[dependabot]

Bumps puppeteer-core from 22.15.0 to 25.14.0.

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v25.14.0

25.14.0 (2026-10-14)

🎉 Features

• migrate network emulation to Network.emulateNetworkConditionsByRule (#15508) (2952199)
• network: accept Headers instances for request interception and extra headers (#15530) (b20d03b)
• roll to Firefox 158.0 (#15582) (3902129)

🛠️ Fixes

• enforce blocklist/allowlist for service worker requests (#15586) (414231a)
• roll to Chrome 155.0.8059.79 (#15584) (9ea69c1)
• screencast: round the frame size to whole pixels (#15574) (565e584)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5

puppeteer-core: v25.13.0

25.13.0 (2026-10-08)

🎉 Features

• add page, frame and worker methods on ConsoleMessage (#15515) (82e1fee)
• allow configuring the WebSocket max payload (#15532) (c91da4f)
• network: add asFetchRequest method to HTTPRequest (#15518) (f891aaa)
• network: add asFetchResponse method to HTTPResponse (#15446) (6ab0419)
• roll to Chrome 155.0.8059.39 (#15517) (43dc2a1)
• roll to Firefox 157.0.1 (#15516) (ba92fc7)

🛠️ Fixes

• await browser process termination and run exit hooks after kill (#15522) (a281197)
• cdp: disconnect the browser when the close callback fails (#15496) (e015f22)
• cdp: extend emulateMediaFeatures to media features Chrome honors (#15495) (4758830)
• cdp: settle worker evaluate and close when the script fails to load (#15501) (02c2a3d)
• connect: preserve browserURL path prefixes (#15435) (8d816de)
• launcher: remove the temporary profile when Firefox rejects pipes (#15499) (889a6b7)
• remove injected scripts when clearing custom query handlers (#15507) (909853c)
• use the shadow host when checking visibility of a text node in a shadow root (#15466) (d08c868)
• webdriver: close the browser process when the BiDi close command fails (#15469) (9e5fefa)

... (truncated)

Changelog

Sourced from puppeteer-core's changelog.

Changelog

Puppeteer's canonical changelogs are maintained with the packages:

• puppeteer
• puppeteer-core

The combined changelog is generated when the documentation website is built.

Historical combined entries are retained below.

25.8.0 (2026-08-17)

🎉 Features

• support followSymlinks option (#15335) (af6a23d)

🛠️ Fixes

• computeSystemExecutablePath support validatePath (#15340) (73da9a4)
• launch browsers in detached mode on Windows to fix flakiness (#15339) (8e1022b)
• remove redundant overwrite and file access from ScreenRecorder (#15352) (61a1675)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.0 to 3.2.1

25.7.0 (2026-08-13)

🎉 Features

• roll to Chrome 152.0.7977.42 (#15330) (0c187db)
• tracing: support bufferSize option in tracing.start (#15328) (987f146)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.6.0 to 25.7.0

... (truncated)

Commits

• d1b9a21 chore: release main (#15577)
• 414231a fix: enforce blocklist/allowlist for service worker requests (#15586)
• 2952199 feat: migrate network emulation to Network.emulateNetworkConditionsByRule (#1...
• 9478d60 chore(deps-dev): bump the dev-dependencies group with 5 updates (#15571)
• b20d03b feat(network): accept Headers instances for request interception and extra he...
• 9ea69c1 fix: roll to Chrome 155.0.8059.79 (#15584)
• 198c333 fix(browsers): persist alias removal when uninstalling a browser (#15463)
• 3902129 feat: roll to Firefox 158.0 (#15582)
• d8e4e36 fix(browsers): prevent symlink chain escapes during zip extraction (#15578)
• 04dee98 fix: don't allow path traversal from buildId (#15565)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for puppeteer-core since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[AndreyTheWeb]

Closed before a history rewrite; the dependency bumps are landing on main directly.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.