From b4bb59c42fe6682d063db9e7db9284a624afbebc Mon Sep 17 00:00:00 2001
From: romovs <romovs@gmail.com>
Date: Thu, 10 Sep 2026 10:58:27 +0300
Subject: [PATCH 1/2] Vulnerable dependencies cleanup

---
 cb-kit-common/pom.xml                         | 31 -------------------
 .../io/cloudbeat/common/har/HarHelper.java    |  6 ----
 cb-kit-junit4/pom.xml                         |  6 ----
 cb-kit-selenium4/pom.xml                      | 20 +++++++-----
 4 files changed, 13 insertions(+), 50 deletions(-)

diff --git a/cb-kit-common/pom.xml b/cb-kit-common/pom.xml
index b26bbcd..f7ff306 100755
--- a/cb-kit-common/pom.xml
+++ b/cb-kit-common/pom.xml
@@ -50,16 +50,6 @@
             <artifactId>jackson-annotations</artifactId>
             <version>${jackson.version}</version>
         </dependency>
-        <dependency>
-            <groupId>com.fasterxml.jackson.datatype</groupId>
-            <artifactId>jackson-datatype-jdk8</artifactId>
-            <version>${jackson.version}</version>
-        </dependency>
-        <dependency>
-            <groupId>com.fasterxml.jackson.dataformat</groupId>
-            <artifactId>jackson-dataformat-cbor</artifactId>
-            <version>${jackson.version}</version>
-        </dependency>
         <!-- https://mvnrepository.com/artifact/com.squareup.retrofit2/retrofit -->
         <dependency>
             <groupId>com.squareup.retrofit2</groupId>
@@ -78,27 +68,6 @@
             <artifactId>converter-jackson</artifactId>
             <version>2.9.0</version>
         </dependency>
-        <dependency>
-            <groupId>commons-httpclient</groupId>
-            <artifactId>commons-httpclient</artifactId>
-            <version>3.1</version>
-        </dependency>
-
-        <dependency>
-            <groupId>org.apache.cxf</groupId>
-            <artifactId>cxf-bundle-jaxrs</artifactId>
-            <version>2.2</version>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.slf4j</groupId>
-                    <artifactId>slf4j-jdk14</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.slf4j</groupId>
-                    <artifactId>slf4j-api</artifactId>
-                </exclusion>
-            </exclusions>
-        </dependency>
         <dependency>
             <groupId>org.aspectj</groupId>
             <artifactId>aspectjrt</artifactId>
diff --git a/cb-kit-common/src/main/java/io/cloudbeat/common/har/HarHelper.java b/cb-kit-common/src/main/java/io/cloudbeat/common/har/HarHelper.java
index 6f2b91c..2f7dd5b 100644
--- a/cb-kit-common/src/main/java/io/cloudbeat/common/har/HarHelper.java
+++ b/cb-kit-common/src/main/java/io/cloudbeat/common/har/HarHelper.java
@@ -2,18 +2,12 @@
 
 import com.fasterxml.jackson.databind.ObjectMapper;
 import io.cloudbeat.common.har.model.*;
-import io.cloudbeat.common.model.HttpNetworkEntry;
-import okio.Path;
-import org.apache.cxf.helpers.FileUtils;
 
 import java.io.*;
 import java.net.MalformedURLException;
 import java.net.URL;
 import java.net.URLDecoder;
-import java.nio.charset.Charset;
 import java.nio.charset.StandardCharsets;
-import java.nio.file.Files;
-import java.nio.file.OpenOption;
 import java.util.*;
 import java.util.regex.Pattern;
 import java.util.stream.Collectors;
diff --git a/cb-kit-junit4/pom.xml b/cb-kit-junit4/pom.xml
index 5e0d9a6..7fc0c91 100755
--- a/cb-kit-junit4/pom.xml
+++ b/cb-kit-junit4/pom.xml
@@ -16,7 +16,6 @@
 
     <properties>
         <junit.version>4.12</junit.version>
-        <junit.jupiter.version>5.8.2</junit.jupiter.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
 
@@ -28,11 +27,6 @@
             <version>${revision}</version>
         </dependency>
         <!-- JUnit 4 -->
-        <dependency>
-            <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter-api</artifactId>
-            <version>${junit.jupiter.version}</version>
-        </dependency>
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
diff --git a/cb-kit-selenium4/pom.xml b/cb-kit-selenium4/pom.xml
index 50a2e6f..417dbb6 100755
--- a/cb-kit-selenium4/pom.xml
+++ b/cb-kit-selenium4/pom.xml
@@ -18,10 +18,9 @@
     <packaging>jar</packaging>
     
     <properties>
-        <!-- Selenium and Appium versions -->
+        <!-- Selenium versions -->
         <selenium.version>4.39.0</selenium.version>
         <devtools.version>v143</devtools.version>
-        <appium.version>9.2.2</appium.version>
     </properties>
 
     <dependencies>
@@ -62,11 +61,18 @@
             <artifactId>selenium-devtools-${devtools.version}</artifactId>
             <version>${selenium.version}</version>
         </dependency>
-        <!-- Appium -->
+        <!-- used directly by the HAR-processing classes in io.cloudbeat.selenium.har - moved
+             here from cb-kit-common (which has no use for either) since that module was only
+             supplying them transitively via the otherwise-unused cxf-bundle-jaxrs bundle -->
         <dependency>
-            <groupId>io.appium</groupId>
-            <artifactId>java-client</artifactId>
-            <version>${appium.version}</version>
-        </dependency>        
+            <groupId>org.codehaus.jettison</groupId>
+            <artifactId>jettison</artifactId>
+            <version>1.5.4</version>
+        </dependency>
+        <dependency>
+            <groupId>commons-httpclient</groupId>
+            <artifactId>commons-httpclient</artifactId>
+            <version>3.1</version>
+        </dependency>
     </dependencies>
 </project>
\ No newline at end of file

From e3143972316223d2255ab350a738ce592b7108e6 Mon Sep 17 00:00:00 2001
From: romovs <romovs@gmail.com>
Date: Thu, 10 Sep 2026 10:58:35 +0300
Subject: [PATCH 2/2] Fix NPE

---
 .../main/java/io/cloudbeat/junit/CbJunitExtension.java    | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/cb-kit-junit5/src/main/java/io/cloudbeat/junit/CbJunitExtension.java b/cb-kit-junit5/src/main/java/io/cloudbeat/junit/CbJunitExtension.java
index 4e3305c..0d2fa30 100644
--- a/cb-kit-junit5/src/main/java/io/cloudbeat/junit/CbJunitExtension.java
+++ b/cb-kit-junit5/src/main/java/io/cloudbeat/junit/CbJunitExtension.java
@@ -197,10 +197,12 @@ public static void attachPageSource(final String pageSource, boolean addToStep)
     }
 
     private static String getVideoName(final TestInfo testInfo) {
-        if (testInfo.getTestMethod().isPresent()) {
-            return Math.abs(testInfo.getTestMethod().get().hashCode()) + "";
+        // getCapabilities() can be called with no TestInfo at all (e.g. from driver setup code
+        // that runs outside a test method's own parameter list, like DriverManager.getDriver())
+        if (testInfo == null || !testInfo.getTestMethod().isPresent()) {
+            return null;
         }
-        return null;
+        return Math.abs(testInfo.getTestMethod().get().hashCode()) + "";
     }
 
     public static void attachScreenshot(final byte[] screenshotData) {