Release v1.0.44

What's Changed

Version bumped from 1.0.43 to 1.0.44

Recent Changes

• Bump version to 1.0.44 (#6864) (84cf1b5)
• Group skipped workflow branches in run timeline (#6934) (86095f8)
• fix(SKY-11599): re-stack legacy editor canvas after collapse/accordion animations settle (#6933) (0cd6da1)
• feat(SKY-11580): force diagnose-first on the Fix-with-Copilot path (#6932) (bb0ecba)
• feat(SKY-11596): make studio settings sidebar a grid column like the Copilot (#6931) (29dfa9d)
• fix(SKY-11560): mirror legacy run page in studio run-tab hero (per-action & per-block) (#6930) (a234653)
• API docs sync: document residential ISP proxy pinning (#6860) (0fc435d)
• fix(SKY-11462): surface raw DOM reads as an extraction step in code block outline (#6928) (9770e8e)
• feat(SKY-11509): restyle run tabs — Details→Overview popover, Inputs/Outputs center tabs, responsive header (#6927) (24119e0)
• SKY-11505: distinguish loading vs empty state in studio run view (#6926) (b9c8300)
• Expose datepicker header navigation controls (#6925) (88fcf2c)
• fix(SKY-11562): keep adopted-session download poll loop polling after helper failure (#6924) (5e47a3a)
• fix(SKY-11512): handle blob: URLs in adopted-session download save path (#6920) (18ccfdb)
• feat(actions): hint at calendar/picker fallback when input_text rejects a date span (#6923) (e428b35)
• SKY-11246 fix(persistent-browsers): active CDP probe + evict-on-Connection-closed for cached PBS reuse (#6921) (95afc43)
• Fix remote browser session recording target reuse (#6919) (6bcba9c)
• SKY-11558: Preserve committed Copilot run outcomes (#6917) (3e75fcc)
• Restore Tesseract in runtime images (#6916) (46f22cd)
• Polish Workflow Studio top bar spacing, grouping, and sizing (#6914) (1451bd4)
• fix(SKY-11516): fire copilot.discover.started on /discover copilot handoff (#6913) (b4eef3f)
• feat(SKY-11580): seed a grounded diagnose turn from "Fix with Copilot" (#6908) (7cfd4f7)
• fix(SKY-11579): guard bulk folder moves while one is pending (#6904) (e29108b)
• feat(SKY-11276): bridge studio run id into the workflow copilot request (#6906) (ff581e8)
• fix(SKY-11567): guard workflow document editor against absent values (#6905) (779bcd3)
• test(SKY-11383): guard block config panel top gap below workflow header (#6903) (8c4b389)
• SKY-11559: Verify validation classifications deterministically (#6902) (e1f190a)
• SKY-11549: tolerate NANP country-code phone readback (#6901) (8d26fa3)
• feat(SKY-11337): unified right-click + bulk action menus for the agents list (#6900) (896d098)
• fix(llm): constrain MiMo v2.5 reasoning to stop runaway generation (#6898) (e5c0008)
• SKY-11544: Fix value-grounded Copilot completion criteria (#6899) (e75f13c)
• fix(SKY-11495): credit validation review fallback floor (#6897) (1282faf)
• fix(SKY-11536): gate WORKFLOW_TAGGING on shared workflow-tag filter endpoints (#6896) (0e2bfbb)
• SKY-10723: Add worker-side CDP livestream publishing (#6895) (25f8e28)
• security: add path-containment checks in file download and temp-file creation (#6894) (e68b56a)
• fix(SKY-11499): keep horizontally scrolled-off cells in element tree (#6893) (4d14cb1)
• fix(SKY-11525): make studio run failure banner dismissable (#6892) (ca128c4)
• fix(SKY-11514): show real run status on studio Run tab (#6891) (d1acaab)
• feat(SKY-11481): collapsible & persistent studio settings panel (#6889) (c24b392)
• feat(SKY-11508): auto-navigate to Run tab when a block run starts (#6888) (746644c)
• SKY-10810 impose scout trajectory at persist seam (#6887) (739dd15)
• Follow up: memoize duplicate block callback (#6886) (dded39c)
• SKY-11542 Add workflow block duplication (#6885) (c755c55)
• Add Google Drive cloud storage uploads (#6884) (a293dbf)
• SKY-11208 shadow-match measurement (no behavior change) (#6883) (c2802b2)
• Add authenticator QR upload support (#6882) (01325c0)
• fix: speed up workflow save cache invalidation (#6881) (412c632)
• fix(SKY-11531): Copilot loaded-result evaluate grounding (#6879) (de75d71)
• SKY-11208 collapse normal select fanout (#6878) (db2d373)
• fix(SKY-11541): deterministic post-failure page re-perception for build-test runtime-repair (#6876) (c5a08b4)
• fix(SKY-11534): re-perceive grounded click targets after a non-advancing click (#6877) (c5f9702)
• fix(SKY-11530): credit registered download output criteria (#6875) (5053de8)
• feat(codeblock): log secure runner gate decision + block selection at INFO (#6874) (19df0bd)
• fix(record): correct live-draft waits/hovers under load + cap enrichment fan-out (#6873) (7a525a6)
• fix(SKY-11533): honest turn-halt for no-forward-progress interaction-click churn (#6869) (d30575b)
• fix(SKY-10960): improve file_url_parser OCR fidelity + make its model PostHog-configurable (#6867) (89ffbcc)
• SKY-11503 Gate redundant output-field asks (#6866) (cb3a4ae)
• fix(SKY-11215): bind live screencast to the run's current browser state (#6865) (56e31ce)
• fix(SKY-11510): type terminal action criteria (#6863) (9dfafd5)
• SKY-11468 Add typed download criterion reconciliation (#6861) (3fc3fe8)
• fix(SKY-11496): Add contingent completion criteria (#6859) (b870b60)
• SKY-11497 Fix Copilot runtime repair context routing (#6858) (3de50e3)
• feat(SKY-11515): gate remaining workflow tag UI behind WORKFLOW_TAGGING flag (#6854) (9f9d78b)
• fix(SKY-11463): surface extraction/AI steps in code-block run timeline (#6857) (dc7f200)
• fix(SKY-11495): grade fallback floor end states (#6856) (3fee904)
• fix(workflow-studio): bind Block Library search panel to drawer width (SKY-11494) (#6855) (8ef7685)
• SKY-11468 Ground completion criteria in authored outputs (#6853) (1602742)
• fix(SKY-11302): fail-safe completion verdict on zero gradeable run-plane criteria (#6852) (a8783cf)
• fix(SKY-11519): vertically center short run-hero screenshots (#6851) (f5f2fc8)
• feat(SKY-11519): show full-page LLM screenshot in studio run hero (#6850) (24318bf)
• feat(SKY-11517): remove action timeline from Workflow Studio Run tab (#6849) (7e440ce)
• feat: add residential ISP proxy pinning (#6848) (705c563)
• Recording: size waits to page-busy span; collapse consecutive waits (#6847) (0c1a9ad)
• feat(SKY-11479): center screenshots on zoom-click in Run tab (#6846) (2c49a74)
• fix(SKY-11402): smooth left-to-right Copilot open animation + collapse chevron (#6845) (45d0b0d)
• fix(SKY-11384): use #f8fafc for active studio CTAs (#6844) (4b2ce1a)
• fix(SKY-11242): reap idle persistent browser sessions to free leaked Chromium + ffmpeg (#6843) (4c3f2b4)
• fix(streaming): cap browser-stream message-channel reconnects (#6842) (794a81b)
• fix(SKY-11401): Run-tab header consistency, code pills, summarize tooltip (#6841) (78046d5)
• Revert "Install Tesseract in runtime images" (#6840) (f7ac31d)
• SKY-11353: Fix Copilot canonical entrypoint aliases (#6839) (1770a88)
• fix(SKY-11235): honor "keep exactly N tabs" in task_v2 (curate over-opened tabs + planner tab visibility) (#6838) (4f5b65a)
• Update changelog — Week of June 22, 2026 (#6837) (31660cd)
• fix(SKY-11397): one live-status source of truth on the Run tab (#6836) (d2bbba1)
• Support blank browser profile creation (#6835) (15a24f0)
• Install Tesseract in runtime images (#6834) (791ef87)
• style(SKY-11335): clarify group vs value label in the tag creation UI (#6821) (5be88a6)
• Keep debug browser sessions alive from editor (#6832) (d323696)
• feat(SKY-11449): add DeepSeek + Xiaomi MiMo to model dropdown; deprecate Gemini 2.5 Pro/Flash (#6831) (3ba690e)
• fix(SKY-11434): widen CDP connect retry budget + stealth-chromium launch liveness diagnostics (#6820) (18d1f25)
• feat(SKY-11337): label management settings surface (#6830) (2e0f43b)
• fix(SKY-11436): recover from webpack/Clerk ChunkLoadError via cache-busting reload (#6818) (c37edd9)
• fix(SKY-11380): typed terminal outcome for incompatible edited extraction schemas (#6815) (d283b1d)
• fix(SKY-11430): guard ab_variant against missing onboarding_state (#6803) (7bafb06)
• ci(SKY-11103): honor the native Vercel Deployment Check for the frontend gate (#6829) (d9c0e70)
• chore(observability): downgrade routine browser WARN logs to info + sample (#6827) (ae99e97)
• SKY-11315 fix tel digit-drop by typing bare NANP digits (#6826) (f867992)
• feat(SKY-11311): sidebar edge toggle, closed-state avatar, open/close animation (#6754) (63bf452)
• fix: gate secure CodeBlock runner on browser session, flag-only in staging (#6825) (ef516e8)
• fix(SKY-11431): bound the FlowRenderer dimension->layout feedback loop (#6824) (5968124)
• fix(SKY-11463): surface extraction/AI steps in code-block plain view (#6823) (bd3aefe)
• fix(SKY-11435): guard getIncrementElements against wiped global counter (#6822) (4c65c2c)
• feat(SKY-11336): backend support for label rename, recolor, soft-delete (#6819) (93cc278)
• fix(SKY-11432): guard CodeEditor against stack overflow on huge/deeply-nested JSON (#6817) (f37111f)
• SKY-11475: add OpenRouter gpt-5-mini handlers on a customer-funded key (#6816) (147a109)
• SKY-11464 Stabilize Copilot completion criteria outputs (#6814) (80c40f0)
• fix(mcp): preserve non-credential parameter↔block links on workflow edits (SKY-11467) (#6813) (f623361)
• fix(streaming): support VNC address bar paste (#6812) (de730d4)
• feat: secure CodeBlock runner package + worker integration (3/3) (#6811) (b97d196)
• fix(SKY-11367): enable take-control and centering for studio CDP browser (#6810) (8deb5d5)
• fix(SKY-11228): focus newly added block in workflow editor (#6809) (69d09b5)
• fix(SKY-11366): polish Workflow Studio Run/Editor panel alignment + toolbar button (#6808) (290425a)
• SKY-11365: Add terminal goal record verification (#6807) (e9d2638)
• Segment workflow browser profiles with templated keys (#6805) (48091df)
• fix(deps): bump litellm to >=1.84.0 in llama_index integration lock...

Release v1.0.43

What's Changed

Version bumped from 1.0.41 to 1.0.43

Recent Changes

• Bump version to 1.0.43 (#6701) (2a4a20c)
• SKY-11180 Fix Copilot directory synthesized code binding (#6702) (d02ead9)
• Make free credits a one-time grant (#6700) (ae05ec1)
• fix(SKY-11112): credit data captured inside a navigate block in task_v2 (#6698) (f906ea8)
• fix(SKY-11177): harden element-tree scrape against undefined className and isElementVisible recursion (#6697) (ada154b)
• Bump version to 1.0.42 (#6684) (6bdb772)
• fix(ui): tolerate legacy npm run start override + add official Helm chart (#6683) (4d0b721)
• feat(SKY-11150): give terminate actions a distinct terminated visual (amber triangle) (#6693) (b5ad775)
• Revert "SKY-11139: Harden code block runtime boundary" (#6692) (a824fb9)
• feat(SKY-10862): show which run occupies a browser session (#6691) (3f41938)
• SKY-10323: send replMode on main-world Runtime.evaluate to avoid let/const redeclare (#6690) (3799f01)
• SKY-11168: Prioritize credential blocker over code safety (#6689) (4c29a9d)
• fix(SKY-11140): harden copilot code downloads (#6688) (90cf3c5)
• feat(SKY-10648): add SDK-backed remote browser provider (#6687) (cb0eb8c)
• SKY-11139: Harden code block runtime boundary (#6686) (ef62e8a)
• Fail-fast shadow observability (Phase 0) (#6685) (dad7629)
• Fix truncated output on OpenRouter deepseek/mimo configs (#6681) (bf682bd)
• SKY-11165 Defer AWS session creation for missing profiles (#6680) (d3a036f)
• fix(SKY-11153): land adopted-session downloads run-side via eager save + url re-fetch (#6679) (3010c0a)
• SKY-11067 stabilize Copilot repair root-cause signatures (#6678) (b844eb4)
• fix(SKY-10807): propagate CancelledError so run timeouts actually stop the run (#6677) (c3faa4c)
• fix(SKY-11151): gate run-timeline action/step rows to code blocks (#6675) (9e95195)
• feat(SKY-11050): typed extraction schema for copilot code blocks (data_schema parity) (#6674) (64aa5ca)
• fix(SKY-10954): bound copilot chat reply length with a soft user_response budget (#6673) (efbf505)
• SKY-10964 Block verified success on artifact-health failures (#6672) (5e66b16)
• SKY-10985: reconcile WIP-rescue terminal frame on coverage-complete adjudication failure (#6671) (7b64c08)
• SKY-11118: opt-in headless turn-drain gate for copilot live browser (#6670) (ad858e9)
• Revert "fix(SKY-10776): use NullPool for screenshot-worker replica reads" (#6668) (db83d3e)
• SKY-11121: collapse code-first copilot rung flags into the two master gates (#6669) (be16e53)
• fix(SKY-11153): bind adopted-session download dir to the run key FileUploadBlock scans (#6667) (9681255)
• SKY-10919 Thread missing completion evidence (#6666) (87029c4)
• feat(observability): sample more high-frequency agent INFO logs (#6665) (22d4025)
• chore(observability): drop low-value high-volume logs (delete captcha-negative, downgrade startup chatter to debug) (#6664) (32de1a6)
• feat(SKY-10847): validate and reconcile code-block step line spans server-side (#6662) (35af323)
• SKY-11101: Improve PDF Fill field mapping with positional field labels (#6663) (9659998)
• fix(SKY-10991): stop max update depth loop on workflow build page (#6660) (44f45b0)
• fix(SKY-11132): handle ClientDisconnect in raw-request logging middleware (#6659) (595164f)
• fix(SKY-11133): tolerate misnamed block arg in copilot validate_block (#6658) (baf204a)
• fix(SKY-11131): surface parse errors instead of crashing FileParserBlock (#6657) (7cba2b2)
• fix: refresh expired model in update_workflow_run_if_not_final (#6655) (3b94344)
• perf(SKY-11099): default scrape to skip visual bounding box overlay (#6654) (e704789)
• SKY-10323: add main-world JS evaluation hook for remote browsers (#6653) (24ba340)
• fix(SKY-11119): make skyvern CLI robust to click 8.2+ and lift the click<8.2 pin (#6652) (78bd720)
• feat(SKY-11092): 1Password item picker for credential inputs (#6651) (d940e36)
• SKY-11111: dispatch input/change events on credential-fill so JS-gated multi-step logins advance (#6650) (8670e78)
• fix(SKY-11114): fresh session for login-replaying repair re-runs (flag-gated) (#6649) (997186b)
• SKY-11113: disambiguate bare role/tag selectors in copilot code-block synthesis (#6648) (318b506)
• fix(SKY-11072): reconnect a dead reused browser state before block run (#6647) (d04b5a6)
• security: fix 7 HIGH pip vulnerabilities in uv.lock (#6646) (9f68f9c)
• fix(SKY-8929): gate worker startup on X display readiness; sanitize browser headers (#6645) (911b609)
• feat(tagging): gate workflow tagging UI behind WORKFLOW_TAGGING flag (frontend) (SKY-10683) (#6644) (d78d78c)
• fix(SKY-10607): rename Settings "API Keys" nav child to "General" (#6642) (2506938)
• feat(tagging): gate workflow tagging behind WORKFLOW_TAGGING flag (backend) (SKY-10683) (#6643) (49b0fe9)
• fix(SKY-11086): don't serve unfinalized per-run recording for session runs (#6641) (3a0ec00)
• SKY-11094: finish the leveled / tri-state completion-adjudication contract (#6639) (4d8da05)
• SKY-11057 Fix Copilot download synthesis replay (#6638) (f9d6f26)
• SKY-11093: bind copilot synthesized download blocks so the file actually downloads (#6637) (4a2bdc3)
• Register OpenRouter Xiaomi MiMo-V2.5 LLM handler (#6636) (a97e572)
• SKY-11081: sunset copilot scout flags (#6635) (cdcd669)
• SKY-11087 Default unset runtime proxy to none (#6634) (b6cd2cf)
• SKY-11107: restore Inputs field in code-first code block Code view (#6633) (33de2b6)
• GCP Self-Host: App-wiring for storage and vault (#6632) (209d715)
• feat(SKY-10971): revamp workflows/folders list into a directory tree (#6631) (cb6854b)
• fix(llm): route OpenRouter registry keys through LLMCaller for cost tracking (SKY-11074) (#6630) (377d13a)
• docs: update changelog for week of June 15, 2026 (#6629) (888c98d)
• SKY-11083: guard None run_id and rebind the CDP download interceptor on adoption (#6626) (3c6ef3a)
• Fix Copilot selector-none post hooks (#6628) (e9d4680)
• fix(SKY-8685): report action-based total_cost on workflow runs (#6627) (ed3e10a)
• fix(SKY-11085): capture screenshot for page.evaluate code-block actions (#6624) (1e5f814)
• fix(SKY-11084): address remaining review nits on code-block recording artifact (#6625) (0986298)
• SKY-11081: steer scout-act to observe, not evaluate-click; couple the gate to author-steer (#6623) (dde7012)
• feat(observability): opt-in INFO-log sampling for high-volume orgs (#6621) (2bf4394)
• SKY-10944: Add PDF Fill workflow block (local AcroForm + flat-PDF OCR fill) (#6622) (edd8063)
• SKY-11083: run-scope the download dir on persistent-session adoption (#6618) (b056551)
• SKY-11081: require a scout-act before authoring a copilot download block (#6620) (0074161)
• SKY-11061: fail closed on copilot download blocks that cannot register a real download (#6619) (f1c559f)
• SKY-11060: synthesize a real expect_download block from the reached-download target (#6617) (c4551d9)
• feat: add managed browser provider integration (#6616) (46ad836)
• feat(SKY-10702): cap browser-session S3 growth via deterministic reaps (#6615) (974dbc4)
• feat(SKY-10701): write back reused browser profiles + graceful fallback on a missing profile (#6614) (5f809e5)
• fix(frontend): prevent React crashes from browser translation DOM mutation (#6613) (3b57f26)
• fix(SKY-10799): gate sequential runs on queue order, not a single dependency edge (#6611) (4fd53c6)
• fix(agent): seed CUA extraction prompt (SKY-10694) (#6610) (02fad39)
• SKY-10691: harden removeBoundingBoxes against Prototype.js-style remove() polyfill (#6609) (ba276b0)
• SKY-11028: halt the non-converging repair loop and escalate honestly (#6608) (34145d3)
• fix(SKY-11078): emit run-scoped recording artifact for code-block runs (#6607) (250e3ba)
• feat(observability): convert event duration metrics to OTEL histogram (#6606) (368d0eb)
• fix(SKY-11079): show code-block action screenshot on the run Overview (#6605) (b6159bf)
• feat(SKY-10837): code-first code block frontend (editor views, highlights, run timeline) (#6604) (03c9981)
• fix(SKY-10700): enable browser mic permission prompt for voice input (#6601) (c0d3d0d)
• fix(SKY-11077): record page.evaluate as an EXECUTE_JS action in code blocks (#6600) (a2e1e01)
• fix(deps): bump vitest to 3.2.6 (CVE-2026-47429) (#6596) (a090a63)
• Update changelog — Week of June 15, 2026 (#6594) (e62255f)
• feat(SKY-10837): code-first code block backend (schema, recording proxy, copilot fills, run rendering) (#6593) (269ebb1)
• SKY-11024: steer copilot to author a terminal download block on a reached affordance (#6592) (b98eded)
• SKY-11031: promote copilot outcome-verification and persisted-criteria to unconditional defaults (#6591) (a35c768)
• fix(SKY-11012): resolve run-only re-test against the turn's workflow_yaml (#6589) (eaf4ec6)
• SKY-11030: promote scout-act-observe + evaluate-target-steer to unconditional defaults (#6588) (340f485)
• SKY-11022: reject 'parameters' field on code block YAML (#6587) (a07820e)
• SKY-10912 Promote scouted typed values into workflow inputs (#6586) (6d46bf7)
• SKY-10967: Reuse Copilot SDK action runs (#6584) (9fe9d70)
• SKY-11025: harden extraction guardrail AST traversal (review follow-up to #12165) (#6585) (8cf43bf)
• SKY-10984: Preserve run authority on turn-intent timeouts (#6583) (93f333e)
• feat(copilot): fold code into the mode dropdown with a blue glow (SKY-10941) (#6582) (55fee99)
• feat(SKY-10937): register code-block browser downloads into block outputs (#6581) (abfc476)
• SKY-11025: structured keyed output for copilot extraction code blocks (#6580) (edb298e)
• SKY-10910 Preserve terminal evidence in Copilot hard blocks (#6579) (338c91b)
• SKY-11010: steer + auto-act on repeat evaluate of an unchanged page (#6577) (13ed2d6)
• SKY-10965 Add Copilot hook log attribution (#6578) (ae8fcdd)
• SKY-11011: sto...

Release v1.0.42

What's Changed

Version bumped from 1.0.41 to 1.0.42

Recent Changes

• Bump version to 1.0.42 (#6684) (6bdb772)
• fix(ui): tolerate legacy npm run start override + add official Helm chart (#6683) (4d0b721)
• feat(SKY-11150): give terminate actions a distinct terminated visual (amber triangle) (#6693) (b5ad775)
• Revert "SKY-11139: Harden code block runtime boundary" (#6692) (a824fb9)
• feat(SKY-10862): show which run occupies a browser session (#6691) (3f41938)
• SKY-10323: send replMode on main-world Runtime.evaluate to avoid let/const redeclare (#6690) (3799f01)
• SKY-11168: Prioritize credential blocker over code safety (#6689) (4c29a9d)
• fix(SKY-11140): harden copilot code downloads (#6688) (90cf3c5)
• feat(SKY-10648): add SDK-backed remote browser provider (#6687) (cb0eb8c)
• SKY-11139: Harden code block runtime boundary (#6686) (ef62e8a)
• Fail-fast shadow observability (Phase 0) (#6685) (dad7629)
• Fix truncated output on OpenRouter deepseek/mimo configs (#6681) (bf682bd)
• SKY-11165 Defer AWS session creation for missing profiles (#6680) (d3a036f)
• fix(SKY-11153): land adopted-session downloads run-side via eager save + url re-fetch (#6679) (3010c0a)
• SKY-11067 stabilize Copilot repair root-cause signatures (#6678) (b844eb4)
• fix(SKY-10807): propagate CancelledError so run timeouts actually stop the run (#6677) (c3faa4c)
• fix(SKY-11151): gate run-timeline action/step rows to code blocks (#6675) (9e95195)
• feat(SKY-11050): typed extraction schema for copilot code blocks (data_schema parity) (#6674) (64aa5ca)
• fix(SKY-10954): bound copilot chat reply length with a soft user_response budget (#6673) (efbf505)
• SKY-10964 Block verified success on artifact-health failures (#6672) (5e66b16)
• SKY-10985: reconcile WIP-rescue terminal frame on coverage-complete adjudication failure (#6671) (7b64c08)
• SKY-11118: opt-in headless turn-drain gate for copilot live browser (#6670) (ad858e9)
• Revert "fix(SKY-10776): use NullPool for screenshot-worker replica reads" (#6668) (db83d3e)
• SKY-11121: collapse code-first copilot rung flags into the two master gates (#6669) (be16e53)
• fix(SKY-11153): bind adopted-session download dir to the run key FileUploadBlock scans (#6667) (9681255)
• SKY-10919 Thread missing completion evidence (#6666) (87029c4)
• feat(observability): sample more high-frequency agent INFO logs (#6665) (22d4025)
• chore(observability): drop low-value high-volume logs (delete captcha-negative, downgrade startup chatter to debug) (#6664) (32de1a6)
• feat(SKY-10847): validate and reconcile code-block step line spans server-side (#6662) (35af323)
• SKY-11101: Improve PDF Fill field mapping with positional field labels (#6663) (9659998)
• fix(SKY-10991): stop max update depth loop on workflow build page (#6660) (44f45b0)
• fix(SKY-11132): handle ClientDisconnect in raw-request logging middleware (#6659) (595164f)
• fix(SKY-11133): tolerate misnamed block arg in copilot validate_block (#6658) (baf204a)
• fix(SKY-11131): surface parse errors instead of crashing FileParserBlock (#6657) (7cba2b2)
• fix: refresh expired model in update_workflow_run_if_not_final (#6655) (3b94344)
• perf(SKY-11099): default scrape to skip visual bounding box overlay (#6654) (e704789)
• SKY-10323: add main-world JS evaluation hook for remote browsers (#6653) (24ba340)
• fix(SKY-11119): make skyvern CLI robust to click 8.2+ and lift the click<8.2 pin (#6652) (78bd720)
• feat(SKY-11092): 1Password item picker for credential inputs (#6651) (d940e36)
• SKY-11111: dispatch input/change events on credential-fill so JS-gated multi-step logins advance (#6650) (8670e78)
• fix(SKY-11114): fresh session for login-replaying repair re-runs (flag-gated) (#6649) (997186b)
• SKY-11113: disambiguate bare role/tag selectors in copilot code-block synthesis (#6648) (318b506)
• fix(SKY-11072): reconnect a dead reused browser state before block run (#6647) (d04b5a6)
• security: fix 7 HIGH pip vulnerabilities in uv.lock (#6646) (9f68f9c)
• fix(SKY-8929): gate worker startup on X display readiness; sanitize browser headers (#6645) (911b609)
• feat(tagging): gate workflow tagging UI behind WORKFLOW_TAGGING flag (frontend) (SKY-10683) (#6644) (d78d78c)
• fix(SKY-10607): rename Settings "API Keys" nav child to "General" (#6642) (2506938)
• feat(tagging): gate workflow tagging behind WORKFLOW_TAGGING flag (backend) (SKY-10683) (#6643) (49b0fe9)
• fix(SKY-11086): don't serve unfinalized per-run recording for session runs (#6641) (3a0ec00)
• SKY-11094: finish the leveled / tri-state completion-adjudication contract (#6639) (4d8da05)
• SKY-11057 Fix Copilot download synthesis replay (#6638) (f9d6f26)
• SKY-11093: bind copilot synthesized download blocks so the file actually downloads (#6637) (4a2bdc3)
• Register OpenRouter Xiaomi MiMo-V2.5 LLM handler (#6636) (a97e572)
• SKY-11081: sunset copilot scout flags (#6635) (cdcd669)
• SKY-11087 Default unset runtime proxy to none (#6634) (b6cd2cf)
• SKY-11107: restore Inputs field in code-first code block Code view (#6633) (33de2b6)
• GCP Self-Host: App-wiring for storage and vault (#6632) (209d715)
• feat(SKY-10971): revamp workflows/folders list into a directory tree (#6631) (cb6854b)
• fix(llm): route OpenRouter registry keys through LLMCaller for cost tracking (SKY-11074) (#6630) (377d13a)
• docs: update changelog for week of June 15, 2026 (#6629) (888c98d)
• SKY-11083: guard None run_id and rebind the CDP download interceptor on adoption (#6626) (3c6ef3a)
• Fix Copilot selector-none post hooks (#6628) (e9d4680)
• fix(SKY-8685): report action-based total_cost on workflow runs (#6627) (ed3e10a)
• fix(SKY-11085): capture screenshot for page.evaluate code-block actions (#6624) (1e5f814)
• fix(SKY-11084): address remaining review nits on code-block recording artifact (#6625) (0986298)
• SKY-11081: steer scout-act to observe, not evaluate-click; couple the gate to author-steer (#6623) (dde7012)
• feat(observability): opt-in INFO-log sampling for high-volume orgs (#6621) (2bf4394)
• SKY-10944: Add PDF Fill workflow block (local AcroForm + flat-PDF OCR fill) (#6622) (edd8063)
• SKY-11083: run-scope the download dir on persistent-session adoption (#6618) (b056551)
• SKY-11081: require a scout-act before authoring a copilot download block (#6620) (0074161)
• SKY-11061: fail closed on copilot download blocks that cannot register a real download (#6619) (f1c559f)
• SKY-11060: synthesize a real expect_download block from the reached-download target (#6617) (c4551d9)
• feat: add managed browser provider integration (#6616) (46ad836)
• feat(SKY-10702): cap browser-session S3 growth via deterministic reaps (#6615) (974dbc4)
• feat(SKY-10701): write back reused browser profiles + graceful fallback on a missing profile (#6614) (5f809e5)
• fix(frontend): prevent React crashes from browser translation DOM mutation (#6613) (3b57f26)
• fix(SKY-10799): gate sequential runs on queue order, not a single dependency edge (#6611) (4fd53c6)
• fix(agent): seed CUA extraction prompt (SKY-10694) (#6610) (02fad39)
• SKY-10691: harden removeBoundingBoxes against Prototype.js-style remove() polyfill (#6609) (ba276b0)
• SKY-11028: halt the non-converging repair loop and escalate honestly (#6608) (34145d3)
• fix(SKY-11078): emit run-scoped recording artifact for code-block runs (#6607) (250e3ba)
• feat(observability): convert event duration metrics to OTEL histogram (#6606) (368d0eb)
• fix(SKY-11079): show code-block action screenshot on the run Overview (#6605) (b6159bf)
• feat(SKY-10837): code-first code block frontend (editor views, highlights, run timeline) (#6604) (03c9981)
• fix(SKY-10700): enable browser mic permission prompt for voice input (#6601) (c0d3d0d)
• fix(SKY-11077): record page.evaluate as an EXECUTE_JS action in code blocks (#6600) (a2e1e01)
• fix(deps): bump vitest to 3.2.6 (CVE-2026-47429) (#6596) (a090a63)
• Update changelog — Week of June 15, 2026 (#6594) (e62255f)
• feat(SKY-10837): code-first code block backend (schema, recording proxy, copilot fills, run rendering) (#6593) (269ebb1)
• SKY-11024: steer copilot to author a terminal download block on a reached affordance (#6592) (b98eded)
• SKY-11031: promote copilot outcome-verification and persisted-criteria to unconditional defaults (#6591) (a35c768)
• fix(SKY-11012): resolve run-only re-test against the turn's workflow_yaml (#6589) (eaf4ec6)
• SKY-11030: promote scout-act-observe + evaluate-target-steer to unconditional defaults (#6588) (340f485)
• SKY-11022: reject 'parameters' field on code block YAML (#6587) (a07820e)
• SKY-10912 Promote scouted typed values into workflow inputs (#6586) (6d46bf7)
• SKY-10967: Reuse Copilot SDK action runs (#6584) (9fe9d70)
• SKY-11025: harden extraction guardrail AST traversal (review follow-up to #12165) (#6585) (8cf43bf)
• SKY-10984: Preserve run authority on turn-intent timeouts (#6583) (93f333e)
• feat(copilot): fold code into the mode dropdown with a blue glow (SKY-10941) (#6582) (55fee99)
• feat(SKY-10937): register code-block browser downloads into block outputs (#6581) (abfc476)
• SKY-11025: structured keyed output for copilot extraction code blocks (#6580) (edb298e)
• SKY-10910 Preserve terminal evidence in Copilot hard blocks (#6579) (338c91b)
• SKY-11010: steer + auto-act on repeat evaluate of an unchanged page (#6577) (13ed2d6)
• SKY-10965 Add Copilot hook log attribution (#6578) (ae8fcdd)
• SKY-11011: stop logging raw OTP code in poll_otp_value (#6576) (de11bfc)
• feat(task_v2): bias the planner toward loop tasks for repeated same-shape work (#6575) (d25ede6)
• feat(task_v2): make the final answer the deliverable + stop synthesis wheel-spinning (#6574) (efda3e7)
• fix(SKY-10969): keep Run Inputs collapsed during Run History filtering (#6573) (dd62cdc)
• SKY-10819: asymmetric debug-session...

Release v1.0.41

What's Changed

Version bumped from 1.0.42 to 1.0.41

Recent Changes

• fix(SKY-11177): harden element-tree scrape against undefined className and isElementVisible recursion (#6697) (ada154b)

Full Changelog: v1.0.42...v1.0.41

What's Changed

• fix: stop the docker UI from filtering out its own injected API key (403 "Invalid credentials" on self-host) by @wintonzheng in #6516
• SKY-10827: persist copilot artifact-metadata violation batches as durable telemetry by @andrewneilson in #6520
• SKY-10863: credential-aware scouting + credential-typed synthesis in code-block mode by @andrewneilson in #6521
• fix(docker): force dev deps in UI builder stage to fix "tsc: not found" by @wintonzheng in #6523
• Bump version to 1.0.41 by @wintonzheng in #6522

Full Changelog: v1.0.40...v1.0.41

Release v1.0.40

What's Changed

Version bumped from 1.0.39 to 1.0.40

Recent Changes

• Bump version to 1.0.40 (#6500) (def9026)
• revert(SKY-10083): revert screenshot downscaling — no measurable token savings (#6501) (ea9907c)
• refactor(browser-profiles): single source-of-truth for paginated row selection (SKY-10853) (#6499) (6f7a5f5)
• Recording backend: dedupe repeated actions, draft-step processing, VNC dev setup (#6498) (c79b8e9)
• fix(workflow-editor): reflow copilot composer textarea on width change (SKY-10791) (#6497) (ec798af)
• SKY-10825: impose code-artifact metadata at the persist seam + adjudicate terminal challenge halts (#6496) (ed95f65)
• refactor: split copilot tools.py (9.5k lines) into a tools/ package (#6493) (b69930e)
• feat(observability): coarse scrape attribution on skyvern.agent.scrape span (SKY-10319) (#6482) (9499cb5)
• SKY-10823: nudge entry-point discovery before a pre-discovery 'provide the URL' ask (#6473) (62b0a0c)
• fix(SKY-10713): compose on a navigated discovery page instead of asking for its URL (#6472) (c5c7a19)
• SKY-10673: restore recursion limit after code-block mypy preflight (#6471) (cd19b32)
• feat(tagging): Phase 6.1 frontend — key-optional labels + flexible tag filter (SKY-10683) (#6470) (987a6df)
• Update changelog — Week of June 8, 2026 (#6469) (e8e16ed)
• feat(SKY-10075): exempt check-user-goal from output slimming (extract-actions-only relaunch) (#6468) (246ede4)
• fix(prompts): bound output_json nesting depth version-independently (#6467) (56f97a8)
• Disable vision for OpenRouter DeepSeek v4 Flash (#6465) (532e87a)
• SKY-10795: batch artifact-metadata violations + deterministic metadata for synthesized code blocks (#6464) (f8b5214)
• fix(SKY-10674): restore release→build auto-trigger without a PAT (#6452) (6ee2dd8)
• feat(SKY-10076): drop non-navigable hrefs from the lean element tree (#6461) (d1adca1)
• fix(tests): make streaming registries monkeypatch import-order independent (#6460) (cb16301)
• feat(tagging): Phase 6.1 backend — key-optional labels + flexible tag filter (SKY-10683) (#6458) (4e68619)
• SKY-10648: split custom event-strategy from humanized event dispatch (#6457) (d1d5bb2)
• fix(SKY-9178): prefer credential TOTP before webhook polling for OTP (#6451) (7cbc4ce)
• fix(SKY-10606): re-layout trailing block after collapsing a container (#6436) (c38a6d2)
• feat(SKY-10654): accessible status badge + pill treatment (#6444) (6d8c55c)
• fix(SKY-10255): make block title editable from the right settings sidebar (#6443) (bf6c09c)
• Update changelog — Week of June 1, 2026 (deployment 2026-06-08) (#6441) (d4cf34e)
• fix(workflow-editor): inline-add no longer inherits conditional branch for a loop child (SKY-10719) (#6438) (3131ae3)
• feat(SKY-10652): re-save expired or failed saved-credential sessions (#6435) (6fb892d)
• fix(SKY-10636): session-cookie capture closeout (zero-expiry restore, persist-before-store, docs) (#6434) (71b00ac)
• Copilot: carry code artifact metadata (verifier-neutral) (#6439) (ee1334c)

Full Changelog: v1.0.39...v1.0.40

What's Changed

• Copilot: carry code artifact metadata (verifier-neutral) by @andrewneilson in #6439
• fix(SKY-10636): session-cookie capture closeout (zero-expiry restore, persist-before-store, docs) by @celalzamanoglu in #6434
• feat(SKY-10652): re-save expired or failed saved-credential sessions by @celalzamanoglu in #6435
• fix(workflow-editor): inline-add no longer inherits conditional branch for a loop child (SKY-10719) by @AronPerez in #6438
• Update changelog — Week of June 1, 2026 (deployment 2026-06-08) by @wintonzheng in #6441
• fix(SKY-10255): make block title editable from the right settings sidebar by @AronPerez in #6443
• feat(SKY-10654): accessible status badge + pill treatment by @AronPerez in #6444
• fix(SKY-10606): re-layout trailing block after collapsing a container by @AronPerez in #6436
• fix(SKY-9178): prefer credential TOTP before webhook polling for OTP by @LawyZheng in #6451
• SKY-10648: split custom event-strategy from humanized event dispatch by @LawyZheng in #6457
• feat(tagging): Phase 6.1 backend — key-optional labels + flexible tag filter (SKY-10683) by @trevor-cheung in #6458
• fix(tests): make streaming registries monkeypatch import-order independent by @trevor-cheung in #6460
• feat(SKY-10076): drop non-navigable hrefs from the lean element tree by @pedrohsdb in #6461
• fix(SKY-10674): restore release→build auto-trigger without a PAT by @wintonzheng in #6452
• SKY-10795: batch artifact-metadata violations + deterministic metadata for synthesized code blocks by @andrewneilson in #6464
• Disable vision for OpenRouter DeepSeek v4 Flash by @cindehaa in #6465
• fix(prompts): bound output_json nesting depth version-independently by @trevor-cheung in #6467
• feat(SKY-10075): exempt check-user-goal from output slimming (extract-actions-only relaunch) by @pedrohsdb in #6468
• Update changelog — Week of June 8, 2026 by @wintonzheng in #6469
• feat(tagging): Phase 6.1 frontend — key-optional labels + flexible tag filter (SKY-10683) by @trevor-cheung in #6470
• SKY-10673: restore recursion limit after code-block mypy preflight by @andrewneilson in #6471
• fix(SKY-10713): compose on a navigated discovery page instead of asking for its URL by @andrewneilson in #6472
• SKY-10823: nudge entry-point discovery before a pre-discovery 'provide the URL' ask by @andrewneilson in #6473
• feat(observability): coarse scrape attribution on skyvern.agent.scrape span (SKY-10319) by @LawyZheng in #6482
• refactor: split copilot tools.py (9.5k lines) into a tools/ package by @andrewneilson in #6493
• SKY-10825: impose code-artifact metadata at the persist seam + adjudicate terminal challenge halts by @andrewneilson in #6496
• fix(workflow-editor): reflow copilot composer textarea on width change (SKY-10791) by @andrewneilson in #6497
• Recording backend: dedupe repeated actions, draft-step processing, VNC dev setup by @cindehaa in #6498
• refactor(browser-profiles): single source-of-truth for paginated row selection (SKY-10853) by @AronPerez in #6499
• revert(SKY-10083): revert screenshot downscaling — no measurable token savings by @trevor-cheung in #6501
• Bump version to 1.0.40 by @wintonzheng in #6500

Full Changelog: v1.0.39...v1.0.40

Release v1.0.39

What's Changed

Version bumped from 1.0.38 to 1.0.39

Recent Changes

• fix: re-inject UI env vars on every container start (#6401) (7f97fe8)
• fix(SKY-9402): skip force-visible for shadow DOM inputs in closed dropdowns (#6433) (79dfc8a)
• perf(SKY-10319): add screenshots_included/speculative attrs to LLM request spans (#6432) (1d1076a)
• feat(observability): attribute complete_verify span with caller trigger (SKY-10319) (#6431) (54a084d)
• [codex] Add session replay artifact groundwork (#6429) (7db4eaa)
• SKY-10580: organize public API reference taxonomy + auto-sync openapi spec (#6428) (0f90279)
• Track OpenRouter LLM token counts and cost in get_call_stats (#6427) (d2e9caf)
• SKY-10711: trim redundant full-DOM re-scrape in composition inspect; drop dead page-evidence cache (#6426) (dc92711)
• chore: add qa-evidence skill for routing QA artifacts to Linear and PRs (#6423) (859f97c)
• security: fix banks RCE + urllib3 header leak in llama_index integration (#6416) (7a013d1)
• Update API specifications with fern api update (#6422) (c4b9c79)
• Gate CUA and Opus models for enterprise (#6420) (ddf6f6c)
• [codex] Compress browser session recordings (#6419) (7a6f1c0)
• chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /skyvern-ts/client in the npm_and_yarn group across 1 directory (#5911) (6fbe6a6)
• SKY-10673: add code-first Copilot code block preflight (#6410) (1843917)
• feat(SKY-10669): add Claude Opus 4.8 LLM configs (direct + Bedrock) (#6409) (dda9257)
• docs: update changelog — Week of June 1, 2026 (#6408) (5840be2)
• SKY-10673: add code-first Copilot authoring policy (#6407) (4f4dfcd)
• chore(observability): trim high-volume production log noise (#6406) (85a3885)
• SKY-10703: make tiktoken encoding load non-blocking in token_counter (#6405) (f4314b2)
• fix(SKY-10695): initialize credential edit form once per modal open (#6404) (3438fd0)
• docs: update changelog — Week of June 1, 2026 (#6403) (8ddea80)
• feat(tagging): Phase 6 frontend — tag chips, filter, editor, delete-key (SKY-10105) (#6402) (35d1532)
• fix(SKY-10682): harden conditional branch evaluation against malformed LLM batches (#6400) (f928940)
• perf(SKY-10319): add action_type/step_order attrs to post-action screenshot spans (#6399) (d5dedd9)
• Revert "feat(frontend): defer blank agent creation until first save" (#6398) (a30b450)
• SKY-10673: add code-first Copilot rollout config (#6397) (706da79)
• Live Record Browser Interpretation (backend) (#6396) (7c9f500)
• feat(frontend): add speech-to-text mic for prompt box and workflow copilot (#6395) (30f8ccf)
• feat(SKY-10075): tiered slim LLM output prompts (slim_safe / slim_terse) (#6392) (634dc11)
• SKY-10565: invalidate copilot verified-block trust when a workflow edit changes a block (#6391) (d63a103)
• fix(SKY-10605): interrupt active runs on terminal evidence (#6390) (e7361f2)
• feat(SKY-10083): downscale LLM screenshots to 768px to cut vision-token cost (#6389) (5456e87)
• SKY-10566: add LLM-backed TurnIntent classifier (#6388) (2069154)
• SKY-10643: fix cancelled Copilot draft terminal state (#6387) (fb92fd6)
• Normalize duplicate www URL prefixes (#6386) (1796016)
• chore(SKY-6661): address whimsy PR review feedback (#6367) (b42a7d6)
• fix(SKY-9402): make zero-rect CSS pseudo-content icon buttons visible (#6385) (2d82945)
• SKY-10580: rebrand Workflows → Agents in the public docs (with redirects) (#6384) (c847199)
• SKY-10580: expose the workflows API as /agents + accept agent_id (backwards-compatible) (#6383) (ac62f74)
• feat(SKY-10083): instrument per-call LLM image token + cost metrics (#6382) (9c3efc8)
• fix(SKY-10456): make the large + button clickable to open the block menu (#6381) (51a7f0a)
• fix(SKY-10655): derive credential-test trigger_type from x-user-agent (#6380) (fa2c89f)
• SKY-9954: polish toast action button into a frosted pill (#6379) (d71a50a)
• fix(SKY-10653): stop browser profile dropdown clipping its last item (#6378) (d748648)
• feat(SKY-9957): clarify Browsers vs Browser Profiles subheader copy (#6377) (2b8db6a)
• SKY-10578: Add credential folders (frontend) (#6376) (817cc9f)
• security: fix 5 high-severity pip vulnerabilities in langchain integration (#6353) (3985d49)
• SKY-10578: Add credential folders (backend) (#6375) (7e6ea82)
• fix(SKY-10622): clean up child entities on workflow run timeout (#6374) (66d1fe9)

Full Changelog: v1.0.38...v1.0.39

What's Changed

• fix(SKY-10622): clean up child entities on workflow run timeout by @LawyZheng in #6374
• SKY-10578: Add credential folders (backend) by @suchintan in #6375
• security: fix 5 high-severity pip vulnerabilities in langchain integration by @AronPerez in #6353
• SKY-10578: Add credential folders (frontend) by @celalzamanoglu in #6376
• feat(SKY-9957): clarify Browsers vs Browser Profiles subheader copy by @celalzamanoglu in #6377
• fix(SKY-10653): stop browser profile dropdown clipping its last item by @celalzamanoglu in #6378
• SKY-9954: polish toast action button into a frosted pill by @celalzamanoglu in #6379
• fix(SKY-10655): derive credential-test trigger_type from x-user-agent by @celalzamanoglu in #6380
• fix(SKY-10456): make the large + button clickable to open the block menu by @trevor-cheung in #6381
• feat(SKY-10083): instrument per-call LLM image token + cost metrics by @trevor-cheung in #6382
• SKY-10580: expose the workflows API as /agents + accept agent_id (backwards-compatible) by @suchintan in #6383
• SKY-10580: rebrand Workflows → Agents in the public docs (with redirects) by @suchintan in #6384
• fix(SKY-9402): make zero-rect CSS pseudo-content icon buttons visible by @LawyZheng in #6385
• chore(SKY-6661): address whimsy PR review feedback by @suchintan in #6367
• Normalize duplicate www URL prefixes by @suchintan in #6386
• SKY-10643: fix cancelled Copilot draft terminal state by @andrewneilson in #6387
• SKY-10566: add LLM-backed TurnIntent classifier by @andrewneilson in #6388
• feat(SKY-10083): downscale LLM screenshots to 768px to cut vision-token cost by @trevor-cheung in #6389
• fix(SKY-10605): interrupt active runs on terminal evidence by @andrewneilson in #6390
• SKY-10565: invalidate copilot verified-block trust when a workflow edit changes a block by @andrewneilson in #6391
• feat(SKY-10075): tiered slim LLM output prompts (slim_safe / slim_terse) by @pedrohsdb in #6392
• feat(frontend): add speech-to-text mic for prompt box and workflow copilot by @cindehaa in #6395
• Live Record Browser Interpretation (backend) by @cindehaa in #6396
• SKY-10673: add code-first Copilot rollout config by @andrewneilson in #6397
• Revert "feat(frontend): defer blank agent creation until first save" by @cindehaa in #6398
• perf(SKY-10319): add action_type/step_order attrs to post-action screenshot spans by @LawyZheng in #6399
• fix(SKY-10682): harden conditional branch evaluation against malformed LLM batches by @wintonzheng in #6400
• feat(tagging): Phase 6 frontend — tag chips, filter, editor, delete-key (SKY-10105) by @trevor-cheung in #6402
• docs: update changelog — Week of June 1, 2026 by @wintonzheng in #6403
• fix(SKY-10695): initialize credential edit form once per modal open by @celalzamanoglu in #6404
• SKY-10703: make tiktoken encoding load non-blocking in token_counter by @wintonzheng in #6405
• chore(observability): trim high-volume production log noise by @wintonzheng in #6406
• SKY-10673: add code-first Copilot authoring policy by @andrewneilson in #6407
• docs: update changelog — Week of June 1, 2026 by @wintonzheng in #6408
• feat(SKY-10669): add Claude Opus 4.8 LLM configs (direct + Bedrock) by @andrewneilson in #6409
• SKY-10673: add code-first Copilot code block preflight by @andrewneilson in #6410
• chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /skyvern-ts/client in the npm_and_yarn group across 1 directory by @dependabot[bot] in #5911
• [codex] Compress browser session recordings by @suchintan in #6419
• Gate CUA and Opus models for enterprise by @suchintan in #6420
• Update API specifications with fern api update by @wintonzheng in #6422
• security: fix banks RCE + urllib3 header leak in llama_index integration by @wintonzheng in https://github.com/Skyvern-AI/skyve...

Release v1.0.38

What's Changed

Version bumped from 1.0.37 to 1.0.38

Recent Changes

• fix(SKY-10653): stop browser profile dropdown clipping its last item (#6378) (d748648)
• feat(SKY-9957): clarify Browsers vs Browser Profiles subheader copy (#6377) (2b8db6a)
• SKY-10578: Add credential folders (frontend) (#6376) (817cc9f)
• security: fix 5 high-severity pip vulnerabilities in langchain integration (#6353) (3985d49)
• SKY-10578: Add credential folders (backend) (#6375) (7e6ea82)
• fix(SKY-10622): clean up child entities on workflow run timeout (#6374) (66d1fe9)
• Bump version to 1.0.38 (#6371) (80541ee)
• feat: generic remote CDP browser type(SKY-10648) (#6373) (207e99b)
• feat(SKY-10415): consolidate prompt-input sanitization onto template-level boundary (#6372) (7fc8c16)
• Update changelog — May 21 through June 3, 2026 (#6370) (6270559)
• fix(SKY-9781): port prebuilt-UI Dockerfile + entrypoint from cloud (#5998) (a0fc148)
• perf(SKY-10319): add caller/timeout span attrs to animation wait (#6369) (07da906)
• Move schedule button beside save (#6368) (9a93281)
• SKY-10562 Ground Copilot block authoring in observations (#6363) (abf5e76)
• fix(SKY-10627): restore session cookies on saved browser profile reuse (#6362) (47c6e0f)
• fix(SKY-10626): cap raw HTML + screenshots in the max-retries failure summary (#6361) (13376f1)
• fix: widen browser-profile session-persist wait in credential test and save (#6360) (1be6d56)
• fix(SKY-10635): extend credential test poll timeout to 10 minutes (#6359) (ae72909)
• fix(cli): add OpenCode MCP setup with API key auth (#6100) (bc6c681)
• chore: remove forgotten ENABLE_SPEED_OPTIMIZATIONS experiment flag (#6358) (eff31f6)
• SKY-10642 Simplify Workflow Copilot LLM lanes (#6355) (7244526)
• fix: recover TOTP code from non-strict-JSON webhook bodies (#6354) (d2632bc)
• feat(SKY-10628): captcha timeout circuit breaker (#6349) (1704b3f)
• fix(SKY-8316): select filtered search dropdown options (#6348) (a32e288)
• feat(SKY-10628): improve captcha solve timing before protected submit (#6347) (aa23015)
• security: fix critical vitest vulnerability CVE-2026-47429 (CVSS 9.8) (#6329) (361ede7)
• Enable OSS workflow schedules (#6344) (60b5728)
• fix(SKY-10567): solid status pills + ghost data-table row buttons (#6343) (33e750c)
• SKY-10613 keep composition precheck out of tool steering (#6339) (57a617e)
• SKY-10590 gate click-reached composition evidence (#6338) (84fed76)
• fix(SKY-10474): make Copilot activity results product-safe (#6337) (98fba77)
• fix(SKY-10328): compose after discovered entrypoint (#6336) (f9fc042)
• SKY-10562: scout goal pages with fast MCP browser tools before authoring (#6335) (7c52d32)
• feat(tagging): add ?tags= filter to GET /workflows (SKY-10103) (#6334) (32e3feb)
• feat(SKY-10355): onboarding-state POST endpoint + workflow save/run milestone hooks (SKY-10356) (#6333) (2cad440)
• feat(SKY-6661): whimsical loading + error copy across browser streams (#6332) (fae6a2a)
• fix(SKY-10478): render block prompts in workflow version comparison (#6331) (ca160b1)
• revert: narrow autocomplete input triggers from #9417 (#6330) (e7a5356)
• fix: align integration CTA styling (#6328) (42e767e)
• fix(SKY-10591): use explicit column filter in get_scripts aggregate subquery (#6327) (62f8824)
• Standardize data tables with a consistent Linear/Apollo-style design (#6326) (486d78c)
• SKY-10576: gate copilot recognition and persistence on runtime outcome evidence, not run status (#6323) (ae42d04)
• feat(SKY-10204): add Feature Preview opt-in section to /settings (#6318) (dbaba40)
• perf(SKY-10319): check budget/max-steps before awaiting speculative task (#6313) (9224df7)
• fix(SKY-10327): skip duplicate PDF viewer auto-download to unblock LLM actions (#6314) (da9ea1a)
• Fix DB session reuse across asyncio tasks (#6312) (01f2451)
• SKY-10598: move undo/redo back to the canvas toolbar (#6310) (fd6e502)
• SKY-10589: simplify workflows UI top bar + fix Agent System Prompt rendering (#6309) (797bdce)
• SKY-10593: align Agent Copilot panel colors with app dark-mode tokens (#6308) (da57d1f)
• fix(SKY-10452): select proxy from first block URL before script SDK creates browser (#6306) (5dfda22)
• perf(SKY-10319): replace fixed upload-file sleeps with page readiness wait (#6305) (6af2e02)
• fix(SKY-10476): add waitUntil degradation to extraction scrape reload (#6304) (3a0d67a)
• fix(SKY-10408): prevent duplicate/corrupt file downloads via XHR staging (#6303) (6d78b45)
• security: ignore npm lifecycle scripts in skyvern-ts/client (#6289) (92e5eac)
• SKY-10586: modernize OSS sidebar to match cloud (#6300) (a36824b)
• SKY-5679: Add search to the credentials page (#6299) (8550cbc)
• SKY-10320: Keep local CDP debugger on live browser (#6297) (75799a0)
• SKY-10398: rename Parameters → Inputs across the frontend UI (#6296) (f97a146)
• SKY-10585: seed copilot frontier starter URL (#6292) (bdcf0d1)
• fix(copilot): keep native tools registered for authority blockers (#6291) (e12da14)
• SKY-10581: Fix live Copilot terminal rollups (#6290) (c7a7f73)
• security: update axios to 1.16.1 to fix CVE-2026-44494 and CVE-2026-44492 (#6286) (d4ebd5b)
• SKY-10574: follow the live frontier in copilot chat during a run (#6283) (ba00303)
• fix(SKY-10573): give the copilot turn-collapse control its own header lane (#6279) (b63dc28)

