[dependabot]

Bumps lighthouse from 13.5.0 to 13.6.0.

Release notes

Sourced from lighthouse's releases.

v13.6.0

13.6.0 (2026-10-27)

Full Changelog

We expect this release to ship in the DevTools of Chrome 159, and to PageSpeed Insights within a week.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Nikolay Vitkov @​Lightning00Blade
• MohammadHossein Jahanbakhsh @​MHJahanbakhsh
• Rafe Blandford @​rafeblandford
• Roman @​gameroman
• Ivan Akulov @​iamakulov
• Francesco Marinoni Moretto @​frmoretto

Notable Changes

• CLI bulk URL auditing: The CLI now supports auditing multiple URLs sequentially in a single command—either by passing multiple URL arguments or via --url-file (with --fail-fast to abort on the first failure) (#17404). Default report filenames now include the URL pathname (<hostname>-<pathname>_<date>) to avoid collisions across pages on the same host (#17405, #17423).
• Lantern simulation improvements: Upgraded trace_engine (0.0.66 and 0.0.67) and updated request/graph modeling to improve simulation accuracy (#17307, #17379):
  • Network & protocol modeling: Treated HTTP/3 connections as multiplexed, credited consumed H2 overflow bytes across simulation steps, excluded connectionless requests from active connection counts, and improved origin RTT/throughput estimation and redirect handling (#17415).
  • Dependency graph & metrics: Added v8.compileModule and v8.evaluateModule trace event attribution, used protocol renderBlocking status for render-blocking priority (#16869), used FCP graphs when text LCP occurs in the same frame as FCP, and fixed simulated LCP breakdown calculations (#17269) and trace-mode navigation/URL handling (#17431, #17433).
• Agentic Resource Discovery (ARD) v0.91: Updated the ard-schema audit and gatherer to the ARD v0.91 specification (ard.json replacing ai-catalog.json), supporting discovery via Link HTTP headers, <link rel="ard">, and /.well-known/ard.json, warning on legacy ai-catalog locations, and displaying the ARD spec version in the report footer (#17258, #17259, #17260, #17448, #17452).
• Performance insight numericValue: Performance insight audits now populate numericValue and numericUnit from estimated time or byte savings (#17346), and select the correct navigation when traces contain multiple navigations (#17174).
• Memory and gathering optimizations: Reduced peak memory usage during runs by streaming traces (ReturnAsStream), reusing script sources from trace events, evicting decoded frame buffers in speedline, and releasing intermediate gatherer and trace engine state (#17286, #17289, #17290, #17407).

Core

• fix cycle tracking and built-in type checks in deep-equals (#17422)
• release retained gatherer and trace engine intermediate state (#17290)
• populate numericValue on performance insight audits (#17346)
• do not throw when robots.txt or llms.txt content is null (#17294)
• fail robots-txt and llms-txt on HTTP 429 (#17295)
• fix insight audits picking the wrong navigation's data (#17174)
• ard: include ARD spec version in LHR credits and report footer (#17452)
• ard: sync port with upstream f073b1e (#17448)
• ard: make upstream sync check content-based (#17261)
• ard: report legacy and unreachable discovery sources (#17260)
• ard: discover manifests per spec §5.1 (#17259)
• ard: port conformance test to ARD v0.91 (#17258)
• baseline: link to developer.chrome.com docs (#17177)
• baseline: show baseline_low_date for Widely Available features (#17337)
• baseline: fix getLowDate for high features, move web-features to devDeps (#17283)
• cdt: convert core/lib/cdt to ESM (#17340)
• config: throw when module is missing from bundledModules in bundled env (#17398)
• driver: skip clearDataForOrigin when origin is null (#17347)
• full-page-screenshot: preserve emulated width during resize (#17330)
• image-elements: skip source rules when HTML dimensions are explicit (#17287)
• lantern-metric: use last main-frame navigation in trace mode (#17433)

... (truncated)

Changelog

Sourced from lighthouse's changelog.

13.6.0 (2026-10-27)

Full Changelog

We expect this release to ship in the DevTools of Chrome 159, and to PageSpeed Insights within a week.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• Nikolay Vitkov @​Lightning00Blade
• MohammadHossein Jahanbakhsh @​MHJahanbakhsh
• Rafe Blandford @​rafeblandford
• Roman @​gameroman
• Ivan Akulov @​iamakulov
• Francesco Marinoni Moretto @​frmoretto

Notable Changes

• CLI bulk URL auditing: The CLI now supports auditing multiple URLs sequentially in a single command—either by passing multiple URL arguments or via --url-file (with --fail-fast to abort on the first failure) (#17404). Default report filenames now include the URL pathname (<hostname>-<pathname>_<date>) to avoid collisions across pages on the same host (#17405, #17423).
• Lantern simulation improvements: Upgraded trace_engine (0.0.66 and 0.0.67) and updated request/graph modeling to improve simulation accuracy (#17307, #17379):
  • Network & protocol modeling: Treated HTTP/3 connections as multiplexed, credited consumed H2 overflow bytes across simulation steps, excluded connectionless requests from active connection counts, and improved origin RTT/throughput estimation and redirect handling (#17415).
  • Dependency graph & metrics: Added v8.compileModule and v8.evaluateModule trace event attribution, used protocol renderBlocking status for render-blocking priority (#16869), used FCP graphs when text LCP occurs in the same frame as FCP, and fixed simulated LCP breakdown calculations (#17269) and trace-mode navigation/URL handling (#17431, #17433).
• Agentic Resource Discovery (ARD) v0.91: Updated the ard-schema audit and gatherer to the ARD v0.91 specification (ard.json replacing ai-catalog.json), supporting discovery via Link HTTP headers, <link rel="ard">, and /.well-known/ard.json, warning on legacy ai-catalog locations, and displaying the ARD spec version in the report footer (#17258, #17259, #17260, #17448, #17452).
• Performance insight numericValue: Performance insight audits now populate numericValue and numericUnit from estimated time or byte savings (#17346), and select the correct navigation when traces contain multiple navigations (#17174).
• Memory and gathering optimizations: Reduced peak memory usage during runs by streaming traces (ReturnAsStream), reusing script sources from trace events, evicting decoded frame buffers in speedline, and releasing intermediate gatherer and trace engine state (#17286, #17289, #17290, #17407).

Core

• fix cycle tracking and built-in type checks in deep-equals (#17422)
• release retained gatherer and trace engine intermediate state (#17290)
• populate numericValue on performance insight audits (#17346)
• do not throw when robots.txt or llms.txt content is null (#17294)
• fail robots-txt and llms-txt on HTTP 429 (#17295)
• fix insight audits picking the wrong navigation's data (#17174)
• ard: include ARD spec version in LHR credits and report footer (#17452)
• ard: sync port with upstream f073b1e (#17448)
• ard: make upstream sync check content-based (#17261)
• ard: report legacy and unreachable discovery sources (#17260)
• ard: discover manifests per spec §5.1 (#17259)
• ard: port conformance test to ARD v0.91 (#17258)
• baseline: link to developer.chrome.com docs (#17177)
• baseline: show baseline_low_date for Widely Available features (#17337)
• baseline: fix getLowDate for high features, move web-features to devDeps (#17283)
• cdt: convert core/lib/cdt to ESM (#17340)
• config: throw when module is missing from bundledModules in bundled env (#17398)
• driver: skip clearDataForOrigin when origin is null (#17347)
• full-page-screenshot: preserve emulated width during resize (#17330)
• image-elements: skip source rules when HTML dimensions are explicit (#17287)
• lantern-metric: use last main-frame navigation in trace mode (#17433)
• lcp-network-record: rename artifact, include Media requests (#17324)

... (truncated)

Commits

• edc407d v13.6.0 (#17455)
• 00bb13d misc(scripts): remove dead fallback in pptr-run-devtools (#17453)
• 207f095 misc(scripts): use timers/promises for sleeps (#17440)
• bddbe24 report: validate image and screenshot URLs before rendering (#17446)
• 6f2c062 report: add rel=noopener to target=_blank links (#17449)
• 4c8531e misc(viewer): validate gist ID in getGistFileContentAsJson (#17447)
• 479310f misc(treemap): sanitize JSON in injectOptions (#17444)
• 2f93529 misc: sanitize header URL links in treemap and flow-report (#17443)
• 982cd66 core(ard): include ARD spec version in LHR credits and report footer (#17452)
• 5ad1974 deps: upgrade deps (#17445)
• Additional commits viewable in compare view