From 669bd355ac361e1c7d786d368cea8c6ac81c5fb9 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Thu, 4 Sep 2025 08:46:08 +0000 Subject: [PATCH] selenium/4.35.0-r0: fix GHSA-3p8m-j85q-pgmj --- selenium.yaml | 4 +++- selenium/pombump-deps.yaml | 4 ++++ 2 files changed, 7 insertions(+), 1 deletion(-) create mode 100644 selenium/pombump-deps.yaml diff --git a/selenium.yaml b/selenium.yaml index 6e8d3c632fb..5f8605a0986 100644 --- a/selenium.yaml +++ b/selenium.yaml @@ -1,7 +1,7 @@ package: name: selenium version: "4.35.0" - epoch: 0 + epoch: 1 # GHSA-3p8m-j85q-pgmj description: A browser automation framework and ecosystem. copyright: - license: Apache-2.0 @@ -44,6 +44,8 @@ pipeline: tag: selenium-${{package.version}} expected-commit: 1c58e5028bc5eaa94b12b856c2d4a87efa5363f5 + - uses: maven/pombump + - uses: patch with: patches: ignore-root-user-error.patch diff --git a/selenium/pombump-deps.yaml b/selenium/pombump-deps.yaml new file mode 100644 index 00000000000..b4abb43255c --- /dev/null +++ b/selenium/pombump-deps.yaml @@ -0,0 +1,4 @@ +patches: + - groupId: io.netty + artifactId: netty-codec + version: 4.1.125.Final