chore(deps): update rhdh bulk import dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@openapitools/openapi-generator-cli	2.34.0 → 2.38.0
@playwright/test (source)	1.60.0 → 1.61.0

---

Release Notes

OpenAPITools/openapi-generator-cli (@​openapitools/openapi-generator-cli)

v2.38.0

Compare Source

Features

• release: trigger a release after upgrading concurrently to newer versions (#​1225) (a265046)

v2.37.0

Compare Source

Features

• release: trigger a release after upgrading deps to newer versions (#​1223) (899c037)

v2.36.0

Compare Source

Features

• release: trigger a release after upgrading to node 22.x (#​1217) (8f69e5a)

v2.35.0

Compare Source

Features

• release: v7.23.0 release (#​1214) (47787b9)

microsoft/playwright (@​playwright/test)

v1.61.0

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

• New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
• The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

• The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
• Supported expect.soft.poll(...).
• New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
• New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
• testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
• New -G command line shorthand for --grep-invert.

🛠️ Other improvements

• Playwright now supports Ubuntu 26.04.
• HAR and trace recordings now include WebSocket requests.

Browser Versions

• Chromium 149.0.7827.55
• Mozilla Firefox 151.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 149
• Microsoft Edge 149

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[rhdh-gh-app]

Changed Packages

Package Name	Package Path	Changeset Bump	Current Version
app-legacy	workspaces/bulk-import/packages/app-legacy	none	v0.0.3
app	workspaces/bulk-import/packages/app	none	v0.0.1
backend	workspaces/bulk-import/packages/backend	none	v0.0.0
@red-hat-developer-hub/backstage-plugin-bulk-import-backend	workspaces/bulk-import/plugins/bulk-import-backend	patch	v7.3.6
@red-hat-developer-hub/backstage-plugin-bulk-import	workspaces/bulk-import/plugins/bulk-import	patch	v7.3.6

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.23%. Comparing base (1912534) to head (c86c1f4).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #3439   +/-   ##
=======================================
  Coverage   50.23%   50.23%           
=======================================
  Files        2252     2252           
  Lines       85416    85416           
  Branches    24173    24160   -13     
=======================================
  Hits        42910    42910           
  Misses      42328    42328           
  Partials      178      178           

Flag	Coverage Δ		*Carryforward flag
adoption-insights	83.70% <ø> (ø)		Carriedforward from 1912534
ai-integrations	67.95% <ø> (ø)		Carriedforward from 1912534
app-defaults	69.79% <ø> (ø)		Carriedforward from 1912534
augment	46.39% <ø> (ø)		Carriedforward from 1912534
boost	100.00% <ø> (ø)		Carriedforward from 1912534
bulk-import	72.46% <ø> (ø)
cost-management	14.10% <ø> (ø)		Carriedforward from 1912534
dcm	61.79% <ø> (ø)		Carriedforward from 1912534
extensions	61.53% <ø> (ø)		Carriedforward from 1912534
global-floating-action-button	71.18% <ø> (ø)		Carriedforward from 1912534
global-header	59.71% <ø> (ø)		Carriedforward from 1912534
homepage	49.84% <ø> (ø)		Carriedforward from 1912534
install-dynamic-plugins	56.23% <ø> (ø)		Carriedforward from 1912534
konflux	91.49% <ø> (ø)		Carriedforward from 1912534
lightspeed	68.57% <ø> (ø)		Carriedforward from 1912534
mcp-integrations	85.46% <ø> (ø)		Carriedforward from 1912534
orchestrator	37.75% <ø> (ø)		Carriedforward from 1912534
quickstart	63.76% <ø> (ø)		Carriedforward from 1912534
sandbox	79.56% <ø> (ø)		Carriedforward from 1912534
scorecard	83.83% <ø> (ø)		Carriedforward from 1912534
theme	61.26% <ø> (ø)		Carriedforward from 1912534
translations	6.55% <ø> (ø)		Carriedforward from 1912534
x2a	13.78% <ø> (ø)		Carriedforward from 1912534

*This pull request uses carry forward flags. Click here to find out more.

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1912534...c86c1f4. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud