Bump the minor group in /test-app with 3 updates

[dependabot]

Bumps the minor group in /test-app with 3 updates: zone.js, @playwright/test and typescript-eslint.

Updates zone.js from 0.15.1 to 0.16.3

Changelog

Sourced from zone.js's changelog.

0.16.3 (2026-09-02)

• docs(zone.js): point the Bluebird link at the project repo (731c838)
• fix(zone.js): preserve accessor and non-enumerable event listener options (4c4a705), closes #54142 #54142 #70431
• ci: add Alan as a zone.js reviewer (5553699)
• fix(zone.js): guard against null handle when detecting refreshable timers (36c2197), closes #70044
• fix(zone.js): vitest patching of describe/it curried calls (e23541b), closes #69748
• fix(zone.js): harden zoneSymbolEventNames and patches against proto key (2d33fd5)
• fix(zone.js): harden zoneSymbolEventNames against proto key (defense-in-depth) (fd7c2da)
• fix(zone.js): avoid type error on custom object rejection with rejection property (fa75800)
• fix(zone.js): validate __Zone_symbol_prefix to prevent DOM clobbering attacks (e50f504)

0.16.2 (2026-05-06)

• feat(zone.js): support vitest patching in zone.js/testing (#68395) (62c6e3b), closes #68395 #68395
• fix(zone.js): allow draining microtasks in Promise.then (through flag) (fc6a7ee), closes angular#45273 angular#44446 angular#55590 angular#51328

0.16.1 (2026-02-18)

• fix(zone.js): support passthrough of Promise.try API (fc557f0), closes #67057

0.16.0 (2025-11-19)

• fix(zone.js): Support jasmine v6 (48abe00)
• fix(zone.js): waitForAsync should pass args to the test function (#61755) (3c216c1), closes #61755 #61717 #61755
• refactor(zone.js): Add internal implementation for auto ticking fakeAsync (#62135) (0a827f9), closes #62135 #62135
• refactor(zone.js): Improve missing proxy zone error for jest imported (#64497) (ced2fa5), closes #64497 #47603 #64497
• refactor(zone.js): remove legacy browser support (#63511) (2e46596), closes #63511 #63511
• refactor(zone.js): remove unused jasmine globalerror monkey patching. (#63077) (9aef481), closes #63077 #63072 #63077
• test(zone.js): refactor tests to remove usage of shelljs (#64042) (422a3b9), closes #64042 #64042

BREAKING CHANGE

• IE/Non-Chromium Edge are not supported anymore.

Commits

• 124bf44 release: cut the zone.js-0.16.3 release
• 4c4a705 fix(zone.js): preserve accessor and non-enumerable event listener options
• 9cf7b44 build: remove explicit strict options
• 731c838 docs(zone.js): point the Bluebird link at the project repo
• 444b465 build: update cross-repo angular dependencies
• c2d4070 build: update all non-major dependencies
• 1426f5e build: update cross-repo angular dependencies
• 671d8d3 build: update all non-major dependencies
• c18261f build: enable stableTypeOrdering tsconfig flag
• 732e505 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• Additional commits viewable in compare view

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates typescript-eslint from 8.68.0 to 8.69.0

Release notes

Sourced from typescript-eslint's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• website: respect allowJs playground config (#12744)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.69.0 (2026-08-31)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 9a6e546 chore(release): publish 8.69.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.