Skip to content

Conversation

@Zerpet
Copy link
Member

@Zerpet Zerpet commented Oct 22, 2025

Proposed Changes

Bump Selenium dependencies, because some of them have critical CVEs.

Types of Changes

What types of changes does your code introduce to this project?
Put an x in the boxes that apply

  • Bug fix (non-breaking change which fixes issue #NNNN)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause an observable behavior change in existing systems)
  • Documentation improvements (corrections, new content, etc)
  • Cosmetic change (whitespace, formatting, etc)
  • Build system and/or CI

Checklist

Put an x in the boxes that apply.
You can also fill these out after creating the PR.
This is simply a reminder of what we are going to look for before merging your code.

  • Mandatory: I (or my employer/client) have have signed the CA (see https://github.com/rabbitmq/cla)
  • I have read the CONTRIBUTING.md document
  • I have added tests that prove my fix is effective or that my feature works
  • All tests pass locally with my changes
  • If relevant, I have added necessary documentation to https://github.com/rabbitmq/rabbitmq-website
  • If relevant, I have added this change to the first version(s) in release-notes that I expect to introduce it

Further Comments

I can configure dependabot to update dependencies for us automatically, but I think @MarcialRosales had some reluctance to automating dependencies in Selenium.

Selenium tests are passing locally in my laptop.

Because some of them have critical CVEs.
@michaelklishin michaelklishin added this to the 4.3.0 milestone Oct 23, 2025
@michaelklishin michaelklishin merged commit 2f40f9e into main Oct 23, 2025
289 of 290 checks passed
@michaelklishin michaelklishin deleted the bump-selenium-deps branch October 23, 2025 00:39
michaelklishin added a commit that referenced this pull request Oct 23, 2025
michaelklishin added a commit that referenced this pull request Oct 23, 2025
Bump selenium dependencies (backport #14782) (backport #14784)
@michaelklishin
Copy link
Collaborator

Backported to v4.1.x to keep the delta as small as possible.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants