Skip to content

Conversation

@selenium-ci
Copy link
Member

@selenium-ci selenium-ci commented Jul 11, 2025

User description

This is an automated pull request to update pinned browsers and drivers

Merge after verify the new browser versions properly passing the tests and no bugs need to be filed


PR Type

Other


Description

  • Update Microsoft Edge browser version from 138.0.3351.77 to 138.0.3351.83

  • Update download URLs and SHA256 checksums for macOS and Linux packages

  • Maintain consistent package structure and build configurations


Changes diagram

flowchart LR
  A["Edge 138.0.3351.77"] --> B["Edge 138.0.3351.83"]
  B --> C["Updated macOS package"]
  B --> D["Updated Linux package"]
  C --> E["New SHA256 checksum"]
  D --> F["New SHA256 checksum"]
Loading

Changes walkthrough 📝

Relevant files
Dependencies
repositories.bzl
Update Edge browser version and checksums                               

common/repositories.bzl

  • Updated Microsoft Edge version from 138.0.3351.77 to 138.0.3351.83
  • Updated download URLs for both macOS and Linux Edge packages
  • Updated SHA256 checksums for package integrity verification
  • Updated package path references to match new version
  • +5/-5     

    Need help?
  • Type /help how to ... in the comments thread for any questions about Qodo Merge usage.
  • Check out the documentation for more information.
  • @selenium-ci selenium-ci added the B-build Includes scripting, bazel and CI integrations label Jul 11, 2025
    @qodo-merge-pro
    Copy link
    Contributor

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
    🧪 No relevant tests
    🔒 Security concerns

    Supply chain security:
    The PR updates download URLs and SHA256 checksums for Microsoft Edge packages. While this appears to be a legitimate version update, the new checksums should be independently verified against the actual packages from Microsoft's official repositories to ensure they haven't been tampered with. The URLs point to official Microsoft domains which is good, but checksum verification is critical for supply chain security.

    ⚡ Recommended focus areas for review

    Checksum Verification

    The SHA256 checksums for both macOS and Linux Edge packages have been updated. These checksums should be independently verified against the actual downloaded packages to ensure integrity and prevent potential supply chain attacks.

            sha256 = "deea1024b09afcc0ffca83ecb350044e5e960eae6b282779e2b6213e0f499f6a",
            move = {
                "MicrosoftEdge-138.0.3351.83.pkg/Payload/Microsoft Edge.app": "Edge.app",
            },
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Edge.app"])
    
    js_library(
        name = "edge-js",
        data = glob(["Edge.app/**/*"]),
    )
    """,
        )
    
        deb_archive(
            name = "linux_edge",
            url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_138.0.3351.83-1_amd64.deb",
            sha256 = "35c0f0db8f3797e566060af851edaf666145b3765d589bec7ecb9beecb4c10e1",

    @qodo-merge-pro
    Copy link
    Contributor

    PR Code Suggestions ✨

    No code suggestions found for the PR.

    @navin772 navin772 merged commit b98063c into trunk Jul 11, 2025
    36 checks passed
    @navin772 navin772 deleted the pinned-browser-updates branch July 11, 2025 07:14
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    B-build Includes scripting, bazel and CI integrations Possible security concern Review effort 2/5

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants