[dependabot]

Bumps github.com/chromedp/chromedp from 0.21.0 to 0.23.0.

Release notes

Sourced from github.com/chromedp/chromedp's releases.

v0.23.0

New: Detached(ctx) returns a channel that closes when the browser detaches the target of the context, after the target handled every message that came before the detach. It opens no target and returns the new error ErrNoTarget when the context has none yet. New: the context option WithListener(fn) adds a func of Listen before the first command, so fn sees the events of the start of a tab, such as the runtime.EventExecutionContextCreated events that answer Runtime.enable. Fix: the browser sometimes routed the detach of a target before a reply or an event that Chrome sent earlier, so a command returned ErrTargetDetached and Listen missed the event. The detach now goes through the same queue as the messages. See docs/API.md, examples 29 and 30, and the three decisions dated 2026-11-05. The changes come from onsi, in pull request #1646 and discussion #1645.

v0.22.1

Fix: a command that is still pending when the browser detaches its target, for example when the page closes, now returns an error that wraps the new ErrTargetDetached. Before, Chrome sent no reply and the command waited until its context ended. A command that starts on a detached target fails at once. The issue was reported by onsi in discussion #1645.

v0.22.0

New: Listen and ListenBrowser call a func for each event of the tab or the browser, in the order in which the events arrive from Chrome. The target calls the func before it reads the next message, so the func sees an event that arrived before the reply to a command before that command returns. Events and BrowserEvents give one iterator for each event type and give neither guarantee, so they stay the recommended API, and Listen is the lower level tool for code that needs the order across event types. The func gets the typed events of cdproto and no replies to commands. It runs in the loop that reads the messages of the tab, so it must return fast, must not run a command, must not call Listen and must not panic. See docs/API.md, example 28, and the decision docs/decisions/2026-11-04-export-the-ordered-event-listener.md. The idea comes from discussion #1645 by onsi.

v0.21.1

Fix a panic, close of closed channel, in the handling of DOM.documentUpdated. When DOM.getDocument failed, for example because the tab was closing, the frame kept its old root node, and the next DOM.documentUpdated event closed the channel of that root again. The frame now clears the root first. Thanks to Dhruv Jain (#1644). The module also requires cdproto v0.159.0 now.

Commits

• 94001c5 Link the contexts and timeline examples from the docs
• aefe4af Record the decisions for Detached, WithListener and the routing fix
• a30fd65 Make Detached return ErrNoTarget instead of opening a target
• cd5c841 Add WithListener to listen to a target from its start
• c1bd0bb Export the detach of a target as Detached
• dbf104f Route the detach of a target after its earlier messages
• 20bf160 Fail the commands of a target that the browser detaches
• 6e04d50 Update the README for the Listen examples
• da4225f Export the ordered event listener as Listen and ListenBrowser
• d42b1ae Update cdproto to v0.159.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)