Skip to content

Conversation

@selenium-ci
Copy link
Member

@selenium-ci selenium-ci commented Jul 12, 2025

User description

This is an automated pull request to update pinned browsers and drivers

Merge after verify the new browser versions properly passing the tests and no bugs need to be filed


PR Type

Other


Description

  • Update Firefox beta from 141.0b8 to 141.0b9

  • Update Edge driver from 138.0.3351.77 to 138.0.3351.83

  • Update SHA256 checksums for all browser archives


Changes diagram

flowchart LR
  A["Firefox 141.0b8"] --> B["Firefox 141.0b9"]
  C["Edge Driver 138.0.3351.77"] --> D["Edge Driver 138.0.3351.83"]
  E["Old SHA256 checksums"] --> F["New SHA256 checksums"]
Loading

Changes walkthrough 📝

Relevant files
Configuration changes
repositories.bzl
Update browser versions and checksums                                       

common/repositories.bzl

  • Updated Firefox beta version from 141.0b8 to 141.0b9 for Linux and Mac
  • Updated Edge driver version from 138.0.3351.77 to 138.0.3351.83 for
    Linux and Mac
  • Updated corresponding SHA256 checksums for all browser archives
  • +8/-8     

    Need help?
  • Type /help how to ... in the comments thread for any questions about Qodo Merge usage.
  • Check out the documentation for more information.
  • @selenium-ci selenium-ci added the B-build Includes scripting, bazel and CI integrations label Jul 12, 2025
    @qodo-merge-pro
    Copy link
    Contributor

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
    🧪 No relevant tests
    🔒 Security concerns

    Checksum validation:
    The updated SHA256 checksums for Firefox and Edge driver downloads need to be verified for accuracy. Incorrect checksums could allow corrupted or potentially malicious files to be downloaded and used in the build process. It's critical to ensure these checksums match the actual files from the official Mozilla and Microsoft distribution servers.

    ⚡ Recommended focus areas for review

    Checksum Validation

    The SHA256 checksums for all browser archives have been updated. These checksums should be verified against the actual downloaded files to ensure integrity and prevent potential security issues from corrupted or tampered downloads.

            sha256 = "5a89acdfeecef444ff167635308fde601317331a6537ba379897b77a636496be",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["firefox/firefox"])
    
    js_library(
        name = "firefox-js",
        data = [":files"],
    )
    """,
        )
    
        dmg_archive(
            name = "mac_beta_firefox",
            url = "https://ftp.mozilla.org/pub/firefox/releases/141.0b9/mac/en-US/Firefox%20141.0b9.dmg",
            sha256 = "e105272ffa164d501a78b3a407fef1afcac80cab4b9e03de07f3599e8ce39588",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Firefox.app"])
    
    js_library(
        name = "firefox-js",
        data = glob(["Firefox.app/**/*"]),
    )
    """,
        )
    
        http_archive(
            name = "linux_geckodriver",
            url = "https://github.com/mozilla/geckodriver/releases/download/v0.36.0/geckodriver-v0.36.0-linux64.tar.gz",
            sha256 = "0bde38707eb0a686a20c6bd50f4adcc7d60d4f73c60eb83ee9e0db8f65823e04",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["geckodriver"])
    
    js_library(
        name = "geckodriver-js",
        data = ["geckodriver"],
    )
    """,
        )
    
        http_archive(
            name = "mac_geckodriver",
            url = "https://github.com/mozilla/geckodriver/releases/download/v0.36.0/geckodriver-v0.36.0-macos.tar.gz",
            sha256 = "b5627bfc29801b8752c9f1e7699018963c39c076aab6576dc14fcb1ce7a256f6",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["geckodriver"])
    
    js_library(
        name = "geckodriver-js",
        data = ["geckodriver"],
    )
    """,
        )
    
        pkg_archive(
            name = "mac_edge",
            url = "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/e6174f66-8a94-4831-ad47-f7c4c12f4eca/MicrosoftEdge-138.0.3351.83.pkg",
            sha256 = "deea1024b09afcc0ffca83ecb350044e5e960eae6b282779e2b6213e0f499f6a",
            move = {
                "MicrosoftEdge-138.0.3351.83.pkg/Payload/Microsoft Edge.app": "Edge.app",
            },
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["Edge.app"])
    
    js_library(
        name = "edge-js",
        data = glob(["Edge.app/**/*"]),
    )
    """,
        )
    
        deb_archive(
            name = "linux_edge",
            url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_138.0.3351.83-1_amd64.deb",
            sha256 = "35c0f0db8f3797e566060af851edaf666145b3765d589bec7ecb9beecb4c10e1",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    filegroup(
        name = "files",
        srcs = glob(["**/*"]),
    )
    
    exports_files(["opt/microsoft/msedge/microsoft-edge"])
    
    js_library(
        name = "edge-js",
        data = [":files"],
    )
    """,
        )
    
        http_archive(
            name = "linux_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.83/edgedriver_linux64.zip",
            sha256 = "ed7d3651a5087bf7cdd383c244de29fa9e6a347473ff53c0172583380c5f7256",
            build_file_content = """
    load("@aspect_rules_js//js:defs.bzl", "js_library")
    package(default_visibility = ["//visibility:public"])
    
    exports_files(["msedgedriver"])
    
    js_library(
        name = "msedgedriver-js",
        data = ["msedgedriver"],
    )
    """,
        )
    
        http_archive(
            name = "mac_edgedriver",
            url = "https://msedgedriver.azureedge.net/138.0.3351.83/edgedriver_mac64.zip",
            sha256 = "a9e267a880300ed8dc77fc4ff12d4a66b49e3443d23c1091af277f332b2fc041",

    @qodo-merge-pro
    Copy link
    Contributor

    qodo-merge-pro bot commented Jul 12, 2025

    PR Code Suggestions ✨

    No code suggestions found for the PR.

    @navin772 navin772 merged commit 21e3af9 into trunk Jul 12, 2025
    32 checks passed
    @navin772 navin772 deleted the pinned-browser-updates branch July 12, 2025 09:54
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    B-build Includes scripting, bazel and CI integrations Possible security concern Review effort 2/5

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants