chore(devDeps): bump webdriverio packages

[legobeat]

Description

• Maintenance update staying on major version v7.
  • Upgrading to current v8 addressed separately in a later change.
  • wdio-cucumberjs-json-reporter should be separately be upgraded to v5 together with cucumberjs and wdio peerDeps: https://github.com/webdriverio-community/wdio-cucumberjs-json-reporter/pull/117/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
• Removes unused/deprecated wdio ancillary devDeps wdio-chromedriver-service, wdio-cucumber-reporter, wdio-image-comparison-service, wdio-vscode-service
  • Savings in installation resource usage and repo disk space
• Explicitly adds peerDeps @cucumber/message-streams, @cucumber/messages

Checklist

• There is a related GitHub issue
• Tests are included if applicable
• Any added code is fully documented

[github-actions]

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Ignoring: git-repo-info@2.1.1, @wdio/browserstack-service@7.31.1, @types/gitconfiglocal@2.0.1, gitconfiglocal@2.1.0

Pull request alert summary

Issue	Status
Critical CVE	✅ 0 issues
CVE	✅ 0 issues
Mild CVE	✅ 0 issues
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Filesystem access	✅ 0 issues
Network access	✅ 0 issues
Shell access	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
GitHub dependency	✅ 0 issues
No bug tracker	✅ 0 issues
No contributors or author data	✅ 0 issues
No README	✅ 0 issues
Deprecated	✅ 0 issues
New author	✅ 0 issues
Unstable ownership	✅ 0 issues
Non-existent author	✅ 0 issues
Unmaintained	✅ 0 issues
Unpublished package	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues
AI detected security risk	✅ 0 issues
AI warning	✅ 0 issues

---

📊 Modified Dependency Overview:

➕ Added Package	Capability Access	+/- Transitive Count	Publisher
@cucumber/messages@22.0.0	None	+1	cukebot

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
@wdio/browserstack-service@7.31.1	7.28.1...7.31.1	network, environment	+18/-22	wdio-user
multiple-cucumber-html-reporter@3.4.0	3.0.1...3.4.0	None	+2/-3	wasiqb
@wdio/cli@7.31.1	7.25.2...7.31.1	None	+12/-12	wdio-user
@wdio/appium-service@7.31.1	7.25.1...7.31.1	None	+13/-13	wdio-user
@wdio/local-runner@7.31.1	7.25.2...7.31.1	None	+14/-14	wdio-user
@wdio/junit-reporter@7.31.1	7.28.0...7.31.1	None	+14/-16	wdio-user
@wdio/cucumber-framework@7.31.1	7.25.1...7.31.1	None	+18/-15	wdio-user
@wdio/spec-reporter@7.31.1	7.25.1...7.31.1	None	+14/-14	wdio-user

🚮 Removed packages: wdio-chromedriver-service@7.3.2, wdio-cucumber-reporter@0.0.2, wdio-image-comparison-service@3.1.1, wdio-vscode-service@0.1.13

[legobeat]

@SocketSecurity ignore @types/gitconfiglocal@2.0.1
@SocketSecurity ignore git-repo-info@2.1.1
@SocketSecurity ignore gitconfiglocal@2.1.0

These can be addressed in v8 upgrade

[sethkfman]

@cortisiko after we complete the RN upgrade we should look at this

[legobeat]

@cortisiko after we complete the RN upgrade we should look at this

Why not the other direction? If anything, I'd see this one as a precursor.

[legobeat]

@SocketSecurity ignore @wdio/browserstack-service@7.31.1

[leotm]

any adv explicitly tracking @cucumber/message-streams?
alrdy in wdio-related peer deps

├── @cucumber/message-streams@4.0.1
├─┬ @wdio/cucumber-framework@7.31.1
│ ├─┬ @cucumber/cucumber@8.6.0
│ │ ├─┬ @cucumber/gherkin-streams@5.0.1
│ │ │ └── @cucumber/message-streams@4.0.1 deduped
│ │ └── @cucumber/message-streams@4.0.1 deduped
│ └─┬ @cucumber/gherkin-streams@5.0.1
│   └── @cucumber/message-streams@4.0.1 deduped
└─┬ wdio-cucumberjs-json-reporter@4.4.3
  └─┬ @cucumber/gherkin@22.0.0
    └── @cucumber/message-streams@3.0.0

(same for @cucumber/messages)

├─┬ @cucumber/message-streams@4.0.1
│ └── @cucumber/messages@22.0.0 deduped
├── @cucumber/messages@22.0.0
├─┬ @wdio/cucumber-framework@7.31.1
│ ├─┬ @cucumber/cucumber@8.6.0
│ │ ├─┬ @cucumber/gherkin-streams@5.0.1
│ │ │ ├─┬ @cucumber/gherkin@26.0.3
│ │ │ │ └── @cucumber/messages@21.0.1 deduped
│ │ │ └── @cucumber/messages@21.0.1
│ │ ├─┬ @cucumber/gherkin-utils@8.0.0
│ │ │ └── @cucumber/messages@19.1.4
│ │ ├─┬ @cucumber/gherkin@24.0.0
│ │ │ └── @cucumber/messages@19.1.4
│ │ ├─┬ @cucumber/html-formatter@20.0.0
│ │ │ └── @cucumber/messages@19.1.2 deduped
│ │ └── @cucumber/messages@19.1.2
│ ├─┬ @cucumber/gherkin-streams@5.0.1
│ │ └── @cucumber/messages@21.0.1 deduped
│ ├─┬ @cucumber/gherkin@26.0.3
│ │ └── @cucumber/messages@21.0.1
│ └── @cucumber/messages@21.0.1
├─┬ prettier-plugin-gherkin@1.1.1
│ ├─┬ @cucumber/gherkin@24.1.0
│ │ └── @cucumber/messages@19.1.4 deduped
│ └── @cucumber/messages@19.1.4
└─┬ wdio-cucumberjs-json-reporter@4.4.3
  └─┬ @cucumber/gherkin@22.0.0
    ├─┬ @cucumber/message-streams@3.0.0
    │ └── @cucumber/messages@17.1.1 deduped
    └── @cucumber/messages@17.1.1

otherwise thx and lgtm!

[legobeat]

@leotm added them after yarn was complaining so assumed the expected thing would be to add them. Thanks for the thoughtful review.