build(deps-dev): bump selenium-webdriver from 4.47.0 to 4.48.0 by dependabot[bot] · Pull Request #175 · ericdahl/bookshelf-rails

dependabot · 2026-08-31T13:05:09Z

Bumps selenium-webdriver from 4.47.0 to 4.48.0.

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.48.0

Detailed Changelogs by Component

Java | Python | DotNet | Ruby | JavaScript

What's Changed

[js] Normalize empty custom locator results by @munawiki in SeleniumHQ/selenium#17851

[py]: fix W3C capabilities built from a list of options (create_matches) by @navin772 in SeleniumHQ/selenium#17897

[rb] add low-level BiDi protocol integration specs by @titusfortner in SeleniumHQ/selenium#17878

Fix badge for CI build on the default branch by @nvborisenko in SeleniumHQ/selenium#17901

[py] Fix broken reStructuredText link in docs by @cgoldberg in SeleniumHQ/selenium#17902

[grid] stop forwarding se:remoteUrl past the Node that consumes it by @titusfortner in SeleniumHQ/selenium#17908

[grid] Forward file upload/download for Kubernetes, Docker and relay sessions by @VietND96 in SeleniumHQ/selenium#17914

[build] reduce github cache churn and aggressively prune CodeQL caches by @titusfortner in SeleniumHQ/selenium#17909

[java] fix two flaky BiDi tests that left timing-dependent state behind by @titusfortner in SeleniumHQ/selenium#17918

[java] Add warn annotation for undeclared field while JSON coercion by @pujagani in SeleniumHQ/selenium#17917

[py] temporarily disable nightly TestPyPI publishing by @titusfortner in SeleniumHQ/selenium#17920

[rb] fix Safari test failures by @titusfortner in SeleniumHQ/selenium#17922

[build] fix the issues that caused the release workflow to fail during last release by @titusfortner in SeleniumHQ/selenium#17921

Revert "[py] temporarily disable nightly TestPyPI publishing (#17920)" by @diemol in SeleniumHQ/selenium#17924

[rb] fix silent hang on oversized WebSocket frames by @aguspe in SeleniumHQ/selenium#17655

[js] Ensure BiDi is not exposed on Driver by @pujagani in SeleniumHQ/selenium#17926

[docs] charter: link the accepted BiDi support boundary record by @AutomatedTester in SeleniumHQ/selenium#17928

Honour the DO_NOT_TRACK env var by @shs96c in SeleniumHQ/selenium#17931

[build] record flaky tests on trunk and report weekly offenders to Slack by @titusfortner in SeleniumHQ/selenium#17930

[build] ignore .bazelbsp/ IDE-generated directory by @diemol in SeleniumHQ/selenium#17932

[adr] Install browser extensions from the driver directly by @titusfortner in SeleniumHQ/selenium#17817

[py] generate the internal BiDi protocol layer from the shared binding-neutral schema by @titusfortner in SeleniumHQ/selenium#17761

[rb] always reject a missing required inbound BiDi field by @titusfortner in SeleniumHQ/selenium#17936

[build] make Java and .NET release reruns pass when already published by @titusfortner in SeleniumHQ/selenium#17935

[build] Move dependency updates into a weekly workflow by @titusfortner in SeleniumHQ/selenium#17934

[rb] accept a whole-valued float for an integer BiDi field by @titusfortner in SeleniumHQ/selenium#17939

[build] unlock trunk once the release finishes writing to it by @titusfortner in SeleniumHQ/selenium#17938

[js] Add serialization and domain layer by @pujagani in SeleniumHQ/selenium#17927

[build] stop updating browsers and CDP during release preparation by @titusfortner in SeleniumHQ/selenium#17940

[py] update new BiDi layer generation to conform to latest proposed ADR by @titusfortner in SeleniumHQ/selenium#17942

[dotnet] [bidi] Throw in case of unknown discriminator by @nvborisenko in SeleniumHQ/selenium#17948

[rb] reject an inbound BiDi scalar outside its union's declared arms by @titusfortner in SeleniumHQ/selenium#17947

[build] alert Slack when a CDP update lands on trunk by @titusfortner in SeleniumHQ/selenium#17950

[js][bidi] Add BiDi connection-level event subscription by @pujagani in SeleniumHQ/selenium#17946

[dotnet] [bidi] SetMediaFeaturesOverride command in Emulation module by @nvborisenko in SeleniumHQ/selenium#17953

New Contributors

@munawiki made their first contribution in SeleniumHQ/selenium#17851

Full Changelog: SeleniumHQ/selenium@selenium-4.47.0...selenium-4.48.0

Changelog

Sourced from selenium-webdriver's changelog.

4.48.0 (2026-08-27)

Support CDP versions: v150, v151, v152

add low-level BiDi protocol integration specs (#17878)

[build] Automated Browser Version Update (major) with CDP (#17910)

fix silent hang on oversized WebSocket frames (#17655)

always reject a missing required inbound BiDi field (#17936)

accept a whole-valued float for an integer BiDi field (#17939)

reject an inbound BiDi scalar outside its union's declared arms (#17947)

Commits

27f5213 [build] Prepare for release of selenium-4.48.0 (#17956)
7bfaedb [rb] reject an inbound BiDi scalar outside its union's declared arms (#17947)
6df5706 [rb] accept a whole-valued float for an integer BiDi field (#17939)
1dd3004 [rb] always reject a missing required inbound BiDi field (#17936)
eb28a14 [rb] fix silent hang on oversized WebSocket frames (#17655)
194545f [rb] fix Safari test failures (#17922)
3e38711 [build] Automated Browser Version Update (major) with CDP (#17910)
0003281 [rb] add low-level BiDi protocol integration specs (#17878)
b4b73af [build] Update lockfiles for nightly versions
1ed71ed [build] Reset versions to nightly after selenium-4.47.0 release
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [selenium-webdriver](https://github.com/SeleniumHQ/selenium) from 4.47.0 to 4.48.0. - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.47.0...selenium-4.48.0) --- updated-dependencies: - dependency-name: selenium-webdriver dependency-version: 4.48.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

ericdahl-bot · 2026-08-31T13:08:42Z

AI Code Review — Claude (Routine: bookshelf-rails - PR opened - Run tests and code review)

Summary

This is a Dependabot bump of selenium-webdriver from 4.47.0 → 4.48.0, with a transitive bump of rubyzip from 3.4.1 → 3.5.0. Only Gemfile.lock is changed — no application code is touched.

CI Status: ✅ All checks passed

Check	Result
`test`	✅ success
`lint`	✅ success
`scan_ruby`	✅ success
`scan_js`	✅ success

Note on local test run: The remote execution environment used for this review has outbound access to rubygems.org blocked (403 Forbidden), so gems could not be installed locally to run bundle exec rails test directly. CI results above confirm the test suite passes on the PR head commit (7d26839).

Code Review

Scope: Single file changed (Gemfile.lock), 2 lines added / 2 removed.

selenium-webdriver 4.48.0 — Ruby-relevant changes:

Bug fix: Silent hang on oversized WebSocket frames now resolved (#17655) — this is a welcome reliability improvement for the system tests that use headless Chrome via Capybara.
CDP support: Adds CDP versions v150, v151, v152 — keeps the driver compatible with current Chrome versions.
BiDi improvements: Stricter validation of BiDi protocol fields — no impact on this project's system tests which don't use the BiDi API.

rubyzip 3.5.0 — pulled as a transitive dependency of selenium-webdriver; no direct usage in this project.

Risk assessment: Low. This is a dev/test-only dependency (group :test in Gemfile). No production code is affected. The minor version bump is backward-compatible, and CI confirms the existing system tests pass against the new version.

Verdict

✅ Looks good to merge. Clean dependency bump, all CI green, no issues found. No companion PR needed.

Generated by Claude Code

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 31, 2026

ericdahl merged commit 766e569 into main Aug 31, 2026
4 checks passed

dependabot Bot deleted the dependabot/bundler/selenium-webdriver-4.48.0 branch August 31, 2026 15:12

Navigation Menu

build(deps-dev): bump selenium-webdriver from 4.47.0 to 4.48.0 - #175

build(deps-dev): bump selenium-webdriver from 4.47.0 to 4.48.0#175
ericdahl merged 1 commit into
mainfrom
dependabot/bundler/selenium-webdriver-4.48.0

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

ericdahl-bot commented Aug 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026

Selenium 4.48.0

Detailed Changelogs by Component

What's Changed

New Contributors

4.48.0 (2026-08-27)

Uh oh!

ericdahl-bot commented Aug 31, 2026

AI Code Review — Claude (Routine: bookshelf-rails - PR opened - Run tests and code review)

Summary

CI Status: ✅ All checks passed

Code Review

Verdict

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants