Commit Graph

5189 Commits

Author SHA1 Message Date
zinduolis 4d1df8f761 Merge pull request #3576 from beefproject/red/dependabot-automerge-fix
CI: trigger BrowserStack directly on Dependabot PRs
2026-05-29 14:19:37 +10:00
zinduolis 420681489c Require Dependabot actor for auto-run BrowserStack tests
Also gate the auto-run condition on github.actor == 'dependabot[bot]' so
commits pushed to a Dependabot PR by anyone else fall back to the explicit
safe_to_test opt-in instead of running automatically with secret access.
2026-05-29 14:13:14 +10:00
zinduolis be833faac3 Merge branch 'master' into red/dependabot-automerge-fix 2026-05-29 13:57:57 +10:00
zinduolis 92341db8d6 CI: trigger BrowserStack directly on Dependabot PRs
The default GITHUB_TOKEN cannot trigger downstream workflows, so the
safe_to_test label added by dependabot_auto_label.yml never started the
BrowserStack run. Trigger BrowserStack directly for Dependabot PRs on
opened/synchronize/reopened, keep the safe_to_test label opt-in for human
PRs, and remove the now-redundant auto-label workflow.
2026-05-29 13:55:53 +10:00
github-actions[bot] 8fd8231666 Merge pull request #3575 from beefproject/dependabot/bundler/json-2.19.7
Build(deps): bump json from 2.19.5 to 2.19.7
2026-05-28 14:33:28 +00:00
dependabot[bot] f9c1db0fea Build(deps): bump json from 2.19.5 to 2.19.7
Bumps [json](https://github.com/ruby/json) from 2.19.5 to 2.19.7.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](https://github.com/ruby/json/compare/v2.19.5...v2.19.7)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 14:33:08 +00:00
zinduolis ef933229a1 Merge pull request #3565 from sethumadh/feature/3542-detect-media-devices
Add detect_media_devices browser module
2026-05-27 13:16:20 +10:00
zinduolis a7cf543136 Merge branch 'master' into feature/3542-detect-media-devices 2026-05-27 09:46:24 +10:00
zinduolis bf54166fbc Merge pull request #3520 from jake-the-dev/tests/extensions-modules
TESTS | modules: add baseline coverage specs for all module categories
2026-05-27 09:40:09 +10:00
zinduolis 36b41e1aef FIX: revert accidental PDF mutation; stub File.open in Hook_default_browser pre_send; consolidate BRANCH_COVERAGE into BeefTestConfig; replace 'next unless' guards with describe-level conditionals; per-example stub_const for extension constants; correct has_valid_browser_details_chars? assertions 2026-05-25 15:08:14 +10:00
zinduolis 9704a303e0 Merge remote-tracking branch 'origin/master' into tests/extensions-modules 2026-05-25 14:16:26 +10:00
zinduolis 25c79a2aef Merge pull request #3518 from jake-the-dev/tests/improve-core-test-coverage
Tests/improve core test coverage
2026-05-22 16:04:49 +10:00
zinduolis c7985cdf51 TEST: remove autorun_engine specs (ARE removed in #3482)
PR #3482 deleted the AutorunEngine source code (engine.rb, parser.rb,
rule_loader.rb) along with the Rule and Execution models. The three new
spec files added by this PR were testing classes that no longer exist
on master, so they would fail at load time once #3482 merged.

Also drop a leftover BeEF::Core::Models::Execution stub in
hookedbrowsers_spec.rb — the handler no longer queries pending ARE
executions, so the stub is dead.

Removed:
  spec/beef/core/main/autorun_engine/engine_spec.rb       (359 lines)
  spec/beef/core/main/autorun_engine/parser_spec.rb       (119 lines)
  spec/beef/core/main/autorun_engine/rule_loader_spec.rb  ( 83 lines)

Modified:
  spec/beef/core/main/handlers/hookedbrowsers_spec.rb (-1 dead stub)
2026-05-22 15:54:11 +10:00
zinduolis cb95e7cdc1 Merge branch 'master' into tests/improve-core-test-coverage 2026-05-22 15:34:18 +10:00
zinduolis 0e84ba451b Merge pull request #3572 from beefproject/red/eslint-upgrade
Upgrade ESLint to v10.4.0 with flat config
2026-05-19 20:05:51 +10:00
zinduolis 793829cccd Fix: lint eslint.config.js with proper ecmaVersion 2026-05-19 19:56:33 +10:00
zinduolis c4d9211aae Upgrade ESLint to v10.4.0 with flat config 2026-05-19 19:43:57 +10:00
github-actions[bot] c4743fcdc8 Merge pull request #3560 from beefproject/dependabot/bundler/json-2.19.5
Build(deps): bump json from 2.19.4 to 2.19.5
2026-05-19 08:56:53 +00:00
zinduolis 0d2c8fe552 Merge branch 'master' into dependabot/bundler/json-2.19.5 2026-05-19 18:52:22 +10:00
github-actions[bot] 57b9198899 Merge pull request #3570 from beefproject/dependabot/npm_and_yarn/fast-uri-3.1.2
Build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2
2026-05-19 08:48:48 +00:00
dependabot[bot] 8af54e0bca Build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 02:36:21 +00:00
github-actions[bot] 4265b2aebc Merge pull request #3568 from beefproject/dependabot/npm_and_yarn/flatted-3.4.2
Build(deps-dev): bump flatted from 3.3.3 to 3.4.2
2026-05-19 02:34:01 +00:00
zinduolis 2ade977290 Merge branch 'master' into dependabot/npm_and_yarn/flatted-3.4.2 2026-05-19 12:30:53 +10:00
dependabot[bot] 824e95695d Build(deps): bump json from 2.19.4 to 2.19.5
Bumps [json](https://github.com/ruby/json) from 2.19.4 to 2.19.5.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](https://github.com/ruby/json/compare/v2.19.4...v2.19.5)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 07:05:23 +00:00
github-actions[bot] 30f7ed3784 Merge pull request #3553 from beefproject/dependabot/bundler/rake-13.4.2
Build(deps): bump rake from 13.4.1 to 13.4.2
2026-05-18 07:03:23 +00:00
zinduolis b193b5200b Merge branch 'master' into dependabot/bundler/rake-13.4.2 2026-05-18 17:00:09 +10:00
dependabot[bot] d48e253b29 Build(deps-dev): bump flatted from 3.3.3 to 3.4.2
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 06:30:54 +00:00
github-actions[bot] a71df6021c Merge pull request #3569 from beefproject/dependabot/npm_and_yarn/minimatch-3.1.5
Build(deps-dev): bump minimatch from 3.1.2 to 3.1.5
2026-05-18 06:28:52 +00:00
dependabot[bot] ecd210eccd Build(deps-dev): bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 06:28:40 +00:00
zinduolis 541b81c339 Merge pull request #3484 from kaitozaw/issue/2306-js-lint
Fixes issue/js-lint (#2306)
2026-05-18 16:27:41 +10:00
zinduolis 548278a71a Merge branch 'master' into issue/2306-js-lint 2026-05-18 16:24:19 +10:00
zinduolis 9a8295b2cc Merge branch 'master' into feature/3542-detect-media-devices 2026-05-18 16:11:55 +10:00
github-actions[bot] e7118a05c6 Merge pull request #3532 from beefproject/dependabot/bundler/activerecord-8.1.3
Build(deps): bump activerecord from 8.1.2.1 to 8.1.3
2026-05-18 05:54:47 +00:00
dependabot[bot] ae8c5b203f Build(deps): bump rake from 13.4.1 to 13.4.2
Bumps [rake](https://github.com/ruby/rake) from 13.4.1 to 13.4.2.
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](https://github.com/ruby/rake/compare/v13.4.1...v13.4.2)

---
updated-dependencies:
- dependency-name: rake
  dependency-version: 13.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 05:48:06 +00:00
dependabot[bot] 22cb963265 Build(deps): bump activerecord from 8.1.2.1 to 8.1.3
Bumps [activerecord](https://github.com/rails/rails) from 8.1.2.1 to 8.1.3.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3/activerecord/CHANGELOG.md)
- [Commits](https://github.com/rails/rails/compare/v8.1.2.1...v8.1.3)

---
updated-dependencies:
- dependency-name: activerecord
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-18 05:43:11 +00:00
zinduolis c8bd7a7fea fix: exclude ERB modules from ESLint, pin actions to latest stable SHAs, bump Node to 24.x 2026-05-18 14:45:48 +10:00
zinduolis 1da46d74b1 Merge branch 'master' into issue/2306-js-lint 2026-05-18 14:05:53 +10:00
github-actions[bot] 86bb4cebb5 Merge pull request #3567 from beefproject/dependabot/bundler/curb-1.3.5
Build(deps-dev): bump curb from 1.3.4 to 1.3.5
2026-05-15 13:03:50 +00:00
dependabot[bot] 7f2d1be907 Build(deps-dev): bump curb from 1.3.4 to 1.3.5
Bumps [curb](https://github.com/taf2/curb) from 1.3.4 to 1.3.5.
- [Changelog](https://github.com/taf2/curb/blob/master/ChangeLog.md)
- [Commits](https://github.com/taf2/curb/commits)

---
updated-dependencies:
- dependency-name: curb
  dependency-version: 1.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-15 13:03:31 +00:00
github-actions[bot] c80c320352 Merge pull request #3566 from beefproject/dependabot/bundler/rubocop-1.86.2
Build(deps): bump rubocop from 1.86.1 to 1.86.2
2026-05-14 13:03:46 +00:00
dependabot[bot] 6cd1e7f792 Build(deps): bump rubocop from 1.86.1 to 1.86.2
Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.86.1 to 1.86.2.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.86.1...v1.86.2)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.86.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-14 13:03:28 +00:00
sethumadh 0f7b843cda Add detect_media_devices browser module
Implements navigator.mediaDevices.enumerateDevices() detection.
Groups results by kind (audioinput, audiooutput, videoinput) and
returns counts unconditionally + labels when permissions allow.
Handles the no-API case explicitly via beef.status.error().

Closes #3542
2026-05-14 15:28:14 +10:00
github-actions[bot] 414ca98df7 Merge pull request #3564 from beefproject/dependabot/bundler/selenium-webdriver-4.44.0
Build(deps-dev): bump selenium-webdriver from 4.41.0 to 4.44.0
2026-05-13 13:04:48 +00:00
dependabot[bot] f0da43ce07 Build(deps-dev): bump selenium-webdriver from 4.41.0 to 4.44.0
Bumps [selenium-webdriver](https://github.com/SeleniumHQ/selenium) from 4.41.0 to 4.44.0.
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.41.0...selenium-4.44.0)

---
updated-dependencies:
- dependency-name: selenium-webdriver
  dependency-version: 4.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-13 13:04:26 +00:00
github-actions[bot] 2a4904aa1c Merge pull request #3563 from beefproject/dependabot/bundler/curb-1.3.4
Build(deps-dev): bump curb from 1.3.2 to 1.3.4
2026-05-12 18:56:45 +00:00
dependabot[bot] ccc08f0672 Build(deps-dev): bump curb from 1.3.2 to 1.3.4
Bumps [curb](https://github.com/taf2/curb) from 1.3.2 to 1.3.4.
- [Changelog](https://github.com/taf2/curb/blob/master/ChangeLog.md)
- [Commits](https://github.com/taf2/curb/commits)

---
updated-dependencies:
- dependency-name: curb
  dependency-version: 1.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-12 18:56:30 +00:00
github-actions[bot] 48271095d9 Merge pull request #3562 from beefproject/dependabot/bundler/nokogiri-1.19.3
Build(deps-dev): bump nokogiri from 1.19.1 to 1.19.3
2026-05-08 13:14:05 +00:00
dependabot[bot] 87acd68535 Build(deps-dev): bump nokogiri from 1.19.1 to 1.19.3
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.1 to 1.19.3.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.19.1...v1.19.3)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-08 13:13:43 +00:00
github-actions[bot] c27f4597e2 Merge pull request #3561 from beefproject/dependabot/bundler/sqlite3-2.9.4
Build(deps): bump sqlite3 from 2.9.3 to 2.9.4
2026-05-06 13:03:42 +00:00
dependabot[bot] 930427ebdb Build(deps): bump sqlite3 from 2.9.3 to 2.9.4
Bumps [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) from 2.9.3 to 2.9.4.
- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)
- [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/sqlite3-ruby/compare/v2.9.3...v2.9.4)

---
updated-dependencies:
- dependency-name: sqlite3
  dependency-version: 2.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-06 13:03:26 +00:00