docs: release notes for v1.61

docs/src/api/class-credentials.md

@@ -33,6 +33,76 @@ await page.goto('https://example.com/login');
 // The page's navigator.credentials.get() is answered with the seeded passkey.
 ```
 
+```java
+BrowserContext context = browser.newContext();
+
+// A passkey your backend already provisioned for a test user.
+context.credentials().create("example.com", new Credentials.CreateOptions()
+    .setId(knownCredentialId) // base64url
+    .setUserHandle(knownUserHandle) // base64url
+    .setPrivateKey(knownPrivateKey) // base64url PKCS#8 (DER)
+    .setPublicKey(knownPublicKey)); // base64url SPKI (DER)
+context.credentials().install();
+
+Page page = context.newPage();
+page.navigate("https://example.com/login");
+// The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
+```python async
+context = await browser.new_context()
+
+# A passkey your backend already provisioned for a test user.
+await context.credentials.create(
+    "example.com",
+    id=known_credential_id,  # base64url
+    user_handle=known_user_handle,  # base64url
+    private_key=known_private_key,  # base64url PKCS#8 (DER)
+    public_key=known_public_key,  # base64url SPKI (DER)
+)
+await context.credentials.install()
+
+page = await context.new_page()
+await page.goto("https://example.com/login")
+# The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
+```python sync
+context = browser.new_context()
+
+# A passkey your backend already provisioned for a test user.
+context.credentials.create(
+    "example.com",
+    id=known_credential_id,  # base64url
+    user_handle=known_user_handle,  # base64url
+    private_key=known_private_key,  # base64url PKCS#8 (DER)
+    public_key=known_public_key,  # base64url SPKI (DER)
+)
+context.credentials.install()
+
+page = context.new_page()
+page.goto("https://example.com/login")
+# The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
+```csharp
+var context = await browser.NewContextAsync();
+
+// A passkey your backend already provisioned for a test user.
+await context.Credentials.CreateAsync("example.com", new()
+{
+    Id = knownCredentialId, // base64url
+    UserHandle = knownUserHandle, // base64url
+    PrivateKey = knownPrivateKey, // base64url PKCS#8 (DER)
+    PublicKey = knownPublicKey, // base64url SPKI (DER)
+});
+await context.Credentials.InstallAsync();
+
+var page = await context.NewPageAsync();
+await page.GotoAsync("https://example.com/login");
+// The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
 **Usage: capture a passkey, then reuse it**
 
 ```js
@@ -49,6 +119,65 @@ const [credential] = await context.credentials.get({ rpId: 'example.com' });
 fs.writeFileSync('playwright/.auth/passkey.json', JSON.stringify(credential));
 ```
 
+```java
+// setup test: let the app register a passkey, then save it.
+BrowserContext context = browser.newContext();
+context.credentials().install();
+
+Page page = context.newPage();
+page.navigate("https://example.com/register");
+page.getByRole(AriaRole.BUTTON, new Page.GetByRoleOptions().setName("Create a passkey")).click();
+
+// Read back the passkey the page registered — it includes the private key.
+VirtualCredential credential = context.credentials().get(
+    new Credentials.GetOptions().setRpId("example.com")).get(0);
+Files.writeString(Paths.get("playwright/.auth/passkey.json"), new Gson().toJson(credential));
+```
+
+```python async
+# setup test: let the app register a passkey, then save it.
+context = await browser.new_context()
+await context.credentials.install()
+
+page = await context.new_page()
+await page.goto("https://example.com/register")
+await page.get_by_role("button", name="Create a passkey").click()
+
+# Read back the passkey the page registered — it includes the private key.
+[credential] = await context.credentials.get(rp_id="example.com")
+with open("playwright/.auth/passkey.json", "w") as f:
+    json.dump(credential, f)
+```
+
+```python sync
+# setup test: let the app register a passkey, then save it.
+context = browser.new_context()
+context.credentials.install()
+
+page = context.new_page()
+page.goto("https://example.com/register")
+page.get_by_role("button", name="Create a passkey").click()
+
+# Read back the passkey the page registered — it includes the private key.
+[credential] = context.credentials.get(rp_id="example.com")
+with open("playwright/.auth/passkey.json", "w") as f:
+    json.dump(credential, f)
+```
+
+```csharp
+// setup test: let the app register a passkey, then save it.
