chrome-devtools-frontend 1.0.1721762 → 1.0.1726686

package/front_end/third_party/puppeteer/package/lib/puppeteer/revisions.d.ts

@@ -7,8 +7,8 @@
  * @internal
  */
 export declare const PUPPETEER_REVISIONS: Readonly<{
-    chrome: "155.0.8059.79";
-    'chrome-headless-shell': "155.0.8059.79";
-    firefox: "stable_158.0";
+    chrome: "156.0.8078.47";
+    'chrome-headless-shell': "156.0.8078.47";
+    firefox: "stable_158.0.1";
 }>;
 //# sourceMappingURL=revisions.d.ts.map

package/front_end/third_party/puppeteer/package/lib/puppeteer/revisions.js

@@ -7,8 +7,8 @@
  * @internal
  */
 export const PUPPETEER_REVISIONS = Object.freeze({
-    chrome: '155.0.8059.79',
-    'chrome-headless-shell': '155.0.8059.79',
-    firefox: 'stable_158.0',
+    chrome: '156.0.8078.47',
+    'chrome-headless-shell': '156.0.8078.47',
+    firefox: 'stable_158.0.1',
 });
 //# sourceMappingURL=revisions.js.map

package/front_end/third_party/puppeteer/package/lib/puppeteer/revisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"revisions.js","sourceRoot":"","sources":["../../src/revisions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,eAAe;IACvB,uBAAuB,EAAE,eAAe;IACxC,OAAO,EAAE,cAAc;CACxB,CAAC,CAAC"}
+{"version":3,"file":"revisions.js","sourceRoot":"","sources":["../../src/revisions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,eAAe;IACvB,uBAAuB,EAAE,eAAe;IACxC,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC"}

package/front_end/third_party/puppeteer/package/lib/puppeteer/util/encoding.d.ts

@@ -6,7 +6,7 @@
 /**
  * @internal
  */
-export declare function stringToTypedArray(string: string, base64Encoded?: boolean): Uint8Array;
+export declare function stringToTypedArray(string: string, base64Encoded?: boolean): Uint8Array<ArrayBuffer>;
 /**
  * @internal
  */
@@ -18,5 +18,5 @@ export declare function typedArrayToBase64(typedArray: Uint8Array): string;
 /**
  * @internal
  */
-export declare function mergeUint8Arrays(items: Uint8Array[]): Uint8Array;
+export declare function mergeUint8Arrays(items: Uint8Array[]): Uint8Array<ArrayBuffer>;
 //# sourceMappingURL=encoding.d.ts.map

package/front_end/third_party/puppeteer/package/lib/puppeteer/util/encoding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../../src/util/encoding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,aAAa,UAAQ,GACpB,UAAU,CAeZ;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAajE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAehE"}
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../../src/util/encoding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,aAAa,UAAQ,GACpB,UAAU,CAAC,WAAW,CAAC,CAezB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAajE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAe7E"}

package/front_end/third_party/puppeteer/package/lib/puppeteer/util/version.d.ts

@@ -3,5 +3,5 @@
  * Copyright 2025 Google Inc.
  * SPDX-License-Identifier: Apache-2.0
  */
-export declare const packageVersion = "25.14.0";
+export declare const packageVersion = "25.16.0";
 //# sourceMappingURL=version.d.ts.map

package/front_end/third_party/puppeteer/package/lib/puppeteer/util/version.js

@@ -5,6 +5,6 @@
  */
 // If moved update release-please config
 // x-release-please-start-version
-export const packageVersion = '25.14.0';
+export const packageVersion = '25.16.0';
 // x-release-please-end
 //# sourceMappingURL=version.js.map

package/front_end/third_party/puppeteer/package/lib/types.d.ts

@@ -439,6 +439,24 @@ export declare abstract class Browser extends EventEmitter<BrowserEvents> {
    * {@link Browser.defaultBrowserContext | default browser context}).
    */
   abstract target(): Target;
+  /**
+   * Sets the network conditions (blocklist or allowlist) and re-applies the
+   * conditions to all targets.
+   * To clear all network conditions, omit the argument or pass `null`.
+   *
+   * @param conditions - The network conditions to apply.
+   *
+   * @remarks
+   * Currently only supported for Chrome and the CDP protocol.
+   *
+   * Targets that are already on a blocked URL when `restrictNetwork` is called
+   * will remain attached and stay on the blocked page. This is a behavior difference
+   * compared to launching the browser with network restrictions, where such targets
+   * are detached immediately upon initial attach.
+   *
+   * @experimental
+   */
+  restrictNetwork(conditions?: NetworkRestrictions | null): Promise<void>;
   /**
    * Waits until a {@link Target | target} matching the given `predicate`
    * appears and returns it.
@@ -4056,9 +4074,28 @@ export declare abstract class HTTPRequest {
    * Fetches the POST data for the request from the browser.
    */
   abstract fetchPostData(): Promise<string | undefined>;
+  /**
+   * Fetches the POST data for the request from the browser as a `Uint8Array`.
+   *
+   * @remarks
+   * If the request has no POST data or fetching the POST data from the browser
+   * fails, this method resolves to `undefined`.
+   *
+   * @returns A promise that resolves to the raw POST data bytes, or
+   * `undefined` when the request has no POST data or fetching it fails.
+   */
+  abstract content(): Promise<Uint8Array | undefined>;
   /**
    * An object with HTTP headers associated with the request. All
    * header names are lower-case.
+   *
+   * @remarks
+   *
+   * Under CDP, `page.on('request')` fires before the browser's network stack
+   * attaches all headers (such as `accept`, `accept-encoding`, `cookie`,
+   * `host`, and `sec-fetch-*`). The full set of headers is populated
+   * asynchronously and is available by the time `page.on('response')` or
+   * `page.on('requestfinished')` fires.
    */
   abstract headers(): Record<string, string>;
   /**
@@ -4068,7 +4105,7 @@ export declare abstract class HTTPRequest {
    *
    * Headers are copied to the new Request instance. The request URL and
    * method are preserved. The body is built from
-   * {@link HTTPRequest.fetchPostData} when the request has post data,
+   * {@link HTTPRequest.content} when the request has post data,
    * otherwise the Request is created without a body. For `GET` and
    * `HEAD` requests the body is always omitted, as required by the
    * Fetch API.
@@ -5503,6 +5540,8 @@ export declare abstract class Locator<T> extends EventEmitter<LocatorEvents> {
    * method is chosen based on the type. `contenteditable`, select, textarea and
    * input elements are supported. For checkboxes, radio buttons and switches
    * specify a boolean value.
+   * Read-only elements and values the element does not accept are rejected without
+   * modifying the element.
    */
   fill<ElementType extends Element>(
     this: Locator<ElementType>,
@@ -5992,6 +6031,25 @@ export declare interface NetworkConditions {
   latency?: number;
 }
 
+/**
+ * @experimental
+ * @public
+ */
+export declare interface NetworkRestrictions {
+  /**
+   * A list of {@link https://urlpattern.spec.whatwg.org/ | URLPattern} strings to block.
+   * Mutually exclusive with {@link NetworkRestrictions.allowlist}.
+   * Passing `[]` or omitting this option means no restriction.
+   */
+  blocklist?: string[];
+  /**
+   * A list of {@link https://urlpattern.spec.whatwg.org/ | URLPattern} strings to allow.
+   * Mutually exclusive with {@link NetworkRestrictions.blocklist}.
+   * Passing `[]` or omitting this option means no restriction.
+   */
+  allowlist?: string[];
+}
+
 /**
  * @public
  */
@@ -6129,13 +6187,17 @@ export declare abstract class Page extends EventEmitter<PageEvents> {
    * Consider using {@link BrowserContext.overridePermissions} to grant
    * permissions for the page to read its geolocation.
    *
+   * Pass `null` to remove the geolocation override.
+   *
    * @example
    *
    * ```ts
    * await page.setGeolocation({latitude: 59.95, longitude: 30.31667});
+   * // Later, go back to the browser's real geolocation:
+   * await page.setGeolocation(null);
    * ```
    */
-  abstract setGeolocation(options: GeolocationOptions): Promise<void>;
+  abstract setGeolocation(options: GeolocationOptions | null): Promise<void>;
   /**
    * A target this page was created from.
    *
@@ -7983,6 +8045,17 @@ export declare abstract class Page extends EventEmitter<PageEvents> {
    * @experimental
    */
   abstract windowId(): Promise<WindowId>;
+  /**
+   * Returns information about the browser tab of this page. The result is a
+   * snapshot and is not updated when the tab changes.
+   *
+   * @returns `null` if the page is not in a tab strip, for example, in
+   * `chrome-headless-shell`. Chrome before M150 does not report tab
+   * information, so the method also returns `null` there.
+   *
+   * @experimental
+   */
+  abstract tabInfo(): Promise<TabInfo | null>;
   [disposeSymbol](): void;
   [asyncDisposeSymbol](): Promise<void>;
   /**
@@ -8624,6 +8697,7 @@ declare namespace Puppeteer_2 {
     LaunchPWAOptions,
     GetPWAStateOptions,
     PWAState,
+    NetworkRestrictions,
     BrowserContextEvents,
     CDPEvents,
     CDPSessionEvents,
@@ -8679,6 +8753,7 @@ declare namespace Puppeteer_2 {
     NewDocumentScriptEvaluation,
     ReloadOptions,
     HeapSnapshotOptions,
+    TabInfo,
     WritableDestination,
     WebWorkerEvents,
     VisibilityOption,
@@ -9625,7 +9700,8 @@ export declare interface SerializedAXNode {
    * Get an ElementHandle for this AXNode if available.
    *
    * If the underlying DOM element has been disposed, the method might return an
-   * error.
+   * error. If the frame has navigated to a new document since the snapshot,
+   * the method returns `null`.
    */
   elementHandle(): Promise<ElementHandle | null>;
 }
@@ -9700,6 +9776,31 @@ export declare type SupportedWebDriverCapability = Exclude<
   'unhandledPromptBehavior' | 'acceptInsecureCerts'
 >;
 
+/**
+ * Information about the browser tab of a page. See {@link Page.tabInfo}.
+ *
+ * @public
+ * @experimental
+ */
+export declare interface TabInfo {
+  /**
+   * Zero-based index of the tab in its window's tab strip.
+   */
+  index: number;
+  /**
+   * Whether the tab is the active tab in its window.
+   */
+  active: boolean;
+  /**
+   * Whether the tab is pinned.
+   */
+  pinned: boolean;
+  /**
+   * ID of the tab group the tab belongs to, if any.
+   */
+  groupId?: string;
+}
+
 /**
  * Target represents a
  * {@link https://chromedevtools.github.io/devtools-protocol/tot/Target/ | CDP target}.
@@ -10481,6 +10582,15 @@ export declare interface WsOptions {
    * @defaultValue `256 * 1024 * 1024`
    */
   maxPayload?: number;
+  /**
+   * Time in milliseconds to wait for the WebSocket opening handshake before
+   * failing. Without it, connecting to a host that accepts the TCP connection
+   * but never answers the upgrade request waits until the operating system
+   * gives up. Node.js only.
+   *
+   * @defaultValue no timeout
+   */
+  handshakeTimeout?: number;
 }
 
 export {};

package/front_end/third_party/puppeteer/package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "puppeteer-core",
-  "version": "25.14.0",
+  "version": "25.16.0",
   "description": "A high-level API to control headless Chrome over the DevTools Protocol",
   "keywords": [
     "puppeteer",
@@ -148,15 +148,15 @@
   "author": "The Chromium Authors",
   "license": "Apache-2.0",
   "dependencies": {
-    "@puppeteer/browsers": "3.2.5",
+    "@puppeteer/browsers": "3.2.6",
     "chromium-bidi": "157.0.8090-0",
-    "devtools-protocol": "0.0.1696802",
+    "devtools-protocol": "0.0.1704951",
     "typed-query-selector": "^2.12.3",
     "webdriver-bidi-protocol": "1.0.1",
     "ws": "^8.22.0"
   },
   "devDependencies": {
-    "@types/chrome": "0.3.4",
+    "@types/chrome": "0.3.5",
     "@types/node": "^18.17.15",
     "@types/ws": "8.18.2",
     "mitt": "3.0.1",

package/front_end/third_party/puppeteer/package/src/api/Browser.ts

@@ -22,6 +22,7 @@ import type {
 } from '../common/Cookie.js';
 import {DEBUG_PREFIXES, type Logger} from '../common/Debug.js';
 import type {DownloadBehavior} from '../common/DownloadBehavior.js';
+import {UnsupportedOperation} from '../common/Errors.js';
 import {EventEmitter, type EventType} from '../common/EventEmitter.js';
 import {
   fromEmitterEvent,
@@ -436,6 +437,25 @@ export interface PWAState {
   fileHandlers: Protocol.PWA.FileHandler[];
 }
 
+/**
+ * @experimental
+ * @public
+ */
+export interface NetworkRestrictions {
+  /**
+   * A list of {@link https://urlpattern.spec.whatwg.org/ | URLPattern} strings to block.
+   * Mutually exclusive with {@link NetworkRestrictions.allowlist}.
+   * Passing `[]` or omitting this option means no restriction.
+   */
+  blocklist?: string[];
+  /**
+   * A list of {@link https://urlpattern.spec.whatwg.org/ | URLPattern} strings to allow.
+   * Mutually exclusive with {@link NetworkRestrictions.blocklist}.
+   * Passing `[]` or omitting this option means no restriction.
+   */
+  allowlist?: string[];
+}
+
 /**
  * {@link Browser} represents a browser instance that is either:
  *
@@ -590,6 +610,28 @@ export abstract class Browser extends EventEmitter<BrowserEvents> {
    */
   abstract target(): Target;
 
+  /**
+   * Sets the network conditions (blocklist or allowlist) and re-applies the
+   * conditions to all targets.
+   * To clear all network conditions, omit the argument or pass `null`.
+   *
+   * @param conditions - The network conditions to apply.
+   *
+   * @remarks
+   * Currently only supported for Chrome and the CDP protocol.
+   *
+   * Targets that are already on a blocked URL when `restrictNetwork` is called
+   * will remain attached and stay on the blocked page. This is a behavior difference
+   * compared to launching the browser with network restrictions, where such targets
+   * are detached immediately upon initial attach.
+   *
+   * @experimental
+   */
+  restrictNetwork(conditions?: NetworkRestrictions | null): Promise<void> {
+    void conditions;
+    throw new UnsupportedOperation();
+  }
+
   /**
    * Waits until a {@link Target | target} matching the given `predicate`
    * appears and returns it.

package/front_end/third_party/puppeteer/package/src/api/BrowserContext.ts

@@ -13,6 +13,7 @@ import {
 import type {
   Cookie,
   CookieData,
+  CookiePartitionKey,
   DeleteCookiesRequest,
 } from '../common/Cookie.js';
 import {DEBUG_PREFIXES, type Logger} from '../common/Debug.js';
@@ -319,40 +320,42 @@ export abstract class BrowserContext extends EventEmitter<BrowserContextEvents>
     const cookiesToDelete = cookies.filter(cookie => {
       return filters.some(filter => {
         if (filter.name === cookie.name) {
-          if (filter.domain !== undefined && filter.domain === cookie.domain) {
-            return true;
+          if (filter.domain !== undefined && filter.domain !== cookie.domain) {
+            return false;
           }
 
-          if (filter.path !== undefined && filter.path === cookie.path) {
-            return true;
+          if (filter.path !== undefined && filter.path !== cookie.path) {
+            return false;
           }
-          if (
-            filter.partitionKey !== undefined &&
-            cookie.partitionKey !== undefined
-          ) {
+          if (filter.partitionKey !== undefined) {
+            if (cookie.partitionKey === undefined) {
+              return false;
+            }
             if (typeof cookie.partitionKey !== 'object') {
               throw new Error('Unexpected string partition key');
             }
-            if (typeof filter.partitionKey === 'string') {
-              if (filter.partitionKey === cookie.partitionKey?.sourceOrigin) {
-                return true;
-              }
-            } else {
-              if (
-                filter.partitionKey.sourceOrigin ===
-                cookie.partitionKey?.sourceOrigin
-              ) {
-                return true;
-              }
+            const filterKey: CookiePartitionKey =
+              typeof filter.partitionKey === 'string'
+                ? {sourceOrigin: filter.partitionKey}
+                : filter.partitionKey;
+            if (filterKey.sourceOrigin !== cookie.partitionKey.sourceOrigin) {
+              return false;
+            }
+            if (
+              filterKey.hasCrossSiteAncestor !== undefined &&
+              filterKey.hasCrossSiteAncestor !==
+                cookie.partitionKey.hasCrossSiteAncestor
+            ) {
+              return false;
             }
           }
           if (filter.url !== undefined) {
             const url = new URL(filter.url);
             if (
-              url.hostname === cookie.domain &&
-              url.pathname === cookie.path
+              url.hostname !== cookie.domain ||
+              url.pathname !== cookie.path
             ) {
-              return true;
+              return false;
             }
           }
           return true;

package/front_end/third_party/puppeteer/package/src/api/HTTPRequest.ts

@@ -382,9 +382,29 @@ export abstract class HTTPRequest {
    */
   abstract fetchPostData(): Promise<string | undefined>;
 
+  /**
+   * Fetches the POST data for the request from the browser as a `Uint8Array`.
+   *
+   * @remarks
+   * If the request has no POST data or fetching the POST data from the browser
+   * fails, this method resolves to `undefined`.
+   *
+   * @returns A promise that resolves to the raw POST data bytes, or
+   * `undefined` when the request has no POST data or fetching it fails.
+   */
+  abstract content(): Promise<Uint8Array | undefined>;
+
   /**
    * An object with HTTP headers associated with the request. All
    * header names are lower-case.
+   *
+   * @remarks
+   *
+   * Under CDP, `page.on('request')` fires before the browser's network stack
+   * attaches all headers (such as `accept`, `accept-encoding`, `cookie`,
+   * `host`, and `sec-fetch-*`). The full set of headers is populated
+   * asynchronously and is available by the time `page.on('response')` or
+   * `page.on('requestfinished')` fires.
    */
   abstract headers(): Record<string, string>;
 
@@ -395,7 +415,7 @@ export abstract class HTTPRequest {
    *
    * Headers are copied to the new Request instance. The request URL and
    * method are preserved. The body is built from
-   * {@link HTTPRequest.fetchPostData} when the request has post data,
+   * {@link HTTPRequest.content} when the request has post data,
    * otherwise the Request is created without a body. For `GET` and
    * `HEAD` requests the body is always omitted, as required by the
    * Fetch API.
@@ -408,7 +428,7 @@ export abstract class HTTPRequest {
 
     let body: BodyInit | null = null;
     if (method !== 'GET' && method !== 'HEAD' && this.hasPostData()) {
-      body = ((await this.fetchPostData()) ?? null) as BodyInit | null;
+      body = ((await this.content()) as unknown as BodyInit) ?? null;
     }
 
     return new Request(this.url(), {

package/front_end/third_party/puppeteer/package/src/api/Page.ts

@@ -752,6 +752,31 @@ export interface HeapSnapshotOptions {
   path: string;
 }
 
+/**
+ * Information about the browser tab of a page. See {@link Page.tabInfo}.
+ *
+ * @public
+ * @experimental
+ */
+export interface TabInfo {
+  /**
+   * Zero-based index of the tab in its window's tab strip.
+   */
+  index: number;
+  /**
+   * Whether the tab is the active tab in its window.
+   */
+  active: boolean;
+  /**
+   * Whether the tab is pinned.
+   */
+  pinned: boolean;
+  /**
+   * ID of the tab group the tab belongs to, if any.
+   */
+  groupId?: string;
+}
+
 /**
  * Page provides methods to interact with a single tab or
  * {@link https://developer.chrome.com/extensions/background_pages | extension background page}
@@ -986,13 +1011,17 @@ export abstract class Page extends EventEmitter<PageEvents> {
    * Consider using {@link BrowserContext.overridePermissions} to grant
    * permissions for the page to read its geolocation.
    *
+   * Pass `null` to remove the geolocation override.
+   *
    * @example
    *
    * ```ts
    * await page.setGeolocation({latitude: 59.95, longitude: 30.31667});
+   * // Later, go back to the browser's real geolocation:
+   * await page.setGeolocation(null);
    * ```
    */
-  abstract setGeolocation(options: GeolocationOptions): Promise<void>;
+  abstract setGeolocation(options: GeolocationOptions | null): Promise<void>;
 
   /**
    * A target this page was created from.
@@ -2780,7 +2809,9 @@ export abstract class Page extends EventEmitter<PageEvents> {
     try {
       await recording._start();
     } catch (error) {
-      void recording.stop();
+      // Clean up the recording. Ignore errors from stop() so the original
+      // error from _start() is the one that propagates.
+      await recording.stop().catch(() => {});
       throw error;
     }
 
@@ -3459,6 +3490,18 @@ export abstract class Page extends EventEmitter<PageEvents> {
    */
   abstract windowId(): Promise<WindowId>;
 
+  /**
+   * Returns information about the browser tab of this page. The result is a
+   * snapshot and is not updated when the tab changes.
+   *
+   * @returns `null` if the page is not in a tab strip, for example, in
+   * `chrome-headless-shell`. Chrome before M150 does not report tab
+   * information, so the method also returns `null` there.
+   *
+   * @experimental
+   */
+  abstract tabInfo(): Promise<TabInfo | null>;
+
   override [disposeSymbol](): void {
     return void this[asyncDisposeSymbol]().catch(error => {
       this.logger?.(DEBUG_PREFIXES.error)?.(error);