[dependabot]

Bumps the all-pip-dependencies group in /infra with 3 updates: boto3, selenium and pycurl.

Updates boto3 from 1.43.118 to 1.43.123

Commits

• 6334d9f Merge branch 'release-1.43.123'
• 51224ed Bumping version to 1.43.123
• 3dfd2b6 Add changelog entries from botocore
• f89caef Merge branch 'release-1.43.122'
• f0464ef Merge branch 'release-1.43.122' into develop
• 5af8c5f Bumping version to 1.43.122
• 1af5d47 Add changelog entries from botocore
• cc2e975 Merge branch 'release-1.43.121'
• 807ecf8 Merge branch 'release-1.43.121' into develop
• 21a159b Bumping version to 1.43.121
• Additional commits viewable in compare view

Updates selenium from 4.51.0 to 4.52.0

Release notes

Sourced from selenium's releases.

Selenium 4.52.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

• [py] use local self-signed certificate for tests by @​titusfortner in SeleniumHQ/selenium#18148
• [build] scope RBE internet access to the tests that exercise Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18147
• [rb] Do not pass a bare --proxy to Selenium Manager by @​Mochxd in SeleniumHQ/selenium#18150
• [rb] deprecate current behavior of ignoring Grid certificates on HTTPS connections by @​titusfortner in SeleniumHQ/selenium#18153
• [py] Install web extensions from the driver by @​AutomatedTester in SeleniumHQ/selenium#17970
• [bazel] Use MRI on RBE (rebased #17622) by @​aguspe in SeleniumHQ/selenium#18123
• [build] drop RBE flags that Bazel 9 no longer honours and the misdirected cc autodetect override by @​titusfortner in SeleniumHQ/selenium#18156
• [rb] support serving test pages over HTTPS for certificate and cookie tests by @​titusfortner in SeleniumHQ/selenium#18152
• [rust] stop resolving a Java runtime on --grid so the jar lookup no longer depends on a JRE download by @​titusfortner in SeleniumHQ/selenium#18157
• [build] automatically generate Qodo reviews from PRs by committers by @​titusfortner in SeleniumHQ/selenium#18159
• [java] put third-party jars under lib/ in dist zips again by matching prefixes on canonical labels by @​titusfortner in SeleniumHQ/selenium#18165
• [build] bump rules_jvm_external to 7.2 so repinning skips artifacts without a sources jar by @​titusfortner in SeleniumHQ/selenium#18167
• [java] tag os-sensitive browser tests per file and run them on Windows and macOS by @​titusfortner in SeleniumHQ/selenium#18163
• [java] add test to ensure shipped bytecode supports Java 11 by @​titusfortner in SeleniumHQ/selenium#18166
• [rb] generate version.rb from the root version.bzl so tests do not read the version by @​titusfortner in SeleniumHQ/selenium#18164
• [build] remove unused and redundant Maven artifacts and a stale Renovate rule by @​titusfortner in SeleniumHQ/selenium#18170
• [java] add a se-manager DriverFinder test that runs unpinned through Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18169
• chore: bump to bazel 9.3.0 by @​shs96c in SeleniumHQ/selenium#18173
• chore: enable cdc in the bazel builds by @​shs96c in SeleniumHQ/selenium#18178
• chore: update all bazel deps by @​shs96c in SeleniumHQ/selenium#18174
• [py] Adopt all Ruff FURB rules by @​goldpanth3r in SeleniumHQ/selenium#18168
• [py] Adopt ruff PYI041 and G201 from the new default rule set by @​dmitgush in SeleniumHQ/selenium#18154
• [py] cleanup for ruff rule sim102 . part of the tranche 3 stage by @​iampopovich in SeleniumHQ/selenium#18034
• [java] Add BiDi generator tests by @​pujagani in SeleniumHQ/selenium#18162
• [rb] fix atoms outside Bazel and add local_dev for using a local checkout by @​titusfortner in SeleniumHQ/selenium#18183
• [build] run unit tests in parallel while keeping browser tests serial by @​titusfortner in SeleniumHQ/selenium#18191
• [rb] type vendor-declared BiDi fields instead of making extended types extensible by @​titusfortner in SeleniumHQ/selenium#18190
• [build] carry CDDL numeric bounds into the BiDi schema by @​titusfortner in SeleniumHQ/selenium#18194
• [rb] check each BiDi list element against its declared type by @​titusfortner in SeleniumHQ/selenium#18196
• [build] update open bot PRs in place through a shared workflow so fixes pushed to them survive the next run by @​titusfortner in SeleniumHQ/selenium#18197
• [rb] hold BiDi numbers to their declared ranges by @​titusfortner in SeleniumHQ/selenium#18198
• [rust] Update Selenium Manager dependencies by @​bonigarcia in SeleniumHQ/selenium#18202
• [rust] Remove fs2 crate and use standard mechanism for file lock by @​bonigarcia in SeleniumHQ/selenium#18203
• [rust] Use sevenz_rust2 create instead of sevenz_rust (unmaintained) by @​bonigarcia in SeleniumHQ/selenium#18204
• [java] Make selenium.debug/webdriver.verbose configure the real logger (Mechanism Only) by @​MohabMohie in SeleniumHQ/selenium#17841
• [rb] declare development dependencies in the Gemfile instead of the gemspec by @​titusfortner in SeleniumHQ/selenium#18207
• [rb] wait for exactly the finished downloads in the remote driver spec by @​AutomatedTester in SeleniumHQ/selenium#18188
• [js] only track the page request in the BiDi 'can request cookies' test by @​AutomatedTester in SeleniumHQ/selenium#18186
• [java] use reserved hostnames in tests instead of public domains by @​yashp676 in SeleniumHQ/selenium#18134
• [grid] Throw ConfigException for a null stereotype in node configs by @​yashp676 in SeleniumHQ/selenium#18185

... (truncated)

Commits

• 5b37fd4 Release selenium-4.52.0 (#18259)
• 2b4b7f1 [rb] update test guard for new bidi things that Chrome 158 supports
• 7fda528 [py] fix race condition in test for browsing context handler removal
• fb1ac3d [py] unit test the BiDi protocol generator (#18052)
• c3201fa [py] load blank.html after bidi network tests that fail a navigation
• 94b4838 [rb] accept JRuby's bare verification failure in the self-signed certificate ...
• 6b6257a [dotnet] [test] Move proxy tests and some others to unit suite (#18257)
• 4d6a66e [dotnet] [test] Move cookie tests to unit suite (#18256)
• 25d340b [py][js] Initial Creation of a external shippable selenium manager (#17542)
• 8a6aefc [py] Reject null list elements in BiDi serialization inbound and outbound (#1...
• Additional commits viewable in compare view

Updates pycurl from 7.48.0 to 7.49.0

Release notes

Sourced from pycurl's releases.

PycURL 7.49.0

This release adds SSH_HOSTKEYFUNCTION and several missing libcurl SSH constants, and accepts CurlShare subclasses in setopt. It fixes a use-after-free when a mime part's content is replaced and makes object teardown exception-safe by moving cleanup into tp_finalize. The build system has also been cleaned up: custom setup.py command line options have been removed in favor of their environment variable equivalents, and wheels no longer install documentation and examples.

Changes

• Fix test_readfunction_unsetopt hanging with a tty on stdin (patch by Scott Talbert)
• Fix skip location reporting in tests/util.py decorators (patch by Scott Talbert)
• Document AsyncCurlMulti blocking limitations (patch by Jorge Rocamora)
• Add SSH_HOSTKEYFUNCTION and some missing libcurl SSH constants (patch by Jorge Rocamora)
• Add a debug build of Python to Linux CI/CD (patch by Scott Talbert)
• Preserve pending exception across CurlMulti dealloc cleanup (patch by Scott Talbert)
• Ignore ResourceWarning in test_option_refcounting (patch by Scott Talbert)
• Fix Sphinx documentation build warnings (patch by Scott Talbert)
• Clean up the build system, removing dead and redundant setup.py and Makefile code (patch by Scott Talbert)
• Remove obsolete cruft from tests directory (patch by Scott Talbert)
• Remove outdated example scripts (patch by Scott Talbert)
• Move dev dependencies into PEP 735 groups and drop requirements-dev.txt (patch by Scott Talbert)
• Update LGPL v2.1 license text to the latest version (patch by Scott Talbert)
• Stop installing docs/examples via data_files in wheels (patch by Scott Talbert)
• Drop setup.py CLI argument parsing in favor of environment variables (patch by Scott Talbert)
• Remove dead Windows XP/pre-VS2010 handling, update OpenSSL lib default (patch by Scott Talbert)
• Add GitHub Actions workflow to build the docs (patch by Scott Talbert)
• Make releases a single dispatch-and-approve workflow (patch by Scott Talbert)
• Skip numpy for tests on Windows ARM64 with Python 3.10 (patch by Scott Talbert)
• Make object teardown exception-safe and move Curl cleanup into tp_finalize (patch by Jorge Rocamora)
• Move CurlMulti cleanup into tp_finalize (patch by Jorge Rocamora)
• Drop the removed vcpkg non-http curl feature (patch by Jorge Rocamora)
• Use Python 3.12 for the vcpkg install on Linux (patch by Scott Talbert)
• Move CurlMime cleanup into tp_finalize (patch by Jorge Rocamora)
• Allow to free a mime that isn't attached to a Curl (patch by Jorge Rocamora)
• Accept CurlShare subclasses in setopt (patch by Jorge Rocamora)
• Clone and bootstrap vcpkg on all platforms (patch by Scott Talbert)
• Invalidate a mime part's subparts when its content is replaced (patch by Jorge Rocamora)
• Unify CurlShare cleanup into tp_finalize (patch by Jorge Rocamora)

Changelog

Sourced from pycurl's changelog.

Version 7.49.0 [requires libcurl-7.19.0 or better] - 2026-10-26

    * Fix test_readfunction_unsetopt hanging with a tty on stdin (patch by Scott Talbert)
    * Fix skip location reporting in tests/util.py decorators (patch by Scott Talbert)
    * Document AsyncCurlMulti blocking limitations (patch by Jorge Rocamora)
    * Add SSH_HOSTKEYFUNCTION and some missing libcurl SSH constants (patch by Jorge Rocamora)
    * Add a debug build of Python to Linux CI/CD (patch by Scott Talbert)
    * Preserve pending exception across CurlMulti dealloc cleanup (patch by Scott Talbert)
    * Ignore ResourceWarning in test_option_refcounting (patch by Scott Talbert)
    * Fix Sphinx documentation build warnings (patch by Scott Talbert)
    * Clean up the build system, removing dead and redundant setup.py and Makefile code (patch by Scott Talbert)
    * Remove obsolete cruft from tests directory (patch by Scott Talbert)
    * Remove outdated example scripts (patch by Scott Talbert)
    * Move dev dependencies into PEP 735 groups and drop requirements-dev.txt (patch by Scott Talbert)
    * Update LGPL v2.1 license text to the latest version (patch by Scott Talbert)
    * Stop installing docs/examples via data_files in wheels (patch by Scott Talbert)
    * Drop setup.py CLI argument parsing in favor of environment variables (patch by Scott Talbert)
    * Remove dead Windows XP/pre-VS2010 handling, update OpenSSL lib default (patch by Scott Talbert)
    * Add GitHub Actions workflow to build the docs (patch by Scott Talbert)
    * Make releases a single dispatch-and-approve workflow (patch by Scott Talbert)
    * Skip numpy for tests on Windows ARM64 with Python 3.10 (patch by Scott Talbert)
    * Make object teardown exception-safe and move Curl cleanup into tp_finalize (patch by Jorge Rocamora)
    * Move CurlMulti cleanup into tp_finalize (patch by Jorge Rocamora)
    * Drop the removed vcpkg non-http curl feature (patch by Jorge Rocamora)
    * Use Python 3.12 for the vcpkg install on Linux (patch by Scott Talbert)
    * Move CurlMime cleanup into tp_finalize (patch by Jorge Rocamora)
    * Allow to free a mime that isn't attached to a Curl (patch by Jorge Rocamora)
    * Accept CurlShare subclasses in setopt (patch by Jorge Rocamora)
    * Clone and bootstrap vcpkg on all platforms (patch by Scott Talbert)
    * Invalidate a mime part's subparts when its content is replaced (patch by Jorge Rocamora)
    * Unify CurlShare cleanup into tp_finalize (patch by Jorge Rocamora)

Commits

• d6b87a9 Release 7.49.0
• aa3ff82 Merge pull request #1090 from aeroyorch/share-tp-finalize
• 5daba40 Merge pull request #1087 from aeroyorch/mime-subparts-use-after-free
• 674ff51 Clone and bootstrap vcpkg on all platforms
• 298c3f3 Unify CurlShare cleanup into tp_finalize
• d4d4c34 Invalidate a mime part's subparts when its content is replaced
• 9ed1c40 Merge pull request #1089 from aeroyorch/share-setopt-subclass
• 214f1ba Accept CurlShare subclasses in setopt
• 041bc5e Merge pull request #1084 from aeroyorch/mime-tp-finalize
• b4f6a2f Allow to free a mime that isn't attached to a Curl
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.27%. Comparing base (693c545) to head (43bdfa9).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #676      +/-   ##
==========================================
- Coverage   96.29%   96.27%   -0.02%     
==========================================
  Files         137      137              
  Lines        6822     6822              
==========================================
- Hits         6569     6568       -1     
- Misses        253      254       +1     

see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 693c545...43bdfa9. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.