chore(deps): update safe automerge by renovate[bot] · Pull Request #203 · platformatic/watt-admin

renovate · 2026-03-17T02:09:32Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@inquirer/prompts (source)	`8.3.2` → `8.4.3`
@platformatic/control	`3.41.0` → `3.54.0`
@platformatic/gateway	`3.41.0` → `3.54.0`
@platformatic/runtime	`3.41.0` → `3.54.0`
@platformatic/service	`3.41.0` → `3.54.0`
@platformatic/vite	`3.41.0` → `3.54.0`
@platformatic/wattpm-pprof-capture	`3.41.0` → `3.54.0`
@playwright/test (source)	`1.58.2` → `1.60.0`
@scalar/api-reference-react (source)	`0.9.9` → `0.9.40`
@types/node (source)	`24.12.0` → `24.12.4`
@types/react (source)	`19.2.14` → `19.2.15`
amaro	`1.1.8` → `1.1.9`
autoprefixer	`10.4.27` → `10.5.0`
fastify (source)	`5.8.2` → `5.8.5`
massimo-cli	`1.2.0` → `1.3.0`
playwright (source)	`1.58.2` → `1.60.0`
react (source)	`19.2.4` → `19.2.6`
react-dom (source)	`19.2.4` → `19.2.6`
react-router-dom (source)	`7.13.1` → `7.15.1`
semver	`7.7.4` → `7.8.1`
undici (source)	`7.24.4` → `7.25.0`
vite (source)	`7.3.1` → `7.3.3`
vite-plugin-singlefile (source)	`2.3.2` → `2.3.3`
vitest (source)	`4.1.0` → `4.1.7`
wattpm (source)	`3.41.0` → `3.54.0`
ws	`8.19.0` → `8.20.1`
zustand	`5.0.12` → `5.0.13`

Release Notes

SBoudrias/Inquirer.js (@inquirer/prompts)

`v8.4.3`

Compare Source

Fix: Windows rendering bug
Fix: Preserve exact literal types in choices array (Typescript only)
Fix: Allow input default value to be of type undefined (Typescript only)
Bump dependencies

`v8.4.2`

Compare Source

Fix: some Windows terminals would freeze and not react to keypresses.

`v8.4.1`

Compare Source

Improve expand prompt type inferrence.

`v8.4.0`

Compare Source

Feat: Added a loading message while validating editor prompt input.
Type improvement: Better type inference with checkbox, search and expand prompts.
Fix: editor prompt not always properly handling editor path on windows.

platformatic/platformatic (@platformatic/control)

`v3.54.0`

Compare Source

What's Changed

feat(next): add standalone pack command by @mcollina in #4767
fix(telemetry): pin @opentelemetry/* deps and group renovate updates by @mcollina in #4773
fix(basic): exit worker when child dies from a signal by @mcollina in #4772
fix: allow env var substitution for telemetry.diagLogger by @mcollina in #4770

Full Changelog: platformatic/platformatic@v3.53.0...v3.54.0

`v3.53.0`

Compare Source

What's Changed

fix: restore main CI stability by @mcollina in #4757
fix(db-authorization): harden role path traversal by @mcollina in #4755
fix: revert dependencies moved from devDependencies by @mcollina in #4762
runtime: add application restart metric by @mcollina in #4752
feat(runtime): trace ITC messaging by @mcollina in #4756
chore(deps): update dependency @babel/parser to v7.29.3 by @renovate[bot] in #4758
chore(deps): update dependency fast-jwt to v6.2.4 by @renovate[bot] in #4759
chore(deps): update dependency protobufjs to v7.5.6 by @renovate[bot] in #4761
fix(deps): update dependency next to v16.2.3 [security] by @renovate[bot] in #4723
chore(deps): lock file maintenance by @renovate[bot] in #4661
feat(telemetry): add OpenTelemetry diag logger support by @mcollina in #4766

