Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade selenium-webdriver from 4.1.2 to 4.25.0 #1

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

organich
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade selenium-webdriver from 4.1.2 to 4.25.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 34 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
696 Proof of Concept
Release notes
Package name: selenium-webdriver
  • 4.25.0 - 2024-09-20

    Detailed Changelogs by Component

    Java     |     Python     |     DotNet     |     Ruby     |     JavaScript     |     IEDriver

    What's Changed

    Click to see all the changes included in this release
    • 030fcf7 - [ci] Using the commit sha and quoting values in workflow (Diego Molina)
    • 2d8e47d - [ci] Setting permissions on workflow (Diego Molina)
    • aabdb7f - Update mirror info (Fri Sep 20 00:22:17 UTC 2024) (Selenium CI Bot)
    • 72f3c94 - [ci] Fixing typo on workflow (Diego Molina)
    • f6f3ef3 - [ci] Trying out a different release action (Diego Molina)
    • 96976cc - [ci] Removing release notes headers (Diego Molina)
    • f08149c - [ci] Continuing if tag already exists (Diego Molina)
    • dc05aef - [ci] Fetching all history and trunk (Diego Molina)
    • ea4ecca - [ci] Fetching tags after the build has completed. (Diego Molina)
    • 54d8355 - [ci] Enabling workflow to be triggered manually (Diego Molina)
    • 95717cd - [build] Prepare for release of Selenium 4.25.0 (#14521) (Selenium CI Bot)
    • 8181cd6 - Update stage-release.yml (Diego Molina)
    • 26db22e - [build] Prepare for release of Selenium 4.25.0 (#14516) (Selenium CI Bot)
    • 747c6bf - [ci] Setup curl for Ubuntu on the pre release workflow (Diego Molina)
    • 4d7d336 - [ci] Setup curl for Ubuntu on the stage release workflow (Diego Molina)
    • 29dbcf1 - [gitpod] Updating Dockerfile for gitpod (Diego Molina)
    • 6dd13d7 - [py] fix tests in correct_event_firing_tests.py (#14510) (Navin Chandra)
    • f666c7f - .gitignore: add py/python.iml (#14505) (Swastik Baranwal)
    • 1af29ab - [bazel] Bump rules_java to 7.11.1 (Simon Mavi Stewart)
    • 8d6af17 - [bazel] Bump the JS rules to latest versions (#14512) (Simon Stewart)
    • 0d42674 - [rust] Selenium Manager errors when browser-path is wrong (#13352) (#14381) (Boni García)
    • 6459008 - [rust] Reuse driver mirror URL (when available) to discover Firefox versions (#13941) (#14493) (Boni García)
    • 2970ad3 - [js][bidi] Fix flaky test for network event (Puja Jagani)
    • 375e841 - [java] Escape cookie values when required for tests (#14486) (Swastik Baranwal)
    • b8b76bb - [dotnet] [bidi] Consistent naming for main BiDi itself (Nikolay Borisenko)
    • b88f688 - [dotnet] [bidi] Rename entry point AsBidirectional to AsBiDirectional (Nikolay Borisenko)
    • 7602371 - [rb] Allow driver path to be set using ENV variables (#14287) (Augustin Gottlieb Pequeno)
    • 39c38e4 - Fix formatting (Puja Jagani)
    • 3e6802e - Update .gitignore (Puja Jagani)
    • 1cb7c2a - [js] Updating version to nightly (Puja Jagani)
    • b5498a4 - Update version (Puja Jagani)
    • 603f4a4 - Update Javascript changelog (Puja Jagani)
    • 7c8b46d - [js] Close CDP websocket connection on driver.quit (#14501) (Puja Jagani)
    • a7a53fb - [dotnet] [bidi] Expose BiDi associated reference in browsing context (Nikolay Borisenko)
    • 35dd34a - [dotnet] [bidi] Simplify browsing context type enumeration (Nikolay Borisenko)
    • 3e02303 - [dotnet] [bidi] Simplify browsing context to be just context (Nikolay Borisenko)
    • b778ad5 - [dotnet] [bidi] Rename method of screenshot result to ToByteArray (Nikolay Borisenko)
    • dd50e28 - [dotnet] Workaround using pre-processor directive (#14499) (Nikolay Borisenko)
    • 210012b - [dotnet] [bidi] Hide context from command options in contextual env (Nikolay Borisenko)
    • 1a3d451 - [dotnet] Fix formatting files content globally (Nikolay Borisenko)
    • e031b8d - [dotnet] [bidi] Enable implicit ways to specify page ranges for printing (Nikolay Borisenko)
    • 6c0df70 - [dotnet] [bidi] Get tree from browsing context as root (#14495) (Nikolay Borisenko)
    • 6b4c39c - [java] toml: warn about upcoming change enforcing string to have quotes (#14491) (Swastik Baranwal)
    • c43386f - [dotnet] Adjust exception message when bidi is not enabled (Nikolay Borisenko)
    • 0666cb4 - [dotnet] Forward subscription options in browser context for log module (Nikolay Borisenko)
    • 71a0629 - firefox_profile.py: use with statement in zipfile as Python 2.x support is dropped (#14489) (Swastik Baranwal)
    • 33c110e - [bazel] Bump rules_jvm_external to 6.3 (#14492) (Simon Stewart)
    • 05bce9b - fix type errors for pointer_input.py, wheel_input.py and firefox/options.py (#14476) (Navin Chandra)
    • 49f2f76 - fix type errors for input_device and file_detector (#14459) (Swastik Baranwal)
    • 6d942fc - [py]: fix lint issue (Sri Harsha)
    • be709d7 - [py]: fix failing bidi test (Sri Harsha)
    • 6939b5b - [dotnet] Add BiDi OriginalOpener in browsing context info (Nikolay Borisenko)
    • 3e8b34c - [dotnet] BiDi implementation (#14318) (Nikolay Borisenko)
    • 7b5f6d7 - Running format script (Diego Molina)
    • b2ef56a - replace fedcm links with new ones (#14478) (Navin Chandra)
    • 247bc2b - [rb] Fix add_cause method not being able to process an array of hashes (#14433) (Augustin Gottlieb Pequeno)
    • a04dd33 - [py] Fixing version (Diego Molina)
    • 507508d - Bump bazel to 7.3.1 (Simon Mavi Stewart)
    • 0d9c478 - Bump apple_rules_lint to 0.4.0 (Simon Mavi Stewart)
    • be40b5c - fix type errors for service.py, cdp.py, webelement.py and remote_connection.py (#14448) (Navin Chandra)
    • 8fc4299 - Update mirror info (Fri Aug 30 00:18:13 UTC 2024) (Selenium CI Bot)
    • 7b25a4e - Update mirror info (Thu Aug 29 00:18:01 UTC 2024) (Selenium CI Bot)
    • 58ca133 - [rust] Include missing line in CHANGELOG for version 0.4.24 (Boni Garcia)
    • 77efb5f - [ci] Building dotnet with local config (Diego Molina)
    • 5aa336f - Setting nightly version (Diego Molina)
  • 4.24.1 - 2024-09-16
  • 4.24.0 - 2024-08-28

    Detailed Changelogs by Component

    Java     |     Python     |     DotNet     |     Ruby     |     JavaScript     |     IEDriver

  • 4.23.0 - 2024-07-19

    Detailed Changelogs by Component

    Java     |     Python     |     DotNet     |     Ruby     |     JavaScript     |     IEDriver

    What's Changed

    • 4df0a231af - [build] Prepare for release of Selenium 4.23.0 (#14273) :: Selenium CI Bot
    • e5422e6a4e - [bidi][java] Add high-level logging APIs (#14225) :: Puja Jagani
    • 8cf9a59153 - [grid] Set session-request-timeout as client readTimeout in RemoteNewSessionQueue (#14272) :: Viet Nguyen Duc
    • f3724e661a - [java] Consistent UTF-8 Encoding and Code Enhancements (#14218) :: Alex
    • 72e3a61001 - [java] custom duration for Actions constructor (#14085) :: Alex
    • 10b3305fe5 - Update logo path in readme (#14177) :: Nikolay Borisenko
    • d8830283fb - [rb] Add backtrace locations and cause to errors (#14170) :: Augustin Gottlieb Pequeno
    • 4a17ec391c - [java] Merge android specific parameters in chrome options (#14217) :: Alex
    • 9aa1a7f3ee - py: fix RelativeBy#near to take 2 parameters (#13082) :: pinterior
    • 9d6131f48e - Remove 'browserName' capability from stereotype when using RelaySession (#14247) :: bhecquet
    • 82715b914b - [dotnet] Quit fails after not successful new session (#14242) :: Indomitable
    • 79512380c6 - [bidi][js] Deprecate argument value wrapper class (#14251) :: Puja Jagani
    • 12769d6785 - [java] Revert workaround for old netty http client (addendum to #12843) (#14134) :: Oleksandr Kulychok
    • 7334bfc473 - [bidi][js] Add high-level script pinning APIs (#14250) :: Puja Jagani
    • 0f6884149f - [bidi][js] Add dom mutation handlers (#14238) :: Puja Jagani
    • 785914e555 - [py] Remove precompiled binaries from sdist (#14233) :: James Hilliard
    • 6b28a8c03f - [bidi] Add source type to log entry (#14244) :: Puja Jagani
    • df75c3a739 - [rb] Update selenium manager types (#14189) :: Augustin Gottlieb Pequeno
    • f09642274e - [dotnet] Return back protected synchronous Execute method in WebDriver :: Nikolay Borisenko
    • 425ed87c9e - [bidi][js] Add methods to add/remove handlers in Script module (#14230) :: Puja Jagani
    • 5e8d6a1f93 - [bidi][java] Avoid creating new instances of log entry event :: Puja Jagani
    • 06e7b7a4d7 - [bidi][java] Ensure empty values are removed from the call back map :: Puja Jagani
    • 5c087471ad - [bidi] [java] Fix the adding and the removing listener :: Puja Jagani
    • 48fd9563cb - [bidi] [java] Ensure the listeners returns an id (#14215) :: Puja Jagani
    • 5494108076 - [py] websocket-client v.1.8.0 was added to setup.py (#14187) :: Alex
    • fe7e7c7434 - [js + bazel]: Run Node browser tests on the RBE (#14194) :: Simon Stewart
    • 164bf7944b - [bidi][java] Remove the method that converts node value to RemoteWebElement :: Puja Jagani
    • e8745c61e3 - [java] Deleting tests referencing deprecated methods in Require.java :: Diego Molina
    • 257104ea93 - Bump JS dependencies (#14193) :: Simon Stewart
    • dcd99ce83a - [java] Removing usages of deprecated methods in Require.java :: Diego Molina
    • 2b32dbd572 - [java] Removing LocateNodeParameters.Builder, deprecated since 4.20 :: Diego Molina
    • 034a582078 - [java] Setting proxy in SM only when it is needed. :: Diego Molina
    • abdaa7539a - [js][bidi] Fix the event unsubscribe method. Update modules to have close methods. (#14192) :: Puja Jagani
    • 84cc67e7c7 - [rb] Add URLs constant to update error messages (#14174) :: Augustin Gottlieb Pequeno
    • fd5f54ebd7 - [rb] Run remote tests on RBE (#13906) :: Alex Rodionov
    • 8184982ab0 - [build] add notes for where automated build can be improved for next release :: titusfortner
    • 815839a857 - [build] ensure rust version and changelog are properly committed :: titusfortner
    • 917b2d4a57 - [build] parse patch version tags to update and PR just applicable languages :: titusfortner
    • 826a6bddeb - [rb] Add FedCM support to the ruby selenium client (

Snyk has created this PR to upgrade selenium-webdriver from 4.1.2 to 4.25.0.

See this package in npm:
selenium-webdriver

See this project in Snyk:
https://app.snyk.io/org/organich/project/d9f4c659-b4d4-4fbc-879e-afad26fb3f68?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants