[dependabot]

Bumps selenium-webdriver and @types/selenium-webdriver. These dependencies needed to be updated together.
Updates selenium-webdriver from 4.38.0 to 4.52.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.52.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

• [py] use local self-signed certificate for tests by @​titusfortner in SeleniumHQ/selenium#18148
• [build] scope RBE internet access to the tests that exercise Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18147
• [rb] Do not pass a bare --proxy to Selenium Manager by @​Mochxd in SeleniumHQ/selenium#18150
• [rb] deprecate current behavior of ignoring Grid certificates on HTTPS connections by @​titusfortner in SeleniumHQ/selenium#18153
• [py] Install web extensions from the driver by @​AutomatedTester in SeleniumHQ/selenium#17970
• [bazel] Use MRI on RBE (rebased #17622) by @​aguspe in SeleniumHQ/selenium#18123
• [build] drop RBE flags that Bazel 9 no longer honours and the misdirected cc autodetect override by @​titusfortner in SeleniumHQ/selenium#18156
• [rb] support serving test pages over HTTPS for certificate and cookie tests by @​titusfortner in SeleniumHQ/selenium#18152
• [rust] stop resolving a Java runtime on --grid so the jar lookup no longer depends on a JRE download by @​titusfortner in SeleniumHQ/selenium#18157
• [build] automatically generate Qodo reviews from PRs by committers by @​titusfortner in SeleniumHQ/selenium#18159
• [java] put third-party jars under lib/ in dist zips again by matching prefixes on canonical labels by @​titusfortner in SeleniumHQ/selenium#18165
• [build] bump rules_jvm_external to 7.2 so repinning skips artifacts without a sources jar by @​titusfortner in SeleniumHQ/selenium#18167
• [java] tag os-sensitive browser tests per file and run them on Windows and macOS by @​titusfortner in SeleniumHQ/selenium#18163
• [java] add test to ensure shipped bytecode supports Java 11 by @​titusfortner in SeleniumHQ/selenium#18166
• [rb] generate version.rb from the root version.bzl so tests do not read the version by @​titusfortner in SeleniumHQ/selenium#18164
• [build] remove unused and redundant Maven artifacts and a stale Renovate rule by @​titusfortner in SeleniumHQ/selenium#18170
• [java] add a se-manager DriverFinder test that runs unpinned through Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18169
• chore: bump to bazel 9.3.0 by @​shs96c in SeleniumHQ/selenium#18173
• chore: enable cdc in the bazel builds by @​shs96c in SeleniumHQ/selenium#18178
• chore: update all bazel deps by @​shs96c in SeleniumHQ/selenium#18174
• [py] Adopt all Ruff FURB rules by @​goldpanth3r in SeleniumHQ/selenium#18168
• [py] Adopt ruff PYI041 and G201 from the new default rule set by @​dmitgush in SeleniumHQ/selenium#18154
• [py] cleanup for ruff rule sim102 . part of the tranche 3 stage by @​iampopovich in SeleniumHQ/selenium#18034
• [java] Add BiDi generator tests by @​pujagani in SeleniumHQ/selenium#18162
• [rb] fix atoms outside Bazel and add local_dev for using a local checkout by @​titusfortner in SeleniumHQ/selenium#18183
• [build] run unit tests in parallel while keeping browser tests serial by @​titusfortner in SeleniumHQ/selenium#18191
• [rb] type vendor-declared BiDi fields instead of making extended types extensible by @​titusfortner in SeleniumHQ/selenium#18190
• [build] carry CDDL numeric bounds into the BiDi schema by @​titusfortner in SeleniumHQ/selenium#18194
• [rb] check each BiDi list element against its declared type by @​titusfortner in SeleniumHQ/selenium#18196
• [build] update open bot PRs in place through a shared workflow so fixes pushed to them survive the next run by @​titusfortner in SeleniumHQ/selenium#18197
• [rb] hold BiDi numbers to their declared ranges by @​titusfortner in SeleniumHQ/selenium#18198
• [rust] Update Selenium Manager dependencies by @​bonigarcia in SeleniumHQ/selenium#18202
• [rust] Remove fs2 crate and use standard mechanism for file lock by @​bonigarcia in SeleniumHQ/selenium#18203
• [rust] Use sevenz_rust2 create instead of sevenz_rust (unmaintained) by @​bonigarcia in SeleniumHQ/selenium#18204
• [java] Make selenium.debug/webdriver.verbose configure the real logger (Mechanism Only) by @​MohabMohie in SeleniumHQ/selenium#17841
• [rb] declare development dependencies in the Gemfile instead of the gemspec by @​titusfortner in SeleniumHQ/selenium#18207
• [rb] wait for exactly the finished downloads in the remote driver spec by @​AutomatedTester in SeleniumHQ/selenium#18188
• [js] only track the page request in the BiDi 'can request cookies' test by @​AutomatedTester in SeleniumHQ/selenium#18186
• [java] use reserved hostnames in tests instead of public domains by @​yashp676 in SeleniumHQ/selenium#18134
• [grid] Throw ConfigException for a null stereotype in node configs by @​yashp676 in SeleniumHQ/selenium#18185

... (truncated)

Commits

• 5b37fd4 Release selenium-4.52.0 (#18259)
• 2b4b7f1 [rb] update test guard for new bidi things that Chrome 158 supports
• 7fda528 [py] fix race condition in test for browsing context handler removal
• fb1ac3d [py] unit test the BiDi protocol generator (#18052)
• c3201fa [py] load blank.html after bidi network tests that fail a navigation
• 94b4838 [rb] accept JRuby's bare verification failure in the self-signed certificate ...
• 6b6257a [dotnet] [test] Move proxy tests and some others to unit suite (#18257)
• 4d6a66e [dotnet] [test] Move cookie tests to unit suite (#18256)
• 25d340b [py][js] Initial Creation of a external shippable selenium manager (#17542)
• 8a6aefc [py] Reject null list elements in BiDi serialization inbound and outbound (#1...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for selenium-webdriver since your current version.

Updates @types/selenium-webdriver from 4.35.4 to 4.35.7

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[martastn]

Verdict: Safe to merge (with the included one-line type fix)

Bump: selenium-webdriver 4.38.0 → 4.52.0 (minor, direct devDependency) + @types/selenium-webdriver 4.35.4 → 4.35.7 (patch, direct devDependency); lockfile also moves jszip 3.10.1 → 3.10.2 and @bazel/runfiles 6.3.1 → 6.5.0 (both only pulled in by selenium)

Changes:

• Selenium: CDP v154–156 support, isDisplayed/getAttribute/find atoms rewritten in TS (4.44–4.45), new BiDi/web-extension APIs, removed deprecated Firefox profile/FTP-proxy APIs. engines is now ^22.23.4 || ^24.22.1 || >=26.12.1 (Node releases that reject the compromised eMudhra keys, SeleniumHQ/selenium#18249). npm only warns on older Node. (JS CHANGES.md)
• Types: WebElement.getAttribute() now returns Promise<string | null> (DefinitelyTyped#75028); adds getDomAttribute/getProperty/getAriaRole/getAccessibleName (#75437); typeScriptVersion 5.2 → 5.6 (we use 5.8.3).
• No GHSA for selenium-webdriver; npm audit unchanged (43 → 43). 4.52.0 has npm provenance from SeleniumHQ/selenium release.yml.

Usage in repo: only the 6 Selenium E2E suites (src/__tests__/*Converter.test.ts, Header/ProjectMenu.test.ts, Header/SimulationControls.test.ts). Nothing in the app bundle.

Impact: none on the app. The new nullable getAttribute type broke npx tsc --noEmit at src/__tests__/TopasConverter.test.ts:110 (By.id(...) needs a string). CI didn't catch it because build and Jest don't type-check test files. The fix in this PR handles it:

-			By.id(await firstExample.getAttribute('aria-labelledby'))
+			By.id((await firstExample.getAttribute('aria-labelledby')) ?? '')

Verified:

• tsc ✅ (with the fix; 0 errors, same as master) · prettier/eslint ✅ on the fixed file
• build ✅ — prod bundle byte-identical to master (129/129 files after normalising checkout path + chunk hashes; Δ 0 kB)
• tests: same result as master (36 passed, 1 skipped; the 2 local failures also happen on master: SimulationControls sees my local backend on :5000, ProjectMenu is flaky). PR CI: 38 passed on Node 24.22.2 and 26.13.0. The fixed line is in an xtest suite, so it has no runtime effect.
• Same chromedriver/Chrome is resolved by Selenium Manager 0.4.38 and 0.4.52. A controlled A/B of ProjectMenu against one server (6 runs each) failed at the same two dialog-fade-in points with both versions.