build(deps): bump the minor-and-patch group across 1 directory with 2 updates

[dependabot]

Bumps the minor-and-patch group with 2 updates in the / directory: github.com/chromedp/chromedp and golang.org/x/net.

Updates github.com/chromedp/chromedp from 0.16.0 to 0.21.0

Release notes

Sourced from github.com/chromedp/chromedp's releases.

v0.21.0

The package remote has its own WebSocket client, and it is a package of the core module now. The nested module remote and the dependency github.com/gobwas/ws are gone. The core module still needs only the standard library and cdproto.

The import path is the same: github.com/chromedp/chromedp/remote. The public API of the package is the same.

Upgrade: if your go.mod has a line for github.com/chromedp/chromedp/remote, remove it (go mod tidy does that). Go reports an ambiguous import while both the old nested module and the core module provide the package. The tag remote/v0.2.0 is the last version of the nested module.

The client follows RFC 6455: it checks the handshake, joins fragmented messages, checks UTF-8 and the size of a message, answers pings, and does the close handshake. It does not support extensions such as permessage-deflate. Go 1.25 and later are supported.

v0.20.1

Documentation only. The README, the package documentation and the docs have the current versions (chromedp v0.20.0, cdproto v0.157.8, remote v0.2.0), the CI matrix and the release history. The README describes termcast and the 43 programs of chromedp/examples.

v0.20.0

chromedp supports Go 1.25 and later. Before this release, the module needed Go 1.27 (see #1536).

• The JSON types come from github.com/chromedp/cdproto/cdp/jsonv2. With Go 1.27 or GOEXPERIMENT=jsonv2 they are aliases of the types of the standard encoding/json/v2 and jsontext, so the public API is the same. With Go 1.25 and 1.26 they come from github.com/go-json-experiment/json.
• The modules chromedp, remote and test use go 1.25 and cdproto v0.157.8.
• The CI runs Go 1.25, 1.26 and stable on Linux, stable on Windows and macOS, and the experiment and the compatibility tag.

v0.19.1

Documentation only. The README and the package documentation describe termcast, which draws the screen of a page in a terminal, and the 43 programs of chromedp/examples.

v0.19.0

This release adds new actions and options, fixes bugs, and works on Linux, Windows and macOS in CI. See docs/MIGRATION.md for every change.

New

• Tap and TapXY send a touch tap.
• DragAndDrop and DragAndDropXY drag and drop with the mouse and with HTML5 drag and drop.
• Console reads the console, the uncaught exceptions and the browser log of a page as one iterator.
• ExposeFunc calls a Go function from the page, like exposeFunction in Puppeteer.
• PrintToPDF takes options for the paper, the margins, the scale, the page ranges, the header and the footer, the outline and a stream.
• WithNewWindow chooses a window or a tab for a new target. NoInheritEnv starts the browser with only the given variables. WithDetachOnCancel leaves the tab open when the context ends.
• EvalAwaitPromise waits for a promise that an expression returns.

Fixed

• Call on a Target or a Browser returns an error when the connection to the browser is lost, and does not hang.
• The exec allocator keeps the order of the flags.
• WaitNotPresent works with a JSPath that gives null or an empty list.
• Evaluate returns ErrJSNull for null when the type cannot be nil, and Text works on a text node.
• The pipe transport, the allocator and the tests work on Windows and macOS, and the default browser lookup on Windows falls back to Microsoft Edge.

Notes

• Use errors.Is(err, context.Canceled) and not == for the error of a call after the connection was lost.
• The tests run on Linux, Windows and macOS in CI, and every night against the stable, beta and dev channels of headless-shell.
• The module github.com/chromedp/chromedp/remote is unchanged and stays at remote/v0.1.0.

Commits

• 7862adf Run one package at a time in the Chrome tests of the CI
• 9cbfa1c Make two websocket tests pass on Windows
• 295870b Replace gobwas/ws with a WebSocket client of this repository
• dddfecf Sweep the documentation
• 156907f Require chromedp v0.20.0 in the test module
• a5acf48 Require chromedp v0.20.0 in the remote module
• 4a5437d Support Go 1.25 and later
• 3c56b8b Describe termcast and the new examples in the README and the package document...
• 67e1ea2 Update the actions of the workflows to checkout v7 and setup-go v7
• 8b41617 Wait longer for the report of an HTML5 drag, and ignore the Windows pipe swit...
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.59.0 to 0.61.0

Commits

• c1d31df go.mod: update golang.org/x dependencies
• 8456a20 quic: properly check for allowed frame types in a packet
• 18ece0c http2: prevent crash due to HPACK encoder race
• 2d03f9d http2: avoid 2x refund on stream close with buffered data
• cc7d34f http2: avoid excessive work on initial window changes
• 57f4235 http2: apply header limits to Trailer headers too
• 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
• 2824783 http2: delete malformed framing-related headers
• b13c0c1 internal/http3: delete HTTP/3 package
• 520c891 quic: off-path support in loss/congestion/rtt
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0ced59bd-0b72-4470-8b94-202145de2c71

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}