chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the dev-dependencies group with 6 updates in the / directory:

Package	From	To
@wordpress/api-fetch	7.55.0	7.56.0
@wordpress/element	8.7.0	8.8.0
@wordpress/scripts	33.0.0	36.0.0
@wordpress/server-side-render	6.28.0	6.32.0
lefthook	2.1.10	2.1.14
playwright	1.61.1	1.63.0

Updates @wordpress/api-fetch from 7.55.0 to 7.56.0

Changelog

Sourced from @​wordpress/api-fetch's changelog.

7.56.0 (2026-09-23)

Commits

• 56d8058 chore(release): publish
• 9ff3f0e Update changelog files
• f905a64 Merge changes published in the Gutenberg plugin "release/24.1" branch
• See full diff in compare view

Updates @wordpress/element from 8.7.0 to 8.8.0

Changelog

Sourced from @​wordpress/element's changelog.

8.8.0 (2026-09-23)

Commits

• 56d8058 chore(release): publish
• 9ff3f0e Update changelog files
• f905a64 Merge changes published in the Gutenberg plugin "release/24.1" branch
• See full diff in compare view

Updates @wordpress/scripts from 33.0.0 to 36.0.0

Changelog

Sourced from @​wordpress/scripts's changelog.

36.0.0 (2026-09-23)

Breaking Changes

• Switch test-unit-js to consumer-installed Vitest 5 and Vite 7/8 at the 36.0.0 boundary. Run once by default, discover consumer Vitest/Vite config, and use Vitest lint defaults for test/spec files. Keep test-unit-jest as a maintenance-only adapter for consumer-installed Jest, with no scheduled removal. Remove the bundled Jest dependencies, preset config, Babel transformer, and GitHub Actions reporter. Retire the Jest preset and console package source; published versions remain available. Jest projects must install their own dependencies and configure the published preset if needed. See the migration guide. (#82843).

• Require Node.js ^22.22.2 || ^24.15.0 || >=26.0.0 and update the bundled markdownlint-cli from ^0.31.1 to ^0.49.1, which moves markdownlint from 0.25 to 0.41. lint-md-docs now runs the rules added since then (MD051 through MD060) by default, so projects may see new reports. The header rule aliases (for example header-increment) no longer work in configuration files; use the heading names (#81917).

• lint-style: Use stylelint's resolveConfig for config detection instead of a static extension list, supporting all current and future config file formats without manual maintenance overhead. Note that resolveConfig also searches ancestor directories and the global config directory (~/.config/stylelint), so a project with no local config may now pick up an unrelated config found there instead of the bundled default (#79280).

Enhancements

• check-engines: Check only the tools listed in engines, instead of always passing --node and --npm. Without an engines field in the project, it now checks only the Node.js version (#83326).
• lint-md-docs: Detect .markdownlint.jsonc so the bundled default config is not used when one is present (#81917).
• format: Format .cjs and .mjs files when expanding a directory (#82731).
• format: Format .cts and .mts files when expanding a directory (#83071).
• The default ESLint config now lints .jsx, .ts, .tsx, .mts and .cts files, which ESLint's own file discovery skips (#83071).
• build and start: Discover .cjs, .cts and .mts entry points, resolve them from extensionless imports, and transpile .cjs and .cts modules (#83071).
• The bundled wp-prettier dependency has been upgraded from 3.0.3 to 3.9.6 (#82731).

Bug Fixes

• Update the bundled webpack to ^5.111.0, which fixes a code-generation regression in webpack 5.110.3 that can make production bundles fail at startup (#82698).

35.0.0 (2026-09-10)

Breaking Changes

• Require Node.js ^20.19.0 || >=22.13.0 and upgrade the bundled Stylelint to ^17.14.1 (#80738).

Bug Fixes

• test-playwright: Install browsers with the bundled @playwright/test CLI, so they match the Playwright that runs the tests. A bare npx playwright could resolve another version, or download one (#82331).
• build: Strip JavaScript and TypeScript source extensions from legacy positional entry names so generated output uses names such as index.js instead of index.tsx.js or index.jsx.js (#80990).

Enhancements

• Include .jsx unit tests in the default lint configuration (#80990).

Internal

• Update bundled Jest packages to 30.5.0 (#82181).
• Remove unused dependency jest-environment-node (#82103).

34.2.0 (2026-08-26)

34.1.0 (2026-08-12)

Bug Fixes

... (truncated)

Commits

• 56d8058 chore(release): publish
• 9ff3f0e Update changelog files
• f905a64 Merge changes published in the Gutenberg plugin "release/24.1" branch
• 485f42a chore(release): publish
• c89dd70 Update changelog files
• a55a0d7 Merge changes published in the Gutenberg plugin "release/24.0" branch
• d06b010 chore(release): publish (#82084)
• 0790fa5 Update changelog files
• 098e3ba Merge changes published in the Gutenberg plugin "release/23.9" branch
• 989764d chore(release): publish
• Additional commits viewable in compare view

Updates @wordpress/server-side-render from 6.28.0 to 6.32.0

Changelog

Sourced from @​wordpress/server-side-render's changelog.

6.32.0 (2026-09-23)

6.31.0 (2026-09-10)

Internal

• Remove unused dependency @wordpress/deprecated (#82103).
• Remove tsconfig project references to packages that are not dependencies (#82106).

6.30.0 (2026-08-26)

Internal

• Split tsconfig into a build project and a default dev project so dev files are type checked without publishing their declarations. (#81514)

6.29.0 (2026-08-12)

Commits

• 56d8058 chore(release): publish
• 9ff3f0e Update changelog files
• f905a64 Merge changes published in the Gutenberg plugin "release/24.1" branch
• 485f42a chore(release): publish
• c89dd70 Update changelog files
• a55a0d7 Merge changes published in the Gutenberg plugin "release/24.0" branch
• d06b010 chore(release): publish (#82084)
• 0790fa5 Update changelog files
• 098e3ba Merge changes published in the Gutenberg plugin "release/23.9" branch
• 989764d chore(release): publish
• Additional commits viewable in compare view

Updates lefthook from 2.1.10 to 2.1.14

Release notes

Sourced from lefthook's releases.

v2.1.14

Changelog

v2.1.12

Changelog

• b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)
• 9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)
• 2f0a9f37cef73e10d95043ba3754329a21850d57 fix: fail the hook when staging fixed files errors (#1484)

v2.1.11

Changelog

• e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)
• d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)

Changelog

Sourced from lefthook's changelog.

2.1.13/2.1.14 (2026-09-14)

• fix: error when --job/--command matches nothing (#1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#1510) by @​hamodywe
• docs: quote template run examples (#1472) by @​Guflly

2.1.12 (2026-08-28)

• fix: fail the hook when staging fixed files errors (#1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#1508) by @​mariokresic

2.1.11 (2026-08-21)

• fix: inherit terminal size for PTY commands (#1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#1477) by @​scop
• docs: document script args (#1479) by @​lntutor
• docs: update em logo by @​mrexox

Commits

• 1e23553 2.1.14: small fixes and spinner improvements
• a2c9d37 2.1.13: small fixes and spinner improvements
• c7b4983 fix(run): error when --job/--command matches nothing (#1512)
• e4ca4a1 fix: disable tty things when stdout is not TTY (#1545)
• aa3fa89 docs: document files inheritance for grouped jobs (#1536)
• 250f028 fix: force colors when colors are explicitly enabled (#1538)
• 62f4d5e fix: resolve file_types paths from the repo root (#1537)
• ef092eb fix(npm) don't force past core.hooksPath guard in npm postinstall (#1475)
• 3667aeb fix: don't force-install hooks from the npm postinstall (#1510)
• 354df23 docs: quote template run examples (#1472)
• Additional commits viewable in compare view

Updates playwright from 1.61.1 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions