Bump the dev-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the dev-dependencies group with 2 updates in the / directory: js-yaml and puppeteer.

Updates js-yaml from 4.2.0 to 5.1.0

Changelog

Sourced from js-yaml's changelog.

[5.1.0] - 2026-06-23

Added

• Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

• [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

• Added named exports for schemas, tags, parser events and AST utilities.
• Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
• Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
• Added dump() transform option for changing the generated AST before rendering.
• Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
• Added formal data layers (events and AST) for modular data pipelines.
  • Added low-level parser (to events), presenter and visitor APIs.
• Added the YAML Test Suite to the test set.

Changed

• See the migration guide for upgrade notes.
• Rewritten in TypeScript and reorganized the public API around flat named exports.
• Reduced the set of exported schemas:
  • YAML 1.2 schemas: CORE_SCHEMA (loader default), JSON_SCHEMA, FAILSAFE_SCHEMA.
  • YAML11_SCHEMA, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").
• load/dump default behaviour is now specified exactly via schemas:
  • load uses CORE_SCHEMA, without !!merge by default.
  • dump uses YAML11_SCHEMA + CORE_SCHEMA for the quoting check, to guarantee backward compatibility by default.
• !!set is now loaded as a JavaScript Set.
• Replaced the Type API with a tags API. Similar, but more precise and simpler. See examples for details. Tags can be defined via defineScalarTag(), defineSequenceTag() and defineMappingTag(), or as a spread + override of an existing tag.
• Renamed Schema.extend() to Schema.withTags().
• Expanded YAML 1.2 conformance and improved handling of directives, document markers, block keys, multiline scalars, tag syntax and other things.
• load() now throws on empty input instead of returning undefined.
• Moved browser builds to the js-yaml/browser export.

... (truncated)

Commits

• f1e45cd 5.1.0 released
• 53b22be Fix constructor coverage
• a1eaa2b Fix quote style options and restore forceQuotes
• 0532e7d Add finalizers for immutable collection tags
• 9f00b91 tests: drop the rest of issues tests, move a small fraction of useful checks ...
• 6be5d46 tests: drop not actual or duplicating issue tests (covered in other places)
• a7c9766 Fix !!pairs coverage
• 75148bc 5.0.0 released
• 704b25d Quote document markers followed by whitespace
• 42dea28 Support complex !!pairs keys with realMapTag
• Additional commits viewable in compare view

Updates puppeteer from 25.1.0 to 25.2.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.2.0

25.2.0 (2026-06-22)

🎉 Features

• add page locale emulation (#15075) (c528f65)
• add waitForFunction to webWorkers (#15100) (0bdfa77)
• allow extensions to run over websockets (#15059) (b84d8a1)
• roll to Chrome 150.0.7871.24 (#15126) (b74ed1c)
• roll to Firefox 152.0 (#15125) (87be906)

🛠️ Fixes

• apply allowlist to non-auto-attach sessions (#15136) (5c7a0e0)
• await for Worker script exection (#15099) (dc469b8)
• block service worker registrations (#15135) (d03617c)
• correct screencast frame timing so playback matches real time (#15112) (525b384)
• remove global skipDownload early return to include other configs (#15130) (5b1cb20)
• roll to Firefox 152.0.1 (#15134) (fd12dd6)
• webmcp: invalidate webmcp tools on context destruction (#15068) (8e9c0fa)

📄 Documentation

• clarify the network allowlist/blocklist implementation (#15148) (a7f124c)
• Update Page.target deprecation message to cover broader usage. (#15108) (882c43d)

⚡ Performance

• cdp: parallelize extension workers fetching (#15057) (fdee509)
• optimize headersArray iteration in HTTPRequest (#15004) (eb95798)
• optimize property descriptors iteration in JSHandle (#15094) (2483b65)
• parallelize iframe population in accessibility snapshots (#15083) (7e3d42e)

🏗️ Refactor

• sync accessing debugger (#15066) (9046239)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.4 to 3.0.5

puppeteer: v25.2.0

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.2.0 (2026-06-22)

🎉 Features

• add page locale emulation (#15075) (c528f65)
• add waitForFunction to webWorkers (#15100) (0bdfa77)
• allow extensions to run over websockets (#15059) (b84d8a1)
• roll to Chrome 150.0.7871.24 (#15126) (b74ed1c)
• roll to Firefox 152.0 (#15125) (87be906)

🛠️ Fixes

• apply allowlist to non-auto-attach sessions (#15136) (5c7a0e0)
• await for Worker script exection (#15099) (dc469b8)
• block service worker registrations (#15135) (d03617c)
• correct screencast frame timing so playback matches real time (#15112) (525b384)
• remove global skipDownload early return to include other configs (#15130) (5b1cb20)
• roll to Firefox 152.0.1 (#15134) (fd12dd6)
• webmcp: invalidate webmcp tools on context destruction (#15068) (8e9c0fa)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.4 to 3.0.5

📄 Documentation

• clarify the network allowlist/blocklist implementation (#15148) (a7f124c)
• Update Page.target deprecation message to cover broader usage. (#15108) (882c43d)

⚡ Performance

• cdp: parallelize extension workers fetching (#15057) (fdee509)
• optimize headersArray iteration in HTTPRequest (#15004) (eb95798)
• optimize property descriptors iteration in JSHandle (#15094) (2483b65)
• parallelize iframe population in accessibility snapshots (#15083) (7e3d42e)

🏗️ Refactor

• sync accessing debugger (#15066) (9046239)

Commits

• 0496143 chore: release main (#15064)
• a7f124c docs: clarify the network allowlist/blocklist implementation (#15148)
• 036503e test: add iframe tests (#15149)
• 2d71ccc chore: fix regression of debug logs (#15147)
• 5b1cb20 fix: remove global skipDownload early return to include other configs (#15130)
• 1106b6e chore(deps): bump the all group in /website with 2 updates (#15143)
• f14e4ad chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the all group (#15144)
• 6d120e6 chore(deps): bump node from 40ad9f3 to 032e78d in /docker in the all grou...
• 5c7a0e0 fix: apply allowlist to non-auto-attach sessions (#15136)
• 77c4ffd chore(webmcp): Update WebMCP to Chrome 150 implementation (#15069)
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.00%. Comparing base (9c3ad5a) to head (70a39ba).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2176   +/-   ##
=======================================
  Coverage   46.00%   46.00%           
=======================================
  Files        1039     1039           
  Lines       17189    17189           
  Branches     3138     3138           
=======================================
  Hits         7907     7907           
  Misses       9282     9282           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.