v1.0.7 — Security Hardening & 39 Bug Fixes

v1.0.7 — Security Hardening & 39 Bug Fixes

Comprehensive security and reliability release driven by 3 independent full-codebase audits.

Highlights

• 7 security fixes: Path traversal protection, PBKDF2 encryption, DNS rebinding protection
• 10 concurrency fixes: Data races, goroutine leaks, lock ordering
• 9 memory caps: All unbounded collections capped with oldest eviction
• 7 MCP/REST API fixes: Correct routing for storage, clipboard, trace, batch
• 80+ new tests (304 unit + 98 E2E), all passing with -race

Breaking Changes

State encryption KDF upgraded to PBKDF2 (100k rounds). Re-save state after upgrading.

Install

curl -sSL https://raw.githubusercontent.com/4DvAnCeBoY/testmu-browser-agent-public/main/install.sh | sh

See CHANGELOG.md for the complete list of 39 fixes.

v1.0.6 — 31 Bug Fixes

31 bug fixes including hardened auth encryption (PBKDF2), fixed CLI commands (swipe, device, stream), wait handler fixes, resource leak cleanup, and 6 new CLI flags. See CHANGELOG.md for details.

v1.0.5 — All Bugs Fixed

All 32 reported bugs addressed. Reload, record, popup tabs, trace, stale MCP, auth masking, route race.

v1.0.4 — 20+ Bug Fixes

20+ bug fixes: upload, tab close, auth encryption, storage, clipboard, viewport, batch, inspect, find --role, cookies, geolocation, dialog, MCP version, exit codes, locale, HAR commands.

v1.0.3 — Version Injection

Binary now reports correct version. Includes all previous fixes.

v1.0.2 — CLI Fixes, Security, Audit

Fix 5 broken CLI commands, server security, Windows process check, and marketing accuracy.

v1.0.1 — Bug Fixes

v1.0.1 — Bug Fixes

Fixed

• Daemon nil pointer crash on startup
• Windows cross-compilation
• Install script no longer requires sudo
• Claude Code settings path corrected
• All marketing materials normalized

Install

curl -sSL https://raw.githubusercontent.com/4DvAnCeBoY/testmu-browser-agent-public/main/scripts/install.sh | sh

v1.0.0 — AI-Native Browser Automation

testmu-browser-agent v1.0.0

AI-native browser automation CLI and MCP server for Chrome, built in Go.

Highlights

• 90+ CLI commands — navigate, click, fill, screenshot, network interception, auth vault, device emulation, video recording, HAR capture
• 10 MCP tools — plug into Claude Code, Cursor, GitHub Copilot, Windsurf, Gemini CLI, Codex, Goose, OpenCode, or Cline
• Accessibility snapshots with @ref IDs — token-efficient, stable element references
• LambdaTest cloud integration — run on real cloud browsers with a single flag
• AES-256-GCM encrypted sessions — save and restore authenticated browser state
• Daemon mode with REST API + SSE — long-lived browser process with HTTP endpoints

Install

curl -sSL https://raw.githubusercontent.com/4DvAnCeBoY/testmu-browser-agent-public/main/scripts/install.sh | sh

Quick Start

testmu-browser-agent open https://example.com
testmu-browser-agent snapshot
testmu-browser-agent click @e1
testmu-browser-agent screenshot --output page.png
testmu-browser-agent close

Claude Code Setup

{
  "mcpServers": {
    "testmu-browser-agent": {
      "command": "testmu-browser-agent",
      "args": ["mcp"]
    }
  }
}

Downloads

Platform	Binary
macOS (Apple Silicon)	testmu-browser-agent-darwin-arm64
macOS (Intel)	testmu-browser-agent-darwin-amd64
Linux (x86-64)	testmu-browser-agent-linux-amd64
Windows (x86-64)	testmu-browser-agent-windows-amd64.exe

Verify downloads with checksums.txt (SHA-256).