[build] Download and bundle Selenium Manager SBOM and NOTICE in each package

MODULE.bazel

@@ -438,6 +438,8 @@ use_repo(
     selenium_manager_artifacts,
     "download_sm_linux",
     "download_sm_macos",
+    "download_sm_notice",
+    "download_sm_sbom",
     "download_sm_windows",
 )
 

common/manager/BUILD.bazel

@@ -31,3 +31,13 @@ alias(
     name = "selenium-manager-windows",
     actual = "@download_sm_windows//file",
 )
+
+alias(
+    name = "selenium-manager-sbom",
+    actual = "@download_sm_sbom//file",
+)
+
+alias(
+    name = "selenium-manager-notice",
+    actual = "@download_sm_notice//file",
+)

common/selenium_manager.bzl

@@ -1,27 +1,40 @@
-# This file has been generated using `bazel run scripts:selenium_manager`
+# DO NOT EDIT! This file is generated by scripts/selenium_manager.py.
+# Regenerate with: `bazel run //scripts:selenium_manager`
 
 load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
 
 def selenium_manager():
     http_file(
         name = "download_sm_linux",
         executable = True,
-        sha256 = "7572971a9f6e4e1622793528d817a1746bfb2d87bf44ee2d5ec4ca6665d5ef8b",
-        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-e396475/selenium-manager-linux",
+        sha256 = "12f9b619983e95e855c20772fee792469c11784f005d34d98bc9501dc8f5aae7",
+        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-3ab0107/selenium-manager-linux",
     )
 
     http_file(
         name = "download_sm_macos",
         executable = True,
-        sha256 = "de31da0ebac505d05b019d9a7113cd099a330fe6b75d0ce297e51454d44be488",
-        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-e396475/selenium-manager-macos",
+        sha256 = "979233fffd66157a91d8db5c6c9c91e05b1547f6f7e78135b96f36380d17c13b",
+        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-3ab0107/selenium-manager-macos",
     )
 
     http_file(
         name = "download_sm_windows",
         executable = True,
-        sha256 = "c8ed9ebfa23faf029fd5060a121b99a09e98a29a83212d8d0d644e62e07a47d0",
-        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-e396475/selenium-manager-windows.exe",
+        sha256 = "a66d48fc732774d2ac72578f0a8d897dc97883849420bdf60e43dcfaf8605bf9",
+        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-3ab0107/selenium-manager-windows.exe",
+    )
+
+    http_file(
+        name = "download_sm_sbom",
+        sha256 = "a3d73413c342755e96bc8a8619af4657eb51710c3cef783195b8a1a6e35d6d3a",
+        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-3ab0107/selenium-manager.cdx.json",
+    )
+
+    http_file(
+        name = "download_sm_notice",
+        sha256 = "c1f680eb71cafc7ed834fe9f5b29abb57c5074229eea5dec217ab180d4ee896f",
+        url = "https://github.com/SeleniumHQ/selenium_manager_artifacts/releases/download/selenium-manager-3ab0107/selenium-manager-THIRD-PARTY-NOTICES.txt",
     )
 
 def _selenium_manager_artifacts_impl(_ctx):

dotnet/src/webdriver/BUILD.bazel

@@ -176,6 +176,8 @@ nuget_pack(
         "//common/images:selenium_logo_small.png": "icon.png",
         "//common/manager:selenium-manager-linux": "manager/linux/selenium-manager",
         "//common/manager:selenium-manager-macos": "manager/macos/selenium-manager",
+        "//common/manager:selenium-manager-notice": "selenium-manager-THIRD-PARTY-NOTICES.txt",
+        "//common/manager:selenium-manager-sbom": "selenium-manager.cdx.json",
         "//common/manager:selenium-manager-windows": "manager/windows/selenium-manager.exe",
         ":assets-nuget-readme": "README.md",
         ":assets-nuget-build-props": "build/Selenium.WebDriver.props",

dotnet/src/webdriver/Selenium.WebDriver.nuspec

@@ -65,6 +65,9 @@
     <file src="manager/macos/selenium-manager" target="runtimes/osx/native/selenium-manager" />
     <file src="manager/windows/selenium-manager.exe" target="runtimes/win/native/selenium-manager.exe" />
 
+    <file src="selenium-manager.cdx.json" target="selenium-manager.cdx.json" />
+    <file src="selenium-manager-THIRD-PARTY-NOTICES.txt" target="selenium-manager-THIRD-PARTY-NOTICES.txt" />
+
     <file src="icon.png" />
     <file src="README.md" />
   </files>

java/src/org/openqa/selenium/manager/BUILD.bazel

@@ -13,6 +13,8 @@ java_export(
     resources = [
         ":manager-linux",
         ":manager-macos",
+        ":manager-notice",
+        ":manager-sbom",
         ":manager-windows",
     ],
     tags = [
@@ -46,3 +48,15 @@ copy_file(
     src = "//common/manager:selenium-manager-windows",
     out = "windows/selenium-manager.exe",
 )
+
+copy_file(
+    name = "manager-sbom",
+    src = "//common/manager:selenium-manager-sbom",
+    out = "selenium-manager.cdx.json",
+)
+
+copy_file(
+    name = "manager-notice",
+    src = "//common/manager:selenium-manager-notice",
+    out = "selenium-manager-THIRD-PARTY-NOTICES.txt",
+)

javascript/selenium-webdriver/BUILD.bazel

@@ -156,6 +156,8 @@ npm_package(
         ":license",
         ":manager-linux",
         ":manager-macos",
+        ":manager-notice",
+        ":manager-sbom",
         ":manager-windows",
         ":prod-src-files",
         "//javascript/selenium-webdriver/lib/atoms:bidi-mutation-listener",
@@ -323,6 +325,18 @@ copy_file(
     out = "bin/windows/selenium-manager.exe",
 )
 
+copy_file(
+    name = "manager-sbom",
+    src = "//common/manager:selenium-manager-sbom",
+    out = "bin/selenium-manager.cdx.json",
+)
+
+copy_file(
+    name = "manager-notice",
+    src = "//common/manager:selenium-manager-notice",
+    out = "bin/selenium-manager-THIRD-PARTY-NOTICES.txt",
+)
+
 copy_to_bin(
     name = "package-json",
     srcs = ["package.json"],

py/BUILD.bazel

@@ -120,6 +120,18 @@ copy_file(
     out = "selenium/webdriver/common/windows/selenium-manager.exe",
 )
 
+copy_file(
+    name = "manager-sbom",
+    src = "//common/manager:selenium-manager-sbom",
+    out = "selenium/webdriver/common/selenium-manager.cdx.json",
+)
+
+copy_file(
+    name = "manager-notice",
+    src = "//common/manager:selenium-manager-notice",
+    out = "selenium/webdriver/common/selenium-manager-THIRD-PARTY-NOTICES.txt",
+)
+
 copy_file(
     name = "get-attribute",
     src = "//javascript/atoms/fragments:get-attribute-typescript.js",
@@ -309,6 +321,8 @@ py_library(
     data = [
         ":manager-linux",
         ":manager-macos",
+        ":manager-notice",
+        ":manager-sbom",
         ":manager-windows",
     ] + [":create-cdp-srcs-" + n for n in BROWSER_VERSIONS],
     imports = ["."],
@@ -590,6 +604,8 @@ pkg_files(
     excludes = [
         ":manager-linux",
         ":manager-macos",
+        ":manager-notice",
+        ":manager-sbom",
         ":manager-windows",
     ],
     strip_prefix = strip_prefix.from_pkg(),

rb/BUILD.bazel

@@ -29,6 +29,18 @@ copy_file(
     out = "bin/windows/selenium-manager.exe",
 )
 
+copy_file(
+    name = "manager-sbom",
+    src = "//common/manager:selenium-manager-sbom",
+    out = "bin/selenium-manager.cdx.json",
+)
+
+copy_file(
+    name = "manager-notice",
+    src = "//common/manager:selenium-manager-notice",
+    out = "bin/selenium-manager-THIRD-PARTY-NOTICES.txt",
+)
+
 select_file(
     name = "global-license",
     srcs = "//:license",
@@ -65,6 +77,8 @@ rb_gem_build(
         ":license",
         ":manager-linux",
         ":manager-macos",
+        ":manager-notice",
+        ":manager-sbom",
         ":manager-windows",
         ":notice",
     ],

scripts/selenium_manager.py

@@ -57,11 +57,32 @@ def print_windows(base_url, sha):
         sha256 = "{}",
         url = "{}",
     )
+
 """.format(sha, base_url + "/selenium-manager-windows.exe")
 
 
+def print_sbom(base_url, sha):
+    return """    http_file(
+        name = "download_sm_sbom",
+        sha256 = "{}",
+        url = "{}",
+    )
+
+""".format(sha, base_url + "/selenium-manager.cdx.json")
+
+
+def print_notice(base_url, sha):
+    return """    http_file(
+        name = "download_sm_notice",
+        sha256 = "{}",
+        url = "{}",
+    )
+""".format(sha, base_url + "/selenium-manager-THIRD-PARTY-NOTICES.txt")
+
+
 if __name__ == "__main__":
-    content = """# This file has been generated using `bazel run scripts:selenium_manager`
+    content = """# DO NOT EDIT! This file is generated by scripts/selenium_manager.py.
+# Regenerate with: `bazel run //scripts:selenium_manager`
 
 load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
 
@@ -72,6 +93,8 @@ def selenium_manager():
     content = content + print_linux(base_url, sha_dict["linux"])
     content = content + print_macos(base_url, sha_dict["macos"])
     content = content + print_windows(base_url, sha_dict["windows"])
+    content = content + print_sbom(base_url, sha_dict["sbom"])
+    content = content + print_notice(base_url, sha_dict["notice"])
     content += """
 def _selenium_manager_artifacts_impl(_ctx):
     selenium_manager()