Skip to content

chore(test): migrate wdio off legacy 'devtools' service to WebDriver/BiDi - #234

Merged
jung-thomas merged 2 commits into
chore/dependency-updatesfrom
chore/wdio-bidi-migration
Sep 5, 2026
Merged

chore(test): migrate wdio off legacy 'devtools' service to WebDriver/BiDi#234
jung-thomas merged 2 commits into
chore/dependency-updatesfrom
chore/wdio-bidi-migration

Conversation

@jung-thomas

Copy link
Copy Markdown
Contributor

Follow-up to #233. Clears the bulk of the remaining dev-only high advisories by retiring the legacy WebdriverIO devtools (puppeteer-based) automation chain.

Stacked on #233 (base branch chore/dependency-updates). Will retarget to main once #233 merges.

Changes

  • wdio.conf.js: remove 'devtools' from services. WebdriverIO v9 drives Chrome over the standard WebDriver protocol with WebDriver BiDi negotiated automatically, so the puppeteer-based automation service is obsolete.
  • package.json: drop devtools and @wdio/devtools-service devDependencies.

This removes the puppeteer-core / tar-fs / extract-zip / adm-zip / ws chain — 226 packages removed, advisory count 38 → 30 (high 27 → 20).

Verification

  • wdio.conf.js loads cleanly — resolved services: ['ui5'], devtools gone.
  • Unit/CI suite green — 566 passing, 0 failing.
  • ⚠️ UI suite (npm run test:ui, needs Chrome + a live server on :3010) not runnable in this environment — please validate before merge.

Remaining advisories (all dev-only, out of scope)

  • wdio v9 core transitives (webdriver/webdriverio/@wdio/*, deepmerge-ts, residual @puppeteer/browsers/extract-zip pulled for driver management). npm's suggested "fixes" are downgrades to wdio v7/v8 — wdio v9 is already latest; real fix is upstream.
  • chromedriver@^150adm-zip — clears with a routine chromedriver@^152 bump (tracks the Chrome major); deferred so it can be validated with the UI suite.
  • vite/esbuild — via vitepress (docs build); major bumps, separate.
  • sap-hdb-promisfied nested brace-expansion/js-yaml, exceljsuuid — upstream / not reachable (see chore(deps): patch dependency vulnerabilities (audit fix + qs/brace-expansion overrides) #233).

…BiDi

WebdriverIO v9 drives Chrome over the standard WebDriver protocol (with
BiDi negotiated automatically), so the puppeteer-based 'devtools'
automation service is obsolete. Remove it from wdio.conf.js services and
drop the devtools + @wdio/devtools-service devDependencies.

This removes the puppeteer-core / tar-fs / extract-zip / adm-zip / ws
dependency chain that carried the bulk of the dev-only high advisories
(226 packages removed; advisory count 38 -> 30).

wdio.conf.js loads cleanly (services: ['ui5']); unit/CI suite green
(566 passing). UI test suite (needs Chrome + live server on :3010) to be
validated before merge.
@jung-thomas
jung-thomas merged commit 9675a43 into chore/dependency-updates Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant