fix(webdriverio): update puppeteer-core

[christian-bromann]

Proposed changes

There has been a vulnerability detected in ws which can be resolved by updating Puppeteer to 21.11.0. Unfortunately due to the fact that Puppeteer v22 drops support for Node.js v16 there is no way we can update to latest.

Types of changes

• Polish (an improvement for an existing feature)
• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update (improvements to the project's docs)
• Specification changes (updates to WebDriver command specifications)
• Internal updates (everything related to internal scripts, governance documentation and CI files)

Checklist

• I have read the CONTRIBUTING doc
• I have added tests that prove my fix is effective or that my feature works
• I have added the necessary documentation (if appropriate)
• I have added proper type definitions for new commands (if appropriate)

Backport Request

//: # (The current main branch is the development branch for WebdriverIO v9. If your change should be released to the current major version of WebdriverIO (v8), please raise another PR with the same changes against the v8 branch.)

• This change is solely for v9 and doesn't need to be back-ported
• Back-ported PR at #XXXXX

Further comments

n/a

Reviewers: @webdriverio/project-committers

[torokati44]

Yay, finally!

[torokati44]

Unfortunately, only puppeteer-core version 22.11.2 updated to a ws version that makes Dependabot stop complaining:
https://github.com/puppeteer/puppeteer/releases/tag/puppeteer-core-v22.11.2

[torokati44]

Okay, sorry, I was a bit confused. I glanced over the fact that this is still only a bump to major version 21, not 22. (Like you mentioned in Proposed changes...)

[torokati44]

Anyway, this still holds:

There has been a vulnerability detected in ws which can be resolved by updating Puppeteer to 21.11.0.

Um... how exactly? According to npm audit:

  puppeteer-core  11.0.0 - 22.11.1
  Depends on vulnerable versions of ws