👷 ci: integrate the reviewed tooling upgrades

.github/workflows/ci.yml

@@ -6,10 +6,10 @@ jobs:
   offline:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24"
       - run: npm install --global pnpm@12.10.1 --ignore-scripts
@@ -55,10 +55,10 @@ jobs:
           --health-cmd "pg_isready -U fixture_owner -d dbdep_examples"
           --health-interval 5s --health-timeout 5s --health-retries 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24"
       - run: npm install --global pnpm@12.10.1 --ignore-scripts

.github/workflows/pages.yml

@@ -14,10 +14,10 @@ jobs:
       contents: read
       pages: read
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "24"
       - run: npm install --global pnpm@12.10.1 --ignore-scripts
@@ -29,10 +29,11 @@ jobs:
       - run: pnpm build
       - run: pnpm check:site
       - run: pnpm test:browser
-      - uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
-      - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+      - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
+      - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           path: site/dist
+          include-hidden-files: true
   deploy:
     needs: build
     if: github.ref == 'refs/heads/main'
@@ -46,4 +47,4 @@ jobs:
     steps:
       - name: deploy static artifact
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

package.json

@@ -57,7 +57,7 @@
     "pg-connection-string": "2.14.1"
   },
   "devDependencies": {
-    "@playwright/test": "1.56.0",
+    "@playwright/test": "1.63.0",
     "fflate": "0.8.3",
     "prettier": "3.9.9"
   }

tests/browser/report-preferences.spec.mjs

@@ -129,7 +129,6 @@ test("English is the default and theme follows the system until explicitly chose
   page,
 }) => {
   await page.emulateMedia({ colorScheme: "dark" });
-  await page.addInitScript(() => localStorage.clear());
   await page.goto(reportUrl);
   await expect(page.locator("html")).toHaveAttribute("lang", "en");
   await expect(page.locator("html")).toHaveAttribute("data-theme", "dark");
@@ -141,12 +140,36 @@ test("English is the default and theme follows the system until explicitly chose
       localStorage.getItem("dbdep-locale"),
     ]),
   ).toEqual(["light", "es"]);
-  // Remove the initialization script by loading the same file in a new page in this context.
-  const reloaded = await page.context().newPage();
-  await reloaded.goto(reportUrl);
-  await expect(reloaded.locator("html")).toHaveAttribute("lang", "es");
-  await expect(reloaded.locator("html")).toHaveAttribute("data-theme", "light");
-  await reloaded.close();
+  await page.reload();
+  await expect(page.locator("html")).toHaveAttribute("lang", "es");
+  await expect(page.locator("html")).toHaveAttribute("data-theme", "light");
+});
+
+test("report preferences persist between tabs with the same HTTP origin", async ({
+  page,
+  context,
+}) => {
+  // Cross-tab storage sharing is defined for HTTP origins, not file URLs.
+  const url = "http://127.0.0.1:4173/preference-report.html";
+  const body = await readFile(new URL(reportUrl), "utf8");
+  await context.route(url, (route) =>
+    route.fulfill({ contentType: "text/html", body }),
+  );
+  await page.emulateMedia({ colorScheme: "light" });
+  await page.goto(url);
+  await page.getByRole("button", { name: "Switch to dark mode" }).click();
+  await page.getByRole("button", { name: "Español", exact: true }).click();
+  expect(
+    await page.evaluate(() => [
+      localStorage.getItem("dbdep-theme"),
+      localStorage.getItem("dbdep-locale"),
+    ]),
+  ).toEqual(["dark", "es"]);
+  const reopened = await context.newPage();
+  await reopened.goto(url);
+  await expect(reopened.locator("html")).toHaveAttribute("lang", "es");
+  await expect(reopened.locator("html")).toHaveAttribute("data-theme", "dark");
+  await reopened.close();
 });
 
 test("preferences remain usable when browser storage throws", async ({

tests/browser/site-docs.spec.mjs

@@ -91,6 +91,9 @@ test("the skip link focuses the current documentation page without changing its
   page,
 }) => {
   await page.goto(`${site}/#/docs/installation`);
+  await expect(
+    page.getByRole("link", { name: "Skip to content" }),
+  ).toBeVisible();
   await page.keyboard.press("Tab");
   await expect(
     page.getByRole("link", { name: "Skip to content" }),