build(deps-dev): bump com.microsoft.playwright:playwright from 1.59.0 to 1.60.0 in /src

[dependabot]

Bumps com.microsoft.playwright:playwright from 1.59.0 to 1.60.0.

Release notes

Sourced from com.microsoft.playwright:playwright's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar:

context.tracing().startHar(Paths.get("trace.har"));
Page page = context.newPage();
page.navigate("https://playwright.dev");
context.tracing().stopHar();

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

page.locator("#dropzone").drop(new Locator.DropPayload()
    .setFiles(new FilePayload("note.txt", "text/plain", "hello".getBytes(StandardCharsets.UTF_8))));
page.locator("#dropzone").drop(new Locator.DropPayload()
.setData(Map.of(
"text/plain", "hello world",
"text/uri-list", "https://example.com")));

🎯 Aria snapshots

• assertThat(page).matchesAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator("body").
• New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

New APIs

Browser, Context and Page

• Event browser.onContext() — fired when a new context is created on the browser.
• BrowserContext now mirrors lifecycle events from its pages: browserContext.onDownload(), browserContext.onFrameAttached(), browserContext.onFrameDetached(), browserContext.onFrameNavigated(), browserContext.onPageClose(), browserContext.onPageLoad().

Locators and Assertions

• New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
• New option pseudo in assertThat(locator).hasCSS() reads computed styles from ::before or ::after.
• New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

• webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
• New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors

• New webError.location() mirrors consoleMessage.location().

🛠️ Other improvements

• Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

... (truncated)

Commits

• 55134ef chore: mark 1.60.0 (#1922)
• 793b1d3 chore: roll driver to 1.60.0 (#1921)
• 8f66ef1 test_docker: align container launch with playwright-browsers (#1919)
• dc66e4d chore(deps): bump com.google.code.gson:gson from 2.13.2 to 2.14.0 in the all ...
• d84a2db chore: roll driver to 1.60.0-beta-1778180503000 (#1918)
• f081667 chore: roll to 1.60.0-alpha-2026-05-05 (#1916)
• 5b33729 chore: reduce CI flakiness across webkit/macOS, ubuntu, windows (#1914)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Superseded by #549.