chore(deps): update dependency lighthouse to ^12.8.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
lighthouse	^12.0.0 → ^12.8.2

---

Release Notes

GoogleChrome/lighthouse (lighthouse)

v12.8.2

Compare Source

Full Changelog

Release article

We expect this release to ship in the DevTools of Chrome 143, and to PageSpeed Insights within a week.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Benjamin R Gibson @​brgibson
• Leonardo Poletto @​leopoletto

Notable Changes

• performance: remove audits replaced by performance insights (#​16729)
• remove preload-fonts, uses-rel-preload audits (#​16716)
• remove font-size audit (#​16701)
• remove offscreen-images audit (#​16748)
• remove no-document-write audit (#​16750)
• remove uses-passive-event-listeners audit (#​16751)
• remove third-party-facades audit (#​16710)
• scoring: adjust a11y weights and document approach (#​16624)

Core

• remove ResponseCompression artifact (#​16755)
• remove OptimizedImages artifact (#​16754)
• remove DOMStats artifact (#​16753)
• remove CacheContents artifact (#​16752)
• remove empty first-meaningful-paint audit (#​16749)
• remove some unused computed artifacts (#​16735)
• defer to trace engine for lcp-breakdown, ttfb (#​16733)
• error on unknown category in onlyCategories (#​16720)
• drop compat traces / devtoolsLogs artifacts (#​16708)
• import json as modules (#​16700)
• anchor-elements: don't consider ancestorListeners (#​16731)
• dom-size-insight: add numericValue (#​16741)
• emulation: always match host browser's version milestone (#​16677)
• font-display-insight: disable entity sum for est. savings (#​16746)
• image-delivery-insight: add node item for image (#​16714)
• inspector-issues: remove empty arrays (#​16736)
• legacy-javascript: update caniuse data (#​16699)
• network-request: remove receiveHeadersStart M115 compat (#​16738)
• server-response-time: defer to Document Latency insight (#​16715)
• trace-elements: remove unused event types (#​16734)
• trace-elements: handle shadow roots (#​16718)

CLI

• improve description for form-factor flag (#​16682)

Report

• add adornment to audit description when not scored (#​13014)

Deps

• upgrade deps (#​16760)
• remove parse-cache-control (#​16747)
• upgrade trace_engine to 0.0.61 (#​16745)
• upgrade @​esbuild-kit/esm-loader to 2.6.5 (#​16730)
• upgrade deps (#​16724)
• upgrade trace_engine to 0.0.60 (#​16723)
• remove es-main (#​16697)
• bump chrome-launcher to 1.2.1 (#​16696)
• upgrade testdouble, fix mock tests in Node 21+ (#​16664)
• lighthouse-stack-packs: upgrade to 1.12.3 (#​16727)

I18n

• import (#​16759)

Tests

• update some comments (#​16744)
• re-enable smoke test for lcp-breakdown-insight score (#​16743)
• re-enable dom-size-insight node smoke test (#​16742)
• enable smoke test for lcp lazy load in shadow tree (#​16739)
• re-enable csp block smoke test, make less restrictive (#​16728)
• re-enable startTimespan api test (#​16703)
• devtools: sync e2e (#​16694)
• server-response-time: enable lightrider test (#​16737)
• viewer: re-enable test (#​16740)

Misc

• replace dead link for insecure origins deprecation (#​16711)
• upgrade typescript target to es2023 (#​16316)
• fix core/scripts/legacy-javascript/examine-latest-run.js (#​16706)
• update min supported node version to 22.19 (#​16668)
• fix typos in a11y i18n doc comments (#​16665)
• build: update devtools 3p readme, document debug build (#​16695)
• proto: add ConfigSettings fields (#​15616)
• structured-data: remove dead link (#​16709)

v12.8.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 141, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• uthem150 @​uthem150
• Nirav Gondaliya @​niravzxv

Core

• errors-in-console: truncate large errors (#​16619)
• insights: passing score (not n/a) for empty results (#​16639)
• non-composited-animations: separate custom CSS properties (#​16627)

Report

• viewer: only disable save-gist button on successful save (#​16618)

Deps

• upgrade deps (#​16660)
• upgrade trace_engine to 0.0.59 (#​16659)
• remove semver (#​16655)
• upgrade tldts-icann (#​16657)
• upgrade esbuild to 0.25.9 (#​16652)
• upgrade / drop many dev deps (#​16651)
• upgrade trace_engine to 0.0.58 (#​16649)

I18n

• import (#​16662)

Tests

• disable startTimespan api test (#​16653)
• disable trusted-types-directive-present smoke test (#​16620)
• smokehouse: log specific error message when missing tests path (#​16648)

Misc

• use structuredClone instead of lodash cloneDeep (#​16656)

v12.8.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 140, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Boluwatife Omosowon @​bolu-tife
• Jonas Thelemann @​dargmuesli

Core

• network-requests: add initiators to debugData (#​16605)

I18n

• import (#​16616)

Tests

• disable csp-block-all smoke test (#​16598)

Misc

• revert json modules to fully support Node 20 (#​16613)
• ci: clear devtools build cache (#​16615)
• logger: bump to 2.0.2 (#​16604)
• logger: update debug dep to v4 (#​16601)
• treemap: fix sizes not showing for source map nodes (#​16593)

v12.7.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 140, and to PageSpeed Insights within 1 week.

New Audits

• mitigate dom-based xss with trusted types (#​16493)

Core

• tracehouse: fix OOM when computing attributable URLs (#​16585)
• trusted-types-xss: add link to lighthouse docs (#​16590)

Deps

• upgrade trace_engine to 0.0.57 (#​16589)

Tests

• disable issues-mixed-content smoke test (#​16586)
• add test for trace-engine-result (#​16574)
• update expectations (#​16580)
• devtools: avoid failure on Unknown VE Context (#​16581)

v12.7.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 140, and to PageSpeed Insights within a week.

Core

• trace-engine-result: initialize SyntheticEventsManager (#​16572)

v12.6.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 140, and to PageSpeed Insights within a week.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• demostanis @​demostanis
• OronW @​OronW

Notable Changes

The Performance category in the Lighthouse report now shows performance insight audits by default - read more here.

Core

• always include headers even for empty tables (#​16534)
• expose error stack, artifact on runtimeError (#​16524)
• cache-insight: fix wrong value being used for transfer size (#​16562)
• config: throw an error if a filter is an empty array (#​15118)
• crawlable-anchors: allow placeholder anchor elements (#​16292)
• gather: add host DPR base artifact (#​16559)
• gather: deprecate executionContext.evaluateAsync (#​16518)
• insights: show estimated ms savings (#​16563)
• inspector-issues: rename to elementAccessibilityIssue (#​16561)
• link-text: use lang to check for only localized terms (#​16526)
• network-dependency-tree-insight: add preconnect advice (#​16557)
• plugins: support scoped npm packages (#​16550)
• render-blocking-resources: change column label to Duration (#​16519)
• timing-summary: suppress expected errors (#​16520)
• trace-elements: remove sentry debugging for invalid impactedNodes (#​16523)

Report

• show insight performance audits by default (#​16552)
• fix 3p filter checkbox for insight audits (#​16564)
• hide highlighter during print (#​16544)
• remove custom focus outline styles (#​16531)
• increase max width of 3-dot menu (#​16530)
• hide treemap, view trace buttons when printing (#​16529)

Deps

• upgrade trace_engine to 0.0.56 (#​16565)
• upgrade deps (#​16555)
• upgrade configstore to 7.0.0 (#​16148)
• upgrade jest packages to 29.7.0 (#​16147)
• sentry: upgrade to v9 (#​16541)

Docs

• recipes: give explicit commands for first building Lighthouse (#​16527)

Tests

• parallelize lantern database tests (#​16545)

Misc

• chore: use "Note" indentation in readme (#​16533)
• chore: reformat to reduce spurious newlines (#​16038)
• chore: rename traceEngineData to parsedTrace (#​16270)
• ci: fix logic for nightly publish cron (#​16556)
• ci: prevent nightly publish if no changes in last day (#​16547)
• deps: upgrade to eslint 9 (#​16327)

v12.6.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 139, and to PageSpeed Insights within a couple days.

New contributors

Thanks to our new contributor 👽🐷🐰🐯🐻!

Ian Kerins @​isker

Core

• emulation: bump chrome UA to m136 (#​16489)
• insights: add a bunch of debugData (#​16472)
• inspector-issues: remove trusted types csp issue filter (#​16514)
• inspector-issues: add userReidentificationIssue to artifact (#​16497)

Report

• remove innerHTML usage from insights announce icon (#​16469)

Deps

• upgrade deps (#​16515)
• upgrade trace_engine to 0.0.53 (#​16496)
• bump chrome-launcher to 1.2.0 (#​16479)

Clients

• lr: disable modern-http-insight (#​16471)

Tests

• fix some lantern test failures (#​16498)
• use newer trace in metrics test (#​16492)

Misc

• import i18n messages as JSON modules (#​16500)
• scripts: add bytes-in-trace script (#​16477)
• treemap: hide unused-bytes view mode when missing data (#​16478)
• treemap: highlight many nodes on hover in duplicate modules table (#​16470)

v12.5.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 137, and to PageSpeed Insights within a few days.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Jack Franklin @​jackfranklin
• Rob Kodey @​rkodey
• Clément Barbaza @​cba85

Notable Changes

The Performance category in the Lighthouse report now has an option to toggle "insights" - read more here.

Core

• disable invalidationTracking trace event to prevent crash (#​16451)
• migrate audits from devtoolsLogs/traces to DevtoolsLog/Trace (#​16448)
• modify scoreDisplayMode for insight audits to match Perf panel (#​16432)
• use with import attributes for legacy-javascript, bump to node 18.20 (#​16415)
• image-size-responsive: use real mimeType to exclude svg (#​16443)
• insights: drop slow-css-selector-insight for now (#​16457)
• insights: implement duplicated-javascript-insight (#​16456)
• insights: add prominent toggle banner to report (#​16461)
• insights: implement network-dependency-tree insight (#​16407)
• optimized-images: ignore internal encoding errors (#​16444)
• preload-fonts: add Stylesheets to required artifacts (#​16421)
• stacks: correctly identify angular (#​16439)
• third-party-cookies: update description (#​16464)
• tracehouse: fixup parent tasks when fudging endTime (#​16420)

Report

• add analytics hook for insights state (#​16466)
• adjust insights notice banner, localize strings (#​16463)
• add insights group description (#​16455)
• associate insight audits with stack packs (#​16440)
• tweak style of insight tables; use system font (#​16434)
• support node inside list detail, use in insight audits (#​16433)
• display insights when using toggle, even if hidden (#​16431)

Deps

• upgrade trace_engine to 0.0.52 (#​16465)
• upgrade trace_engine to 0.0.51 (#​16447)
• upgrade deps (#​16438)
• upgrade typescript to 5.8.2 (#​16414)

Docs

• fix "standalone-template.html" broken link in report README (#​16429)

Tests

• disable oopif-scripts smoke for devtools runner (#​16446)

Misc

• prepare core/lib/legacy-javascript to be published to npm (#​16416)
• treemap: represent sizes using transfer size (#​16460)
• treemap: parse options properly from hash params (#​16459)
• treemap: update coerceOptions to grab initialView (#​16458)
• treemap: move table to right, remove Tabulator (#​16428)
• treemap: set initial view mode from options (#​16427)
• treemap: vary colors within bundle, update fonts (#​16403)

v12.5.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 136, and to PageSpeed Insights within 2 weeks.

Core

• trace-engine-result: exclude failed source maps (#​16412)

v12.4.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 136, and to PageSpeed Insights within 2 weeks.

Notable Changes

• legacy-javascript has been updated to target Baseline instead of esmodules for determining what code is considered "legacy" (#​16366).

Core

• enable enhanced traces, pass source maps to trace engine (#​16396)
• pass lantern settings to trace engine and add logging (#​16377)
• adapt trace engine i18n functions to LH i18n model (#​16365)
• computed-artifacts: disallow undefined properties (#​16397)
• duplicated-javascript: increase threshold from 1 to 10 KiB (#​16368)
• image-delivery-insight: use strings without savings (#​16364)
• insights: implement use-cache-insight (#​16401)
• insights: upgrade and implement forced reflow (#​16395)
• insights: move to hidden group by default (#​16391)
• insights: implement font display insight (#​16369)
• legacy-javascript: rework/revert some unminified bundle detection (#​16394)
• legacy-javascript: support rollup bundles (#​16389)
• legacy-javascript: support esbuild bundles (#​16385)
• legacy-javascript: support unminified code (#​16384)
• legacy-javascript: improve transform detection (#​16381)
• script-treemap-data: keep duplicate info when collapsing nodes (#​16379)

Deps

• upgrade deps (#​16408)
• upgrade trace_engine to 0.0.47 (#​16376)
• upgrade trace_engine, reuse cdt bf-cache/deprecation strings (#​16362)

I18n

• import (#​16409)

Tests

• fix local mocha tests not properly setting isUnderTest (#​16399)
• fix i18n format in Node 20.19 (#​16398)
• trace-engine: fix expectations (#​16380)

Misc

• move support files to core/lib/legacy-javascript (#​16393)
• extract legacy javascript detection to core/lib (#​16392)
• build: use current year for bundle license copyright header (#​16375)
• treemap: restructure header to match new design (#​16402)

v12.3.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 135, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Daniil Vangonen @​dvangonen
• Rene Schwietzke @​rschwietzke
• Antti @​hilja
• Johannes Homeier @​homj

Notable Changes

• Some performance audits are marked as informative under passing conditions rather than being hidden in the passed audits section. This release reduces the number of audits which have this behavior. (#​16315)

New Audits

• ensure clickjacking mitigation through XFO or CSP (#​16290)

Core

• implement more insight audits, handle localization (#​16326)
• set relevant metric based on insight category (#​16325)
• add hidden audits for each insight (#​16312)
• cls-culprits-insight: implement (#​16357)
• inspector-issues: support SRI message signature issues (#​16345)
• inspector-issues: add select element a11y issue to types (#​16298)
• legacy-javascript: upgrade babel and core-js (#​16331)
• root-causes: grab from trace insights rather than use protocol (#​16352)
• trace-engine: re-enable invalidations handler (#​16293)

Report

• use container queries for responsive design in DevTools (#​16342)
• render LH-only diagnostics alongside insights (#​16332)
• add button to toggle experimental insights (#​16329)
• add checklist detail type (#​16324)

Deps

• upgrade critical dependencies (#​16358)
• upgrade csp_evaluator to 1.1.5 (#​16347)
• update to latest chrome-devtools-frontend (#​16333)
• upgrade puppeteer to 24.2.1 (#​16341)
• upgrade third-party-web to 0.26.5 (#​16340)
• upgrade puppeteer to 24.1.1 (#​16302)
• upgrade trace_engine to 0.0.40 (#​16311)

I18n

• import (#​16360)

Docs

• readme: add Sonā to the list of Web Perf services (#​16282)

Tests

• address upstream changes (#​16335)
• refresh sample artifacts (#​16322)
• dbw: revert unload handler expectations (#​16353)
• devtools: fix error in smoke tests with DT throttling (#​16301)

Misc

• remove issue assigner (#​16317)
• ci: workaround new ubuntu 23 security issue for chromium (#​16296)
• readme: add link to Neodymium (#​16349)
• release: add script for updating critical dependencies (#​16359)
• types: add missing type for explanation in NodeValue (#​16314)

v12.2.3

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 133, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Sebastian Neuner @​sebastian9er

New Audits

This release adds new security audits. These audits are informative and won't affect your best practices score.

• Ensure proper origin isolation with COOP (#​16275)
• Use a strong HSTS policy (#​16257)

Core

• font-size: exclude invisible text (#​16281)

Deps

• upgrade puppeteer to v23.10.4 (#​16279)
• upgrade trace_engine to 0.0.38 (#​16269)

I18n

• import (#​16283)
• inject strings from trace engine npm package (#​16272)

Docs

• update releasing instructions (#​16252)

Tests

• update network target type expectations (#​16273)
• devtools: sync e2e (#​16253)

v12.2.2

Compare Source

Full Changelog

This release is only for PageSpeed Insights and we expect it to ship within 2 weeks.

Notable Changes

The CPU throttling factor for PageSpeed Insights has been adjusted (#​16256) to account for the low CPU performance benchmarks typical in PageSpeed production environments. In general, TBT metric times for all sites should improve when testing with PageSpeed Insights.

All other Lighthouse clients (Lighthouse CLI, the Node API, Lighthouse panel in DevTools, etc) should not be affected by this change.

Tests

• inline-fs: fix error in Node 20 (#​16262)

v12.2.1

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 133, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Nate @​servusdei2018
• Gareth Jones @​G-Rath
• JDev @​JWebDev

Core

• network-monitor: treat EventSource as non-critical (#​16225)
• target-manager: ignore target if type is unknown (#​16221)

CLI

• create writeFile destination if necessary (#​15990)

Deps

• upgrade puppeteer to 23.8.0 (#​16248)
• upgrade third-party-web to 0.26.1 (#​16219)
• upgrade puppeteer to 23.5.2 (#​16220)
• lighthouse-stack-packs: upgrade to 1.12.2 (#​16242)
• lodash: migrate lodash to lodash-es (#​16211)
• sentry: upgrade to v7 (#​16215)

Clients

• lr: set CPU throttling based on benchmark (#​16226)
• lr: fix wrong render-blocking-resources transfer size (#​16190)

I18n

• import (#​16250)

Docs

• readme: add lighthouse-matchers to related projects (#​16239)
• readme: add Guardius to services list (#​16235)

Tests

• smoke: fix devtools test runner & a11y errors (#​16236)

Misc

• ci: upgrade old actions (#​16191)

v12.2.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 130, and to PageSpeed Insights within 2 weeks.

Core

• third-party-cookies: update description for 3PCD updates (#​16177, #​16158)
• uses-text-compression: ignore percent threshold for large savings (#​16165)

Deps

• upgrade puppeteer to 23.3.0 (#​16178, #​16161)
• upgrade axe-core to 4.10.0 (#​16162)

Clients

• devtools: require third-party-web to be provided (#​16166)

I18n

• support reusing the same placeholder for ICU (#​16159)

Tests

• pass logger to smokehouse runners to get log even on timeout (#​16175)
• update BUILD.gn due to upstream CDT change (#​16171)
• devtools: sync e2e (#​16174)
• devtools: sync e2e (#​16160)

Misc

• format lighthouse-result.proto (#​16170)

v12.1.0

Compare Source

Full Changelog

We expect this release to ship in the DevTools of Chrome 129, and to PageSpeed Insights within 2 weeks.

Core

• import lantern from trace engine (#​16092)
• long-tasks: link to latest guidance (#​16138)
• stylesheets: disable transient stylesheet detection (#​16121)
• third-party-summary: correct blocking time calculation (#​16117)
• trace-engine-result: disable invalidations handler (#​16142)

Deps

• upgrade trace_engine to 0.0.32 (#​16143)
• upgrade puppeteer to 22.15.0 (#​16139)
• upgrade third-party-web to 0.24.5 (#​16140)
• upgrade puppeteer to 22.13.1 (#​16123)
• upgrade typescript to 5.5.3 (#​16091)

Tests

• devtools: sync e2e (#​16120)
• treemap: ignore cookie deprecation error (#​16141)

Misc

• remove alertdesk from README (#​16133)
• build: update README.chromium when rolling devtools (#​16144)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.