Full Changelog: v1.0.37...v1.0.38

What's Changed

• fix(SKY-10573): give the copilot turn-collapse control its own header lane by @andrewneilson in #6279
• SKY-10574: follow the live frontier in copilot chat during a run by @andrewneilson in #6283
• security: update axios to 1.16.1 to fix CVE-2026-44494 and CVE-2026-44492 by @AronPerez in #6286
• SKY-10581: Fix live Copilot terminal rollups by @andrewneilson in #6290
• fix(copilot): keep native tools registered for authority blockers by @andrewneilson in #6291
• SKY-10585: seed copilot frontier starter URL by @andrewneilson in #6292
• SKY-10398: rename Parameters → Inputs across the frontend UI by @suchintan in #6296
• SKY-10320: Keep local CDP debugger on live browser by @andrewneilson in #6297
• SKY-5679: Add search to the credentials page by @suchintan in #6299
• SKY-10586: modernize OSS sidebar to match cloud by @suchintan in #6300
• security: ignore npm lifecycle scripts in skyvern-ts/client by @wintonzheng in #6289
• fix(SKY-10408): prevent duplicate/corrupt file downloads via XHR staging by @LawyZheng in #6303
• fix(SKY-10476): add waitUntil degradation to extraction scrape reload by @LawyZheng in #6304
• perf(SKY-10319): replace fixed upload-file sleeps with page readiness wait by @LawyZheng in #6305
• fix(SKY-10452): select proxy from first block URL before script SDK creates browser by @wintonzheng in #6306
• SKY-10593: align Agent Copilot panel colors with app dark-mode tokens by @suchintan in #6308
• SKY-10589: simplify workflows UI top bar + fix Agent System Prompt rendering by @suchintan in #6309
• SKY-10598: move undo/redo back to the canvas toolbar by @celalzamanoglu in #6310
• Fix DB session reuse across asyncio tasks by @wintonzheng in #6312
• fix(SKY-10327): skip duplicate PDF viewer auto-download to unblock LLM actions by @LawyZheng in #6314
• perf(SKY-10319): check budget/max-steps before awaiting speculative task by @LawyZheng in #6313
• feat(SKY-10204): add Feature Preview opt-in section to /settings by @AronPerez in #6318
• SKY-10576: gate copilot recognition and persistence on runtime outcome evidence, not run status by @andrewneilson in #6323
• Standardize data tables with a consistent Linear/Apollo-style design by @suchintan in #6326
• fix(SKY-10591): use explicit column filter in get_scripts aggregate subquery by @LawyZheng in #6327
• fix: align integration CTA styling by @AronPerez in #6328
• revert: narrow autocomplete input triggers from #9417 by @LawyZheng in #6330
• fix(SKY-10478): render block prompts in workflow version comparison by @AronPerez in #6331
• feat(SKY-6661): whimsical loading + error copy across browser streams by @suchintan in #6332
• feat(SKY-10355): onboarding-state POST endpoint + workflow save/run milestone hooks (SKY-10356) by @AronPerez in #6333
• feat(tagging): add ?tags= filter to GET /workflows (SKY-10103) by @trevor-cheung in #6334
• SKY-10562: scout goal pages with fast MCP browser tools before authoring by @andrewneilson in #6335
• fix(SKY-10328): compose after discovered entrypoint by @andrewneilson in #6336
• fix(SKY-10474): make Copilot activit...

Release v1.0.37

What's Changed

Version bumped from 1.0.38 to 1.0.37

Recent Changes

• SKY-10578: Add credential folders (backend) (#6375) (7e6ea82)
• fix(SKY-10622): clean up child entities on workflow run timeout (#6374) (66d1fe9)

Full Changelog: v1.0.38...v1.0.37

What's Changed

• fix(frontend): replace react-github-btn with static link (SKY-9724) by @AronPerez in #5927
• Add command-aware env scope resolver by @marcmuon in #5928
• fix(SKY-9723): guard react-router blocker proceed/reset on state by @AronPerez in #5929
• ci: full speedup overhaul (concurrency, pytest-split sharding, parallel jobs, scoped pre-commit) by @AronPerez in #5933
• fix(SKY-9115): reviewer drops ambiguous label selectors in multi-row forms by @AronPerez in #5934
• fix(bitwarden): coerce null username/password/totp to empty string (SKY-8847) by @AronPerez in #5936
• fix(SKY-9334): defer file chooser listener across steps for two-step uploads by @LawyZheng in #5937
• fix(SKY-9704): restore legacy loop block output shape on cached path by @celalzamanoglu in #5938
• fix(SKY-8660): raise on fill_form 0-mapped to trigger AI fallback by @AronPerez in #5939
• feat(SKY-8861): always mint signed /v1/artifacts content URLs from get_share_link[s] by @wintonzheng in #5940
• fix(mcp): disambiguate ref selectors for unnamed duplicate widgets (#SKY-9701) by @AronPerez in #5941
• feat(SKY-9720) (1/3): Structure request policy scope by @andrewneilson in #5942
• fix: use per-run distinct_id for FORCE_TASK_V1 and USE_GEMINI_FLEX_FOR_NON_UI by @pedrohsdb in #5943
• feat(SKY-9720) (2/3): Enforce Copilot output policy by @andrewneilson in #5944
• fix(frontend): detect nested block changes in Co-Pilot diff view (SKY-9332) by @AronPerez in #5945
• chore(ci): add trevor-cheung to OSS sync workflows by @trevor-cheung in #5946
• feat(SKY-9639): wire shadow gate to data-extraction-summary cross-run hits by @pedrohsdb in #5947
• fix(alembic): add nonterminal_status indexes to unblock sync PRs (SKY-9746) by @pedrohsdb in #5961
• fix(SKY-8924): retry webhook delivery on transient 403/5xx/network errors by @AronPerez in #5952
• feat(SKY-9737): add PATCH /browser_profiles/{id} endpoint for rename by @celalzamanoglu in #5960
• feat(SKY-9737): wire browser profile selector into workflow run form by @celalzamanoglu in #5962
• Pre-build UI assets in Docker image instead of at container startup (SKY-7342) by @celalzamanoglu in #5959
• feat(SKY-9737): add workflow.browser_profile_id default column by @celalzamanoglu in #5963
• fix(SKY-7939): surface FileParserBlock failures in workflow run outputs by @wintonzheng in #5964
• fix(scraper): recover from multi-hop navigation context destruction (SKY-9470) by @AronPerez in #5954
• fix(scripts): idempotent create_script_file / create_script_block (SKY-9730) by @AronPerez in #5955
• fix(mcp): classify login/run_task timeout as TIMEOUT, surface non-empty messages by @AronPerez in #5953
• fix(workflow): skip block retry on anti-bot detection (SKY-8957) by @AronPerez in #5951
• feat(runs): show scheduled trigger badge on global /runs page (SKY-8937) by @AronPerez in #5948
• fix: dep-patch group with [server] openai-agents floor unbroken (replaces #10899) by @AronPerez in #5896
• fix(runs): show scheduled workflow runs on global /runs page (SKY-8937) by @AronPerez in #5949
• feat(SKY-9069): analytics dashboard backend rollup (Phases 1-3) by @AronPerez in #5966
• fix(SKY-9753): tighten request-policy prompt for credential-context turns by @andrewneilson in #5965
• feat(SKY-8672): add browser profile MCP and CLI auth reuse by @marcmuon in #5632
• feat(SKY-9785): Gemini 3 reasoning_effort experiment by @pedrohsdb in #5968
• fix(workflow-editor): Record Browser button stays visible while session loads (SKY-9777) by @pedrohsdb in #5969
• [SKY-9718] Layer 1 — deterministic HTML element-tree compression by @wintonzheng in #5970
• fix(SKY-9755): resolve chat_history before asking for context already on record by @andrewneilson in #5971
• fix(SKY-9788): humanize init-time failure copy and skip wasted test on unbound credentials by @andrewneilson in #5972
• fix(workflow): cap oversized output_parameter JSON values to protect Estuary (SKY-9779) by @pedrohsdb in #5974
• fix(SKY-9233): return all per-tab recordings in workflow run fallback by @celalzamanoglu in #5975
• feat(SKY-9780): typed transcript anchors for request-policy classifier by @andrewneilson in #5976
• feat(SKY-9737): paginate GET /browser_profiles by @celalzamanoglu in #5977
• fix(SKY-9745): surface cached-script block errors + add per-iteration logs by @pedrohsdb in #5978
• feat(SKY-9737): wire workflow-level browser profile default by @celalzamanoglu in #5979
• feat: add /analytics route + page shell + nav item (SKY-9072) by @AronPerez in #5980
• fix(SKY-9820): surface YAML parser detail on workflow save by @AronPerez in #5981
• fix(artifacts): support HTTP Range on /v1/artifacts/{id}/content (SKY-9472) by @AronPerez in #5982
• fix(SKY-9756): guard diagnostic answers on absent workflow entities by @andrewneilson in #5983
• fix(experimentation): set SkyvernContext before flag evals in Temporal worker boot by @pedrohsdb in #5985
• fix(SKY-9821): consolidate copilot ask edit routing by @andrewneilson in #5986
• fix(SKY-9804): distinguish missing-TOTP-source from delivery timeout in MFA terminate paths by @pedrohsdb in #5987
• SKY-9841 extract shared agent context helpers by @andrewneilson in #5988
• fix(SKY-9837): normalize browser_task and clarify invalid conditional loop edits by @andrewneilson in #5989
• feat(SKY-9737): browser profile management page by @celalzamanoglu in #5990
• fix(SKY-9784): complete chain_click fallback chain for blocked elements by @LawyZheng in #5991
• fix(SKY-9822): script generator emits credential TOTP lookup when block has no explicit totp_identifier by @pedrohsdb in #5992
• perf(SKY-9738): speed up GET workflow run endpoint by @trevor-cheung in #5993
• Fix SKY-9838 Copilot download retry loop by @andrewneilson in #5994
• Revert "fix(SKY-9803): expose CLOSE_PAGE when multiple tabs are open" by @trevor-cheung in #5997
• feat(SKY-9827): add search_key to GET /browser_profiles by @celalzamanoglu in #5999
• feat(SKY-9828): polish browser profile selector + table search by @celalzamanoglu in #6000
• feat(SKY-9575): add workflow_run_viewing_v2 flag and run-viewing preference store by @celalzamanoglu in #6001
• fix(SKY-9864): stop overwriting totp_identifier on hydration by @celalzamanoglu in #6002
• SKY-9863: Fail fast when download signal is missing by @andrewneilson in #6003
• Revert SKY-9838 download retry loop and SKY-9863 fail-fast (#11152, #11167) by @LawyZheng in #6006
• fix(workflow): restore analytics flag gate by @AronPerez in #6007
• feat(SKY-9578): swap ScrollableActionList + add view-mode toggle behind flag by @celalzamanoglu in #6008
• Fix SKY-9838 download retry loop without empty artifacts by @andrewneilson in #6009
• [CLI] Handle quickstart Docker cleanup and server extras by @suchintan in #5923
• Add cac...

Release v1.0.36

What's Changed

Version bumped from 1.0.37 to 1.0.36

Recent Changes

• fix(SKY-10573): give the copilot turn-collapse control its own header lane (#6279) (b63dc28)

Full Changelog: v1.0.37...v1.0.36

What's Changed

• SKY-9658 align unvalidated proposal replies by @andrewneilson in #5891
• SKY-9637: verify dynamic goto_url state before extraction by @andrewneilson in #5892
• [bug report] Allow MCP browser sessions to request extensions for captcha-solver by @marcmuon in #5893
• feat: expose file size in artifact file info by @wintonzheng in #5894
• [CLI] Improve quickstart secret prompt feedback by @suchintan in #5908
• SKY-9651: Clarify diagnostic Copilot routing by @andrewneilson in #5910
• revert(SKY-9695): undo React 18→19 major version bump (#10857) by @LawyZheng in #5897
• feat: capture FE route errors in Sentry + PostHog by @AronPerez in #5900
• Add validated proxy session pool by @wintonzheng in #5901
• fix(SKY-9696): replace Radix Tabs with plain buttons in LoopNode by @celalzamanoglu in #5902
• feat: gate v2->v1 engine override behind FORCE_TASK_V1 flag by @pedrohsdb in #5904
• SKY-9654 Stub eval Azure vault placeholders by @andrewneilson in #5903
• feat:(SKY-8885) Add injectable copilot config by @andrewneilson in #5905
• Update API specifications with fern api update by @wintonzheng in #5915
• Fix stale frontend lint disables by @andrewneilson in #5917
• [SKY-9718] log html_token_count + html_pct on LLM duration metrics by @wintonzheng in #5918
• SKY-9653 Add conditional workflow routing evals by @andrewneilson in #5916
• SKY-9676: Add Workflow Copilot request policy by @andrewneilson in #5919
• test(SKY-9716): add request policy classifier eval by @andrewneilson in #5921
• SKY-9719 Remove superseded Copilot intent gates by @andrewneilson in #5922
• Clarify local Chrome remote debugging setup by @suchintan in #5906
• [codex] Handle quickstart Chromium install failures by @suchintan in #5909
• fix(llm): treat empty override_llm_key as no-override by @AronPerez in #5924
• fix(SKY-9693): trust request policy completion contracts by @andrewneilson in #5925
• Make quickstart choose the install path by @marcmuon in #5926

Full Changelog: v1.0.35...v1.0.36

Release v1.0.35

What's Changed

Version bumped from 1.0.34 to 1.0.35

Recent Changes

• [Self-host] Add CDP streaming defaults and diagnostics (#5875) (2dc25e6)
• SKY-9652 Fix block-run credential retry loop detection (#5887) (e666d5b)
• fix(SKY-9658): prevent unbacked copilot workflow delivery replies (#5890) (f8144c4)
• fix(SKY-9650): hydrate Copilot workflow state (#5889) (f94c6cf)
• fix(SKY-9565): relax late block-running guard (#5884) (028b905)
• fix(SKY-9644): make site-block stop nudge proxy-aware (#5883) (7826072)
• feat(SKY-9570): turn classify-UNKNOWN into a productive learning signal (#5882) (c587bfb)
• SKY-9645 Prevent challenge wait blocks (#5881) (802122c)
• fix(SKY-9565): block late Copilot block-running attempts (#5880) (e1c2593)
• feat(SKY-9536): wire shadow-mode FP gate to cross-run extraction cache hit path (#5879) (3cec83e)
• fix(SKY-9553): retry OTP polling for full wall-clock timeout (#5878) (2d5e5e4)
• perf(SKY-9203): parallelize browser session file metadata + presign (#5876) (6760da5)
• fix: discard invalid TOTP secrets at registration time with error log (#5874) (eec6367)
• fix(SKY-9643): convert file:// signed_url to artifact server URL (#5873) (cfcc1d6)
• Clarify credential lookup errors (#5872) (eb4a1c6)
• fix(SKY-9616): fall back to workflow API response for workflowPermanentId on /runs/ route (#5870) (2ca1820)
• feat(SKY-8771): while_loop script generation and caching (#5869) (228b30c)

Full Changelog: v1.0.34...v1.0.35

What's Changed

• feat(SKY-8771): while_loop script generation and caching by @wintonzheng in #5869
• fix(SKY-9616): fall back to workflow API response for workflowPermanentId on /runs/ route by @LawyZheng in #5870
• Clarify credential lookup errors by @suchintan in #5872
• fix(SKY-9643): convert file:// signed_url to artifact server URL by @celalzamanoglu in #5873
• fix: discard invalid TOTP secrets at registration time with error log by @LawyZheng in #5874
• perf(SKY-9203): parallelize browser session file metadata + presign by @AronPerez in #5876
• fix(SKY-9553): retry OTP polling for full wall-clock timeout by @AronPerez in #5878
• feat(SKY-9536): wire shadow-mode FP gate to cross-run extraction cache hit path by @pedrohsdb in #5879
• fix(SKY-9565): block late Copilot block-running attempts by @andrewneilson in #5880
• SKY-9645 Prevent challenge wait blocks by @andrewneilson in #5881
• feat(SKY-9570): turn classify-UNKNOWN into a productive learning signal by @pedrohsdb in #5882
• fix(SKY-9644): make site-block stop nudge proxy-aware by @andrewneilson in #5883
• fix(SKY-9565): relax late block-running guard by @andrewneilson in #5884
• fix(SKY-9650): hydrate Copilot workflow state by @andrewneilson in #5889
• fix(SKY-9658): prevent unbacked copilot workflow delivery replies by @andrewneilson in #5890
• SKY-9652 Fix block-run credential retry loop detection by @andrewneilson in #5887
• [Self-host] Add CDP streaming defaults and diagnostics by @suchintan in #5875

Full Changelog: v1.0.34...v1.0.35