Skip to content

Conversation

@selenium-ci
Copy link
Member

@selenium-ci selenium-ci commented Jul 2, 2025

User description

This is an automated pull request to update pinned browsers and drivers

Merge after verify the new browser versions properly passing the tests and no bugs need to be filed


PR Type

Other


Description

  • Update Microsoft Edge browser from version 138.0.3351.55 to 138.0.3351.65

  • Update corresponding EdgeDriver binaries for Linux and macOS

  • Update SHA256 checksums for all updated packages

  • Modify package URLs and file paths to match new version


Changes diagram

flowchart LR
  A["Edge 138.0.3351.55"] -- "version update" --> B["Edge 138.0.3351.65"]
  C["EdgeDriver 138.0.3351.55"] -- "version update" --> D["EdgeDriver 138.0.3351.65"]
  E["Old SHA256 checksums"] -- "update" --> F["New SHA256 checksums"]
Loading

Changes walkthrough 📝

Relevant files
Dependencies
repositories.bzl
Update Edge browser and driver versions                                   

common/repositories.bzl

  • Updated Microsoft Edge macOS package URL from version 138.0.3351.55 to
    138.0.3351.65
  • Updated Microsoft Edge Linux package URL and SHA256 checksum
  • Updated EdgeDriver URLs and checksums for both Linux and macOS
    platforms
  • Modified file paths to reflect new version numbers
  • +9/-9     

    Need help?
  • Type /help how to ... in the comments thread for any questions about Qodo Merge usage.
  • Check out the documentation for more information.
  • @selenium-ci selenium-ci added the B-build Includes scripting, bazel and CI integrations label Jul 2, 2025
    @qodo-merge-pro
    Copy link
    Contributor

    qodo-merge-pro bot commented Jul 2, 2025

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
    🧪 No relevant tests
    🔒 Security concerns

    Package integrity:
    The PR updates SHA256 checksums for browser and driver packages. While this is standard practice for version updates, it's critical to verify that these checksums are correct and correspond to legitimate Microsoft Edge packages. Incorrect checksums could allow malicious packages to be downloaded and executed.

    ⚡ Recommended focus areas for review

    Checksum Validation

    The SHA256 checksums for all updated packages should be verified to ensure they match the actual downloaded files and prevent potential security issues from corrupted or tampered packages.

            sha256 = "ff125c9e9f5e15372e3a62affa4bb63ada11cb49226c78de1ca5b1b6ffdc3a1b",
            move = {
                "MicrosoftEdge-138.0.3351.65.pkg/Payload/Microsoft Edge.app": "Edge.app",
            },
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Edge.app"])
    
    js_library(
        name = "edge-js",
        data = glob(["Edge.app/**/*"]),
    )
    """,
        )
    
        deb_archive(
            name = "linux_edge",
            url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_138.0.3351.65-1_amd64.deb",
            sha256 = "fbc6d5de9c2862fa787b47891e3e7f352bb5e50885c1526e1b1149912efa8302",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["opt/microsoft/msedge/microsoft-edge"])
    
    js_library(
        name = "edge-js",
        data = [":files"],
    )
    """,
        )
    
        http_archive(
            name = "linux_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.65/edgedriver_linux64.zip",
            sha256 = "48da0a21583fe4cbf5a2d720d344443d22517b2813d9c72a5adcf064e2fa336e",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["msedgedriver"])
    
    js_library(
        name = "msedgedriver-js",
        data = ["msedgedriver"],
    )
    """,
        )
    
        http_archive(
            name = "mac_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.65/edgedriver_mac64.zip",
            sha256 = "17307f5a12531c0e3209522ff1887fe37aaf896c27c0148157ba54f347f50492",

    @qodo-merge-pro
    Copy link
    Contributor

    qodo-merge-pro bot commented Jul 2, 2025

    PR Code Suggestions ✨

    No code suggestions found for the PR.

    @navin772 navin772 merged commit 0b1f135 into trunk Jul 2, 2025
    32 checks passed
    @navin772 navin772 deleted the pinned-browser-updates branch July 2, 2025 14:34
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    B-build Includes scripting, bazel and CI integrations Possible security concern Review effort 2/5

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants