build(deps): bump the python-quickstart group in /examples/python/getting-started-with-browserbase with 2 updates

[dependabot]

Bumps the python-quickstart group in /examples/python/getting-started-with-browserbase with 2 updates: browserbase and playwright.

Updates browserbase from 1.18.1 to 1.20.0

Release notes

Sourced from browserbase's releases.

v1.20.0

1.20.0 (2026-09-24)

Features

• Add secrets SDK generation (94ac1c2)

v1.19.0

1.19.0 (2026-09-09)

Features

• api: declare the webhooks resource (1630dc5)

Chores

• api: reset webhooks before release re-land (4e84b8c)

Changelog

Sourced from browserbase's changelog.

1.20.0 (2026-09-24)

Features

• Add secrets SDK generation (94ac1c2)

1.19.0 (2026-09-09)

Features

• api: declare the webhooks resource (1630dc5)

Chores

• api: reset webhooks before release re-land (4e84b8c)

Commits

• b3d67ac release: 1.20.0 (#199)
• ca388e7 [AP-2931] docs(agents): pausing and resuming runs (#12265)
• 94ac1c2 feat: Add secrets SDK generation
• 5452f37 [AP-3006] Expose secrets operations in SDK spec (#12281)
• c701c5f [CB-0000] fix(api): align downloads pagination schema and defaults (#11957)
• 3534d5f [AP-2967][apps/docs] Publish webhooks in the public docs (#11966)
• 5f5274b release: 1.19.0 (#195)
• 1630dc5 feat(api): declare the webhooks resource
• 4e84b8c chore(api): reset webhooks before release re-land
• f4c5e4c Declare the webhooks resource
• Additional commits viewable in compare view

Updates playwright from 1.62.0 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🪟 Locate across frames

page.frame_locator() and frame.frame_locator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

# Finds the button in any frame on the page.
page.frame_locator().get_by_role("button").click()

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

page.locator("button").visible.click()

🖼️ Aria and screen snapshots in traces

New aria_snapshots and screen_snapshots options of tracing.start() capture an aria snapshot and a screenshot of the page on every action:

context.tracing.start(snapshots=True, aria_snapshots=True, screen_snapshots=True)

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

• http_credentials now also accepts an array of credentials. The first entry matching the request origin is used, and entries without an origin match any request.
• New option opfs includes the origin private file system in the storage state, so it can be persisted and restored into later contexts.
• New events page.on('dialogclosed') and browserContext.on('dialogclosed') are emitted when a JavaScript dialog is accepted, dismissed or closed by the user.

Command line

• playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
• playwright codegen --http-credentials records against pages behind HTTP authentication.

Announcements

• ⚠️ Ubuntu 20.04 is not supported anymore.
• 🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

... (truncated)

Commits

• 8cb967b cherry-pick(#3200): devops(docker): move docker publishing to Azure Pipelines
• ab18c77 chore: roll Playwright to 1.63.0 (#3198)
• 0e66a09 devops(pipeline): resolve pip and npm packages from DevDiv_PublicPackages fee...
• 010a9cc Pin GitHub Actions to full-length commit SHAs (#3176)
• 154f67c fix(sync): wait for initialize before leaving enter (#3168)
• 4af2fc6 chore: roll Playwright to 1.62.1 (#3169)
• 4d2e058 fix(connection): register protocol callback only after successful send (#3167)
• eab2bca chore(deps): remove unused development dependencies (#3164)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​playwright@​1.63.0
	pypi/​browserbase@​1.20.0

View full report