From 28b246f0b37b1ea721c7720d85ffd3e832765852 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 01:21:02 +0000 Subject: [PATCH 1/5] Initial plan From 58c06d3d015249e95e9c1c3ccda6f4c78ec91539 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 01:30:45 +0000 Subject: [PATCH 2/5] Update Playwright to 1.56.1 to fix SSL certificate verification vulnerability Co-authored-by: mainframev <14054752+mainframev@users.noreply.github.com> --- package.json | 5 ++-- tools/storybook-llms-extractor/package.json | 2 +- yarn.lock | 28 ++++++++++----------- 3 files changed, 18 insertions(+), 17 deletions(-) diff --git a/package.json b/package.json index 45a26c51a7487..a5f3909032a5e 100644 --- a/package.json +++ b/package.json @@ -85,7 +85,7 @@ "@octokit/rest": "18.12.0", "@oddbird/css-anchor-positioning": "0.4.0", "@phenomnomnominal/tsquery": "6.1.3", - "@playwright/test": "1.49.1", + "@playwright/test": "1.56.1", "@react-native/babel-preset": "0.73.21", "@rnx-kit/eslint-plugin": "0.8.6", "@rollup/plugin-node-resolve": "13.3.0", @@ -265,7 +265,7 @@ "parse-diff": "0.7.1", "patch-package": "8.0.0", "path-browserify": "1.0.1", - "playwright": "1.49.1", + "playwright": "1.56.1", "plop": "2.6.0", "portfinder": "1.0.28", "postcss": "8.4.31", @@ -363,6 +363,7 @@ "prettier": "2.8.8", "puppeteer": "19.6.3", "ws": "8.17.1", + "playwright": "1.56.1", "**/prismjs": "^1.30.0", "**/@tensile-perf/runner/express": "^4.21.2", "**/tar-fs": "^2.1.4", diff --git a/tools/storybook-llms-extractor/package.json b/tools/storybook-llms-extractor/package.json index 0c16d004df721..a4a5f59d6b223 100644 --- a/tools/storybook-llms-extractor/package.json +++ b/tools/storybook-llms-extractor/package.json @@ -16,7 +16,7 @@ ], "dependencies": { "@swc/helpers": "^0.5.1", - "playwright": "^1.49.1", + "playwright": "^1.56.1", "turndown": "^7.2.0", "turndown-plugin-gfm": "^1.0.2", "yargs": "^17.7.2" diff --git a/yarn.lock b/yarn.lock index e689bba62c56c..50b534285857a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3173,12 +3173,12 @@ resolved "https://registry.yarnpkg.com/@pkgjs/parseargs/-/parseargs-0.11.0.tgz#a77ea742fab25775145434eb1d2328cf5013ac33" integrity sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg== -"@playwright/test@1.49.1": - version "1.49.1" - resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.49.1.tgz#55fa360658b3187bfb6371e2f8a64f50ef80c827" - integrity sha512-Ky+BVzPz8pL6PQxHqNRW1k3mIyv933LML7HktS8uik0bUXNCdPhoS/kLihiO1tMf/egaJb4IutXd7UywvXEW+g== +"@playwright/test@1.56.1": + version "1.56.1" + resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.56.1.tgz#6e3bf3d0c90c5cf94bf64bdb56fd15a805c8bd3f" + integrity sha512-vSMYtL/zOcFpvJCW71Q/OEGQb7KYBPAdKh35WNSkaZA75JlAO8ED8UN6GUNTm3drWomcbcqRPFqQbLae8yBTdg== dependencies: - playwright "1.49.1" + playwright "1.56.1" "@polka/url@^1.0.0-next.24": version "1.0.0-next.24" @@ -16646,17 +16646,17 @@ pkg-up@^4.0.0: dependencies: find-up "^6.2.0" -playwright-core@1.49.1: - version "1.49.1" - resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.49.1.tgz#32c62f046e950f586ff9e35ed490a424f2248015" - integrity sha512-BzmpVcs4kE2CH15rWfzpjzVGhWERJfmnXmniSyKeRZUs9Ws65m+RGIi7mjJK/euCegfn3i7jvqWeWyHe9y3Vgg== +playwright-core@1.56.1: + version "1.56.1" + resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.56.1.tgz#24a66481e5cd33a045632230aa2c4f0cb6b1db3d" + integrity sha512-hutraynyn31F+Bifme+Ps9Vq59hKuUCz7H1kDOcBs+2oGguKkWTU50bBWrtz34OUWmIwpBTWDxaRPXrIXkgvmQ== -playwright@1.49.1, playwright@^1.34.3, playwright@^1.49.1: - version "1.49.1" - resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.49.1.tgz#830266dbca3008022afa7b4783565db9944ded7c" - integrity sha512-VYL8zLoNTBxVOrJBbDuRgDWa3i+mfQgDTrL8Ah9QXZ7ax4Dsj0MSq5bYgytRnDVVe+njoKnfsYkH3HzqVj5UZA== +playwright@1.56.1, playwright@^1.34.3, playwright@^1.56.1: + version "1.56.1" + resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.56.1.tgz#62e3b99ddebed0d475e5936a152c88e68be55fbf" + integrity sha512-aFi5B0WovBHTEvpM3DzXTUaeN6eN0qWnTkKx4NQaH4Wvcmc153PdaY2UBdSYKaGYw+UyWXSVyxDUg5DoPEttjw== dependencies: - playwright-core "1.49.1" + playwright-core "1.56.1" optionalDependencies: fsevents "2.3.2" From 3f60cce46abf7932503ddbb1abe1c10c6c6d5e5a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 02:11:45 +0000 Subject: [PATCH 3/5] Add beachball change file for Playwright security update Co-authored-by: mainframev <14054752+mainframev@users.noreply.github.com> --- ...lms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json diff --git a/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json b/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json new file mode 100644 index 0000000000000..a8c8750bb2c3d --- /dev/null +++ b/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json @@ -0,0 +1,7 @@ +{ + "type": "patch", + "comment": "Update Playwright to 1.56.1 to fix SSL certificate verification vulnerability", + "packageName": "@fluentui/storybook-llms-extractor", + "email": "198982749+Copilot@users.noreply.github.com", + "dependentChangeType": "patch" +} From 5532d3fb42f76e77fbaf50fe892d943af99c2b3e Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 15:18:16 +0000 Subject: [PATCH 4/5] Update Playwright to 1.55.1 to address SSL verification vulnerability and e2e test browser installation issues Co-authored-by: mainframev <14054752+mainframev@users.noreply.github.com> --- ...llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json | 2 +- package.json | 6 +++--- tools/storybook-llms-extractor/package.json | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json b/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json index a8c8750bb2c3d..0fee0f9b10480 100644 --- a/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json +++ b/change/@fluentui-storybook-llms-extractor-5f304d5b-caf3-41b0-a1fd-848a104ad8cb.json @@ -1,6 +1,6 @@ { "type": "patch", - "comment": "Update Playwright to 1.56.1 to fix SSL certificate verification vulnerability", + "comment": "Update Playwright to 1.55.1 to fix SSL certificate verification vulnerability", "packageName": "@fluentui/storybook-llms-extractor", "email": "198982749+Copilot@users.noreply.github.com", "dependentChangeType": "patch" diff --git a/package.json b/package.json index a5f3909032a5e..9b582500103a8 100644 --- a/package.json +++ b/package.json @@ -85,7 +85,7 @@ "@octokit/rest": "18.12.0", "@oddbird/css-anchor-positioning": "0.4.0", "@phenomnomnominal/tsquery": "6.1.3", - "@playwright/test": "1.56.1", + "@playwright/test": "1.55.1", "@react-native/babel-preset": "0.73.21", "@rnx-kit/eslint-plugin": "0.8.6", "@rollup/plugin-node-resolve": "13.3.0", @@ -265,7 +265,7 @@ "parse-diff": "0.7.1", "patch-package": "8.0.0", "path-browserify": "1.0.1", - "playwright": "1.56.1", + "playwright": "1.55.1", "plop": "2.6.0", "portfinder": "1.0.28", "postcss": "8.4.31", @@ -363,7 +363,7 @@ "prettier": "2.8.8", "puppeteer": "19.6.3", "ws": "8.17.1", - "playwright": "1.56.1", + "playwright": "1.55.1", "**/prismjs": "^1.30.0", "**/@tensile-perf/runner/express": "^4.21.2", "**/tar-fs": "^2.1.4", diff --git a/tools/storybook-llms-extractor/package.json b/tools/storybook-llms-extractor/package.json index a4a5f59d6b223..403ec9ea39f95 100644 --- a/tools/storybook-llms-extractor/package.json +++ b/tools/storybook-llms-extractor/package.json @@ -16,7 +16,7 @@ ], "dependencies": { "@swc/helpers": "^0.5.1", - "playwright": "^1.56.1", + "playwright": "^1.55.1", "turndown": "^7.2.0", "turndown-plugin-gfm": "^1.0.2", "yargs": "^17.7.2" From 2c0e9e48c7a4d657475284c69ee0f33b5d9f8774 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 12 Nov 2025 16:00:57 +0000 Subject: [PATCH 5/5] Update yarn.lock with Playwright 1.55.1 and check for duplicates Co-authored-by: mainframev <14054752+mainframev@users.noreply.github.com> --- yarn.lock | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/yarn.lock b/yarn.lock index 50b534285857a..dc554e366e92e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3173,12 +3173,12 @@ resolved "https://registry.yarnpkg.com/@pkgjs/parseargs/-/parseargs-0.11.0.tgz#a77ea742fab25775145434eb1d2328cf5013ac33" integrity sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg== -"@playwright/test@1.56.1": - version "1.56.1" - resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.56.1.tgz#6e3bf3d0c90c5cf94bf64bdb56fd15a805c8bd3f" - integrity sha512-vSMYtL/zOcFpvJCW71Q/OEGQb7KYBPAdKh35WNSkaZA75JlAO8ED8UN6GUNTm3drWomcbcqRPFqQbLae8yBTdg== +"@playwright/test@1.55.1": + version "1.55.1" + resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.55.1.tgz#80f775d5f948cd3ef550fcc45ef99986d3ffb36c" + integrity sha512-IVAh/nOJaw6W9g+RJVlIQJ6gSiER+ae6mKQ5CX1bERzQgbC1VSeBlwdvczT7pxb0GWiyrxH4TGKbMfDb4Sq/ig== dependencies: - playwright "1.56.1" + playwright "1.55.1" "@polka/url@^1.0.0-next.24": version "1.0.0-next.24" @@ -16646,17 +16646,17 @@ pkg-up@^4.0.0: dependencies: find-up "^6.2.0" -playwright-core@1.56.1: - version "1.56.1" - resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.56.1.tgz#24a66481e5cd33a045632230aa2c4f0cb6b1db3d" - integrity sha512-hutraynyn31F+Bifme+Ps9Vq59hKuUCz7H1kDOcBs+2oGguKkWTU50bBWrtz34OUWmIwpBTWDxaRPXrIXkgvmQ== +playwright-core@1.55.1: + version "1.55.1" + resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.55.1.tgz#5d3bb1846bc4289d364ea1a9dcb33f14545802e9" + integrity sha512-Z6Mh9mkwX+zxSlHqdr5AOcJnfp+xUWLCt9uKV18fhzA8eyxUd8NUWzAjxUh55RZKSYwDGX0cfaySdhZJGMoJ+w== -playwright@1.56.1, playwright@^1.34.3, playwright@^1.56.1: - version "1.56.1" - resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.56.1.tgz#62e3b99ddebed0d475e5936a152c88e68be55fbf" - integrity sha512-aFi5B0WovBHTEvpM3DzXTUaeN6eN0qWnTkKx4NQaH4Wvcmc153PdaY2UBdSYKaGYw+UyWXSVyxDUg5DoPEttjw== +playwright@1.55.1, playwright@^1.34.3, playwright@^1.55.1: + version "1.55.1" + resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.55.1.tgz#8a9954e9e61ed1ab479212af9be336888f8b3f0e" + integrity sha512-cJW4Xd/G3v5ovXtJJ52MAOclqeac9S/aGGgRzLabuF8TnIb6xHvMzKIa6JmrRzUkeXJgfL1MhukP0NK6l39h3A== dependencies: - playwright-core "1.56.1" + playwright-core "1.55.1" optionalDependencies: fsevents "2.3.2"