Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @playwright/test from 1.24.0 to 1.27.0 #51

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade @playwright/test from 1.24.0 to 1.27.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 177 versions ahead of your current version.
  • The recommended version was released 23 days ago, on 2022-10-07.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Use After Free
SNYK-JS-ELECTRON-3033934
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-3033161
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-3033159
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-3028028
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Improper Input Validation
SNYK-JS-ELECTRON-3018192
579/1000
Why? Has a fix available, CVSS 7.3
Proof of Concept
Use After Free
SNYK-JS-ELECTRON-3014411
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-3014409
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-3014407
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-2994414
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Use After Free
SNYK-JS-ELECTRON-2992453
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAPISTATEHOOD-2769251
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Access of Resource Using Incompatible Type ('Type Confusion')
SNYK-JS-ELECTRON-3040396
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Access Control Bypass
SNYK-JS-ELECTRON-2978519
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Buffer Overflow
SNYK-JS-ELECTRON-2978483
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Improper Input Validation
SNYK-JS-ELECTRON-2977512
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-ELECTRON-2977510
579/1000
Why? Has a fix available, CVSS 7.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @playwright/test
  • 1.27.0 - 2022-10-07

    Locators

    With these new APIs, inspired by Testing Library, writing locators is a joy:

    await page.getByLabel('User Name').fill('John');

    await page.getByLabel('Password').fill('secret-password');

    await page.getByRole('button', { name: 'Sign in' }).click();

    await expect(page.getByText('Welcome, John!')).toBeVisible();

    All the same methods are also available on Locator, FrameLocator and Frame classes.

    Other highlights

    • workers option in the playwright.config.ts now accepts a percentage string to use some of the available CPUs. You can also pass it in the command line:

      npx playwright test --workers=20%
    • New options host and port for the html reporter.

      reporters: [['html', { host: 'localhost', port: '9223' }]]
    • New field FullConfig.configFile is available to test reporters, specifying the path to the config file if any.

    • As announced in v1.25, Ubuntu 18 will not be supported as of Dec 2022. In addition to that, there will be no WebKit updates on Ubuntu 18 starting from the next Playwright release.

    Behavior Changes

    • expect(locator).toHaveAttribute(name, value, options) with an empty value does not match missing attribute anymore. For example, the following snippet will succeed when button does not have a disabled attribute.

      await expect(page.getByRole('button')).toHaveAttribute('disabled', '');
    • Command line options --grep and --grep-invert previously incorrectly ignored grep and grepInvert options specified in the config. Now all of them are applied together.

    • JSON reporter path resolution is performed relative to the config directory instead of the current working directory:

      ["json", { outputFile: "./test-results/results.json" }]]

    Browser Versions

    • Chromium 107.0.5304.18
    • Mozilla Firefox 105.0.1
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 106
    • Microsoft Edge 106
  • 1.27.0-beta-1665535956000 - 2022-10-12
  • 1.27.0-beta-1665513213000 - 2022-10-11
  • 1.27.0-beta-1665507512000 - 2022-10-11
  • 1.27.0-beta-1665430618000 - 2022-10-10
  • 1.27.0-beta-1665430573000 - 2022-10-10
  • 1.27.0-beta-1665430012000 - 2022-10-10
  • 1.27.0-beta-1665429488000 - 2022-10-10
  • 1.27.0-beta-1665208998000 - 2022-10-08
  • 1.27.0-beta-1665163211000 - 2022-10-07
  • 1.27.0-beta-1665162701000 - 2022-10-07
  • 1.27.0-beta-1665104474000 - 2022-10-07
  • 1.27.0-beta-1665092193000 - 2022-10-06
  • 1.27.0-beta-1665086016000 - 2022-10-06
  • 1.27.0-beta-1665081309000 - 2022-10-06
  • 1.27.0-beta-1665079367000 - 2022-10-06
  • 1.27.0-beta-1665076342000 - 2022-10-06
  • 1.27.0-beta-1665072068000 - 2022-10-06
  • 1.27.0-beta-1665068904000 - 2022-10-06
  • 1.27.0-beta-1665014412000 - 2022-10-06
  • 1.27.0-beta-1665005064000 - 2022-10-05
  • 1.27.0-alpha-sep-30-2022 - 2022-09-30
  • 1.27.0-alpha-sep-29-2022 - 2022-09-29
  • 1.27.0-alpha-sep-28-2022 - 2022-09-28
  • 1.27.0-alpha-sep-27-2022 - 2022-09-27
  • 1.27.0-alpha-sep-26-2022 - 2022-09-26
  • 1.27.0-alpha-sep-25-2022 - 2022-09-25
  • 1.27.0-alpha-sep-24-2022 - 2022-09-24
  • 1.27.0-alpha-sep-23-2022 - 2022-09-23
  • 1.27.0-alpha-sep-22-2022 - 2022-09-22
  • 1.27.0-alpha-sep-21-2022 - 2022-09-21
  • 1.27.0-alpha-sep-20-2022 - 2022-09-20
  • 1.27.0-alpha-sep-19-2022 - 2022-09-19
  • 1.27.0-alpha-sep-18-2022 - 2022-09-18
  • 1.27.0-alpha-sep-17-2022 - 2022-09-17
  • 1.27.0-alpha-sep-16-2022 - 2022-09-16
  • 1.27.0-alpha-sep-15-2022 - 2022-09-15
  • 1.27.0-alpha-sep-14-2022 - 2022-09-14
  • 1.27.0-alpha-sep-13-2022 - 2022-09-13
  • 1.27.0-alpha-oct-5-2022 - 2022-10-05
  • 1.27.0-alpha-oct-4-2022 - 2022-10-04
  • 1.27.0-alpha-oct-3-2022 - 2022-10-03
  • 1.27.0-alpha-oct-2-2022 - 2022-10-02
  • 1.27.0-alpha-oct-1-2022 - 2022-10-01
  • 1.27.0-alpha-1664914898000 - 2022-10-04
  • 1.27.0-alpha-1663789543000 - 2022-09-21
  • 1.27.0-alpha-1663172201000 - 2022-09-14
  • 1.27.0-alpha-1663008124000 - 2022-09-12
  • 1.26.1 - 2022-09-27

    Highlights

    This patch includes the following bug fixes:

    #17500 - [BUG] No tests found using the test explorer - pw/test@1.26.0

    Browser Versions

    • Chromium 106.0.5249.30
    • Mozilla Firefox 104.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 105
    • Microsoft Edge 105
  • 1.26.1-beta-1664257337000 - 2022-09-27
  • 1.26.0 - 2022-09-20

    Assertions

    Other Highlights

    • New option maxRedirects for apiRequestContext.get(url[, options]) and others to limit redirect count.
    • New command-line flag --pass-with-no-tests that allows the test suite to pass when no files are found.
    • New command-line flag --ignore-snapshots to skip snapshot expectations, such as expect(value).toMatchSnapshot() and expect(page).toHaveScreenshot().

    Behavior Change

    A bunch of Playwright APIs already support the waitUntil: 'domcontentloaded' option. For example:

    await page.goto('https://playwright.dev', {
      waitUntil: 'domcontentloaded',
    });

    Prior to 1.26, this would wait for all iframes to fire the DOMContentLoaded event.

    To align with web specification, the 'domcontentloaded' value only waits for the target frame to fire the 'DOMContentLoaded' event. Use waitUntil: 'load' to wait for all iframes.

    Browser Versions

    • Chromium 106.0.5249.30
    • Mozilla Firefox 104.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 105
    • Microsoft Edge 105
  • 1.26.0-beta-1664248417000 - 2022-09-27
  • 1.26.0-beta-1664217615000 - 2022-09-26
  • 1.26.0-beta-1663715449000 - 2022-09-20
  • 1.26.0-beta-1663712360000 - 2022-09-20
  • 1.26.0-beta-1663707906000 - 2022-09-20
  • 1.26.0-beta-1663620933000 - 2022-09-19
  • 1.26.0-beta-1663611569000 - 2022-09-19
  • 1.26.0-beta-1663611269000 - 2022-09-19
  • 1.26.0-beta-1663610133000 - 2022-09-19
  • 1.26.0-beta-1663286556000 - 2022-09-16
  • 1.26.0-beta-1663280809000 - 2022-09-15
  • 1.26.0-beta-1663275008000 - 2022-09-15
  • 1.26.0-beta-1663260835000 - 2022-09-15
  • 1.26.0-beta-1663195316000 - 2022-09-14
  • 1.26.0-beta-1663194964000 - 2022-09-14
  • 1.26.0-beta-1663100527000 - 2022-09-13
  • 1.26.0-beta-1663087990000 - 2022-09-13
  • 1.26.0-beta-1663087977000 - 2022-09-13
  • 1.26.0-beta-1663000204000 - 2022-09-13
  • 1.26.0-beta-1662762342000 - 2022-09-09
  • 1.26.0-alpha-sep-9-2022 - 2022-09-09
  • 1.26.0-alpha-sep-8-2022 - 2022-09-08
  • 1.26.0-alpha-sep-7-2022 - 2022-09-07
  • 1.26.0-alpha-sep-6-2022 - 2022-09-06
  • 1.26.0-alpha-sep-5-2022 - 2022-09-05
  • 1.26.0-alpha-sep-4-2022 - 2022-09-04
  • 1.26.0-alpha-sep-3-2022 - 2022-09-03
  • 1.26.0-alpha-sep-2-2022 - 2022-09-02
  • 1.26.0-alpha-sep-12-2022 - 2022-09-12
  • 1.26.0-alpha-sep-11-2022 - 2022-09-11
  • 1.26.0-alpha-sep-10-2022 - 2022-09-10
  • 1.26.0-alpha-sep-1-2022 - 2022-09-01
  • 1.26.0-alpha-aug-31-2022 - 2022-08-31
  • 1.26.0-alpha-aug-30-2022 - 2022-08-30
  • 1.26.0-alpha-aug-29-2022 - 2022-08-29
  • 1.26.0-alpha-aug-28-2022 - 2022-08-28
  • 1.26.0-alpha-aug-27-2022 - 2022-08-27
  • 1.26.0-alpha-aug-26-2022 - 2022-08-26
  • 1.26.0-alpha-aug-25-2022 - 2022-08-25
  • 1.26.0-alpha-aug-24-2022 - 2022-08-24
  • 1.26.0-alpha-aug-23-2022 - 2022-08-23
  • 1.26.0-alpha-aug-22-2022 - 2022-08-22
  • 1.26.0-alpha-aug-21-2022 - 2022-08-21
  • 1.26.0-alpha-aug-20-2022 - 2022-08-20
  • 1.26.0-alpha-aug-19-2022 - 2022-08-19
  • 1.26.0-alpha-aug-18-2022 - 2022-08-18
  • 1.26.0-alpha-aug-17-2022 - 2022-08-17
  • 1.26.0-alpha-aug-16-2022 - 2022-08-16
  • 1.26.0-alpha-aug-15-2022 - 2022-08-15
  • 1.26.0-alpha-aug-14-2022 - 2022-08-14
  • 1.26.0-alpha-aug-13-2022 - 2022-08-13
  • 1.26.0-alpha-aug-12-2022 - 2022-08-12
  • 1.26.0-alpha-aug-11-2022 - 2022-08-11
  • 1.26.0-alpha-aug-10-2022 - 2022-08-10
  • 1.26.0-alpha-1662365984000 - 2022-09-05
  • 1.26.0-alpha-1661907180000 - 2022-08-31
  • 1.26.0-alpha-1660591492000 - 2022-08-15
  • 1.26.0-alpha-1660580855000 - 2022-08-15
  • 1.26.0-alpha-1660165421000 - 2022-08-10
  • 1.25.2 - 2022-09-07

    Highlights

    This patch includes the following bug fixes:

    #16937 - [REGRESSION]: session storage failing >= 1.25.0 in firefox
    #16955 - Not using channel on config file when Show and Reuse browser is checked

    Browser Versions

    • Chromium 105.0.5195.19
    • Mozilla Firefox 103.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 104
    • Microsoft Edge 104
  • 1.25.2-beta-1662502001000 - 2022-09-06
  • 1.25.1 - 2022-08-23

    Highlights

    This patch includes the following bug fixes:

    #16319 - [BUG] webServer.command esbuild fails with ESM and Yarn
    #16460 - [BUG] Component test fails on 2nd run when SSL is used
    #16665 - [BUG] custom selector engines don't work when running in debug mode

    Browser Versions

    • Chromium 105.0.5195.19
    • Mozilla Firefox 103.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 104
    • Microsoft Edge 104
  • 1.25.1-beta-1662499185000 - 2022-09-06
  • 1.25.1-beta-1662493798000 - 2022-09-06
  • 1.25.1-beta-1662161757000 - 2022-09-02
  • 1.25.1-beta-1661979417000 - 2022-08-31
  • 1.25.1-beta-1661977117000 - 2022-08-31
  • 1.25.1-beta-1661279778000 - 2022-08-23
  • 1.25.0 - 2022-08-11

    VSCode Extension

    • New Playwright actions view

      Playwright actions
    • Pick selector
      You can pick selector right from a live page, before or after running a test

      Pick selector
    • Record new test
      Start recording where you left off with the new 'Record new test' feature.

    • Show & reuse browser
      Watch your tests running live & keep devtools open. Develop while continuously running tests.

    extension screenshot

    Test Runner

    • test.step(title, body) now returns the value of the step function:

      test('should work', async ({ page }) => {
          const pageTitle = await test.step('get title', async () => {
              await page.goto('https://playwright.dev');
              return await page.title();
          });
          console.log(pageTitle);
      });
    • Added test.describe.fixme(title, callback).

    • New 'interrupted' test status.

    • Enable tracing via CLI flag: npx playwright test --trace=on.

    • New property testCase.id that can be use in reporters as a history ID.

    Announcements

    • 🎁 We now ship Ubuntu 22.04 Jammy Jellyfish docker image: mcr.microsoft.com/playwright:v1.25.0-jammy.
    • 🪦 This is the last release with macOS 10.15 support (deprecated as of 1.21).
    • 🪦 This is the last release with Node.js 12 support, we recommend upgrading to Node.js LTS (16).
    • ⚠️ Ubuntu 18 is now deprecated and will not be supported as of Dec 2022.

    Browser Versions

    • Chromium 105.0.5195.19
    • Mozilla Firefox 103.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 104
    • Microsoft Edge 104
  • 1.25.0-beta-1661275579000 - 2022-08-23
  • 1.25.0-beta-1660977861000 - 2022-08-20
  • 1.25.0-beta-1660952656000 - 2022-08-19
  • 1.25.0-beta-1660912234000 - 2022-08-19
  • 1.25.0-beta-1660603535000 - 2022-08-15
  • 1.25.0-beta-1660587344000 - 2022-08-15
  • 1.25.0-beta-1660586581000 - 2022-08-15
  • 1.25.0-beta-1660549413000 - 2022-08-15
  • 1.25.0-beta-1660213765000 - 2022-08-11
  • 1.25.0-beta-1660171265000 - 2022-08-10
  • 1.25.0-beta-1660166356000 - 2022-08-10
  • 1.25.0-beta-1660160263000 - 2022-08-10
  • 1.25.0-beta-1660156046000 - 2022-08-10
  • 1.25.0-beta-1660149140000 - 2022-08-10
  • 1.25.0-beta-1660142208000 - 2022-08-10
  • 1.25.0-beta-1660136025000 - 2022-08-10
  • 1.25.0-beta-1660135972000 - 2022-08-10
  • 1.25.0-beta-1660134302000 - 2022-08-10
  • 1.25.0-beta-1660134229000 - 2022-08-10
  • 1.25.0-alpha-jul-31-2022 - 2022-07-31
  • 1.25.0-alpha-jul-30-2022 - 2022-07-30
  • 1.25.0-alpha-jul-29-2022 - 2022-07-29
  • 1.25.0-alpha-jul-28-2022 - 2022-07-28
  • 1.25.0-alpha-jul-27-2022 - 2022-07-27
  • 1.25.0-alpha-jul-26-2022 - 2022-07-26
  • 1.25.0-alpha-jul-25-2022 - 2022-07-25
  • 1.25.0-alpha-jul-24-2022 - 2022-07-24
  • 1.25.0-alpha-jul-23-2022 - 2022-07-23
  • 1.25.0-alpha-jul-22-2022 - 2022-07-22
  • 1.25.0-alpha-jul-21-2022 - 2022-07-21
  • 1.25.0-alpha-jul-20-2022 - 2022-07-20
  • 1.25.0-alpha-jul-19-2022 - 2022-07-19
  • 1.25.0-alpha-jul-18-2022 - 2022-07-18
  • 1.25.0-alpha-jul-17-2022 - 2022-07-17
  • 1.25.0-alpha-jul-16-2022 - 2022-07-16
  • 1.25.0-alpha-jul-15-2022 - 2022-07-15
  • 1.25.0-alpha-aug-9-2022 - 2022-08-09
  • 1.25.0-alpha-aug-8-2022 - 2022-08-08
  • 1.25.0-alpha-aug-7-2022 - 2022-08-07
  • 1.25.0-alpha-aug-6-2022 - 2022-08-06
  • 1.25.0-alpha-aug-5-2022 - 2022-08-05
  • 1.25.0-alpha-aug-4-2022 - 2022-08-04
  • 1.25.0-alpha-aug-3-2022 - 2022-08-03
  • 1.25.0-alpha-aug-2-2022 - 2022-08-02
  • 1.25.0-alpha-aug-1-2022 - 2022-08-01
  • 1.25.0-alpha-1660067092000 - 2022-08-09
  • 1.25.0-alpha-1659998098000 - 2022-08-08
  • 1.25.0-alpha-1659639526000 - 2022-08-04
  • 1.25.0-alpha-1659629898000 - 2022-08-04
  • 1.25.0-alpha-1659555281000 - 2022-08-03
  • 1.25.0-alpha-1659484206000 - 2022-08-03
  • 1.24.2 - 2022-07-29

    Highlights

    This patch includes the following bug fixes:

    #15977 - [BUG] test.use of storage state regression in 1.24

    Browser Versions

    • Chromium 104.0.5112.48
    • Mozilla Firefox 102.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 103
    • Microsoft Edge 103
  • 1.24.2-beta-1659636872000 - 2022-08-04
  • 1.24.2-beta-1659096416000 - 2022-07-29
  • 1.24.1 - 2022-07-26

    Highlights

    This patch includes the following bug fixes:

    #15898 - [BUG] Typescript error: The type for webServer config property (TestConfigWebServer) is not typed correctly
    #15913 - [BUG] hooksConfig is required for mount fixture
    #15932 - [BUG] - Install MS Edge on CI Fails

    Browser Versions

    • Chromium 104.0.5112.48
    • Mozilla Firefox 102.0
    • WebKit 16.0

    This version was also tested against the following stable channels:

    • Google Chrome 103
    • Microsoft Edge 103
  • 1.24.1-beta-1658946462000 - 2022-07-27
  • 1.24.1-beta-1658834175000 - 2022-07-26
  • 1.24.0 - 2022-07-21
    Read more
from @playwright/test GitHub release notes
Commit messages
Package name: @playwright/test
  • af0d293 cherry-pick(#17912): docs: mention that `exact` option is ignored for regex
  • c05225f cherry-pick(#17896): chore: make local docker build work on branch (#17906)
  • 3f0af1e cherry-pick(#17893): fix(locators): make regex escape work when multiple spaces are present (#17894)
  • 923a583 cherry-pick(#17888): chore: make role name case-insensitive
  • b85b1ec cherry-pick(#17886): docs: v1.27 release notes for python, java and dotnet
  • 299bcea cherry-pick(#17885): feat(api): make aria roles an enum
  • 03c7f9c cherry-pick(#17879): test: rebaseline requestStorageAccess test for firefox-beta (#17884)
  • 3bf42ce cherry-pick(#17864): test: fix "getByText should work" with tracing enabled, docker smoke tests (#17883)
  • 2993281 cherry-pick(#17863): chore(docker): make sure failed commands exit with non-zero code (#17880)
  • 1bc426b cherry-pick(#17862): fix(esm+tsconfig): allow mapped ts files in esm mode
  • cfa5549 cherry-pick(#17855): chore: use api selectors in codegen hover
  • 1150de8 chore: mark v1.27.0 (#17860)
  • cdeb9e3 docs: release notes for v1.27 (#17858)
  • 6750a02 fix(api): hide `TestConfig.groups` (#17853)
  • 795730f fix(examples): add missing await to todomvc (#17832)
  • 3ecaa36 chore: make locators generator isomorphic (#17850)
  • 30179d4 fix(tsconfig): remove TS_NODE envs, update docs (#17847)
  • c168f54 chore: generate getByLabel for inputs (#17845)
  • e841326 chore: fix .NET generator (#17849)
  • ff15fcf chore: hide selector factories (#17844)
  • 0b1b718 feat(core): type addInitScript function arg (#17651)
  • 2bcd9ce chore: internal selectors (#17827)
  • f64dbe9 test: :scope.class should narrow down locator (#17829)
  • a9c02b9 fix(locators): properly escape various locator methods (#17798)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant