out a mixture of latent and reported issues where the different segmentation between indexing and searching makes for iffy results. It's not perfect yet, but it's a darn sight closer.

Bonuses:

• Segmentation is smarter in languages such as Thai, and doesn't break inside a grapheme cluster
• Japanese katakana has special handling, but should still be improved over 1.5.2
• Japanese voiced and semi-voiced sound marks are no longer normalized into each other

Fewer Fragment Files

Pagefind now has an option to limit the total number of fragment files produced, for hosting providers that cap the number of uploaded files. Contributed in PR #1020 — thanks @​yakovsh !

This limit is set with --max-fragments / max_fragments, and applies per language. When applied, multiple fragments are bundled together and loaded as a set when required.

See 📘 Max fragments.

Explicit Sub-Result Titles

Added support for explicit sub-result titles. Any element with both an id and a data-pagefind-title attribute can be used as a sub-result (PR #1282 — thanks @​samuel-williams-shopify !)

See 📘 Defining a sub result explicitly.

Component UI

• Added a sort attribute to <pagefind-config>, to order results by a sort key (PR #1326)
• Added a max-sub-results attribute to <pagefind-searchbox> (PR #1324)
• Added a placeholder setter to <pagefind-searchbox> and <pagefind-modal-trigger> (PR #1321)
• configureInstance now applies to an instance that already exists but has not loaded yet (PR #1323)
• Fixed the UI language being resolved after the first render, which could flash the wrong translations (PR #1332)
• Fixed component cleanup after being disconnected (PR #1322)
• Fixed IME composition keystrokes support (PR #1284 — thanks @​oharu121 !)
• Fixed the modal staying open when clicking a result for the current page (PR #1327)
• Fixed the filter panel checkbox shrinking when its label wraps (PR #1166 — thanks @​mbrambilla !)
• Hid the keyboard shortcut badge on touch-only devices (PR #1325)

Search Results & Options

• Added an excerptEllipsis option to mark the truncated ends of excerpts (PR #1320)
  • See 📘 Excerpt ellipsis
• Fixed phrase search across diacritic variants, so searching "cafe latte" can match a page containing café latte (PR #1386 — thanks @​sean0407 !)
• Fixed filters not matching values containing escaped characters such as quotes or backslashes (PR #1392)
• Fixed compound words being counted twice in metadata coverage, which could overvalue a metadata match (PR #1319)
• Fixed a bug which could build excerpts from the wrong words (PR #1318)
• Fixed decoding for HTML entities in the automatic image and image_alt metadata (PR #1393 — thanks @​digilist !)

... (truncated)

Commits

• 860a4ea Changelog for 1.6.0
• deea3c9 Changelog (#1403)
• 13ebd8e Update multilignual docs (#1402)
• 0544804 Adding support for fewer number of fragment files (#74 and #739) (#1020)
• 9b465ea fix: percent-encode page URLs built from file paths (#1335)
• fcf939c chore(deps): bump certifi (#1385)
• 124b73c fix: EACCES during playground build (#1371)
• f537e50 Fix exact phrase matching across diacritic variants (#1386)
• a0d31b7 Decode HTML entities in the automatic image metadata (#1393)
• c9d4fda Perf: group matching words by page before scoring (#1334)
• Additional commits viewable in compare view

Updates @lhci/cli from 0.15.1 to 0.16.0

Release notes

Sourced from @​lhci/cli's releases.

v0.16.0

v0.16.0 (2026-11-02)

• feat: upgrade to lighthouse 13.6.0 (#1152) (5aa2faf), closes #1152
• feat(cli): support multiple locales in filesystem upload (#1173) (79b609a), closes #1173
• feat(server): add CLS median graph to project dashboard (#1190) (80c2782), closes #1190
• feat(server): support subitems in audit detail pane (#1186) (4db2b5d), closes #1186
• feat(server): support list and checklist audit details in diffing and UI (#1158) (abd2bc0), closes #1158
• feat(server): add audit_cumulative-layout-shift_median statistic (#1155) (331ec55), closes #1155
• feat(utils): fix insight presets and map replaced legacy audits (#1151) (0b39a32), closes #1151
• feat(viewer): add locale switcher to report comparison UI (#1174) (44c608c), closes #1174
• fix(cli): bind FallbackServer to loopback address (#1182) (966ba2d), closes #1182
• fix(cli): catch executablePath error for puppeteer-core in getChromiumPath (#1159) (08b9802), closes #1159
• fix(cli): close Puppeteer browser when collect finishes (#1163) (0359261), closes #1163
• fix(cli): prefer project Puppeteer installation (#1144) (02021f5), closes #1144
• fix(cli): decode stdout and stderr as utf8 in node-runner (#1156) (f88133a), closes #1156
• fix(docker): upgrade base image to node:22-bookworm-slim (#1150) (9c0ee54), closes #1150
• fix(server): render 0 values in audit table details (#1185) (ba536cc), closes #1185
• fix(server): use timing-safe comparison for build and admin tokens (#1180) (ca52d40), closes #1180
• fix(server): use numericUnit and support KiB/MiB in numeric-diff (#1157) (6945cf9), closes #1157
• fix(utils): reject git refs starting with a dash in build-context (#1183) (9c8f1c1), closes #1183
• fix(utils): prevent prototype pollution in lodash merge (#1181) (71fc88e), closes #1181
• fix(utils): match pre-grouped audit items across locales (#1175) (39a3518), closes #1175
• fix(utils): check url/origin before entity in getItemKey (#1172) (b27cadc), closes #1172
• fix(utils): avoid filename collision in saveLHR (#1166) (e6aa7c1), closes #1166
• fix(utils): support string entity key in audit-diff-finder (#1154) (818f6d0), closes #1154
• fix(utils): respect median-run aggregation in category assertions (#1146) (46b2846), closes #1146
• docs: document collecting and uploading multiple configurations (mobile/desktop) (#1184) (3c1431e), closes #1184
• test: fix and update seed-data fixture (#1189) (03514f8)
• test(cli): normalize report link in autorun-github.test.js (#1153) (a0b25d6), closes #1153
• test(server): update snapshots in e2e and storybook tests (#1171) (b169a9d), closes #1171
• test(server): define setImmediate in storybook.test.jsx (#1170) (a3d0ff8), closes #1170
• chore: bump version references to 0.15.1 (ebee453)
• chore: bump to node 22 (#1149) (bc6321c), closes #1149
• chore: bump version references to 0.16 and add node engines requirement (#1194) (6e4f473), closes #1194
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#1193) (9f33b5d), closes #1193
• chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191) (493c76f), closes #1191
• chore(deps): update runtime dependencies and security advisories (#1192) (4701152), closes #1192
• chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in the npm_and_yarn group across 1 directory (#1178) (dae03de), closes #1178
• chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates (#1177) (85d3343), closes #1177
• chore(deps): update typescript to 6.0.3 (#1162) (a10daa8), closes #1162
• chore(deps): update dependencies to address security vulnerabilities (#1161) (e4a892f), closes #1161
• chore(deps): bump puppeteer to ^24.43.1 (#1164) (3a5808b), closes #1164
• chore(deps): remove tmp dependency (#1141) (679f74b), closes #1141
• chore(deps): bump inquirer from 6.x to 8.2.7 (#1140) (d36fdee), closes #1140
• misc(release): include dist in server and viewer npm packages (#1187) (8c19aa4), closes #1187
• misc(release): deploy GitHub Pages via publish workflow (#1188) (9c89ccf), closes #1188
• misc(release): add GHA publish workflow for npm, multi-arch Docker (#1176) (c965460), closes #1176

... (truncated)

Commits

• 6e4f473 chore: bump version references to 0.16 and add node engines requirement (#1194)
• 9f33b5d chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
• 493c76f chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191)
• 4701152 chore(deps): update runtime dependencies and security advisories (#1192)
• 80c2782 feat(server): add CLS median graph to project dashboard (#1190)
• 03514f8 test: fix and update seed-data fixture (#1189)
• 8c19aa4 misc(release): include dist in server and viewer npm packages (#1187)
• 9c89ccf misc(release): deploy GitHub Pages via publish workflow (#1188)
• 4db2b5d feat(server): support subitems in audit detail pane (#1186)
• ba536cc fix(server): render 0 values in audit table details (#1185)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lhci/cli since your current version.

Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

• There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
• Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
• Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
• Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

• New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

  test('restart the server', { lock: '-exclusive-' }, async () => {
    // No other test runs while this one is running.
  });

• test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

  test('upload a file', async ({ page }) => {
    test.skip('Not implemented yet');
  });

... (truncated)

Commits

• a1f35e1 chore: mark v1.65.0 (#43925)
• a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
• 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
• daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
• 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
• 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
• 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
• d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
• 6e3f5ff docs: release notes for v1.65 (#43874)
• aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.