+var context = await browser.NewContextAsync();
+await context.Credentials.InstallAsync();
+
+var page = await context.NewPageAsync();
+await page.GotoAsync("https://example.com/register");
+await page.GetByRole(AriaRole.Button, new() { Name = "Create a passkey" }).ClickAsync();
+
+// Read back the passkey the page registered — it includes the private key.
+var credentials = await context.Credentials.GetAsync(new() { RpId = "example.com" });
+File.WriteAllText("playwright/.auth/passkey.json", JsonSerializer.Serialize(credentials[0]));
+```
+
 ```js
 // later test: seed the captured passkey so the app starts already enrolled.
 const credential = JSON.parse(fs.readFileSync('playwright/.auth/passkey.json', 'utf8'));
@@ -61,6 +190,80 @@ await page.goto('https://example.com/login');
 // navigator.credentials.get() resolves the captured passkey — already signed in.
 ```
 
+```java
+// later test: seed the captured passkey so the app starts already enrolled.
+VirtualCredential credential = new Gson().fromJson(
+    Files.readString(Paths.get("playwright/.auth/passkey.json")), VirtualCredential.class);
+BrowserContext context = browser.newContext();
+context.credentials().create(credential.rpId, new Credentials.CreateOptions()
+    .setId(credential.id)
+    .setUserHandle(credential.userHandle)
+    .setPrivateKey(credential.privateKey)
+    .setPublicKey(credential.publicKey));
+context.credentials().install();
+
+Page page = context.newPage();
+page.navigate("https://example.com/login");
+// navigator.credentials.get() resolves the captured passkey — already signed in.
+```
+
+```python async
+# later test: seed the captured passkey so the app starts already enrolled.
+with open("playwright/.auth/passkey.json") as f:
+    credential = json.load(f)
+context = await browser.new_context()
+await context.credentials.create(
+    credential["rpId"],
+    id=credential["id"],
+    user_handle=credential["userHandle"],
+    private_key=credential["privateKey"],
+    public_key=credential["publicKey"],
+)
+await context.credentials.install()
+
+page = await context.new_page()
+await page.goto("https://example.com/login")
+# navigator.credentials.get() resolves the captured passkey — already signed in.
+```
+
+```python sync
+# later test: seed the captured passkey so the app starts already enrolled.
+with open("playwright/.auth/passkey.json") as f:
+    credential = json.load(f)
+context = browser.new_context()
+context.credentials.create(
+    credential["rpId"],
+    id=credential["id"],
+    user_handle=credential["userHandle"],
+    private_key=credential["privateKey"],
+    public_key=credential["publicKey"],
+)
+context.credentials.install()
+
+page = context.new_page()
+page.goto("https://example.com/login")
+# navigator.credentials.get() resolves the captured passkey — already signed in.
+```
+
+```csharp
+// later test: seed the captured passkey so the app starts already enrolled.
+var credential = JsonSerializer.Deserialize<VirtualCredential>(
+    File.ReadAllText("playwright/.auth/passkey.json"));
+var context = await browser.NewContextAsync();
+await context.Credentials.CreateAsync(credential.RpId, new()
+{
+    Id = credential.Id,
+    UserHandle = credential.UserHandle,
+    PrivateKey = credential.PrivateKey,
+    PublicKey = credential.PublicKey,
+});
+await context.Credentials.InstallAsync();
+
+var page = await context.NewPageAsync();
+await page.GotoAsync("https://example.com/login");
+// navigator.credentials.get() resolves the captured passkey — already signed in.
+```
+
 **Defaults**
 
 - The authenticator presents itself as a **platform** authenticator (`authenticatorAttachment` is

docs/src/release-notes-csharp.md

@@ -6,6 +6,65 @@ toc_max_heading_level: 2
 
 import LiteYouTube from '@site/src/components/LiteYouTube';
 
+## Version 1.61
+
+### 🔑 WebAuthn passkeys
+
+New [Credentials] virtual authenticator, available via [`property: BrowserContext.credentials`], lets tests register passkeys and answer `navigator.credentials.create()` / `navigator.credentials.get()` ceremonies in the page — no real hardware key required, works in all browsers:
+
+```csharp
+var context = await browser.NewContextAsync();
+
+// Seed a passkey your backend provisioned for a test user.
+await context.Credentials.CreateAsync("example.com", new()
+{
+    Id = credentialId,
+    UserHandle = userHandle,
+    PrivateKey = privateKey,
+    PublicKey = publicKey,
+});
+await context.Credentials.InstallAsync();
+
+var page = await context.NewPageAsync();
+await page.GotoAsync("https://example.com/login");
+// The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
+You can also let the app register a passkey once in a setup test, read it back with [`method: Credentials.get`], and seed it into later tests — see [Credentials] for details.
+
+### 🗃️ Web Storage
+
+New [WebStorage] API, available via [`property: Page.localStorage`] and [`property: Page.sessionStorage`], reads and writes the page's storage for the current origin:
+
+```csharp
+await page.LocalStorage.SetItemAsync("token", "abc");
+var token = await page.LocalStorage.GetItemAsync("token");
+var items = await page.SessionStorage.ItemsAsync();
+```
+
+### New APIs
+
+- [`method: APIResponse.securityDetails`] and [`method: APIResponse.serverAddr`] mirror the browser-side [`method: Response.securityDetails`] and [`method: Response.serverAddr`].
+- New option `ArtifactsDir` in [`method: BrowserType.connectOverCDP`] controls where artifacts such as traces and downloads are stored when attached to an existing browser.
+- New option `Cursor` in [`method: Screencast.showActions`] controls the cursor decoration rendered for pointer actions.
+- The `OnFrame` callback in [`method: Screencast.start`] now receives a `Timestamp` of when the frame was presented by the browser.
+
+### 🛠️ Other improvements
+
+- Playwright now supports Ubuntu 26.04.
+
+### Browser Versions
+
+- Chromium 149.0.7827.55
+- Mozilla Firefox 151.0
+- WebKit 26.5
+
+This version was also tested against the following stable channels:
+
+- Google Chrome 149
+- Microsoft Edge 149
+
+
 ## Version 1.60
 
 ### 🌐 HAR recording on Tracing

docs/src/release-notes-java.md

@@ -6,6 +6,63 @@ toc_max_heading_level: 2
 
 import LiteYouTube from '@site/src/components/LiteYouTube';
 
+## Version 1.61
+
+### 🔑 WebAuthn passkeys
+
+New [Credentials] virtual authenticator, available via [`property: BrowserContext.credentials`], lets tests register passkeys and answer `navigator.credentials.create()` / `navigator.credentials.get()` ceremonies in the page — no real hardware key required, works in all browsers:
+
+```java
+BrowserContext context = browser.newContext();
+
+// Seed a passkey your backend provisioned for a test user.
+context.credentials().create("example.com", new Credentials.CreateOptions()
+    .setId(credentialId)
+    .setUserHandle(userHandle)
+    .setPrivateKey(privateKey)
+    .setPublicKey(publicKey));
+context.credentials().install();
+
+Page page = context.newPage();
+page.navigate("https://example.com/login");
+// The page's navigator.credentials.get() is answered with the seeded passkey.
+```
+
+You can also let the app register a passkey once in a setup test, read it back with [`method: Credentials.get`], and seed it into later tests — see [Credentials] for details.
+
+### 🗃️ Web Storage
+
+New [WebStorage] API, available via [`property: Page.localStorage`] and [`property: Page.sessionStorage`], reads and writes the page's storage for the current origin:
+
+```java
+page.localStorage().setItem("token", "abc");
+String token = page.localStorage().getItem("token");
+List<NameValue> items = page.sessionStorage().items();
+```
+
+### New APIs
+
+- [`method: APIResponse.securityDetails`] and [`method: APIResponse.serverAddr`] mirror the browser-side [`method: Response.securityDetails`] and [`method: Response.serverAddr`].
+- New option `artifactsDir` in [`method: BrowserType.connectOverCDP`] controls where artifacts such as traces and downloads are stored when attached to an existing browser.
+- New option `cursor` in [`method: Screencast.showActions`] controls the cursor decoration rendered for pointer actions.
+- The `onFrame` callback in [`method: Screencast.start`] now receives a `timestamp` of when the frame was presented by the browser.
+
+### 🛠️ Other improvements
+
+- Playwright now supports Ubuntu 26.04.
+
+### Browser Versions
+
+- Chromium 149.0.7827.55
+- Mozilla Firefox 151.0
+- WebKit 26.5
+
+This version was also tested against the following stable channels:
+
+- Google Chrome 149
+- Microsoft Edge 149
+
+
 ## Version 1.60
 
 ### 🌐 HAR recording on Tracing