build(deps-dev): bump playwright from 1.59.1 to 1.60.0 (#296)

* build(deps-dev): bump playwright from 1.59.1 to 1.60.0

Bumps [playwright](https://github.com/microsoft/playwright) from 1.59.1 to 1.60.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.59.1...v1.60.0)

---
updated-dependencies:
- dependency-name: playwright
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): update Playwright patch for 1.60.0

Retarget the Bun response URL workaround patch to Playwright 1.60's bundled core file so the patch check matches the upgraded dependency.

* chore: bump version of playwright container for e2e

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wyatt Johnson <accounts+github@wyattjoh.ca>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -98,7 +98,7 @@ jobs:
       (github.event_name != 'pull_request' && inputs.run-e2e)
     runs-on: blacksmith-8vcpu-ubuntu-2404
     container:
-      image: mcr.microsoft.com/playwright:v1.59.1-noble
+      image: mcr.microsoft.com/playwright:v1.60.0-noble
     timeout-minutes: 30
     steps:
       - name: Install unzip (required by setup-bun)

bun.lock

@@ -37,7 +37,7 @@
     "nano-staged": "^1.0.2",
     "oxfmt": "^0.47.0",
     "oxlint": "^1.62.0",
-    "playwright": "^1.59.1",
+    "playwright": "^1.60.0",
     "typescript": "^6"
   },
   "nano-staged": {
@@ -51,6 +51,6 @@
     "bun": ">=1.3.10"
   },
   "patchedDependencies": {
-    "playwright-core@1.59.1": "patches/playwright-core@1.59.1.patch"
+    "playwright-core@1.60.0": "patches/playwright-core@1.60.0.patch"
   }
 }

package.json

@@ -0,0 +1,30 @@
+# Workaround for a Bun/Node divergence: Bun populates IncomingMessage.url on
+# client-side responses (with the request path or redirect target), whereas
+# Node leaves it as "". Playwright's `response.url || url.toString()` fallback
+# therefore picks up a relative path under Bun and crashes in `new URL(...)`
+# inside `_parseSetCookieHeader`. Tracked upstream at:
+#   https://github.com/oven-sh/bun/issues/6892
+# Once Bun stops leaking a non-empty `url` onto client IncomingMessages, this
+# patch can be removed.
+diff --git a/lib/coreBundle.js b/lib/coreBundle.js
+--- a/lib/coreBundle.js
++++ b/lib/coreBundle.js
+@@ -25987,7 +25987,8 @@
+             progress2.log(`\u2190 ${response2.statusCode} ${response2.statusMessage}`);
+             for (const [name, value2] of Object.entries(response2.headers))
+               progress2.log(`  ${name}: ${value2}`);
+-            const cookies = this._parseSetCookieHeader(response2.url || url2.toString(), response2.headers["set-cookie"]);
++            const resolvedResponseUrl = response2.url && response2.url.startsWith("http") ? response2.url : url2.toString();
++            const cookies = this._parseSetCookieHeader(resolvedResponseUrl, response2.headers["set-cookie"]);
+             if (cookies.length) {
+               try {
+                 await this.addCookies(cookies);
+@@ -26065,7 +26066,7 @@
+               const body2 = Buffer.concat(chunks);
+               notifyRequestFinished(body2);
+               fulfill({
+-                url: response2.url || url2.toString(),
++                url: response2.url && response2.url.startsWith("http") ? response2.url : url2.toString(),
+                 status: response2.statusCode || 0,
+                 statusText: response2.statusMessage || "",
+                 headers: toHeadersArray(response2.rawHeaders),