chore(deps): bump the pnpm-minor group across 1 directory with 3 updates

[dependabot]

Bumps the pnpm-minor group with 3 updates in the / directory: @aws-sdk/client-s3, @aws-sdk/lib-storage and playwright.

Updates @aws-sdk/client-s3 from 3.1075.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

• codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
• core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

• client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

• clients: update client endpoints as of 2026-07-24 (f84113a7)
• client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
• client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
• client-dynamodb: Endpoint test standardizations (2e9ccdb4)
• client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
• client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
• client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
• core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

• core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

• core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

---

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

• client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
• client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
• client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
• client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
• client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
• client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
• client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
• client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
• client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1089.0 (2026-07-16)

... (truncated)

Commits

• 753d651 Publish v3.1095.0
• bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
• c379112 Publish v3.1094.0
• 0f79b6a Publish v3.1093.0
• 80f0df5 Publish v3.1092.0
• a1269f7 Publish v3.1091.0
• eb268ed Publish v3.1090.0
• 60e8b54 Publish v3.1089.0
• 91723d2 docs(client-s3): Documentation update for removing the 30 day minimum restric...
• 73de389 Publish v3.1088.0
• Additional commits viewable in compare view

Updates @aws-sdk/lib-storage from 3.1075.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

• codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
• core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

• client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

• clients: update client endpoints as of 2026-07-24 (f84113a7)
• client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
• client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
• client-dynamodb: Endpoint test standardizations (2e9ccdb4)
• client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
• client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
• client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
• core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

• core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

• core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

---

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

• client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
• client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
• client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
• client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
• client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
• client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
• client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
• client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
• client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1089.0 (2026-07-16)

... (truncated)

Commits

• 753d651 Publish v3.1095.0
• bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
• c379112 Publish v3.1094.0
• 0f79b6a Publish v3.1093.0
• 80f0df5 Publish v3.1092.0
• a1269f7 Publish v3.1091.0
• eb268ed Publish v3.1090.0
• 60e8b54 Publish v3.1089.0
• 73de389 Publish v3.1088.0
• d43e5bf chore(codegen): sync to use typesVersions entries for submodules (#8195)
• Additional commits viewable in compare view

Updates playwright from 1.61.1 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)
• 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
• bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
• 15c4f55 fix(mcp): identify downloads explicitly (#41933)
• f5fa967 fix(network): request.postData() returns null for empty string body override ...
• 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
• 244a1ff feat(firefox): roll to r1538 (#41938)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying frameworks with    Cloudflare Pages

Latest commit:	6168e4e
Status:	✅  Deploy successful!
Preview URL:	https://d11e49f7.frameworks-573.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-deve-kghy.frameworks-573.pages.dev

View logs

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	playwright@​1.62.0
	@​aws-sdk/​lib-storage@​3.1095.0
	@​aws-sdk/​client-s3@​3.1095.0

View full report