Selenium 4.46 Released!

Today we’re happy to announce that Selenium 4.46 has been released!

By Diego Molina @diemol | Saturday, July 11, 2026

Selenium 4.46 Released

Security Selenium Manager (Rust) now guards against path traversal when extracting tar/pkg archives.
[Java] Hardened the JSON parser for RFC 8259 compliance (rejecting unescaped control characters, fixing an EOF sentinel collision, correcting comma handling), and marked all current BiDi classes as beta ahead of further changes.
BiDi Continued unifying the BiDi protocol layer across bindings around a shared, binding-neutral CDDL-derived schema — now adopted by JavaScript and Ruby.
[Java] BiDi creation moved to RemoteWebDriver, with BiDi now enabled for Safari options and event subscriptions tracked by subscription ID.
[Python] Safari, Safari Technology Preview, and WebView2 now route to their own dedicated handlers.
[Rust] Selenium Manager fixes for Firefox binary discovery on Linux and macOS .pkg/pbzx payload support.
[Grid] Fixed classpath packaging for the Redis-backed SessionQueue introduced in 4.45.

Hardened the JSON parser: fixed an EOF sentinel collision with U+FFFF, rejected unescaped control characters, tightened the number lexer to RFC 8259, and corrected comma handling.
Marked all current BiDi classes as beta, moved BiDi creation to RemoteWebDriver, and enabled BiDi for Safari options.
Deprecated methods that surfaced the internal BiDi connection on the driver, and now track event subscriptions by subscription ID.
Fixed the Docker version comparator, and system proxy handling for Selenium Manager arguments.

Generated the BiDi protocol layer from the shared binding-neutral schema.
Added ClientConfig for HTTP client customization, and trimmed whitespace around NO_PROXY entries.

Made product info determination thread-safe.
Split event-stream-backed subscription and enumeration for BiDi, and continued test infrastructure cleanup.

Fixed classpath packaging for the Redis-backed SessionQueue introduced in 4.45.

Added a design decision record (ADR) process and template for documenting significant changes.
Added a binding-neutral BiDi schema (JavaScript) and an update_cddl script to refresh pinned w3c/webref CDDL files.
Bumped Rust build tooling (rules_rs, @llvm) and the Node.js toolchain.

Docker: Add Redis external datastore support for SessionQueue configuration (#3160)
Docker: Fix video.sh busy-loop when se:recordVideo=false (#3165)
Docker: Env var SE_VIDEO_SESSION_SUBFOLDER to standardize recording in dynamic grid (#3156)
See all changes

We thank all our contributors for their incredible efforts in making Selenium better with every release. ❤️

For a detailed look at all changes, check out the release notes.