Full Changelog: platformatic/platformatic@v3.52.4...v3.53.0

`v3.52.4`

Compare Source

What's Changed

fix(deps): update dependency @fastify/static to v9 [security] by @renovate[bot] in #4743
fix: honor camelCase openapi ignore fields by @mcollina in #4736
fix(runtime): collect health metrics in parallel and respawn on collection failure by @mcollina in #4749
chore(deps): update dependency @fastify/static to v9.1.1 [security] by @renovate[bot] in #4750
chore(deps): update astro monorepo by @renovate[bot] in #4751
chore(deps): update dependency @fastify/static to v9.1.3 by @renovate[bot] in #4753
chore(deps): update dependency isbot to v5.1.39 by @renovate[bot] in #4754
chore(deps): update dependency fast-jwt to v6.2.3 by @renovate[bot] in #4725

Full Changelog: platformatic/platformatic@v3.52.3...v3.52.4

`v3.52.3`

Compare Source

What's Changed

chore(deps): update dependency protobufjs to v7.5.5 [security] by @renovate[bot] in #4744
chore(deps): update astro monorepo by @renovate[bot] in #4745
chore(deps): update dependency astro to v6.1.8 by @renovate[bot] in #4747
chore(deps): update dependency ioredis to v5.10.1 by @renovate[bot] in #4746
fix(runtime): read thread worker health from the worker handle, not via ITC by @mcollina in #4748

Full Changelog: platformatic/platformatic@v3.52.2...v3.52.3

`v3.52.2`

Compare Source

What's Changed

feat: support database views as read-only entities by @mcollina in #4708
chore(deps): update dependency astro to v6.1.6 by @renovate[bot] in #4724
fix: correct allowBuilds YAML syntax in pnpm-workspace.yaml generation by @GiladShoham in #4733
fix: correct --max-semi-space-size calculation for child processes by @mcollina in #4730
fix: guard stopCommand against missing subprocess by @ivan-tymoshenko in #4741
chore(deps): update dependency @fastify/express to v4.0.5 [security] by @renovate[bot] in #4737
chore(deps): update dependency @fastify/http-proxy to v11.4.4 [security] by @renovate[bot] in #4738
chore(deps): update dependency @fastify/middie to v9.3.2 [security] by @renovate[bot] in #4742
chore(deps): update dependency @fastify/reply-from to v12.6.2 [security] by @renovate[bot] in #4739
chore(deps): update dependency fastify to v5.8.5 [security] by @renovate[bot] in #4740

New Contributors

@GiladShoham made their first contribution in #4733

Full Changelog: platformatic/platformatic@v3.52.1...v3.52.2

`v3.52.1`

Compare Source

What's Changed

chore(deps): update dependency fastify to v5.8.4 by @renovate[bot] in #4726
chore(deps): update dependency graphql to v16.13.2 by @renovate[bot] in #4727
fix: use ITC to collect health metrics for child process workers by @mcollina in #4729

Full Changelog: platformatic/platformatic@v3.52.0...v3.52.1

`v3.52.0`

Compare Source

What's Changed

chore: migrate @platformatic/sql-graphql type tests to TSTyche by @mrazauskas in #4719
fix: do not force server.hostname to 127.0.0.1 when unset by @mcollina in #4720

Full Changelog: platformatic/platformatic@v3.51.0...v3.52.0

`v3.51.0`

Compare Source

What's Changed

fix: move tstyche to dev dependencies by @mrazauskas in #4716
feat: add mqemitter typings to SQLEventsPluginOptions by @mrazauskas in #4717
chore(deps): update dependency fast-jwt to v6.2.1 [security] by @renovate[bot] in #4718
fix: Allow custom socket paths. by @ShogunPanda in #4721

Full Changelog: platformatic/platformatic@v3.50.0...v3.51.0

`v3.50.0`

Compare Source

What's Changed

fix(docs): reference root .env instead of non-existent web/db/.env in tutorial by @mcollina in #4699
chore(deps): update dependency @types/node to v22.19.17 by @renovate[bot] in #4706
chore(deps): update dependency fastify to v5.8.4 by @renovate[bot] in #4707
fix: fix platformatic/runtime type declarations by @mrazauskas in #4704
chore: migrate platformatic/sql-openapi type tests to TSTyche by @mrazauskas in #4705
chore(deps): update dependency @nestjs/core to v11.1.18 [security] by @renovate[bot] in #4709
chore(deps): update dependency vite to v7.3.2 [security] by @renovate[bot] in #4710
chore(deps): update dependency @fastify/http-proxy to v11.4.3 by @renovate[bot] in #4702
chore(deps): update dependency fast-jwt to v6 [security] by @renovate[bot] in #4698
fix: handle revalidate: false in Valkey cache handlers for static pages by @mcollina in #4713
feat: Drop support for Astro 4.x and 5.x. by @ShogunPanda in #4714
feat: Support custom process spawner. by @ShogunPanda in #4715
feat(next): support Next.js "use cache: remote" directive by @Ic3b3rg in #4694

New Contributors

@Ic3b3rg made their first contribution in #4694

Full Changelog: platformatic/platformatic@v3.49.1...v3.50.0

`v3.49.1`

Compare Source

What's Changed

chore(deps): update actions/add-to-project digest to 27022a1 by @renovate[bot] in #4701
fix: Added missing option in transform. by @ShogunPanda in #4703

Full Changelog: platformatic/platformatic@v3.49.0...v3.49.1

`v3.49.0`

Compare Source

What's Changed

fix: Additional types fixes. by @ShogunPanda in #4700

Full Changelog: platformatic/platformatic@v3.48.0...v3.49.0

`v3.48.0`

Compare Source

Full Changelog: platformatic/platformatic@v3.47.0...v3.48.0

`v3.47.0`

What's Changed

fix: Fixed location header rewriting. by @ShogunPanda in #4689
fix: fix typings of ITCConstructorOptions by @mrazauskas in #4674
chore(deps): update actions/add-to-project digest to 944219d by @renovate[bot] in #4690
fix(docs): use new migration files in CRUD tutorial by @mcollina in #4691
feat: add extension point to createCliLogger by @MzUgM in #4688
Configuring watt for Cloudwatch by @MzUgM in #4693
fix: prevent gateway entrypoint premature exit and port leak on restart by @mcollina in #4692
ECS guide by @MzUgM in #4695
fix: Added missing module in schemas. by @ShogunPanda in #4696
feat: Added Typescript support to all capabilities. by @ShogunPanda in #4697

Full Changelog: platformatic/platformatic@v3.45.0...v3.47.0

`v3.45.0`

Compare Source

What's Changed

chore(deps): update dependency fastify to v5.8.3 [security] by @renovate[bot] in #4685
chore(deps): update dependency yaml to v2.8.3 [security] by @renovate[bot] in #4686
fix(create-wattpm): allow better-sqlite3 builds for pnpm by @mcollina in #4683
feat: Added rewritePrefix support to gateway. by @ShogunPanda in #4687

Full Changelog: platformatic/platformatic@v3.44.0...v3.45.0

`v3.44.0`

Compare Source

What's Changed

feat: Support preRewrite in gateway custom logic. by @ShogunPanda in #4680
chore(deps): update dependency astro to v5.18.1 by @renovate[bot] in #4660

Full Changelog: platformatic/platformatic@v3.43.0...v3.44.0

`v3.43.0`

Compare Source

What's Changed

add updateMany and insert in db-authorization role types by @Akallabet in #4669
chore(deps): update dependency @babel/parser to v7.29.2 by @renovate[bot] in #4670
chore(deps): update dependency @fastify/http-proxy to v11.4.2 by @renovate[bot] in #4671
fix: Do not override entrypoint port when unset. by @ShogunPanda in #4673
feat: Added new customization options. by @ShogunPanda in #4668
fix(wattpm): prevent help crash for snapshot and pprof by @mcollina in #4677
fix: fix typings of getGlobal() by @mrazauskas in #4656
feat: Rewritten override logic. by @ShogunPanda in #4675
feat: Add runtime envfile option. by @ShogunPanda in #4678

