Release v1.0.42

What's Changed

Version bumped from 1.0.41 to 1.0.42

Recent Changes

• Bump version to 1.0.42 (#6684) (6bdb772)
• fix(ui): tolerate legacy npm run start override + add official Helm chart (#6683) (4d0b721)
• feat(SKY-11150): give terminate actions a distinct terminated visual (amber triangle) (#6693) (b5ad775)
• Revert "SKY-11139: Harden code block runtime boundary" (#6692) (a824fb9)
• feat(SKY-10862): show which run occupies a browser session (#6691) (3f41938)
• SKY-10323: send replMode on main-world Runtime.evaluate to avoid let/const redeclare (#6690) (3799f01)
• SKY-11168: Prioritize credential blocker over code safety (#6689) (4c29a9d)
• fix(SKY-11140): harden copilot code downloads (#6688) (90cf3c5)
• feat(SKY-10648): add SDK-backed remote browser provider (#6687) (cb0eb8c)
• SKY-11139: Harden code block runtime boundary (#6686) (ef62e8a)
• Fail-fast shadow observability (Phase 0) (#6685) (dad7629)
• Fix truncated output on OpenRouter deepseek/mimo configs (#6681) (bf682bd)
• SKY-11165 Defer AWS session creation for missing profiles (#6680) (d3a036f)
• fix(SKY-11153): land adopted-session downloads run-side via eager save + url re-fetch (#6679) (3010c0a)
• SKY-11067 stabilize Copilot repair root-cause signatures (#6678) (b844eb4)
• fix(SKY-10807): propagate CancelledError so run timeouts actually stop the run (#6677) (c3faa4c)
• fix(SKY-11151): gate run-timeline action/step rows to code blocks (#6675) (9e95195)
• feat(SKY-11050): typed extraction schema for copilot code blocks (data_schema parity) (#6674) (64aa5ca)
• fix(SKY-10954): bound copilot chat reply length with a soft user_response budget (#6673) (efbf505)
• SKY-10964 Block verified success on artifact-health failures (#6672) (5e66b16)
• SKY-10985: reconcile WIP-rescue terminal frame on coverage-complete adjudication failure (#6671) (7b64c08)
• SKY-11118: opt-in headless turn-drain gate for copilot live browser (#6670) (ad858e9)
• Revert "fix(SKY-10776): use NullPool for screenshot-worker replica reads" (#6668) (db83d3e)
• SKY-11121: collapse code-first copilot rung flags into the two master gates (#6669) (be16e53)
• fix(SKY-11153): bind adopted-session download dir to the run key FileUploadBlock scans (#6667) (9681255)
• SKY-10919 Thread missing completion evidence (#6666) (87029c4)
• feat(observability): sample more high-frequency agent INFO logs (#6665) (22d4025)
• chore(observability): drop low-value high-volume logs (delete captcha-negative, downgrade startup chatter to debug) (#6664) (32de1a6)
• feat(SKY-10847): validate and reconcile code-block step line spans server-side (#6662) (35af323)
• SKY-11101: Improve PDF Fill field mapping with positional field labels (#6663) (9659998)
• fix(SKY-10991): stop max update depth loop on workflow build page (#6660) (44f45b0)
• fix(SKY-11132): handle ClientDisconnect in raw-request logging middleware (#6659) (595164f)
• fix(SKY-11133): tolerate misnamed block arg in copilot validate_block (#6658) (baf204a)
• fix(SKY-11131): surface parse errors instead of crashing FileParserBlock (#6657) (7cba2b2)
• fix: refresh expired model in update_workflow_run_if_not_final (#6655) (3b94344)
• perf(SKY-11099): default scrape to skip visual bounding box overlay (#6654) (e704789)
• SKY-10323: add main-world JS evaluation hook for remote browsers (#6653) (24ba340)
• fix(SKY-11119): make skyvern CLI robust to click 8.2+ and lift the click<8.2 pin (#6652) (78bd720)
• feat(SKY-11092): 1Password item picker for credential inputs (#6651) (d940e36)
• SKY-11111: dispatch input/change events on credential-fill so JS-gated multi-step logins advance (#6650) (8670e78)
• fix(SKY-11114): fresh session for login-replaying repair re-runs (flag-gated) (#6649) (997186b)
• SKY-11113: disambiguate bare role/tag selectors in copilot code-block synthesis (#6648) (318b506)
• fix(SKY-11072): reconnect a dead reused browser state before block run (#6647) (d04b5a6)
• security: fix 7 HIGH pip vulnerabilities in uv.lock (#6646) (9f68f9c)
• fix(SKY-8929): gate worker startup on X display readiness; sanitize browser headers (#6645) (911b609)
• feat(tagging): gate workflow tagging UI behind WORKFLOW_TAGGING flag (frontend) (SKY-10683) (#6644) (d78d78c)
• fix(SKY-10607): rename Settings "API Keys" nav child to "General" (#6642) (2506938)
• feat(tagging): gate workflow tagging behind WORKFLOW_TAGGING flag (backend) (SKY-10683) (#6643) (49b0fe9)
• fix(SKY-11086): don't serve unfinalized per-run recording for session runs (#6641) (3a0ec00)
• SKY-11094: finish the leveled / tri-state completion-adjudication contract (#6639) (4d8da05)
• SKY-11057 Fix Copilot download synthesis replay (#6638) (f9d6f26)
• SKY-11093: bind copilot synthesized download blocks so the file actually downloads (#6637) (4a2bdc3)
• Register OpenRouter Xiaomi MiMo-V2.5 LLM handler (#6636) (a97e572)
• SKY-11081: sunset copilot scout flags (#6635) (cdcd669)
• SKY-11087 Default unset runtime proxy to none (#6634) (b6cd2cf)
• SKY-11107: restore Inputs field in code-first code block Code view (#6633) (33de2b6)
• GCP Self-Host: App-wiring for storage and vault (#6632) (209d715)
• feat(SKY-10971): revamp workflows/folders list into a directory tree (#6631) (cb6854b)
• fix(llm): route OpenRouter registry keys through LLMCaller for cost tracking (SKY-11074) (#6630) (377d13a)
• docs: update changelog for week of June 15, 2026 (#6629) (888c98d)
• SKY-11083: guard None run_id and rebind the CDP download interceptor on adoption (#6626) (3c6ef3a)
• Fix Copilot selector-none post hooks (#6628) (e9d4680)
• fix(SKY-8685): report action-based total_cost on workflow runs (#6627) (ed3e10a)
• fix(SKY-11085): capture screenshot for page.evaluate code-block actions (#6624) (1e5f814)
• fix(SKY-11084): address remaining review nits on code-block recording artifact (#6625) (0986298)
• SKY-11081: steer scout-act to observe, not evaluate-click; couple the gate to author-steer (#6623) (dde7012)
• feat(observability): opt-in INFO-log sampling for high-volume orgs (#6621) (2bf4394)
• SKY-10944: Add PDF Fill workflow block (local AcroForm + flat-PDF OCR fill) (#6622) (edd8063)
• SKY-11083: run-scope the download dir on persistent-session adoption (#6618) (b056551)
• SKY-11081: require a scout-act before authoring a copilot download block (#6620) (0074161)
• SKY-11061: fail closed on copilot download blocks that cannot register a real download (#6619) (f1c559f)
• SKY-11060: synthesize a real expect_download block from the reached-download target (#6617) (c4551d9)
• feat: add managed browser provider integration (#6616) (46ad836)
• feat(SKY-10702): cap browser-session S3 growth via deterministic reaps (#6615) (974dbc4)
• feat(SKY-10701): write back reused browser profiles + graceful fallback on a missing profile (#6614) (5f809e5)
• fix(frontend): prevent React crashes from browser translation DOM mutation (#6613) (3b57f26)
• fix(SKY-10799): gate sequential runs on queue order, not a single dependency edge (#6611) (4fd53c6)
• fix(agent): seed CUA extraction prompt (SKY-10694) (#6610) (02fad39)
• SKY-10691: harden removeBoundingBoxes against Prototype.js-style remove() polyfill (#6609) (ba276b0)
• SKY-11028: halt the non-converging repair loop and escalate honestly (#6608) (34145d3)
• fix(SKY-11078): emit run-scoped recording artifact for code-block runs (#6607) (250e3ba)
• feat(observability): convert event duration metrics to OTEL histogram (#6606) (368d0eb)
• fix(SKY-11079): show code-block action screenshot on the run Overview (#6605) (b6159bf)
• feat(SKY-10837): code-first code block frontend (editor views, highlights, run timeline) (#6604) (03c9981)
• fix(SKY-10700): enable browser mic permission prompt for voice input (#6601) (c0d3d0d)
• fix(SKY-11077): record page.evaluate as an EXECUTE_JS action in code blocks (#6600) (a2e1e01)
• fix(deps): bump vitest to 3.2.6 (CVE-2026-47429) (#6596) (a090a63)
• Update changelog — Week of June 15, 2026 (#6594) (e62255f)
• feat(SKY-10837): code-first code block backend (schema, recording proxy, copilot fills, run rendering) (#6593) (269ebb1)
• SKY-11024: steer copilot to author a terminal download block on a reached affordance (#6592) (b98eded)
• SKY-11031: promote copilot outcome-verification and persisted-criteria to unconditional defaults (#6591) (a35c768)
• fix(SKY-11012): resolve run-only re-test against the turn's workflow_yaml (#6589) (eaf4ec6)
• SKY-11030: promote scout-act-observe + evaluate-target-steer to unconditional defaults (#6588) (340f485)
• SKY-11022: reject 'parameters' field on code block YAML (#6587) (a07820e)
• SKY-10912 Promote scouted typed values into workflow inputs (#6586) (6d46bf7)
• SKY-10967: Reuse Copilot SDK action runs (#6584) (9fe9d70)
• SKY-11025: harden extraction guardrail AST traversal (review follow-up to #12165) (#6585) (8cf43bf)
• SKY-10984: Preserve run authority on turn-intent timeouts (#6583) (93f333e)
• feat(copilot): fold code into the mode dropdown with a blue glow (SKY-10941) (#6582) (55fee99)
• feat(SKY-10937): register code-block browser downloads into block outputs (#6581) (abfc476)
• SKY-11025: structured keyed output for copilot extraction code blocks (#6580) (edb298e)
• SKY-10910 Preserve terminal evidence in Copilot hard blocks (#6579) (338c91b)
• SKY-11010: steer + auto-act on repeat evaluate of an unchanged page (#6577) (13ed2d6)
• SKY-10965 Add Copilot hook log attribution (#6578) (ae8fcdd)
• SKY-11011: stop logging raw OTP code in poll_otp_value (#6576) (de11bfc)
• feat(task_v2): bias the planner toward loop tasks for repeated same-shape work (#6575) (d25ede6)
• feat(task_v2): make the final answer the deliverable + stop synthesis wheel-spinning (#6574) (efda3e7)
• fix(SKY-10969): keep Run Inputs collapsed during Run History filtering (#6573) (dd62cdc)
• SKY-10819: asymmetric debug-session profile handling for LoginBlock (#6572) (873312a)
• SKY-10938: fill-time OTP primitive for the code-block sandbox (#6571) (9814c88)
• fix(SKY-10987): keep run authority on explicit re-test diagnose turns (#6570) (394bec9)
• fix(skyvern): skip click fallbacks after post-dispatch timeout (SKY-10921) (#6569) (4a8e647)
• Fix post-navigation recording capture and interpretation resume (#6568) (006bce8)
• Allow uncapped workflow runtime configuration (#SKY-10265) (#6567) (cdacadb)
• security: bump aiohttp >=3.14.0 and pypdf >=6.12.0 (Dependabot #462 #463 #465 #466) (#6566) (d0e0982)
• SKY-10892: Harden request policy fallback (#6564) (0e97f5d)
• SKY-10876 reject unresolved code sandbox names (#6563) (3ae0e91)
• SKY-10931: persist copilot completion criteria per goal epoch with tri-state adjudication (#6562) (4480b81)
• Browser recording backend: live interpretation, capture pause, draft commit (#6561) (f6450c1)
• fix(SKY-10854): preserve single-item JSON array workflow inputs on run (#6560) (c6bdf9b)
• fix(llm): revert Vertex gemini-3.1-flash-lite to the -preview id (#6558) (978922e)
• Update API specifications with fern api update (#6557) (9b3f73e)
• fix(SKY-10789): pass through explicit non-dict returns in code blocks (#6556) (43e0fdf)
• fix(analytics): stop /analytics/summary 500s from tz-mixed serving merge and cold live segments (#6555) (59c1198)
• Gate recorded wait actions on page activity (backend) (#6554) (10519ab)
• Cut live recording draft latency: instant placeholders, max-wait debounce, deterministic nav/wait blocks (backend) (#6553) (dbe733b)
• SKY-10875 bind repeated challenge stop verdict (#6551) (2e7dfcf)
• SKY-10874: require goal-field content for Copilot code results (#6548) (fdcd19d)
• fix: reorder Claude Fable fallback router (#6552) (6bf56f2)
• SKY-10982 Fix Copilot loop detector dispatch boundaries (#6550) (fe94791)
• SKY-10983 gate run credentials before dispatch (#6549) (6d84d59)
• fix(copilot): render terminal headline from the typed turn adjudication (SKY-10871) (#6547) (2f8541c)
• fix(SKY-10928): block task_v2 completion when a required sub-goal is unmet (planner + completion-check) (#6546) (156c63f)
• fix(SKY-10980): teach task_v2 planner to segment work past per-operation item limits (#6545) (f67fda3)
• fix(SKY-10934): honor the task_v2 max_iterations override (#6544) (d31fdc0)
• fix(SKY-10979): dedupe generated workflow parameter keys to prevent duplicate-key hard-fail (#6543) (be24e19)
• fix(SKY-10974): keep clear-credential confirm dialog above dialog overlays (#6542) (1540581)
• docs(SKY-10878): document opt-in browser profile generation for sessions (#6541) (c4d6ae3)
• fix(SKY-9178): retarget disabled-wrapper clicks using single-chain rule (#6540) (311d7d0)
• SKY-10936: Add Claude Fable 5 model support (#6539) (5ad7d68)
• copilot: hard-block + safe-rewrite residual internal-vocab leaks on REPLY (SKY-10315) (#6538) (964859f)
• fix(SKY-8574): render workflow run timeline in execution order, not branch-tree order (#6515) (bb74c38)
• fix(SKY-10933): enforce code-only block policy (#6536) (b3a2aff)
• feat(SKY-10775): add Gemini 3.5 Flash to the model router (#6505) (33295db)
• feat(api): skip api.raw_request logging for successful read requests (SKY-10887) (#6511) (daa0f5f)
• feat(SKY-10860): multi-tab control for the autonomous agent loop (#6507) (3ab230a)
• SKY-10929 Compile scouted Copilot actions at persist seam (#6534) (49cfcd9)
• fix(persistent-sessions): final video sync budget must outlive the ffmpeg chain (SKY-10680) (#6519) (9bdceef)
• feat(copilot): render chat block rows from the recorded run outcome verdict (SKY-10873) (#6532) (da9870a)
• Update changelog — Week of June 8, 2026 (#6530) (0348064)
• fix(SKY-10129): re-validate malformed credential IDs against the org (#6529) (2773821)
• feat(copilot): emit the recorded per-run outcome verdict as a typed narrative event (SKY-10873) (#6528) (d60296b)
• SKY-10888: Repair credentialed runtime diagnosis (#6526) (46b4f2e)
• SKY-10889: gate credentialed code persistence on scouted submit (#6525) (40761ac)
• fix(recording): revert to Playwright default recording size, add config override (#6524) (8e6794d)

Full Changelog: v1.0.41...v1.0.42

What's Changed

• fix(recording): revert to Playwright default recording size, add config override by @wintonzheng in #6524
• SKY-10889: gate credentialed code persistence on scouted submit by @andrewneilson in #6525
• SKY-10888: Repair credentialed runtime diagnosis by @andrewneilson in #6526
• feat(copilot): emit the recorded per-run outcome verdict as a typed narrative event (SKY-10873) by @andrewneilson in #6528
• fix(SKY-10129): re-validate malformed credential IDs against the org by @andrewneilson in #6529
• Update changelog — Week of June 8, 2026 by @wintonzheng in #6530
• feat(copilot): render chat block rows from the recorded run outcome verdict (SKY-10873) by @andrewneilson in #6532
• fix(persistent-sessions): final video sync budget must outlive the ffmpeg chain (SKY-10680) by @celalzamanoglu in #6519
• SKY-10929 Compile scouted Copilot actions at persist seam by @andrewneilson in #6534
• feat(SKY-10860): multi-tab control for the autonomous agent loop by @trevor-cheung in #6507
• feat(api): skip api.raw_request logging for successful read requests (SKY-10887) by @suchintan in #6511
• feat(SKY-10775): add Gemini 3.5 Flash to the model router by @trevor-cheung in #6505
• fix(SKY-10933): enforce code-only block policy by @andrewneilson in #6536
• fix(SKY-8574): render workflow run timeline in execution order, not branch-tree order by @suchintan in #6515
• copilot: hard-block + safe-rewrite residual internal-vocab leaks on REPLY (SKY-10315) by @andrewneilson in #6538
• SKY-10936: Add Claude Fable 5 model support by @andrewneilson in #6539
• fix(SKY-9178): retarget disabled-wrapper clicks using single-chain rule by @LawyZheng in #6540
• docs(SKY-10878): document opt-in browser profile generation for sessions by @celalzamanoglu in #6541
• fix(SKY-10974): keep clear-credential confirm dialog above dialog overlays by @suchintan in #6542
• fix(SKY-10979): dedupe generated workflow parameter keys to prevent duplicate-key hard-fail by @trevor-cheung in #6543
• fix(SKY-10934): honor the task_v2 max_iterations override by @trevor-cheung in #6544
• fix(SKY-10980): teach task_v2 planner to segment work past per-operation item limits by @trevor-cheung in #6545
• fix(SKY-10928): block task_v2 completion when a required sub-goal is unmet (planner + completion-check) by @trevor-cheung in #6546
• fix(copilot): render terminal headline from the typed turn adjudication (SKY-10871) by @andrewneilson in #6547
• SKY-10983 gate run credentials before dispatch by @andrewneilson in #6549
• SKY-10982 Fix Copilot loop detector dispatch boundaries by @andrewneilson in #6550
• fix: reorder Claude Fable fallback router by @andrewneilson in #6552
• SKY-10874: require goal-field content for Copilot code results by @andrewneilson in #6548
• SKY-10875 bind repeated challenge stop verdict by @andrewneilson in #6551
• Cut live recording draft latency: instant placeholders, max-wait debounce, deterministic nav/wait blocks (backend) by @cindehaa in #6553
• Gate recorded wait actions on page activity (backend) by @cindehaa in #6554
• fix(analytics): stop /analytics/summary 500s from tz-mixed serving merge and cold live segments by @AronPerez in #6555
• fix(SKY-10789): pass through explicit non-dict returns in code blocks by @wintonzheng in #6556
• Update API specifications with fern api update by @wintonzheng in #6557
• fix(llm): revert Vertex gemini-3.1-flash-lite to the -preview id by @pedrohsdb in #6558
• fix(SKY-10854): preserve single-item JSON array workflow inputs on run by @cindehaa in #6560
• Browser recording backend: live interpretation, capture pause, draft commit by @cindehaa in #6561
• SKY-10931: persist copilot completion criteria per goal epoch with tri-state adjudication by @andrewneilson in #6562
• SKY-10876 reject unresolved code sandbox names by @andrewneilson in #6563
• SKY-10892: Harden request policy fallback by @andrewneilson in #6564
• security: bump aiohttp >=3.14.0 and pypdf >=6.12.0 (Dependabot #462 #463 #465 #466) by @AronPerez in #6566
• Allow uncapped workflow runtime configuration (#SKY-10265) by @suchintan in #6567
• Fix post-navigation recording capture and interpretation resume by @cindehaa in #6568
• fix(skyvern): skip click fallbacks after post-dispatch timeout (SKY-10921) by @LawyZheng in #6569
• fix(SKY-10987): keep run authority on explicit re-test diagnose turns by @andrewneilson in #6570
• SKY-10938: fill-time OTP primitive for the code-block sandbox by @andrewneilson in #6571
• SKY-10819: asymmetric debug-session profile handling for LoginBlock by @LawyZheng in #6572
• fix(SKY-10969): keep Run Inputs collapsed during Run History filtering by @AronPerez in #6573
• feat(task_v2): make the final answer the deliverable + stop synthesis wheel-spinning by @trevor-cheung in #6574
• feat(task_v2): bias the planner toward loop tasks for repeated same-shape work by @trevor-cheung in #6575
• SKY-11011: stop logging raw OTP code in poll_otp_value by @andrewneilson in #6576
• SKY-10965 Add Copilot hook log attribution by @andrewneilson in #6578
• SKY-11010: steer + auto-act on repeat evaluate of an unchanged page by @andrewneilson in #6577
• SKY-10910 Preserve terminal evidence in Copilot hard blocks by @andrewneilson in #6579
• SKY-11025: structured keyed output for copilot extraction code blocks by @andrewneilson in #6580
• feat(SKY-10937): register code-block browser downloads into block outputs by @andrewneilson in #6581
• feat(copilot): fold code into the mode dropdown with a blue glow (SKY-10941) by @andrewneilson in #6582
• SKY-10984: Preserve run authority on turn-intent timeouts by @andrewneilson in #6583
• SKY-11025: harden extraction guardrail AST traversal (review follow-up to #12165) by @andrewneilson in #6585
• SKY-10967: Reuse Copilot SDK action runs by @andrewneilson in #6584
• SKY-10912 Promote scouted typed values into workflow inputs by @andrewneilson in #6586
• SKY-11022: reject 'parameters' field on code block YAML by @andrewneilson in #6587
• SKY-11030: promote scout-act-observe + evaluate-target-steer to unconditional defaults by @andrewneilson in #6588
• fix(SKY-11012): resolve run-only re-test against the turn's workflow_yaml by @andrewneilson in #6589
• SKY-11031: promote copilot outcome-verification and persisted-criteria to unconditional defaults by @andrewneilson in #6591
• SKY-11024: steer copilot to author a terminal download block on a reached affordance by @andrewneilson in #6592
• feat(SKY-10837): code-first code block backend (schema, recording proxy, copilot fills, run rendering) by @AronPerez in #6593
• Update changelog — Week of June 15, 2026 by @wintonzheng in #6594
• fix(deps): bump vitest to 3.2.6 (CVE-2026-47429) by @wintonzheng in #6596
• fix(SKY-11077): record page.evaluate as an EXECUTE_JS action in code blocks by @AronPerez in #6600
• fix(SKY-10700): enable browser mic permission prompt for voice input by @cindehaa in #6601
• feat(SKY-10837): code-first code block frontend (editor views, highlights, run timeline) by @AronPerez in #6604
• fix(SKY-11079): show code-block action screenshot on the run Overview by @AronPerez in #6605
• feat(observability): convert event duration metrics to OTEL histogram by @wintonzheng in #6606
• fix(SKY-11078): emit run-scoped recording artifact for code-block runs by @AronPerez in #6607
• SKY-11028: halt the non-converging repair loop and escalate honestly by @andrewneilson in #6608
• SKY-10691: harden removeBoundingBoxes against Prototype.js-style remove() polyfill by @LawyZheng in #6609
• fix(agent): seed CUA extraction prompt (SKY-10694) by @LawyZheng in #6610
• fix(SKY-10799): gate sequential runs on queue order, not a single dependency edge by @celalzamanoglu in #6611
• fix(frontend): prevent React crashes from browser translation DOM mutation by @celalzamanoglu in #6613
• feat(SKY-10701): write back reused browser profiles + graceful fallback on a missing profile by @celalzamanoglu in #6614
• feat(SKY-10702): cap browser-session S3 growth via deterministic reaps by @celalzamanoglu in #6615
• feat: add managed browser provider integration by @LawyZheng in #6616
• SKY-11060: synthesize a real expect_download block from the reached-download target by @andrewneilson in #6617
• SKY-11061: fail closed on copilot download blocks that cannot register a real download by @andrewneilson in #6619
• SKY-11081: require a scout-act before authoring a copilot download block by @andrewneilson in #6620
• SKY-11083: run-scope the download dir on persistent-session adoption by @andrewneilson in #6618
• SKY-10944: Add PDF Fill workflow block (local AcroForm + flat-PDF OCR fill) by @suchintan in #6622
• feat(observability): opt-in INFO-log sampling for high-volume orgs by @wintonzheng in #6621
• SKY-11081: steer scout-act to observe, not evaluate-click; couple the gate to author-steer by @andrewneilson in #6623
• fix(SKY-11084): address remaining review nits on code-block recording artifact by @AronPerez in #6625
• fix(SKY-11085): capture screenshot for page.evaluate code-block actions by @AronPerez in #6624
• fix(SKY-8685): report action-based total_cost on workflow runs by @AronPerez in #6627
• Fix Copilot selector-none post hooks by @andrewneilson in #6628
• SKY-11083: guard None run_id and rebind the CDP download interceptor on adoption by @andrewneilson in #6626
• docs: update changelog for week of June 15, 2026 by @wintonzheng in #6629
• fix(llm): route OpenRouter registry keys through LLMCaller for cost tracking (SKY-11074) by @cindehaa in #6630
• feat(SKY-10971): revamp workflows/folders list into a directory tree by @AronPerez in #6631
• GCP Self-Host: App-wiring for storage and vault by @wintonzheng in #6632
• SKY-11107: restore Inputs field in code-first code block Code view by @andrewneilson in #6633
• SKY-11087 Default unset runtime proxy to none by @andrewneilson in #6634
• SKY-11081: sunset copilot scout flags by @andrewneilson in #6635
• Register OpenRouter Xiaomi MiMo-V2.5 LLM handler by @cindehaa in #6636
• SKY-11093: bind copilot synthesized download blocks so the file actually downloads by @andrewneilson in #6637
• SKY-11057 Fix Copilot download synthesis replay by @andrewneilson in #6638
• SKY-11094: finish the leveled / tri-state completion-adjudication contract by @andrewneilson in #6639
• fix(SKY-11086): don't serve unfinalized per-run recording for session runs by @AronPerez in #6641
• feat(tagging): gate workflow tagging behind WORKFLOW_TAGGING flag (backend) (SKY-10683) by @AronPerez in #6643
• fix(SKY-10607): rename Settings "API Keys" nav child to "General" by @AronPerez in #6642
• feat(tagging): gate workflow tagging UI behind WORKFLOW_TAGGING flag (frontend) (SKY-10683) by @AronPerez in #6644
• fix(SKY-8929): gate worker startup on X display readiness; sanitize browser headers by @pedrohsdb in #6645
• security: fix 7 HIGH pip vulnerabilities in uv.lock by @AronPerez in #6646
• fix(SKY-11072): reconnect a dead reused browser state before block run by @AronPerez in #6647
• SKY-11113: disambiguate bare role/tag selectors in copilot code-block synthesis by @andrewneilson in #6648
• fix(SKY-11114): fresh session for login-replaying repair re-runs (flag-gated) by @andrewneilson in #6649
• SKY-11111: dispatch input/change events on credential-fill so JS-gated multi-step logins advance by @andrewneilson in #6650
• feat(SKY-11092): 1Password item picker for credential inputs by @suchintan in #6651
• fix(SKY-11119): make skyvern CLI robust to click 8.2+ and lift the click<8.2 pin by @AronPerez in #6652
• SKY-10323: add main-world JS evaluation hook for remote browsers by @LawyZheng in #6653
• perf(SKY-11099): default scrape to skip visual bounding box overlay by @LawyZheng in #6654
• fix: refresh expired model in update_workflow_run_if_not_final by @LawyZheng in #6655
• fix(SKY-11131): surface parse errors instead of crashing FileParserBlock by @AronPerez in #6657
• fix(SKY-11133): tolerate misnamed block arg in copilot validate_block by @AronPerez in #6658
• fix(SKY-11132): handle ClientDisconnect in raw-request logging middleware by @AronPerez in #6659
• fix(SKY-10991): stop max update depth loop on workflow build page by @celalzamanoglu in #6660
• SKY-11101: Improve PDF Fill field mapping with positional field labels by @suchintan in #6663
• feat(SKY-10847): validate and reconcile code-block step line spans server-side by @AronPerez in #6662
• chore(observability): drop low-value high-volume logs (delete captcha-negative, downgrade startup chatter to debug) by @wintonzheng in #6664
• feat(observability): sample more high-frequency agent INFO logs by @wintonzheng in #6665
• SKY-10919 Thread missing completion evidence by @andrewneilson in #6666
• fix(SKY-11153): bind adopted-session download dir to the run key FileUploadBlock scans by @pedrohsdb in #6667
• SKY-11121: collapse code-first copilot rung flags into the two master gates by @andrewneilson in #6669
• Revert "fix(SKY-10776): use NullPool for screenshot-worker replica reads" by @wintonzheng in #6668
• SKY-11118: opt-in headless turn-drain gate for copilot live browser by @andrewneilson in #6670
• SKY-10985: reconcile WIP-rescue terminal frame on coverage-complete adjudication failure by @andrewneilson in #6671
• SKY-10964 Block verified success on artifact-health failures by @andrewneilson in #6672
• fix(SKY-10954): bound copilot chat reply length with a soft user_response budget by @andrewneilson in #6673
• feat(SKY-11050): typed extraction schema for copilot code blocks (data_schema parity) by @andrewneilson in #6674
• fix(SKY-11151): gate run-timeline action/step rows to code blocks by @AronPerez in #6675
• fix(SKY-10807): propagate CancelledError so run timeouts actually stop the run by @wintonzheng in #6677
• SKY-11067 stabilize Copilot repair root-cause signatures by @andrewneilson in #6678
• fix(SKY-11153): land adopted-session downloads run-side via eager save + url re-fetch by @andrewneilson in #6679
• SKY-11165 Defer AWS session creation for missing profiles by @andrewneilson in #6680
• Fix truncated output on OpenRouter deepseek/mimo configs by @cindehaa in #6681
• Fail-fast shadow observability (Phase 0) by @pedrohsdb in #6685
• SKY-11139: Harden code block runtime boundary by @andrewneilson in #6686
• feat(SKY-10648): add SDK-backed remote browser provider by @LawyZheng in #6687
• fix(SKY-11140): harden copilot code downloads by @andrewneilson in #6688
• SKY-11168: Prioritize credential blocker over code safety by @andrewneilson in #6689
• SKY-10323: send replMode on main-world Runtime.evaluate to avoid let/const redeclare by @LawyZheng in #6690
• feat(SKY-10862): show which run occupies a browser session by @celalzamanoglu in #6691
• Revert "SKY-11139: Harden code block runtime boundary" by @wintonzheng in #6692
• feat(SKY-11150): give terminate actions a distinct terminated visual (amber triangle) by @suchintan in #6693
• fix(ui): tolerate legacy npm run start override + add official Helm chart by @wintonzheng in #6683
• Bump version to 1.0.42 by @wintonzheng in #6684

Full Changelog: v1.0.41...v1.0.42