chore(deps): bump the version-updates group across 3 directories with 9 updates

[dependabot]

Bumps the version-updates group with 4 updates in the / directory: @next/eslint-plugin-next, eslint, eslint-plugin-playwright and globals.
Bumps the version-updates group with 1 update in the /e2e directory: @playwright/test.
Bumps the version-updates group with 4 updates in the /frontend directory: @next/third-parties, @sentry/nextjs, posthog-js and jest-axe.

Updates @next/eslint-plugin-next from 16.2.11 to 16.2.12

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

Commits

• 2234717 v16.2.12
• See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates eslint-plugin-playwright from 2.10.5 to 2.11.0

Release notes

Sourced from eslint-plugin-playwright's releases.

v2.11.0

2.11.0 (2026-07-27)

Features

• no-unnecessary-assertions: flag always-passing assertions on a Locator (#470) (b6d3e5d), closes #463

Commits

• b6d3e5d feat(no-unnecessary-assertions): flag always-passing assertions on a Locator ...
• bba6d4e add explanation for prefer-locator (#478)
• See full diff in compare view

Updates globals from 17.7.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

Commits

• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347)
• See full diff in compare view

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)
• 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
• bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
• 15c4f55 fix(mcp): identify downloads explicitly (#41933)
• f5fa967 fix(network): request.postData() returns null for empty string body override ...
• 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
• 244a1ff feat(firefox): roll to r1538 (#41938)
• Additional commits viewable in compare view

Updates @next/third-parties from 16.2.11 to 16.2.12

Release notes

Sourced from @​next/third-parties's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

Commits

• 2234717 v16.2.12
• See full diff in compare view

Updates @sentry/nextjs from 10.67.0 to 10.68.0

Release notes

Sourced from @​sentry/nextjs's releases.

10.68.0

• feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
• feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
• feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
• feat(server-utils): Allow integrations to be part of marker (#22094)
• feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
• feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
• feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
• feat(v10): Add url.full and url.path to http.server spans (#22533)
• feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
• feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
• feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
• feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
• feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
• feat(v10/core): Add instrumentStateGraph API (#22491)
• feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
• feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
• feat(v10/react-router): Make instrumentation API the default (#22525)
• fix(cloudflare,deno,node): Align types of vercelai (#22343)
• fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
• fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
• fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
• fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
• fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
• fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
• fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

• chore: Add external contributor to CHANGELOG.md (#22342)
• chore: Add external contributor to CHANGELOG.md (#22405)
• chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
• chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
• chore(size-limit): weekly auto-bump (#22182)
• ci(v10): Add v10 to build and license-compliance branch filters (#22499)
• feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)
• ref(server-utils): Remove unneeded orchestrion config (#22384)
• ref(server-utils): Small fastify cleanup (#22385)
• test: Remove unnecessary test waits (#22383)
• test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)
• test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.68.0

• feat(cloudflare): Add @​sentry/cloudflare/vite orchestrion plugin (#21967)
• feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)
• feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)
• feat(server-utils): Allow integrations to be part of marker (#22094)
• feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)
• feat(server-utils): Warn when bundler config has instrumented module in external (#22379)
• feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)
• feat(v10): Add url.full and url.path to http.server spans (#22533)
• feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
• feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
• feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
• feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
• feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)
• feat(v10/core): Add instrumentStateGraph API (#22491)
• feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)
• feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)
• feat(v10/react-router): Make instrumentation API the default (#22525)
• fix(cloudflare,deno,node): Align types of vercelai (#22343)
• fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)
• fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)
• fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)
• fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)
• fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)
• fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)
• fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

• chore: Add external contributor to CHANGELOG.md (#22342)
• chore: Add external contributor to CHANGELOG.md (#22405)
• chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)
• chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)
• chore(size-limit): weekly auto-bump (#22182)
• ci(v10): Add v10 to build and license-compliance branch filters (#22499)
• feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)
• ref(server-utils): Remove unneeded orchestrion config (#22384)
• ref(server-utils): Small fastify cleanup (#22385)
• test: Remove unnecessary test waits (#22383)
• test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)
• test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @​psh4607 and @​trinitiwowka. Thank you for your contributions!

Commits

• b4396c3 release: 10.68.0
• be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
• fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
• f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
• ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
• 20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
• 3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
• d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
• 11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
• a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
• Additional commits viewable in compare view

Updates posthog-js from 1.407.2 to 1.407.3

Commits

• 0eb778b chore: update versions and lockfile [version bump]
• 3b2e68d fix: prevent Jest worker resource leaks (#4247)
• 7e0355a ci: isolate minimum TypeScript consumer tests (#4262)
• b9232e9 chore: remove Node.js deprecation warnings (#4260)
• a485eb5 chore: address priority dependency debt (#4258)
• fa4844b fix(browser): send sdk identity in flags person properties (#4102)
• 2b948da ci: upgrade GitHub Actions to Node 24 (#4245)
• ead5955 ci: refresh TypeScript compatibility matrix (#4261)
• 3791710 chore(tests): fail on unexpected console output (#4263)
• 70d8b1c ci: reduce duplicate browser work (#4257)
• Additional commits viewable in compare view

Updates jest-axe from 10.0.0 to 11.0.0

Release notes

Sourced from jest-axe's releases.

v11.0.0

• Update axe-core to version 4.12.1 - see https://github.com/dequelabs/axe-core/releases for changes between 4.10.2 to 4.12.1
• Support Jest 30 (jest-matcher-utils to 30.4.1) which drops support for Node.js 16.x - see upgrade guide here https://jestjs.io/docs/upgrading-to-jest30#compatibility

Changelog

Sourced from jest-axe's changelog.

11.0.0

• Update axe-core to version 4.12.1 - see https://github.com/dequelabs/axe-core/releases for changes between 4.10.2 to 4.12.1
• Support Jest 30 (jest-matcher-utils to 30.4.1) which drops support for Node.js 16.x - see upgrade guide here https://jestjs.io/docs/upgrading-to-jest30#compatibility

Commits

• 941a8e5 Merge pull request #317 from NickColley/update-changelog
• 7201a6e Update package to 11.0.0
• 09ba4b2 Update CHANGELOG
• a1c4bc1 Merge pull request #316 from NickColley/update-more-deps
• 2a80732 Update axe-core to version 4.12.1
• 0854073 Remove Node.js 18 support
• adad49b Add fix for @​babel/runtime
• c37483d Update jest
• a27849a Update react and jest related deps
• c97f1b1 Merge pull request #315 from NickColley/update-actions
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jest-axe since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.83%. Comparing base (3fab5b4) to head (2295be4).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5435   +/-   ##
=======================================
  Coverage   98.83%   98.83%           
=======================================
  Files         538      538           
  Lines       17129    17129           
  Branches     2460     2460           
=======================================
  Hits        16930    16930           
  Misses         99       99           
  Partials      100      100           

Flag	Coverage Δ
backend	99.37% <ø> (ø)
frontend	97.32% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3fab5b4...2295be4. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud