deps(js): bump the minor-and-patch group across 1 directory with 5 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates in the /sdn-js directory: hd-wallet-ui, @playwright/test, svelte and svelte-check.

Updates hd-wallet-ui from 2.0.20 to 2.0.21

Release notes

Sourced from hd-wallet-ui's releases.

v2.0.21

Full Changelog: DigitalArsenal/hd-wallet-wasm@v2.0.20...v2.0.21

Commits

• 3c4258a epm: dual-curve EPM sign/verify (secp256k1 + ed25519, default ed25519)
• See full diff in compare view

Updates hd-wallet-wasm from 2.0.20 to 2.0.21

Release notes

Sourced from hd-wallet-wasm's releases.

v2.0.21

Full Changelog: DigitalArsenal/hd-wallet-wasm@v2.0.20...v2.0.21

Commits

• 3c4258a epm: dual-curve EPM sign/verify (secp256k1 + ed25519, default ed25519)
• See full diff in compare view

Updates @playwright/test from 1.59.1 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

• #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

• 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
• 4328122 chore: mark v1.61.1 (#41404)
• 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
• 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
• 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
• b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
• b5a3175 cherry-pick(#41319): fix(loader): support other node versions
• d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• Additional commits viewable in compare view

Updates svelte from 5.55.5 to 5.56.4

Release notes

Sourced from svelte's releases.

[email protected]

Patch Changes

• fix: include wrapping parentheses in {@const} declarator end position (#18436)

• fix: always unset reactivity context after restoring it (#18453)

• fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

• fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

[email protected]

Patch Changes

• fix: ignore errors that occur in destroyed effects (#18384)

• fix: type BigInts in $state.snapshot(...) return values (#18388)

[email protected]

Patch Changes

• fix: properly track effect end node for async sibling component (#18371)

• fix: prevent false-positive reactivity loss warning (#18373)

• chore: bump esrap dependency (#18372)

• fix: ignore declaration tags for animation directive (#18366)

• fix: reject pending async deriveds on discard (#18308)

[email protected]

Patch Changes

• fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

• fix: parse declaration tag contents more robustly (#18353)

• fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

• fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

• fix: tolerate whitespace before let/const in declaration tags (#18348)

• fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

• fix: more robust parsing of declaration tags with regards to type (#18330)

• fix: preserve newlines in spread input values when the type attribute is applied after value (#18345)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.4

Patch Changes

• fix: include wrapping parentheses in {@const} declarator end position (#18436)

• fix: always unset reactivity context after restoring it (#18453)

• fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

• fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

5.56.3

Patch Changes

• fix: ignore errors that occur in destroyed effects (#18384)

• fix: type BigInts in $state.snapshot(...) return values (#18388)

5.56.2

Patch Changes

• fix: properly track effect end node for async sibling component (#18371)

• fix: prevent false-positive reactivity loss warning (#18373)

• chore: bump esrap dependency (#18372)

• fix: ignore declaration tags for animation directive (#18366)

• fix: reject pending async deriveds on discard (#18308)

5.56.1

Patch Changes

• fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

• fix: parse declaration tag contents more robustly (#18353)

• fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

• fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

• fix: tolerate whitespace before let/const in declaration tags (#18348)

• fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

... (truncated)

Commits

• eae50df Version Packages (#18435)
• 36ae062 fix: always unset reactivity context after restoring it (#18453)
• a6985bc fix: strip ? from optional parameters in svelte lang ts (#18448)
• c4daa49 fix: include wrapping parentheses in {@const} declarator end (#18436)
• 0510174 fix: make SvelteURLSearchParams notifications accurate (#18425)
• 8ea3ee8 chore(deps-dev): bump esbuild from 0.25.11 to 0.28.1 (#18427)
• a9f4854 Version Packages (#18389)
• 71a6515 fix: check boundary exists before calling error handler in async derived (#18...
• 3d83c9a fix: add bigint to Primitive type for $state.snapshot (#18388)
• 51baf1c Version Packages (#18357)
• Additional commits viewable in compare view

Updates svelte-check from 4.4.8 to 4.7.1

Release notes

Sourced from svelte-check's releases.

[email protected]

Patch Changes

• fix: correctly parse --tsgo-experimental-api flag (#3067)

[email protected]

Minor Changes

• feat: add --config option (#3066)

• feat: svelte-check tsgo support with experimental api (#3036)

Patch Changes

• fix: load esm version of Vite (#3065)

• fix: stop excluding workspaces under dot-prefixed ancestors (#3037)

• Updated dependencies [7a3464b, a2561fc]:

  • @​sveltejs/load-config@​0.2.0

[email protected]

Minor Changes

• feat: support reading Svelte config from vite.config.js/ts (#3031)

Patch Changes

• Updated dependencies [151cf45]:
  • @​sveltejs/load-config@​0.1.1

[email protected]

Minor Changes

• feat: support Svelte 5 declaration tags (#3033)

Patch Changes

• fix: properly handle props with the name slot inside Svelte 5 snippets (#3030)

• feat: add support for svelte config ts/mts files (#3009)

Commits

• 32556db Version Packages (#3069)
• 4e52661 fix (svelte-check): --tsgo-experimental-api option is not honored (#3067)
• fbb1291 Version Packages (#3059)
• 3a1e384 feat: svelte-check tsgo support with experimental api (#3036)
• 8a6f155 fix(svelte-check): stop excluding workspaces under dot-prefixed ancestors (#3...
• 7659b0f perf: remove lodash (#3038)
• a2561fc feat: enable passing Svelte config file paths (#3066)
• 7a3464b fix: load esm version of Vite (#3065)
• 459d031 fix(svelte2tsx): don't crash on array binding holes in destructured exports (...
• 9407413 build: bump mocha to v11.7.6 (#3042)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.