Full Changelog: platformatic/platformatic@v3.42.0...v3.43.0

`v3.42.0`

Compare Source

What's Changed

chore(deps): update dependency tar to v7.5.11 [security] by @renovate[bot] in #4654
feat: add ignoreAllReverseRoutes config option for @platformatic/db by @Akallabet in #4655
fix(deps): update dependency undici to v7.24.0 [security] by @renovate[bot] in #4658
feat: add missing @platformatic/foundation types by @mrazauskas in #4657
chore(deps): update actions/add-to-project digest to ee3e379 by @renovate[bot] in #4659
docs: fix and add missing package READMEs by @mcollina in #4663
fix(deps): update dependency next to v16.1.7 [security] by @renovate[bot] in #4664
feat: add wattpm heap-snapshot command by @mcollina in #4667
chore(deps): Update pino in @platformatic/runtime by @gijs-martens in #4666

New Contributors

@gijs-martens made their first contribution in #4666

Full Changelog: platformatic/platformatic@v3.41.0...v3.42.0

microsoft/playwright (@playwright/test)

`v1.60.0`

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

Event browser.on('context') — fired when a new context is created on the browser.
BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

New webError.location() mirrors consoleMessage.location().
consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

HTML reporter:
- npx playwright show-report accepts .zip files directly — no need to unzip first.
- Steps that contain attachments inside nested children show an indicator on the parent step.
- The repeatEachIndex is shown in the test header when non-zero.
Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

Removed long-deprecated APIs:
- Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
- handle option on BrowserContext.exposeBinding and Page.exposeBinding.
- logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
- Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

Chromium 148.0.7778.96
Mozilla Firefox 150.0.2
WebKit 26.4

This version was also tested against the following stable channels:

Google Chrome 147
Microsoft Edge 147

`v1.59.1`

Compare Source

`v1.59.0`

Compare Source

scalar/scalar (@scalar/api-reference-react)

`v0.9.40`

`v0.9.39`

`v0.9.38`

`v0.9.37`

`v0.9.36`

`v0.9.34`

`v0.9.33`

`v0.9.32`

`v0.9.31`

Patch Changes

#9043: chore: move test documents to cdn

`v0.9.30`

`v0.9.29`

`v0.9.28`

`v0.9.27`

`v0.9.26`

`v0.9.25`

`v0.9.24`

`v0.9.23`

`v0.9.22`

`v0.9.21`

`v0.9.20`

`v0.9.19`

Patch Changes

#8656: fix react wrapper production crash by defining Vue bundler flags before importing api-reference

`v0.9.18`

`v0.9.17`

`v0.9.16`

`v0.9.15`

`v0.9.14`

`v0.9.13`

`v0.9.12`

`v0.9.11`

Patch Changes

#8466: chore: new build pipeline

`v0.9.10`

Patch Changes

Updated Dependencies

@scalar/api-reference@1.49.0
- #8443: fix hash-prefixed basePath routing
- #8467: feat(api-reference): improve Ask AI button consistency and a11y
- #8409: feat: lazy rendering
- #8442: fix object schema descriptions in parameter rendering

nodejs/amaro (amaro)

`v1.1.9`

Compare Source

Core

remove mention of node_modules (2b4249f)

