Skip to content

Conversation

@selenium-ci
Copy link
Member

@selenium-ci selenium-ci commented Aug 22, 2025

User description

This is an automated pull request to update pinned browsers and drivers

Merge after verify the new browser versions properly passing the tests and no bugs need to be filed


PR Type

Other


Description

  • Update Microsoft Edge browser version from 139.0.3405.102 to 139.0.3405.111

  • Update SHA256 checksums for both macOS and Linux Edge packages

  • Update package file paths to reflect new version numbers


Diagram Walkthrough

flowchart LR
  A["Edge 139.0.3405.102"] --> B["Edge 139.0.3405.111"]
  B --> C["Updated SHA256 checksums"]
  B --> D["Updated package paths"]
Loading

File Walkthrough

Relevant files
Dependencies
repositories.bzl
Update Edge browser version and checksums                               

common/repositories.bzl

  • Update Microsoft Edge version from 139.0.3405.102 to 139.0.3405.111
  • Update SHA256 checksums for macOS and Linux Edge packages
  • Update package file paths to match new version numbers
+5/-5     

@selenium-ci selenium-ci added the B-build Includes scripting, bazel and CI integrations label Aug 22, 2025
@qodo-code-review
Copy link
Contributor

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪
🧪 No relevant tests
🔒 Security concerns

Supply chain:
External binary URLs and checksums were updated. Ensure checksums are independently verified and downloads occur over HTTPS with pinning where possible.

⚡ Recommended focus areas for review

Integrity Check

Verify that the new SHA256 values match the downloaded artifacts for both macOS and Linux Edge packages to prevent cache or supply-chain issues.

        url = "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/017e25fc-2906-45b2-958c-1c71c4667dc1/MicrosoftEdge-139.0.3405.111.pkg",
        sha256 = "1aa42cbaaf38b035e17d43fbbe0a293ceb286c5fd298d463b1a369ed900a03ac",
        move = {
            "MicrosoftEdge-139.0.3405.111.pkg/Payload/Microsoft Edge.app": "Edge.app",
        },
        build_file_content = """
load("@aspect_rules_js//js:defs.bzl", "js_library")
package(default_visibility = ["//visibility:public"])

exports_files(["Edge.app"])

js_library(
    name = "edge-js",
    data = glob(["Edge.app/**/*"]),
)
""",
    )

    deb_archive(
        name = "linux_edge",
        url = "https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_139.0.3405.111-1_amd64.deb",
        sha256 = "d61b2fcef695083496184a6a323b2bcfb57d45af8fb6867ffe54974a5992dc52",
Path Consistency

Confirm that the updated macOS package internal path matches the move mapping so that Edge.app is correctly extracted and referenced by downstream rules.

move = {
    "MicrosoftEdge-139.0.3405.111.pkg/Payload/Microsoft Edge.app": "Edge.app",
},
build_file_content = """

@qodo-code-review
Copy link
Contributor

PR Code Suggestions ✨

Explore these optional code suggestions:

CategorySuggestion                                                                                                                                    Impact
Possible issue
Fix macOS pkg move path

The move path includes the outer .pkg name, which is not present in the
extracted archive structure and will cause Bazel to fail moving files. Update
the path to point to the app within the extracted payload root. Verify the
internal layout with pkgutil --expand if unsure.

common/repositories.bzl [124-132]

 pkg_archive(
     name = "mac_edge",
     url = "https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/017e25fc-2906-45b2-958c-1c71c4667dc1/MicrosoftEdge-139.0.3405.111.pkg",
     sha256 = "1aa42cbaaf38b035e17d43fbbe0a293ceb286c5fd298d463b1a369ed900a03ac",
     move = {
-        "MicrosoftEdge-139.0.3405.111.pkg/Payload/Microsoft Edge.app": "Edge.app",
+        "Payload/Microsoft Edge.app": "Edge.app",
     },
     build_file_content = """
 load("@aspect_rules_js//js:defs.bzl", "js_library")
  • Apply / Chat
Suggestion importance[1-10]: 9

__

Why: This suggestion correctly identifies a likely bug in the move path for the pkg_archive rule, which would cause the build to fail.

High
  • More

@navin772 navin772 merged commit 12bf38f into trunk Aug 22, 2025
36 checks passed
@navin772 navin772 deleted the pinned-browser-updates branch August 22, 2025 05:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

B-build Includes scripting, bazel and CI integrations Possible security concern Review effort 2/5

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants