chore(deps-dev): bump hono from 4.11.4 to 4.11.7

[dependabot]

Bumps hono from 4.11.4 to 4.11.7.

Release notes

Sourced from hono's releases.

v4.11.7

Security Release

This release includes security fixes for multiple vulnerabilities in Hono and related middleware. We recommend upgrading if you are using any of the affected components.

Components

IP Restriction Middleware

Fixed an IPv4 address validation bypass that could allow IP-based access control to be bypassed under certain configurations.

Cache Middleware

Fixed an issue where responses marked with Cache-Control: private or no-store could be cached, potentially leading to information disclosure on some runtimes.

Serve Static Middleware (Cloudflare Workers adapter)

Fixed an issue that could allow unintended access to internal asset keys when serving static files with user-controlled paths.

hono/jsx ErrorBoundary

Fixed a reflected Cross-Site Scripting (XSS) issue in the ErrorBoundary component that could occur when untrusted strings were rendered without proper escaping.

Recommendation

Users are encouraged to upgrade to this release, especially if they:

• Use IP Restriction Middleware
• Use Cache Middleware on Deno, Bun, or Node.js
• Use Serve Static Middleware with user-controlled paths on Cloudflare Workers
• Render untrusted data inside ErrorBoundary components

Security Advisories & CVEs

• IP Restriction Middleware – IPv4 address validation bypass

  • Advisory: GHSA-r354-f388-2fhh
  • CVE: CVE-2026-24398

• Cache Middleware ignores Cache-Control: private

  • Advisory: GHSA-6wqw-2p9w-4vw4
  • CVE: CVE-2026-24472

• Serve Static Middleware (Cloudflare Workers adapter) – Arbitrary key read

  • Advisory: GHSA-w332-q679-j88p
  • CVE: CVE-2026-24473

• hono/jsx ErrorBoundary – Cross-Site Scripting (XSS)

  • Advisory: GHSA-9r54-q6cx-xmh5
  • CVE: Pending

... (truncated)

Commits

• f7d272a 4.11.7
• 2cf6004 Merge commit from fork
• cf9a78d Merge commit from fork
• edbf6ee Merge commit from fork
• 12c5117 Merge commit from fork
• 7343487 4.11.6
• b6e5a97 feat(bun): export getBunServer (#4626)
• 2a9cd95 fix(sse): handle \r and \r\n line endings in writeSSE (#4644)
• 8078bbf docs: align CODE_OF_CONDUCT.md wording with Contributor Covenant (#4630)
• a5be555 refactor: use unique symbol for more accurate typing. (#4651)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

Test results for "MCP"

13 failed
❌ [chrome] › mcp/autowait.spec.ts:19 › racy navigation destroys context @mcp-windows-latest
❌ [webkit] › mcp/cli.spec.ts:452 › session › session-delete @mcp-windows-latest
❌ [chromium] › mcp/cli.spec.ts:58 › core › click link @mcp-macos-15
❌ [chromium] › mcp/cli.spec.ts:112 › core › check @mcp-macos-15
❌ [chromium] › mcp/cli.spec.ts:149 › core › dialog-accept @mcp-macos-15
❌ [chromium] › mcp/cli.spec.ts:265 › save as › screenshot @mcp-macos-15
❌ [chromium] › mcp/cli.spec.ts:272 › save as › screenshot @mcp-macos-15
❌ [chromium] › mcp/cli.spec.ts:280 › save as › screenshot --full-page @mcp-macos-15
❌ [chromium] › mcp/core.spec.ts:158 › browser_resize @mcp-macos-15
❌ [chromium] › mcp/launch.spec.ts:21 › test reopen browser @mcp-macos-15
❌ [firefox] › mcp/cli.spec.ts:464 › session › session-delete named session @mcp-macos-15
❌ [firefox] › mcp/cli.spec.ts:476 › session › session-delete non-existent session @mcp-macos-15
❌ [firefox] › mcp/test-debug.spec.ts:48 › test_debug (pause/resume) @mcp-macos-15

3433 passed, 116 skipped

---

Merge workflow run.

[github-actions]

Test results for "tests 1"

7 failed
❌ [playwright-test] › playwright.trace.spec.ts:345 › should retain traces for interrupted tests @macos-latest-node20
❌ [playwright-test] › playwright.unhandled.spec.ts:67 › should produce unhandledRejection when context.route raises @macos-latest-node20
❌ [playwright-test] › reporter-junit.spec.ts:337 › created › should render attachment paths relative to report file when report file name is specified @macos-latest-node20
❌ [playwright-test] › reporter-line.spec.ts:193 › merged › should show error context with relative path @macos-latest-node20
❌ [playwright-test] › reporter-html.spec.ts:1037 › merged › should have link for opening HTML attachments in new tab @macos-latest-node20
❌ [playwright-test] › to-have-screenshot.spec.ts:77 › should not retry missing expectation errors @macos-latest-node20
❌ [playwright-test] › to-have-screenshot.spec.ts:98 › should not retry serial mode suites with missing expectation errors @macos-latest-node20

6 flaky

⚠️ [chromium-page] › page/page-request-continue.spec.ts:754 › propagate headers cross origin redirect after interception `@ubuntu-22.04-chromium-tip-of-tree`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@chromium-ubuntu-22.04-node24`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-ubuntu-22.04-node20`
⚠️ [firefox-library] › library/page-clock.spec.ts:282 › stubTimers › replaces global performance.timeOrigin `@firefox-ubuntu-22.04-node20`
⚠️ [playwright-test] › ui-mode-trace.spec.ts:700 › should indicate current test status `@macos-latest-node20`
⚠️ [playwright-test] › ui-mode-trace.spec.ts:812 › should update state on subsequent run `@macos-latest-node20`

34209 passed, 668 skipped

---

Merge workflow run.

[github-actions]

Test results for "tests others"

2 fatal errors, not part of any test

1 interrupted

⚠️ [electron-page] › page/page-history.spec.ts:226 › page.goForward during renderer-initiated navigation `@electron-macos-latest`

17113 passed, 432 skipped, 799 did not run

---

Merge workflow run.

[github-actions]

Test results for "tests 2"

4 fatal errors, not part of any test
23 failed
❌ [chromium-library] › library/browsercontext-fetch.spec.ts:1263 › should work with connectOverCDP @chromium-headed-macos-14-xlarge
❌ [chromium-library] › library/browsercontext-proxy.spec.ts:27 › should work when passing the proxy only on the context level @chromium-headed-macos-14-xlarge
❌ [chromium-library] › library/har.spec.ts:541 › should have popup requests @chromium-headed-macos-14-xlarge
❌ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:122 › cli codegen › should type after clicking twice @chromium-headed-ubuntu-24.04
❌ [chromium-library] › library/role-utils.spec.ts:178 › axe-core accessible-text @chromium-tip-of-tree-windows-latest--headed
❌ [chromium-library] › library/screenshot.spec.ts:25 › page screenshot › should run in parallel in multiple pages @channel-chromium-macos-latest
❌ [chromium-library] › library/trace-viewer.spec.ts:1710 › canvas disabled title @channel-chromium-macos-latest
❌ [chromium-library] › library/video.spec.ts:582 › screencast › should capture static page in persistent context @smoke @chrome-beta-windows-latest
❌ [chromium-library] › library/screenshot.spec.ts:25 › page screenshot › should run in parallel in multiple pages @msedge-beta-macos-latest
❌ [chromium-library] › library/tracing.spec.ts:563 › should not hang for clicks that open dialogs @msedge-beta-macos-latest
❌ [chromium-page] › page/page-click-scroll.spec.ts:19 › should not hit scroll bar @msedge-beta-macos-latest
❌ [chromium-page] › page/page-click-timeout-4.spec.ts:52 › should fail to click the button behind a large header after scrolling around @msedge-beta-macos-latest
❌ [chromium-page] › page/page-click.spec.ts:295 › should scroll and click the button with smooth scroll behavior @msedge-beta-macos-latest
❌ [chromium-library] › library/inspector/pause.spec.ts:171 › pause › should disable timeout on paused actions @msedge-dev-macos-latest
❌ [chromium-library] › library/chromium/oopif.spec.ts:341 › should be able to click in iframe @chrome-beta-macos-latest
❌ [chromium-library] › library/role-utils.spec.ts:178 › axe-core accessible-text @chromium-tip-of-tree-ubuntu-22.04--headed
❌ [chromium-page] › page/page-fill.spec.ts:388 › should not throw when fill causes navigation @chromium-tip-of-tree-ubuntu-22.04--headed
❌ [firefox-library] › library/capabilities.spec.ts:70 › should play video @smoke @firefox-headed-ubuntu-24.04
❌ [firefox-library] › library/inspector/cli-codegen-2.spec.ts:312 › cli codegen › should record open in a new tab with url @firefox-headed-macos-14-xlarge
❌ [firefox-library] › library/capabilities.spec.ts:70 › should play video @smoke @firefox-ubuntu-24.04
❌ [webkit-library] › library/popup.spec.ts:20 › should inherit user agent from browser context @smoke @webkit-headed-macos-14-xlarge
❌ [webkit-library] › library/video.spec.ts:840 › screencast › video.start/stop twice @webkit-headed-macos-14-xlarge
❌ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:122 › cli codegen › should type after clicking twice @webkit-headed-ubuntu-24.04

199 flaky

⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-beta-ubuntu-22.04`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:117 › should round-trip through the file `@msedge-beta-ubuntu-22.04`
⚠️ [chromium-library] › library/browsercontext-base-url.spec.ts:37 › should construct a new URL when a baseURL in browserType.launchPersistentContext is passed to page.goto `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsercontext-basic.spec.ts:392 › should create two pages in parallel in various contexts `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsercontext-pages.spec.ts:35 › frame.focus should work multiple times `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:96 › reuse launch › should re-add binding after reset `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsertype-launch-server.spec.ts:23 › launch server › should work `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsertype-launch-server.spec.ts:47 › launch server › should work with wsPath `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsertype-launch.spec.ts:113 › should accept objects as options `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/channels.spec.ts:221 › should work with the domain module `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/chromium.spec.ts:151 › should close service worker together with the context `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/connect-over-cdp.spec.ts:44 › should use logger in default context `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/extensions.spec.ts:45 › MV3 › should give access to the service worker `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/extensions.spec.ts:72 › MV3 › should support request/response events in the service worker `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/oopif.spec.ts:235 › should report google.com frame with headed `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/oopif.spec.ts:326 › should emit filechooser event for iframe `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/oopif.spec.ts:374 › should allow to re-connect to OOPIFs with CDP when iframes were there already `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/debug-controller.spec.ts:142 › should reset for reuse `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/defaultbrowsercontext-2.spec.ts:106 › should accept relative userDataDir `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/defaultbrowsercontext-2.spec.ts:140 › should create userDataDir if it does not exist `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/defaultbrowsercontext-2.spec.ts:252 › dialog.accept should work `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/download.spec.ts:377 › download event › should delete downloads on browser gone `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/downloads-path.spec.ts:32 › downloads path › should keep downloadsPath folder `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/downloads-path.spec.ts:63 › downloads path › should report downloads in downloadsPath folder `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/inspector/cli-codegen-3.spec.ts:672 › cli codegen › should consume contextmenu events, despite a custom context menu `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/screenshot.spec.ts:291 › element screenshot › should restore viewport after page screenshot and timeout `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/tracing.spec.ts:361 › should not crash when browser closes mid-trace `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/tracing.spec.ts:370 › should survive browser.close with auto-created traces dir `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/video.spec.ts:209 › screencast › should continue recording main page after popup closes `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:21 › cli codegen › should click `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:876 › cli codegen › should attribute navigation to press/fill `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/inspector/cli-codegen-aria.spec.ts:76 › should update aria snapshot highlight `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@tracing-chromium`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-ubuntu-22.04`
⚠️ [chromium-library] › library/video.spec.ts:840 › screencast › video.start/stop twice `@msedge-ubuntu-22.04`
⚠️ [chromium-library] › library/browsercontext-page-event.spec.ts:160 › should work with Shift-clicking `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/browsercontext-proxy.spec.ts:103 › should set cookie for top-level domain `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:116 › reuse connect › should reset serviceworker `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:117 › should round-trip through the file `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/chromium/connect-over-cdp.spec.ts:242 › should send extra headers with connect request `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-dev-ubuntu-22.04`
⚠️ [chromium-library] › library/page-close.spec.ts:81 › should pass page to close event `@msedge-dev-ubuntu-22.04`
⚠️ [chromium-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@chromium-tip-of-tree-windows-latest`
⚠️ [chromium-library] › library/trace-viewer.spec.ts:800 › should restore control values `@chromium-tip-of-tree-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:840 › screencast › video.start/stop twice `@chrome-ubuntu-22.04`
⚠️ [chromium-library] › library/browsercontext-proxy.spec.ts:103 › should set cookie for top-level domain `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:117 › should round-trip through the file `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/download.spec.ts:377 › download event › should delete downloads on browser gone `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:94 › cli codegen › should click twice `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/signals.spec.ts:25 › should close the browser when the node process closes `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:209 › screencast › should continue recording main page after popup closes `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:96 › reuse connect › should re-add binding after reset `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-library] › library/browsertype-launch-server.spec.ts:23 › launch server › should work `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-library] › library/browsertype-launch.spec.ts:22 › should reject all promises when browser is closed `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:122 › cli codegen › should type after clicking twice `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-library] › library/role-utils.spec.ts:38 › wpt accname #2 `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-page] › page/page-fill.spec.ts:388 › should not throw when fill causes navigation `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-macos-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:21 › cli codegen › should click `@msedge-macos-latest`
⚠️ [chromium-library] › library/screenshot.spec.ts:291 › element screenshot › should restore viewport after page screenshot and timeout `@msedge-macos-latest`
⚠️ [chromium-page] › page/page-wait-for-selector-2.spec.ts:342 › should succeed if element handle was detached while waiting for hidden `@msedge-macos-latest`
⚠️ [chromium-library] › library/chromium/oopif.spec.ts:152 › should take screenshot `@channel-chromium-macos-latest`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@channel-chromium-macos-latest`
⚠️ [chromium-library] › library/screenshot.spec.ts:291 › element screenshot › should restore viewport after page screenshot and timeout `@channel-chromium-macos-latest`
⚠️ [chromium-page] › page/page-screenshot.spec.ts:641 › page screenshot animations › should stop animations that happen right before screenshot `@channel-chromium-macos-latest`
⚠️ [chromium-library] › library/browsercontext-proxy.spec.ts:103 › should set cookie for top-level domain `@msedge-windows-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-windows-latest`
⚠️ [chromium-library] › library/chromium/connect-over-cdp.spec.ts:90 › should connectOverCDP and manage downloads in default context `@msedge-windows-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@chromium-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:381 › screencast › should capture navigation `@chromium-macos-15-xlarge`
⚠️ [chromium-library] › library/beforeunload.spec.ts:55 › should run beforeunload if asked for @smoke `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/beforeunload.spec.ts:170 › should support closing the page via a subsequent onbeforeunload dialog `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/browsercontext-page-event.spec.ts:160 › should work with Shift-clicking `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:306 › reuse launch › should reset tracing `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:152 › reuse connect › should reset serviceworker that hangs in importScripts `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:117 › should round-trip through the file `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/browsercontext-timezone-id.spec.ts:48 › should throw for invalid timezone IDs when creating pages `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/chromium/connect-over-cdp.spec.ts:90 › should connectOverCDP and manage downloads in default context `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/chromium/oopif.spec.ts:152 › should take screenshot `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/page-close.spec.ts:75 › should set the page close state `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/popup.spec.ts:20 › should inherit user agent from browser context @smoke `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/tracing.spec.ts:361 › should not crash when browser closes mid-trace `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/tracing.spec.ts:370 › should survive browser.close with auto-created traces dir `@msedge-beta-macos-latest`
⚠️ [chromium-page] › page/locator-frame.spec.ts:272 › should work with COEP/COOP/CORP isolated iframe `@msedge-beta-macos-latest`
⚠️ [chromium-page] › page/page-screenshot.spec.ts:424 › page screenshot › should take fullPage screenshots during navigation `@msedge-beta-macos-latest`
⚠️ [chromium-library] › library/beforeunload.spec.ts:55 › should run beforeunload if asked for @smoke `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:197 › reuse launch › should not cache resources `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:54 › should set local storage `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/browsercontext-storage-state.spec.ts:117 › should round-trip through the file `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:94 › cli codegen › should click twice `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-csharp.spec.ts:202 › should not print context options method override in mstest if no options were passed `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-python.spec.ts:98 › should print load/save storage_state `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/page-close.spec.ts:81 › should pass page to close event `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/page-close.spec.ts:128 › page.close should work with window.close `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/page-close.spec.ts:134 › should not throw UnhandledPromiseRejection when page closes `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/screenshot.spec.ts:25 › page screenshot › should run in parallel in multiple pages `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/unroute-behavior.spec.ts:277 › route.fallback should not throw if page has been closed `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/unroute-behavior.spec.ts:291 › route.fulfill should not throw if page has been closed `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/web-socket.spec.ts:203 › should turn off when offline `@msedge-dev-macos-latest`
⚠️ [chromium-library] › library/global-fetch.spec.ts:32 › post should work @smoke `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/global-fetch.spec.ts:343 › should json stringify bool (false) body when content-type is application/json `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/har.spec.ts:541 › should have popup requests `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/headful.spec.ts:291 › headless and headful should use same default fonts `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/permissions.spec.ts:256 › should be able to use the local-fonts API `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/trace-viewer.spec.ts:1710 › canvas disabled title `@chrome-beta-macos-latest`
⚠️ [chromium-page] › page/page-screenshot.spec.ts:424 › page screenshot › should take fullPage screenshots during navigation `@chrome-beta-macos-latest`
⚠️ [chromium-page] › page/page-wait-for-selector-2.spec.ts:351 › should succeed if element handle was detached while waiting for detached `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/inspector/pause.spec.ts:477 › pause › should highlight on explore (csharp) `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-library] › library/role-utils.spec.ts:38 › wpt accname #1 `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-library] › library/role-utils.spec.ts:38 › wpt accname #2 `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-library] › library/screenshot.spec.ts:291 › element screenshot › should restore viewport after page screenshot and timeout `@chrome-macos-latest`
⚠️ [chromium-library] › library/trace-viewer.spec.ts:1720 › canvas clipping `@chrome-macos-latest`
⚠️ [chromium-library] › library/inspector/cli-codegen-3.spec.ts:74 › cli codegen › should click locator.nth `@chromium-headed-windows-latest`
⚠️ [chromium-page] › page/page-drag.spec.ts:73 › Drag and drop › should work inside iframe `@chromium-headed-windows-latest`
⚠️ [installation tests] › playwright-packages-install-behavior.spec.ts:40 › @playwright/browser-chromium should work `@package-installations-ubuntu-latest-node20`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@firefox-macos-14-xlarge`
⚠️ [firefox-page] › page/page-request-continue.spec.ts:286 › should work with Cross-Origin-Opener-Policy `@firefox-macos-14-xlarge`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-macos-14-xlarge`
⚠️ [firefox-library] › library/beforeunload.spec.ts:107 › should not stall on click when dismissing beforeunload `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-library] › library/video.spec.ts:562 › screencast › should be 800x600 with null viewport `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-page] › page/page-add-locator-handler.spec.ts:62 › should work with a custom check `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-page] › page/page-click.spec.ts:1056 › should click a button that is overlaid by a permission popup `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-beta-ubuntu-22.04`
⚠️ [firefox-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@firefox-beta-ubuntu-22.04`
⚠️ [firefox-library] › library/signals.spec.ts:25 › should close the browser when the node process closes `@firefox-beta-windows-latest`
⚠️ [firefox-page] › page/retarget.spec.ts:104 › enabled/disabled retargeting `@firefox-beta-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:821 › cli codegen › should attribute navigation to click `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-3.spec.ts:553 › cli codegen › should generate getByAltText `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/page-close.spec.ts:162 › should not treat navigations as new popups `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/video.spec.ts:381 › screencast › should capture navigation `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-macos-14-large`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-macos-14-large`
⚠️ [firefox-library] › library/agent-perform.spec.ts:27 › click a button `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/agent-perform.spec.ts:141 › perform history `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsercontext-basic.spec.ts:36 › should be able to click across browser contexts `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsercontext-har.spec.ts:415 › should ignore boundary when matching multipart/form-data body `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsercontext-network-event.spec.ts:21 › BrowserContext.Events.Request `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsertype-connect.spec.ts:250 › launchServer › should send default User-Agent and X-Playwright-Browser headers with connect request `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/emulation-focus.spec.ts:189 › should not fire blur events when interacting with more than one page/context `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/hit-target.spec.ts:185 › should work with block inside inline `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-3.spec.ts:187 › cli codegen › should generate frame locators (3) `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/trace-viewer.spec.ts:94 › should show empty trace viewer `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/video.spec.ts:165 › screencast › should work with old options `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/video.spec.ts:381 › screencast › should capture navigation `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/video.spec.ts:652 › screencast › should throw if browser dies `@firefox-headed-windows-latest`
⚠️ [firefox-page] › page/page-add-locator-handler.spec.ts:19 › should work `@firefox-headed-windows-latest`
⚠️ [firefox-page] › page/page-autowaiting-basic.spec.ts:144 › should report and collapse log in action `@firefox-headed-windows-latest`
⚠️ [firefox-page] › page/page-click.spec.ts:1056 › should click a button that is overlaid by a permission popup `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/video.spec.ts:189 › screencast › should capture static page `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/interception.spec.ts:287 › should disable memory cache when intercepting `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-click-scroll.spec.ts:100 › should scroll into view element in iframe `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-click.spec.ts:295 › should scroll and click the button with smooth scroll behavior `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-goto.spec.ts:159 › should work with Cross-Origin-Opener-Policy after redirect `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-keyboard.spec.ts:688 › should type after context menu was opened `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-request-continue.spec.ts:286 › should work with Cross-Origin-Opener-Policy `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-request-gc.spec.ts:19 › should work `@firefox-beta-macos-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-macos-15-large`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-macos-15-large`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-windows-latest`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1082 › cli codegen › should not throw csp directive violation errors `@firefox-macos-15-xlarge`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-macos-15-xlarge`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:292 › cli codegen › should not target selector preview by text regexp `@webkit-headed-ubuntu-24.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:353 › cli codegen › should fill japanese text `@webkit-headed-ubuntu-24.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:761 › cli codegen › should await popup `@webkit-headed-ubuntu-24.04`
⚠️ [webkit-library] › library/trace-viewer.spec.ts:1090 › should show action source `@webkit-headed-ubuntu-24.04`
⚠️ [webkit-library] › library/browsercontext-reuse.spec.ts:116 › reuse launch › should reset serviceworker `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/browsercontext-reuse.spec.ts:116 › reuse connect › should reset serviceworker `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:633 › cli codegen › should check with keyboard after hover `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:720 › cli codegen › should select with size attribute `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:876 › cli codegen › should attribute navigation to press/fill `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-2.spec.ts:312 › cli codegen › should record open in a new tab with url `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-2.spec.ts:499 › cli codegen › should auto-generate toBeVisible `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-3.spec.ts:226 › cli codegen › should generate frame locators (4) `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-3.spec.ts:582 › cli codegen › should generate getByLabel `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-aria.spec.ts:120 › should show aria snapshot error `@webkit-headed-windows-latest`
⚠️ [webkit-page] › page/page-mouse.spec.ts:174 › should report correct pointerType property `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:122 › cli codegen › should type after clicking twice `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:151 › cli codegen › should ignore programmatic events `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-3.spec.ts:640 › cli codegen › should consume pointer events `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-3.spec.ts:672 › cli codegen › should consume contextmenu events, despite a custom context menu `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-library] › library/inspector/cli-codegen-aria.spec.ts:76 › should update aria snapshot highlight `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-library] › library/inspector/pause.spec.ts:477 › pause › should highlight on explore (csharp) `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-page] › page/page-mouse.spec.ts:174 › should report correct pointerType property `@webkit-headed-ubuntu-22.04`
⚠️ [webkit-page] › page/page-set-input-files.spec.ts:297 › should detect mime type `@tracing-webkit`
⚠️ [webkit-library] › library/browsercontext-reuse.spec.ts:116 › reuse launch › should reset serviceworker `@webkit-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@webkit-windows-latest`
⚠️ [webkit-page] › page/page-set-input-files.spec.ts:297 › should detect mime type `@webkit-ubuntu-24.04`
⚠️ [webkit-page] › page/page-request-fallback.spec.ts:239 › post data › should amend binary post data `@webkit-macos-15-large`

244395 passed, 9335 skipped

---

Merge workflow run.