Bump ws and @wordpress/e2e-test-utils-playwright

[dependabot]

Bumps ws and @wordpress/e2e-test-utils-playwright. These dependencies needed to be updated together.
Updates ws from 8.18.0 to 8.21.0

Release notes

Sourced from ws's releases.

8.21.0

Features

• Introduced the maxBufferedChunks and maxFragments options (2b2abd45).

Bug fixes

• Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).

A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a ws server or client due to OOM.

import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port});
ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(client close - code: ${code} reason: ${reason.toString()});
});
});
wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(server close - code: ${code} reason: ${reason.toString()});
});
});

The vulnerability was responsibly disclosed and fixed by Nadav Magier.

In vulnerable versions, the issue can be mitigated by lowering the value of the maxPayload option if possible.

8.20.1

... (truncated)

Commits

• bca91ad [dist] 8.21.0
• 2b2abd4 [security] Limit retained message parts
• 78eabe2 [security] Add latest vulnerability to SECURITY.md
• 5d9b316 [dist] 8.20.1
• c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
• ce2a3d6 [ci] Test on node 26
• 58e45b8 [ci] Do not test on node 25
• 5f26c24 [ci] Run the lint step on node 24
• 8439255 [dist] 8.20.0
• d3503c1 [minor] Export the PerMessageDeflate class and header utils
• Additional commits viewable in compare view

Updates @wordpress/e2e-test-utils-playwright from 1.10.0 to 1.47.0

Changelog

Sourced from @​wordpress/e2e-test-utils-playwright's changelog.

1.47.0 (2026-05-27)

1.46.0 (2026-05-14)

1.45.0 (2026-04-29)

1.44.0 (2026-04-15)

1.43.0 (2026-04-01)

1.42.0 (2026-03-18)

1.41.0 (2026-03-04)

1.40.0 (2026-02-18)

1.39.0 (2026-01-29)

1.38.0 (2026-01-16)

1.36.0 (2025-11-26)

1.35.0 (2025-11-12)

1.34.0 (2025-10-29)

1.33.0 (2025-10-17)

1.32.0 (2025-10-01)

1.31.0 (2025-09-17)

1.30.0 (2025-09-03)

1.29.0 (2025-08-20)

1.28.0 (2025-08-07)

1.27.0 (2025-07-23)

1.26.0 (2025-06-25)

1.25.0 (2025-06-04)

1.24.0 (2025-05-22)

1.23.0 (2025-05-07)

1.22.0 (2025-04-11)

... (truncated)

Commits

• d653c5f chore(release): publish
• 065fa3b Update changelog files
• f63ca66 Merge changes published in the Gutenberg plugin "release/23.3" branch
• 7f4e229 Update changelog files
• b5afac3 Merge changes published in the Gutenberg plugin "release/23.3" branch
• fee7eec Update changelog files
• f34b1f7 Merge changes published in the Gutenberg plugin "release/23.3" branch
• 51264e3 chore(release): publish
• a8d4b30 Update changelog files
• f75812b Merge changes published in the Gutenberg plugin "release/23.2" branch
• Additional commits viewable in compare view

[dependabot]

Superseded by #43.