Bump the development-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the development-dependencies group with 2 updates in the / directory: brakeman and selenium-webdriver.

Updates brakeman from 8.0.6 to 8.1.0

Release notes

Sourced from brakeman's releases.

8.1.0

• Update SonarQube report to use generic issue format (@​fffx)
• Include regex code in validation warnings (@​eliotsykes)
• Check validation regexes in non-activerecord models (@​eliotsykes)
• Skip top-level vendor directory before recursive globbing (@​ronocod)
• Support Rails 7.1+ positional enum syntax in SQL injection check (@​cubasepp / @​Eljees)
• Recognize Haml::AttributeBuilder.build_class as an escaped output (@​Eljees)
• Fix frozen string error (@​shaicoleman)
• Better help and error message for --ensure-latest (#2036)

Changelog

Sourced from brakeman's changelog.

8.1.0 - 2026-09-30

• Better help and error message for --ensure-latest
• Fix frozen string error (Shai Coleman)
• Update Sonar report format (fangxing)
• Fix frozen src string error
• Recognize Haml::AttributeBuilder.build_class as an escaped output (Yuriy Tumanov)
• Include regex code in validation warnings (Eliot Sykes)
• Check validation regexes in non-activerecord models (Eliot Sykes)
• Skip top-level vendor directory before recursive globbing (Conor O'Donnell)
• Support Rails 7.1+ positional enum syntax in SQL injection check (Michael Vogl/Yuriy Tumanov)

Commits

• c778164 Bump to 8.1.0
• 4621407 Update CHANGES
• 26ba01f Support Rails 7.1+ positional enum syntax in SQL injection check (#2051)
• 8f04922 Skip top-level vendor directory before recursive globbing (#2039)
• f921f01 Check validation regexes in non-activerecord models (#2053)
• d62e919 Fix CheckValidationRegex overly broad ignores (#2050)
• 73bbc99 Recognize Haml::AttributeBuilder.build_class as an escaped output (#2052)
• 71f8f69 Fix typo in test_format_validation_with_multiline (#2049)
• 0fd4dbc Add bundle install step to contributing doc (#2047)
• 5de415c Fix ERB frozen src error (#2048)
• Additional commits viewable in compare view

Updates selenium-webdriver from 4.45.0 to 4.51.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.51.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

• [py] Validate WebSocket response interval correctly by @​cuishuang in SeleniumHQ/selenium#17984
• [py][bidi] Send setClientWindowState rect members as sibling params by @​AutomatedTester in SeleniumHQ/selenium#18100
• [rust] Degrade to empty metadata when the cache cannot be read by @​AutomatedTester in SeleniumHQ/selenium#18101
• [dotnet] [test] Separate project for NUnit infrastructure by @​nvborisenko in SeleniumHQ/selenium#18104
• [java] Do not leak the HttpClient on startup failure by @​joerg1985 in SeleniumHQ/selenium#18047
• [java] Add RemoteWebDriver.getClientFactory() and move HttpCommandExecutor field removal to 4.53 by @​diemol in SeleniumHQ/selenium#18111
• [dotnet] [test] Parallelize internal testing by @​nvborisenko in SeleniumHQ/selenium#18110
• [build] pin Firefox BiDi vendor CDDL from the Firefox repository by @​titusfortner in SeleniumHQ/selenium#18094
• [build] remove obsolete third_party dependencies and dead build references by @​titusfortner in SeleniumHQ/selenium#18072
• [build] generate release docs at approval and commit them after the packages publish by @​titusfortner in SeleniumHQ/selenium#18113
• [dotnet] [test] Upgrade NUnit library to v5 by @​nvborisenko in SeleniumHQ/selenium#18114
• [build] recover from incomplete Java release by dropping staged repositories when found by @​titusfortner in SeleniumHQ/selenium#18112
• [dotnet] [build] Escape macOS Edge browser path by @​nvborisenko in SeleniumHQ/selenium#18126
• [js][bidi] Add vendor specific class generation by @​pujagani in SeleniumHQ/selenium#18125
• [java] assert setFiles uploads reach the server in SetFilesCommandTest by @​yashp676 in SeleniumHQ/selenium#18058
• [java][bidi] Decode nested RemoteValues from the parsed tree instead of re-serializing each subtree by @​yashp676 in SeleniumHQ/selenium#18095
• [rb] type a field-less synthetic map record as a validated map by @​aguspe in SeleniumHQ/selenium#18121
• [java] remove guava from client bindings #12737 by @​joerg1985 in SeleniumHQ/selenium#13739
• [build] clean up IntelliJ project files and align .editorconfig with formatters by @​titusfortner in SeleniumHQ/selenium#18119
• [javascript] Create @​seleniumhq/atoms npm package from TypeScript atoms by @​AutomatedTester in SeleniumHQ/selenium#17459
• [java][bidi] Add BiDi code generator by @​pujagani in SeleniumHQ/selenium#17777
• [java][bidi] Type field-less synthetic map records as Map<String, V> by @​yashp676 in SeleniumHQ/selenium#18122
• [javascript] Publish atoms under the @​selenium npm scope by @​AutomatedTester in SeleniumHQ/selenium#18132
• [build] sign Java artifacts in-process with in-memory PGP keys instead of gpg-agent by @​titusfortner in SeleniumHQ/selenium#18130
• [py] Support Python 3.15 by @​cgoldberg in SeleniumHQ/selenium#18065
• [javascript] Publish @​seleniumhq/atoms as part of the npm release by @​AutomatedTester in SeleniumHQ/selenium#18133
• [js] Remove the WebSQL and AppCache atoms by @​AutomatedTester in SeleniumHQ/selenium#18137
• [build] remove bazel patches that now have upstream fixes by @​titusfortner in SeleniumHQ/selenium#18140
• [rust] configure the Chrome sandbox after unpacking a Chrome for Testing build on Windows by @​titusfortner in SeleniumHQ/selenium#18139
• [dotnet] [test] Entry point to mutate driver options per fixture by @​nvborisenko in SeleniumHQ/selenium#18141
• [js] Add webextension methods on the driver with BiDi and fallback by @​pujagani in SeleniumHQ/selenium#18127
• [build] source the Java and .NET versions from a root version.bzl that tests do not read by @​titusfortner in SeleniumHQ/selenium#18138
• [build] pin the driver location once per test process so services built in tests skip Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18143
• [java] Do not pass a bare --proxy to Selenium Manager by @​Mochxd in SeleniumHQ/selenium#18089
• [java][bidi] Update tests to use converter functions by @​pujagani in SeleniumHQ/selenium#18146
• [java] manage state in tests not in global hooks by @​titusfortner in SeleniumHQ/selenium#18142
• [build] add stub mode option for using selenium manager with bazel by @​titusfortner in SeleniumHQ/selenium#18135

New Contributors

• @​cuishuang made their first contribution in SeleniumHQ/selenium#17984

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.51.0 (2026-10-09)

• Support CDP versions: v153, v154, v155
• [build] Automated CDDL Spec Update (#18118)
• type a field-less synthetic map record as a validated map (#18121)
• [build] Automated Browser Version Update (major) with CDP (#18131)

4.50.0 (2026-09-30)

• Support CDP versions: v152, v153, v154
• render WebSocket debug log lines lazily (#18033)
• Implement driver methods for installing and uninstalling web extensions via BiDi (#17879)
• [build] Automated CDDL Spec Update (#18046)
• [build] replace the BiDi KNOWN_INCOMPLETE allowlist with spec-shaped CDDL overlays (#18057)
• [build] generate the BiDi schema vendor section from Mozilla's Firefox CDDL (#18060)
• remove deprecated Firefox profile extension and cert methods (#18066)
• [build] add support for Mozilla's Commands fragment in the BiDi schema (#18071)
• [build] Automated Browser Version Update (major) with CDP (#18067)
• [build] Automated CDDL Spec Update (#18075)

4.49.0 (2026-09-09)

• Support CDP versions: v151, v152, v153
• derive BiDi field names and enum value types in the schema (#17966)
• [build] Automated CDDL Spec Update (#17990)
• [build] ship prebuilt Selenium Manager Linux arm64 binary in all bindings (#17999)
• [build] Automated Browser Version Update (major) with CDP (#18005)

4.48.0 (2026-08-27)

• Support CDP versions: v150, v151, v152
• add low-level BiDi protocol integration specs (#17878)
• [build] Automated Browser Version Update (major) with CDP (#17910)
• fix silent hang on oversized WebSocket frames (#17655)
• always reject a missing required inbound BiDi field (#17936)
• accept a whole-valued float for an integer BiDi field (#17939)
• reject an inbound BiDi scalar outside its union's declared arms (#17947)

4.47.0 (2026-08-10)

• Support CDP versions: v149, v150, v151
• support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
• link generated BiDi elements to their spec definitions (#17781)
• add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
• construct the BiDi transport inside the domain from a connection (#17796)
• route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
• resolve spec runfiles via Bazel::Runfiles (#17810)
• [build] standardize generated-file license and not to edit markers across generators (#17816)
• validate nullable-constant BiDi params outbound (#17818)
• [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)

... (truncated)

Commits

• 35c5fab [build] Prepare for release of selenium-4.51.0 (#18149)
• 8f7503a [build] Automated Browser Version Update (major) with CDP (#18131)
• f3a43a5 [build] remove the Windows session settle sleeps now that Selenium Manager co...
• 953b27b [rb] drop Safari captureScreenshot guard now that Safari Technology Preview 2...
• 92807c9 [build] pin the driver location once per test process so services built in te...
• e0c56c9 [rb] update test guard for different bidi error in Chrome beta
• 788fcf3 [rb] type a field-less synthetic map record as a validated map (#18121)
• 8ba36d4 [build] Automated Dependency Update (#18124)
• 6d04770 [build] Automated CDDL Spec Update (#18118)
• e1af1a7 [rb] update tests to guard BiDi browsing context on Safari and Windows Firefo...
• Additional commits viewable in compare view

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.