From e24644cbd5cd50eb3a1f47b70d49f02798a091af Mon Sep 17 00:00:00 2001
From: Pavlo Strunkin <pashidlos@gmail.com>
Date: Tue, 3 Nov 2026 08:35:48 +0200
Subject: [PATCH] chore(deps): opentelemetry 1.67.0 in the Selenium, Appium and
 Selenide examples

Selenium 4.52.0 and Selenide 7.19.1, the latest releases, still bring
opentelemetry-api 1.66.0 (CVE-2026-118259). The opentelemetry BOM pins 1.67.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 appium-maven/pom.xml         | 13 +++++++++++++
 selenide-gradle/build.gradle |  2 ++
 selenium-maven/pom.xml       | 13 +++++++++++++
 3 files changed, 28 insertions(+)

diff --git a/appium-maven/pom.xml b/appium-maven/pom.xml
index 157a607..fbe30af 100644
--- a/appium-maven/pom.xml
+++ b/appium-maven/pom.xml
@@ -21,6 +21,19 @@
         </repository>
     </repositories>
 
+    <!-- Selenium 4.52.0 brings opentelemetry 1.66.0 (CVE-2026-118259) -->
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>io.opentelemetry</groupId>
+                <artifactId>opentelemetry-bom</artifactId>
+                <version>1.67.0</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <dependencies>
         <dependency>
             <groupId>com.github.Visual-Regression-Tracker</groupId>
diff --git a/selenide-gradle/build.gradle b/selenide-gradle/build.gradle
index beb01fa..be47d07 100644
--- a/selenide-gradle/build.gradle
+++ b/selenide-gradle/build.gradle
@@ -15,6 +15,8 @@ dependencies {
     testImplementation 'com.github.Visual-Regression-Tracker:sdk-java:5.5.0'
     testImplementation 'com.codeborne:selenide:7.19.1'
     testImplementation 'org.testng:testng:7.12.0'
+    // Selenide 7.19.1 brings opentelemetry 1.66.0 (CVE-2026-118259)
+    testImplementation platform('io.opentelemetry:opentelemetry-bom:1.67.0')
 }
 
 test {
diff --git a/selenium-maven/pom.xml b/selenium-maven/pom.xml
index cfea35d..9f425af 100644
--- a/selenium-maven/pom.xml
+++ b/selenium-maven/pom.xml
@@ -20,6 +20,19 @@
         </repository>
     </repositories>
 
+    <!-- Selenium 4.52.0 brings opentelemetry 1.66.0 (CVE-2026-118259) -->
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>io.opentelemetry</groupId>
+                <artifactId>opentelemetry-bom</artifactId>
+                <version>1.67.0</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <dependencies>
         <dependency>
             <groupId>com.github.Visual-Regression-Tracker</groupId>