selenium-webdriver - npm Package Compare versions

Comparing version 4.40.0 to 4.41.0

bidi/storage.js

@@ -47,3 +47,3 @@ // Licensed to the Software Freedom Conservancy (SFC) under one
    * @param {(BrowsingContextPartitionDescriptor|StorageKeyPartitionDescriptor)} [partition] - The partition to retrieve cookies from.
-   * @returns {Promise<{ cookies: Cookie[], partitionKey?: PartitionKey }>} - A promise that resolves to an object containing the retrieved cookies and an optional partition key.
+   * @returns {Promise<{ cookies: Cookie[], partitionKey: (PartitionKey|undefined) }>} - A promise that resolves to an object containing the retrieved cookies and an optional partition key.
    * @throws {Error} If the filter parameter is provided but is not an instance of CookieFilter.
@@ -50,0 +50,0 @@ * @throws {Error} If the partition parameter is provided but is not an instance of BrowsingContextPartitionDescriptor or StorageKeyPartitionDescriptor.

lib/command.js

@@ -189,2 +189,4 @@ // Licensed to the Software Freedom Conservancy (SFC) under one
 
+  FIRE_SESSION_EVENT: 'fireSessionEvent',
+
   // Federated Credential Management API
@@ -191,0 +193,0 @@ // https://www.w3.org/TR/fedcm/#automation

lib/http.js

@@ -324,2 +324,4 @@ // Licensed to the Software Freedom Conservancy (SFC) under one
 
+  [cmd.Name.FIRE_SESSION_EVENT, post(`/session/:sessionId/se/event`)],
+
   // Federated Credential Management Command
@@ -326,0 +328,0 @@ [cmd.Name.CANCEL_DIALOG, post(`/session/:sessionId/fedcm/canceldialog`)],

lib/logging.js

@@ -489,2 +489,7 @@ // Licensed to the Software Freedom Conservancy (SFC) under one
   logManager.root_.addHandler(consoleHandler)
+  if (process.env.SE_DEBUG) {
+    logManager.root_.warning(
+      'Environment Variable `SE_DEBUG` is set; Selenium is forcing verbose logging which may override user-specified settings.',
+    )
+  }
 }
@@ -491,0 +496,0 @@

package.json

 {
   "name": "selenium-webdriver",
-  "version": "4.40.0",
+  "version": "4.41.0",
   "description": "The official WebDriver JavaScript bindings from the Selenium project",
@@ -29,14 +29,14 @@ "license": "Apache-2.0",
     "tmp": "^0.2.5",
-    "ws": "^8.18.3"
+    "ws": "^8.19.0"
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.1",
+    "@eslint/js": "^9.39.2",
     "clean-jsdoc-theme": "^4.3.0",
-    "eslint": "^9.39.1",
+    "eslint": "^9.39.2",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-mocha": "^10.5.0",
-    "eslint-plugin-n": "^17.23.1",
+    "eslint-plugin-n": "^17.24.0",
     "eslint-plugin-no-only-tests": "^3.3.0",
-    "eslint-plugin-prettier": "^5.5.4",
-    "express": "^4.21.2",
+    "eslint-plugin-prettier": "^5.5.5",
+    "express": "^4.22.1",
     "globals": "^15.15.0",
@@ -48,4 +48,4 @@ "has-flag": "^5.0.1",
     "multer": "2.0.2",
-    "prettier": "^3.6.2",
-    "serve-index": "^1.9.1",
+    "prettier": "^3.8.1",
+    "serve-index": "^1.9.2",
     "sinon": "^19.0.5",
@@ -52,0 +52,0 @@ "supports-color": "^10.2.2"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 14 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 14 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Lines of code

21420

0.18%

Worsened metrics

Total package byte prevSize

17925933

-1.63%

Number of low supply chain risk alerts

93

1.09%

Dependency changes

• Updated

  ws@^8.19.0