[dependabot]

Bumps playwright from 1.50.0 to 1.63.0.

Release notes

Sourced from playwright's releases.

v1.63.0

🪟 Locate across frames

page.frame_locator() and frame.frame_locator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

# Finds the button in any frame on the page.
page.frame_locator().get_by_role("button").click()

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

page.locator("button").visible.click()

🖼️ Aria and screen snapshots in traces

New aria_snapshots and screen_snapshots options of tracing.start() capture an aria snapshot and a screenshot of the page on every action:

context.tracing.start(snapshots=True, aria_snapshots=True, screen_snapshots=True)

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

• http_credentials now also accepts an array of credentials. The first entry matching the request origin is used, and entries without an origin match any request.
• New option opfs includes the origin private file system in the storage state, so it can be persisted and restored into later contexts.
• New events page.on('dialogclosed') and browserContext.on('dialogclosed') are emitted when a JavaScript dialog is accepted, dismissed or closed by the user.

Command line

• playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
• playwright codegen --http-credentials records against pages behind HTTP authentication.

Announcements

• ⚠️ Ubuntu 20.04 is not supported anymore.
• 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

... (truncated)

Commits

• 8cb967b cherry-pick(#3200): devops(docker): move docker publishing to Azure Pipelines
• ab18c77 chore: roll Playwright to 1.63.0 (#3198)
• 0e66a09 devops(pipeline): resolve pip and npm packages from DevDiv_PublicPackages fee...
• 010a9cc Pin GitHub Actions to full-length commit SHAs (#3176)
• 154f67c fix(sync): wait for initialize before leaving enter (#3168)
• 4af2fc6 chore: roll Playwright to 1.62.1 (#3169)
• 4d2e058 fix(connection): register protocol callback only after successful send (#3167)
• eab2bca chore(deps): remove unused development dependencies (#3164)
• 3b7c24c chore: roll Playwright to 1.62.0 (#3161)
• 1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-20T04:56:57.461757Z	44bfd97	PR opened
🔒 Security Review	✅ Completed 2026-10-20T04:57:02.805644Z	44bfd97	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[jbeckwith-oai]

Reviewed the Playwright pin, pyee transitive update, lockfile artifacts, browser installation in CI, and browser API usage in examples. No in-scope compatibility blocker found. All 22 reported checks pass, including type checks and platform tests; no unresolved review threads.

[jbeckwith-oai]

Fixed the repeated merge-queue timeout: Python 3.14 runs coverage plus Chromium installation/browser tests, and both queue attempts reached the ten-minute job limit during slow Ubuntu package downloads after the Python tests passed. That matrix job now has a twenty-minute limit; the other Python jobs retain ten minutes. Every test step remains enabled.

Validation: actionlint passed, git diff --check passed, and two consecutive adversarial review rounds were clean. Fresh CI is running on the pushed fix.

[jbeckwith-oai]

Full local verification passed on the pushed change: formatting, lint, type checks, 12,289 parallel tests (32 skipped), and 107 serial tests (4 skipped). The source export used for validation is byte-identical to the reviewed source. Dependency versions match the lockfile, installed through the configured internal registry. Actionlint also passed for the workflow change. Remote CI is still completing its browser and Windows jobs.

[markstuart-oai]

Reviewed all three changed files at 9c55e3376b5ef3b2f0ad4539afd4f67486388f78. The Playwright update and lockfile agree, and only Python 3.14 gets the longer timeout. Coverage, browser tests, permissions and the other matrix timeouts stay unchanged.

Static source review only; I did not run candidate code or tests. At preflight, 23 hosted checks succeeded and 4 were skipped.

[jbeckwith-oai]

The merge-queue run passed coverage, but the Ubuntu mirror took 12 minutes 56 seconds to download 24.4 MB of Chromium system dependencies. That exhausted the twenty-minute job budget during package unpacking, before browser tests could start.

Raised only Python 3.14's job ceiling to thirty minutes so the measured seven-minute coverage workload plus thirteen-minute system installation has room for unpacking, browser downloads/tests, and teardown checks. Other Python versions retain ten minutes. Actionlint and two fresh consecutive adversarial review rounds passed. No check was removed or weakened; full local validation and fresh CI are running.