ci: pull Playwright browsers from MCR image, not cdn.playwright.dev

cdn.playwright.dev browser-binary downloads stall from GitHub runners (the binaries never finish, hanging the job for its full duration even with a timeout+retry; confirmed via logs). Pull the exact matching browsers from the official Playwright image on Microsoft Container Registry (mcr.microsoft.com/playwright:v1.59.1-noble, independent of cdn.playwright.dev) and copy them into the default browser cache. Verified: the v1.59.1-noble tag exists, the image keeps browsers at /ms-playwright with 0777 perms, and its browser revisions match @playwright/test 1.59.1 by construction. e2e still runs on the normal runner as a non-root user, so Chromium keeps its sandbox. install-deps stays (apt only, no CDN). Keep the image tag in lockstep with @playwright/test on bumps.

Author: ph33nx

.github/workflows/ci.yml

@@ -27,16 +27,19 @@ jobs:
       - run: bun run typecheck
       - run: bun run build
       - run: bun run test
-      - name: Install Playwright browsers
-        # cdn.playwright.dev browser-binary downloads occasionally stall with no
-        # built-in timeout, hanging the job. Cap each attempt and retry.
+      - name: Provision Playwright browsers from MCR image (bypass cdn.playwright.dev)
+        # cdn.playwright.dev browser-binary downloads stall from GitHub runners.
+        # Pull the exact matching browsers from the official Playwright image on
+        # Microsoft Container Registry, then copy them into the default browser
+        # cache. install-deps is apt-only (no CDN download). Keep the image tag
+        # in lockstep with @playwright/test in package.json (currently 1.59.1).
         run: |
-          for i in 1 2 3; do
-            timeout 480 bunx playwright install --with-deps chromium && exit 0
-            echo "::warning::Playwright install attempt $i stalled or failed; retrying"
-            sleep 10
-          done
-          echo "::error::Playwright browser download failed after 3 attempts"; exit 1
+          bunx playwright install-deps chromium
+          docker create --name pwbrowsers mcr.microsoft.com/playwright:v1.59.1-noble
+          mkdir -p "$HOME/.cache/ms-playwright"
+          docker cp pwbrowsers:/ms-playwright/. "$HOME/.cache/ms-playwright/"
+          docker rm pwbrowsers
+          ls -1 "$HOME/.cache/ms-playwright"
       - run: bun run test:e2e
         env:
           PLAYWRIGHT_PROJECTS: chromium

.github/workflows/release.yml

@@ -75,18 +75,21 @@ jobs:
         if: steps.diff.outputs.changed == 'true' || github.event_name == 'workflow_dispatch'
         run: bun run test
 
-      - name: Install Playwright browsers
+      - name: Provision Playwright browsers from MCR image (bypass cdn.playwright.dev)
         if: steps.diff.outputs.changed == 'true' || github.event_name == 'workflow_dispatch'
-        # cdn.playwright.dev browser-binary downloads occasionally stall with no
-        # built-in timeout, hanging the job for its full duration. Cap each
-        # attempt and retry so a stalled download fails fast and re-fetches.
+        # cdn.playwright.dev browser-binary downloads stall from GitHub runners
+        # (the binaries never finish, hanging the job). Pull the exact matching
+        # browsers from the official Playwright image on Microsoft Container
+        # Registry instead, then copy them into the default browser cache.
+        # install-deps is apt-only (no CDN download). Keep the image tag in
+        # lockstep with @playwright/test in package.json (currently 1.59.1).
         run: |
-          for i in 1 2 3; do
-            timeout 540 bunx playwright install --with-deps chromium firefox webkit && exit 0
-            echo "::warning::Playwright install attempt $i stalled or failed; retrying"
-            sleep 10
-          done
-          echo "::error::Playwright browser download failed after 3 attempts (cdn.playwright.dev stall)"; exit 1
+          bunx playwright install-deps
+          docker create --name pwbrowsers mcr.microsoft.com/playwright:v1.59.1-noble
+          mkdir -p "$HOME/.cache/ms-playwright"
+          docker cp pwbrowsers:/ms-playwright/. "$HOME/.cache/ms-playwright/"
+          docker rm pwbrowsers
+          ls -1 "$HOME/.cache/ms-playwright"
 
       - name: E2E tests
         if: steps.diff.outputs.changed == 'true' || github.event_name == 'workflow_dispatch'