Skip to content

Conversation

@selenium-ci
Copy link
Member

@selenium-ci selenium-ci commented Jun 28, 2025

User description

This is an automated pull request to update pinned browsers and drivers

Merge after verify the new browser versions properly passing the tests and no bugs need to be filed


PR Type

Other


Description

  • Update Firefox stable from 140.0.1 to 140.0.2

  • Update Firefox beta from 141.0b2 to 141.0b3

  • Update Edge driver from 137.0.3296.93 to 138.0.3351.55

  • Update SHA256 checksums for all browser versions


Changes diagram

flowchart LR
  A["Firefox 140.0.1"] -- "update" --> B["Firefox 140.0.2"]
  C["Firefox 141.0b2"] -- "update" --> D["Firefox 141.0b3"]
  E["Edge Driver 137.0.3296.93"] -- "update" --> F["Edge Driver 138.0.3351.55"]
Loading

Changes walkthrough 📝

Relevant files
Configuration changes
repositories.bzl
Browser version updates with checksums                                     

common/repositories.bzl

  • Updated Firefox stable version from 140.0.1 to 140.0.2
  • Updated Firefox beta version from 141.0b2 to 141.0b3
  • Updated Edge driver version from 137.0.3296.93 to 138.0.3351.55
  • Updated SHA256 checksums for all browser downloads
  • +12/-12 

    Need help?
  • Type /help how to ... in the comments thread for any questions about Qodo Merge usage.
  • Check out the documentation for more information.
  • @selenium-ci selenium-ci added the B-build Includes scripting, bazel and CI integrations label Jun 28, 2025
    @qodo-merge-pro
    Copy link
    Contributor

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
    🧪 No relevant tests
    🔒 Security concerns

    Supply chain security:
    The PR updates browser binaries and their SHA256 checksums from external sources (Mozilla FTP and Microsoft Edge CDN). While this appears to be a routine update, the new checksums should be independently verified against official sources to ensure the integrity of the downloaded binaries and prevent potential supply chain attacks.

    ⚡ Recommended focus areas for review

    Checksum Validation

    The SHA256 checksums for all browser downloads have been updated. These should be verified against the official sources to ensure integrity and prevent potential supply chain attacks.

            url = "https://ftp.mozilla.org/pub/firefox/releases/140.0.2/linux-x86_64/en-US/firefox-140.0.2.tar.xz",
            sha256 = "0de987e3065409d7feeba28e8b9c59c8270b917a293c140a5423579c7e70f8ce",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["firefox/firefox"])
    
    js_library(
        name = "firefox-js",
        data = [":files"],
    )
    """,
        )
    
        dmg_archive(
            name = "mac_firefox",
            url = "https://ftp.mozilla.org/pub/firefox/releases/140.0.2/mac/en-US/Firefox%20140.0.2.dmg",
            sha256 = "4584538f48fc104a83cd5b62b72f027e70bffb8cb6ea56dd24e3657347cfa979",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Firefox.app"])
    
    js_library(
        name = "firefox-js",
        data = glob(["Firefox.app/**/*"]),
    )
    """,
        )
    
        http_archive(
            name = "linux_beta_firefox",
            url = "https://ftp.mozilla.org/pub/firefox/releases/141.0b3/linux-x86_64/en-US/firefox-141.0b3.tar.xz",
            sha256 = "9f7cc8fc0ee1ae566a6ff54721428ef733d27baf8edae5bb7b8b9117616e48da",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["firefox/firefox"])
    
    js_library(
        name = "firefox-js",
        data = [":files"],
    )
    """,
        )
    
        dmg_archive(
            name = "mac_beta_firefox",
            url = "https://ftp.mozilla.org/pub/firefox/releases/141.0b3/mac/en-US/Firefox%20141.0b3.dmg",
            sha256 = "47dc6a456bc80baa784381e94f4dc4f2f7ddfdf94b0af0bb20d9678f16d28898",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Firefox.app"])
    
    js_library(
        name = "firefox-js",
        data = glob(["Firefox.app/**/*"]),
    )
    """,
        )
    
        http_archive(
            name = "linux_geckodriver",
            url = "https://github.com/mozilla/geckodriver/releases/download/v0.36.0/geckodriver-v0.36.0-linux64.tar.gz",
            sha256 = "0bde38707eb0a686a20c6bd50f4adcc7d60d4f73c60eb83ee9e0db8f65823e04",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["geckodriver"])
    
    js_library(
        name = "geckodriver-js",
        data = ["geckodriver"],
    )
    """,
        )
    
        http_archive(
            name = "mac_geckodriver",
            url = "https://github.com/mozilla/geckodriver/releases/download/v0.36.0/geckodriver-v0.36.0-macos.tar.gz",
            sha256 = "b5627bfc29801b8752c9f1e7699018963c39c076aab6576dc14fcb1ce7a256f6",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["geckodriver"])
    
    js_library(
        name = "geckodriver-js",
        data = ["geckodriver"],
    )
    """,
        )
    
        pkg_archive(
            name = "mac_edge",
            url = "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/3c804dbf-368d-489d-8836-9756b2d4b017/MicrosoftEdge-138.0.3351.55.pkg",
            sha256 = "1ff1aecb62fe10151a4ebfd05b9834a4d94955d7f58ba434b2576468381c0f9b",
            move = {
                "MicrosoftEdge-138.0.3351.55.pkg/Payload/Microsoft Edge.app": "Edge.app",
            },
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Edge.app"])
    
    js_library(
        name = "edge-js",
        data = glob(["Edge.app/**/*"]),
    )
    """,
        )
    
        deb_archive(
            name = "linux_edge",
            url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_138.0.3351.55-1_amd64.deb",
            sha256 = "4990ad02387363c06ac0cf48312db4f35456c514fee20420ae3bdeedabccec1a",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["opt/microsoft/msedge/microsoft-edge"])
    
    js_library(
        name = "edge-js",
        data = [":files"],
    )
    """,
        )
    
        http_archive(
            name = "linux_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.55/edgedriver_linux64.zip",
            sha256 = "cfa15f718ea556a1bbc845fafe53909eaa2572058f8cb485a5c637df217e9b60",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["msedgedriver"])
    
    js_library(
        name = "msedgedriver-js",
        data = ["msedgedriver"],
    )
    """,
        )
    
        http_archive(
            name = "mac_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.55/edgedriver_mac64.zip",
            sha256 = "fd5f5d567e3cc9f3735f496dab08c5f51f555ebf7cc19f16e1a52ebad2082022",

    @qodo-merge-pro
    Copy link
    Contributor

    PR Code Suggestions ✨

    No code suggestions found for the PR.

    @navin772 navin772 merged commit c4bf5eb into trunk Jun 28, 2025
    65 of 67 checks passed
    @navin772 navin772 deleted the pinned-browser-updates branch June 28, 2025 06:27
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    B-build Includes scripting, bazel and CI integrations Possible security concern Review effort 2/5

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants