[Snyk] Upgrade @playwright/test from 1.54.1 to 1.56.1

[DysektAI]

Snyk has created this PR to upgrade @playwright/test from 1.54.1 to 1.56.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 139 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Verification of Cryptographic Signature SNYK-JS-PLAYWRIGHTCORE-13553173	73	No Known Exploit

Release notes

Package name: @playwright/test

• 1.56.1 - 2025-10-17
  

  Highlights

  #37871 chore: allow local-network-access permission in chromium
  #37891 fix(agents): remove workspaceFolder ref from vscode mcp
  #37759 chore: rename agents to test agents
  #37757 chore(mcp): fallback to cwd when resolving test config

  Browser Versions

  • Chromium 141.0.7390.37
  • Mozilla Firefox 142.0.1
  • WebKit 26.0
• 1.56.1-beta-1761085025000 - 2025-10-21
• 1.56.1-beta-1760662108000 - 2025-10-17
• 1.56.1-beta-1760659320000 - 2025-10-17
• 1.56.0 - 2025-10-06
  

  Playwright Agents

  Introducing Playwright Agents, three custom agent definitions designed to guide LLMs through the core process of building a Playwright test:

  • 🎭 planner explores the app and produces a Markdown test plan
  • 🎭 generator transforms the Markdown plan into the Playwright Test files
  • 🎭 healer executes the test suite and automatically repairs failing tests

  Run npx playwright init-agents with your client of choice to generate the latest agent definitions:

  # Generate agent files for each agentic loop
  # Visual Studio Code
  npx playwright init-agents --loop=vscode
  # Claude Code
  npx playwright init-agents --loop=claude
  # opencode
  npx playwright init-agents --loop=opencode

  Note

  VS Code v1.105 (currently on the VS Code Insiders channel) is needed for the agentic experience in VS Code. It will become stable shortly, we are a bit ahead of times with this functionality!

  Learn more about Playwright Agents

  New APIs

  • New methods page.consoleMessages() and page.pageErrors() for retrieving the most recent console messages from the page
  • New method page.requests() for retrieving the most recent network requests from the page
  • Added --test-list and --test-list-invert to allow manual specification of specific tests from a file

  UI Mode and HTML Reporter

  • Added option to 'html' reporter to disable the "Copy prompt" button
  • Added option to 'html' reporter and UI Mode to merge files, collapsing test and describe blocks into a single unified list
  • Added option to UI Mode mirroring the --update-snapshots options
  • Added option to UI Mode to run only a single worker at a time

  Breaking Changes

  • Event browserContext.on('backgroundpage') has been deprecated and will not be emitted. Method browserContext.backgroundPages() will return an empty list

  Miscellaneous

  • Aria snapshots render and compare input placeholder
  • Added environment variable PLAYWRIGHT_TEST to Playwright worker processes to allow discriminating on testing status

  Browser Versions

  • Chromium 141.0.7390.37
  • Mozilla Firefox 142.0.1
  • WebKit 26.0
• 1.56.0-beta-1760659234000 - 2025-10-17
• 1.56.0-beta-1760652530000 - 2025-10-16
• 1.56.0-beta-1759868987000 - 2025-10-07
• 1.56.0-beta-1759867178000 - 2025-10-07
• 1.56.0-beta-1759861168000 - 2025-10-07
• 1.56.0-beta-1759771650000 - 2025-10-06
• 1.56.0-beta-1759761109000 - 2025-10-06
• 1.56.0-beta-1759756726000 - 2025-10-06
• 1.56.0-beta-1759754009000 - 2025-10-06
• 1.56.0-beta-1759527268000 - 2025-10-03
• 1.56.0-beta-1759451736000 - 2025-10-03
• 1.56.0-beta-1759435110000 - 2025-10-02
• 1.56.0-beta-1759412259000 - 2025-10-02
• 1.56.0-alpha-2025-10-02 - 2025-10-02
• 1.56.0-alpha-2025-10-01 - 2025-10-01
• 1.56.0-alpha-2025-09-30 - 2025-09-30
• 1.56.0-alpha-2025-09-29 - 2025-09-29
• 1.56.0-alpha-2025-09-28 - 2025-09-28
• 1.56.0-alpha-2025-09-27 - 2025-09-27
• 1.56.0-alpha-2025-09-26 - 2025-09-26
• 1.56.0-alpha-2025-09-25 - 2025-09-25
• 1.56.0-alpha-2025-09-24 - 2025-09-24
• 1.56.0-alpha-2025-09-23 - 2025-09-23
• 1.56.0-alpha-2025-09-22 - 2025-09-22
• 1.56.0-alpha-2025-09-21 - 2025-09-21
• 1.56.0-alpha-2025-09-20 - 2025-09-20
• 1.56.0-alpha-2025-09-18 - 2025-09-18
• 1.56.0-alpha-2025-09-17 - 2025-09-17
• 1.56.0-alpha-2025-09-16 - 2025-09-16
• 1.56.0-alpha-2025-09-15 - 2025-09-15
• 1.56.0-alpha-2025-09-14 - 2025-09-14
• 1.56.0-alpha-2025-09-13 - 2025-09-13
• 1.56.0-alpha-2025-09-12 - 2025-09-12
• 1.56.0-alpha-2025-09-11 - 2025-09-11
• 1.56.0-alpha-2025-09-10 - 2025-09-10
• 1.56.0-alpha-2025-09-09 - 2025-09-09
• 1.56.0-alpha-2025-09-08 - 2025-09-08
• 1.56.0-alpha-2025-09-07 - 2025-09-07
• 1.56.0-alpha-2025-09-06 - 2025-09-06
• 1.56.0-alpha-2025-09-05 - 2025-09-05
• 1.56.0-alpha-2025-09-04 - 2025-09-04
• 1.56.0-alpha-2025-09-03 - 2025-09-03
• 1.56.0-alpha-2025-09-02 - 2025-09-02
• 1.56.0-alpha-2025-09-01 - 2025-09-01
• 1.56.0-alpha-2025-08-31 - 2025-08-31
• 1.56.0-alpha-2025-08-30 - 2025-08-30
• 1.56.0-alpha-2025-08-29 - 2025-08-29
• 1.56.0-alpha-2025-08-28 - 2025-08-28
• 1.56.0-alpha-2025-08-27 - 2025-08-27
• 1.56.0-alpha-2025-08-26 - 2025-08-26
• 1.56.0-alpha-2025-08-25 - 2025-08-25
• 1.56.0-alpha-2025-08-24 - 2025-08-24
• 1.56.0-alpha-2025-08-23 - 2025-08-23
• 1.56.0-alpha-2025-08-22 - 2025-08-22
• 1.56.0-alpha-2025-08-21 - 2025-08-21
• 1.56.0-alpha-2025-08-20 - 2025-08-20
• 1.56.0-alpha-1759271123000 - 2025-09-30
• 1.56.0-alpha-1758839353000 - 2025-09-25
• 1.56.0-alpha-1758818034000 - 2025-09-25
• 1.56.0-alpha-1758750661000 - 2025-09-24
• 1.56.0-alpha-1758747822000 - 2025-09-24
• 1.56.0-alpha-1758292576000 - 2025-09-19
• 1.56.0-alpha-1758061937000 - 2025-09-16
• 1.56.0-alpha-1757624765000 - 2025-09-11
• 1.56.0-alpha-1757464324000 - 2025-09-10
• 1.56.0-alpha-1757456950000 - 2025-09-09
• 1.56.0-alpha-1757090131000 - 2025-09-05
• 1.56.0-alpha-1757023974000 - 2025-09-04
• 1.56.0-alpha-1756945786000 - 2025-09-04
• 1.56.0-alpha-1756505518000 - 2025-08-29
• 1.56.0-alpha-1756475278000 - 2025-08-29
• 1.55.1 - 2025-09-23
  

  Highlights

  #37479 - [Bug]: Upgrade Chromium to 140.0.7339.186.
  #37147 - [Regression]: Internal error: step id not found.
  #37146 - [Regression]: HTML reporter displays a broken chip link when there are no projects.
  #37137 - Revert "fix(a11y): track inert elements as hidden".
  #37532 - chore: do not use -k option

  Browser Versions

  • Chromium 140.0.7339.186
  • Mozilla Firefox 141.0
  • WebKit 26.0

  This version was also tested against the following stable channels:

  • Google Chrome 139
  • Microsoft Edge 139
• 1.55.1-beta-1758616458000 - 2025-09-23
• 1.55.0 - 2025-08-20
  

  New APIs

  • New Property testStepInfo.titlePath Returns the full title path starting from the test file, including test and step titles.

  Codegen

  • Automatic toBeVisible() assertions: Codegen can now generate automatic toBeVisible() assertions for common UI interactions. This feature can be enabled in the Codegen settings UI.

  Breaking Changes

  • ⚠️ Dropped support for Chromium extension manifest v2.

  Miscellaneous

  • Added support for Debian 13 "Trixie".

  Browser Versions

  • Chromium 140.0.7339.16
  • Mozilla Firefox 141.0
  • WebKit 26.0

  This version was also tested against the following stable channels:

  • Google Chrome 139
  • Microsoft Edge 139
• 1.55.0-beta-1758616447000 - 2025-09-23
• 1.55.0-beta-1758585919000 - 2025-09-23
• 1.55.0-beta-1756370488000 - 2025-08-28
• 1.55.0-beta-1756314050000 - 2025-08-27
• 1.55.0-beta-1756314001000 - 2025-08-27
• 1.55.0-beta-1755874678000 - 2025-08-22
• 1.55.0-beta-1755685567000 - 2025-08-20
• 1.55.0-beta-1755673225000 - 2025-08-20
• 1.55.0-beta-1755614570000 - 2025-08-19
• 1.55.0-beta-1755602792000 - 2025-08-19
• 1.55.0-alpha-2025-08-19 - 2025-08-19
• 1.55.0-alpha-2025-08-18 - 2025-08-18
• 1.55.0-alpha-2025-08-17 - 2025-08-17
• 1.55.0-alpha-2025-08-16 - 2025-08-16
• 1.55.0-alpha-2025-08-15 - 2025-08-15
• 1.55.0-alpha-2025-08-14 - 2025-08-14
• 1.55.0-alpha-2025-08-13 - 2025-08-13
• 1.55.0-alpha-2025-08-12 - 2025-08-12
• 1.55.0-alpha-2025-08-11 - 2025-08-11
• 1.55.0-alpha-2025-08-10 - 2025-08-10
• 1.55.0-alpha-2025-08-09 - 2025-08-09
• 1.55.0-alpha-2025-08-08 - 2025-08-08
• 1.55.0-alpha-2025-08-07 - 2025-08-07
• 1.55.0-alpha-2025-08-06 - 2025-08-06
• 1.55.0-alpha-2025-08-05 - 2025-08-05
• 1.55.0-alpha-2025-08-04 - 2025-08-04
• 1.55.0-alpha-2025-08-03 - 2025-08-03
• 1.55.0-alpha-2025-08-02 - 2025-08-02
• 1.55.0-alpha-2025-08-01 - 2025-08-01
• 1.55.0-alpha-2025-07-31 - 2025-07-31
• 1.55.0-alpha-2025-07-30 - 2025-07-30
• 1.55.0-alpha-2025-07-29 - 2025-07-29
• 1.55.0-alpha-2025-07-28 - 2025-07-28
• 1.55.0-alpha-2025-07-27 - 2025-07-27
• 1.55.0-alpha-2025-07-26 - 2025-07-26
• 1.55.0-alpha-2025-07-25 - 2025-07-25
• 1.55.0-alpha-2025-07-24 - 2025-07-24
• 1.55.0-alpha-2025-07-23 - 2025-07-23
• 1.55.0-alpha-2025-07-22 - 2025-07-22
• 1.55.0-alpha-2025-07-21 - 2025-07-21
• 1.55.0-alpha-2025-07-20 - 2025-07-20
• 1.55.0-alpha-2025-07-19 - 2025-07-19
• 1.55.0-alpha-2025-07-18 - 2025-07-18
• 1.55.0-alpha-2025-07-17 - 2025-07-17
• 1.55.0-alpha-2025-07-16 - 2025-07-16
• 1.55.0-alpha-2025-07-15 - 2025-07-15
• 1.55.0-alpha-2025-07-14 - 2025-07-14
• 1.55.0-alpha-2025-07-13 - 2025-07-13
• 1.55.0-alpha-2025-07-12 - 2025-07-12
• 1.55.0-alpha-2025-07-11 - 2025-07-11
• 1.55.0-alpha-2025-07-10 - 2025-07-10
• 1.55.0-alpha-1755516433000 - 2025-08-18
• 1.55.0-alpha-1754386682000 - 2025-08-05
• 1.55.0-alpha-1754048396000 - 2025-08-01
• 1.55.0-alpha-1753913825000 - 2025-07-30
• 1.55.0-alpha-1753197277000 - 2025-07-22
• 1.55.0-alpha-1752701791000 - 2025-07-16
• 1.55.0-alpha-1752540053000 - 2025-07-15
• 1.54.2 - 2025-08-01
  

  Highlights

  #36714 - [Regression]: Codegen is not able to launch in Administrator Terminal on Windows (ProtocolError: Protocol error)
  #36828 - [Regression]: Playwright Codegen keeps spamming with selected option
  #36810 - [Regression]: Starting Codegen with target language doesn't work anymore

  Browser Versions

  • Chromium 139.0.7258.5
  • Mozilla Firefox 140.0.2
  • WebKit 26.0

  This version was also tested against the following stable channels:

  • Google Chrome 140
  • Microsoft Edge 140
• 1.54.2-beta-1754031638000 - 2025-08-01
• 1.54.1 - 2025-07-11
  

  Highlights

  #36650 - [Regression]: 1.54.0 breaks downloading browsers when an HTTP(S) proxy is used

  Browser Versions

  • Chromium 139.0.7258.5
  • Mozilla Firefox 140.0.2
  • WebKit 26.0

  This version was also tested against the following stable channels:

  • Google Chrome 140
  • Microsoft Edge 140

from @playwright/test GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch snyk-upgrade-019a7665bc88d4ffc4552d0ab727cd3d

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR upgrades @playwright/test from version 1.54.1 to 1.56.1 to address a medium-severity security vulnerability (SNYK-JS-PLAYWRIGHTCORE-13553173) related to improper verification of cryptographic signatures. The upgrade spans 139 versions and includes new features and one breaking change regarding browser context background pages.

Key changes:

• Security fix for cryptographic signature verification vulnerability
• Upgrade includes new APIs (page.consoleMessages(), page.requests(), etc.)
• Breaking change: browserContext.on('backgroundpage') event deprecated

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
frontend/package.json	Updates @playwright/test dependency from ^1.54.1 to ^1.56.1
frontend/package-lock.json	Updates resolved versions and integrity hashes for @playwright/test, playwright, and playwright-core to 1.56.1

Files not reviewed (1)

• frontend/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Keep root lockfile in sync with Playwright bump

frontend/package.json now requires @playwright/test ^1.56.1, but the workspace entry in the root package-lock.json still records ^1.54.1 (see line ~50 there). npm ci enforces that the lockfile matches every workspace manifest, so any workflow installing from the repo root (e.g. firebase-hosting-*.yml jobs that run npm ci && npm run build) will now fail with a lockfile mismatch and continue to resolve the old Playwright version. Regenerate the root lockfile so the workspace lock matches the updated manifest.

Useful? React with 👍 / 👎.