Miscellaneous

build wasm from swc v1.15.21 (dfd333f)
build wasm from swc v1.15.24 (6eba3b9)
build wasm from swc v1.15.30 (10f015a)
deps: bump actions/setup-node from 6.2.0 to 6.3.0 (b4b9d53)
deps: bump actions/setup-node from 6.3.0 to 6.4.0 (a5b009a)
deps: bump actions/upload-artifact from 7.0.0 to 7.0.1 (3a1b232)
deps: bump biomejs/setup-biome from 2.7.0 to 2.7.1 (db5c7ad)
deps: bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (f39649c)
deps: bump github/codeql-action from 4.32.6 to 4.34.1 (bbc38d5)
deps: bump github/codeql-action from 4.34.1 to 4.35.1 (f169d7d)
deps: bump github/codeql-action from 4.35.1 to 4.35.2 (8906d16)
deps: bump googleapis/release-please-action from 4.4.0 to 4.4.1 (97e8bb7)
deps: bump step-security/harden-runner from 2.15.0 to 2.15.1 (1037205)
deps: bump step-security/harden-runner from 2.15.1 to 2.16.0 (169e82e)
deps: bump step-security/harden-runner from 2.16.0 to 2.16.1 (9c2d95f)
deps: bump step-security/harden-runner from 2.16.1 to 2.17.0 (797d9c2)
deps: bump step-security/harden-runner from 2.17.0 to 2.18.0 (b88f27a)
update swc to v1.15.21 (3a1702b)
update swc to v1.15.24 (402f99e)
update swc to v1.15.30 (f0645e2)

postcss/autoprefixer (autoprefixer)

`v10.5.0`

Compare Source

Added mask-position-x and mask-position-y support (by @toporek).

fastify/fastify (fastify)

`v5.8.5`

Compare Source

⚠️ Security Release

This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963.

What's Changed

chore: Fix port parsing by @jsumners in #6603
chore: upgrade to typescript v6.0.2 by @Tony133 in #6605
fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in #6613
ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in #6623
chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in #6629
chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 by @dependabot[bot] in [#663

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/safe-automerge branch from 9b9568e to e4aec23 Compare March 18, 2026 10:43

renovate Bot changed the title ~~chore(deps): update dependency @scalar/api-reference-react to v0.9.10~~ chore(deps): update dependency @scalar/api-reference-react to v0.9.11 Mar 18, 2026

renovate Bot force-pushed the renovate/safe-automerge branch from e4aec23 to 3507f5b Compare March 20, 2026 02:05

renovate Bot changed the title ~~chore(deps): update dependency @scalar/api-reference-react to v0.9.11~~ chore(deps): update safe automerge Mar 20, 2026

renovate Bot force-pushed the renovate/safe-automerge branch 12 times, most recently from d17e2ea to 82409ef Compare March 26, 2026 19:36

renovate Bot force-pushed the renovate/safe-automerge branch 10 times, most recently from 7f4d67e to e0f0860 Compare April 3, 2026 14:39

renovate Bot force-pushed the renovate/safe-automerge branch 4 times, most recently from 2424a50 to f63759e Compare April 6, 2026 14:35

renovate Bot force-pushed the renovate/safe-automerge branch 8 times, most recently from ad1e0f8 to 4858b7a Compare April 19, 2026 18:28

renovate Bot force-pushed the renovate/safe-automerge branch 9 times, most recently from 080db65 to 77808f4 Compare April 28, 2026 07:43

renovate Bot force-pushed the renovate/safe-automerge branch 7 times, most recently from de9e81e to 0feee18 Compare May 6, 2026 15:25

renovate Bot force-pushed the renovate/safe-automerge branch 5 times, most recently from 0b03348 to afdaac1 Compare May 8, 2026 22:36

chore(deps): update safe automerge

2629c20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update safe automerge#203

chore(deps): update safe automerge#203
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/safe-automerge

renovate Bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

Locators and Assertions

Network

Errors and Reporting

Test runner

🛠️ Other improvements

Breaking Changes ⚠️

Browser Versions

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Updated Dependencies

Core

Miscellaneous

⚠️ Security Release

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 17, 2026 •

edited

Loading