Upgrading org.seleniumhq.selenium:selenium-java 3 to 4

Breaking3.141.59 → 4.52.0Breaking2Security2Deprecated11New73Changed17Fixed47Other279

Full comparison Back to org.seleniumhq.selenium:selenium-java

Fetching 89 releases from GitHub…7 / 89

Security[rust] Prevent path traversal in tar and pkg extraction.#17668 ↗

BreakingUpgrade verdict

2 breaking changes and 2 security fixes.

In plain terms

[build] move Selenium Manager publishing into sm-snapshot.yml so releases no longer skip it.
[build] Fix the two CDDL repin fallouts breaking every Python target.
[rust] Prevent path traversal in tar and pkg extraction.
[js] update vulnerable dependency with a range.

Must act Top 5 of 15 that need code or config changes

Adds org.seleniumhq.selenium:selenium-devtools-latest 4.52.0, org.seleniumhq.selenium:selenium-devtools-v154 4.52.0, org.seleniumhq.selenium:selenium-devtools-v155 4.52.0, org.seleniumhq.selenium:selenium-devtools-v156 4.52.0.

Drops com.google.guava:guava, com.squareup.okhttp3:okhttp, com.squareup.okio:okio, net.bytebuddy:byte-buddy, org.apache.commons:commons-exec, org.seleniumhq.selenium:selenium-opera-driver.

Installs 36 packages in all (was 19).

What you must change

Breaking2

[build] move Selenium Manager publishing into sm-snapshot.yml so releases no longer skip it.

4.50.0GitHub ReleaseOriginalView source

[build] Fix the two CDDL repin fallouts breaking every Python target.

4.50.0GitHub ReleaseOriginalView source

Security2

[rust] Prevent path traversal in tar and pkg extraction.

4.46.0GitHub ReleaseOriginalView source

[js] update vulnerable dependency with a range.

4.45.0GitHub ReleaseOriginalView source

Deprecations to plan for

Deprecated11

[java] remove deprecated methods from the HttpClient interface.

4.50.0GitHub ReleaseOriginalView source

[dotnet][java][js][py][rb] remove deprecated Firefox profile extension and cert methods.

4.50.0GitHub ReleaseOriginalView source

[java] Restore HttpCommandExecutor client and httpClientFactory fields as deprecated.

4.50.0GitHub ReleaseOriginalView source

[java] Remove deprecated GET /session/{sessionId}/se/files/{fileName} endpoint.

4.49.0GitHub ReleaseOriginalView source

[java][js][rb] remove deprecated FTP proxy support.

4.47.0GitHub ReleaseOriginalView source

[dotnet][java][js][rb] deprecate invalid Firefox profile code.

4.47.0GitHub ReleaseOriginalView source

[java] Deprecate methods to avoid internal BiDi connection surfacing on driver.

4.46.0GitHub ReleaseOriginalView source

[java] remove deprecated logging classes.

4.45.0GitHub ReleaseOriginalView source

[rb] deprecate curb http client support.

4.45.0GitHub ReleaseOriginalView source

[rb] deprecate Chromium Profile classes.

4.45.0GitHub ReleaseOriginalView source

[java] correct deprecation annotations for JSON Wire error code APIs.

4.45.0GitHub ReleaseOriginalView source