From bd0f9ae326574213921fb64e424bed707004cf23 Mon Sep 17 00:00:00 2001
From: DoDiODev <DoDiDev@proton.me>
Date: Mon, 28 Sep 2026 16:55:12 +0200
Subject: [PATCH] build(e2e): commit package-lock.json for the Playwright suite

`e2e/` has been a Dependabot `npm` directory since #9089 but ships only a
`package.json` with a caret range. Without a lockfile every install
resolves whatever Playwright release is current, and Dependabot has to
guess the "from" version (#9098 was titled "1.63.0 -> 1.62.1" while it
actually raised the range from ^1.58.2).

- Add `e2e/package-lock.json` (lockfileVersion 3, public npm registry),
  resolving `@playwright/test` ^1.63.0 to 1.63.0. `package.json` is the
  npm-init scaffold and declares no `packageManager`, so npm is the
  natural tool; `**/*.json` is already excluded in `.licenserc.yaml`.
- Update the `/e2e` comment in `.github/dependabot.yml`: the directory
  now has a lockfile. `versioning-strategy: increase` stays, so the
  declared range and the locked version move together.

Signed-off-by: DoDiODev <DoDiDev@proton.me>
---
 .github/dependabot.yml |  5 ++--
 e2e/package-lock.json  | 58 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 61 insertions(+), 2 deletions(-)
 create mode 100644 e2e/package-lock.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4b2b60a3fc5..97009cc0bc7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -102,8 +102,9 @@ updates:
     open-pull-requests-limit: 5
     commit-message:
       prefix: build(deps)
-    # This directory has no lockfile. Without `increase`, Dependabot would stay
-    # silent as long as a new release still satisfies the declared caret range.
+    # Raise the caret range in package.json together with package-lock.json so
+    # the declared minimum always matches the locked version. The default
+    # `auto` may classify this non-private package as a library and only widen.
     versioning-strategy: increase
     groups:
       e2e-minor-patch:
diff --git a/e2e/package-lock.json b/e2e/package-lock.json
new file mode 100644
index 00000000000..a0bf798fc6e
--- /dev/null
+++ b/e2e/package-lock.json
@@ -0,0 +1,58 @@
+{
+  "name": "e2e",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "e2e",
+      "version": "1.0.0",
+      "license": "ISC",
+      "dependencies": {
+        "@playwright/test": "^1.63.0"
+      }
+    },
+    "node_modules/@playwright/test": {
+      "version": "1.63.0",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.63.0.tgz",
+      "integrity": "sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright": "1.63.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/playwright": {
+      "version": "1.63.0",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.63.0.tgz",
+      "integrity": "sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.63.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.63.0",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.63.0.tgz",
+      "integrity": "sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==",
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    }
+  }
+}