Release v1.0.45

What's Changed

Version bumped from 1.0.44 to 1.0.45

Recent Changes

• Bump version to 1.0.45 (#7167) (632b8ec)
• feat(SKY-8207): consistent egress IP for Save & Reuse Session runs (#7169) (d0094d3)
• chore(SKY-12003): cap fastmcp below 3.4 as temporary safety upper bound (#7168) (147eea6)
• fix(SKY-12003): restore hosted /mcp/ connectivity and freeze Docker deps to uv.lock (#7166) (caf7420)
• fix(SKY-11910): surface custom dropdown options in MCP observe + non-leaking action errors (#7165) (e7a57dd)
• fix(llm): re-point Vertex gemini-3.1-flash-lite at the GA id (preview sunsets 2026-07-09) (#7162) (ab94965)
• fix(SKY-11965): report valid PostgreSQL start command in skyvern status (#7161) (ee0964b)
• fix(credentials): close secret-leak gap in temp-credential cleanup + regression test (#7160) (d061458)
• perf(SKY-8227): re-add DB pool timeout/recycle knobs and API-only pool sizing (#7159) (f939ec8)
• feat(SKY-11993): warn that PDF Fill works best on fillable PDFs (#7158) (f920d19)
• fix(credentials): edit-test corruption + browser-profile name reuse (partial unique index) (#7157) (e116aaf)
• fix(SKY-11982): restore real filenames for downloaded files (upload regression) (#7156) (e2edbd9)
• fix(llm): fall back to non-Gemini model on Gemini content_filter (SKY-11766) (#7155) (90e29f9)
• fix(llm): inject Gemini safety_settings per-deployment so Azure fallback survives (SKY-11766, incident #646) (#7154) (c14b6cb)
• fix: broaden CDP download interceptor to capture XHR file responses with generic binary MIME types (#7153) (368d4a5)
• fix(SKY-11916): tighten cloud credentialed CORS (#7151) (4c4db2a)
• fix(SKY-11899): Copilot fresh-session replay frontier (#7149) (f22243e)
• feat(SKY-11609): attribute Temporal activity-timeout workflow finalization (#7148) (45505ef)
• security: add .npmrc ignore-scripts to skyvern-ts/client (#7094) (ef9476e)
• fix(SKY-11881): persist typed code-block recorder actions (#7147) (298ab55)
• SKY-11527: scope custom-select hard-fail to checkbox/radio + settle async read-back (#7146) (7547515)
• fix(SKY-11917): validate script deploy file paths (#7145) (75df48f)
• SKY-11527 Collapse custom select fanout (#7143) (fe5f183)
• fix(SKY-11914): require auth for pylon email hash (#7142) (af2a0ff)
• feat(SKY-11879): family-uniform output-contract actuation — no bail returns unchanged (#7141) (3c2c44c)
• Revert "feat(editor): highlight run-blocking blocks and gate the Run CTA (SKY-10569)" (#7140) (9089fea)
• feat(editor): highlight run-blocking blocks and gate the Run CTA (SKY-10569) (#7139) (ba2ec32)
• fix(SKY-11793): remove non-sandboxed second render in TextPromptBlock (SSTI) (#7137) (d723de6)
• SKY-11575 Restore unified runs toolbar with gesture zoom and pulse feedback (#7136) (4d06850)
• SKY-11865: mint-time satisfiability + typed fail-safe degrade on the classifier-fallback completion producer (#7135) (fdfaf3b)
• security: update cryptography to fix CVE-2024-12797 in langchain integration (#7012) (d71ea50)
• security: fix 7 HIGH npm vulnerabilities in skyvern-ts/client (vite, fast-uri, rollup, serialize-javascript) (#7082) (bcc765f)
• test(SKY-11847): table-drive CDP download interceptor tests (67→34, coverage-identical) (#7134) (453db78)
• test(SKY-11847): matrix workflow-parameter-validation tests (65→28, coverage-identical) (#7133) (2bd0c07)
• fix(SKY-11500): drop the throwaway default-tab recording (#7123) (f4bdd49)
• feat(SKY-11471): prefill login block goal from saved credential instructions (#7122) (43cf66c)
• Add vendor worker queues with DYNAMIC_BROWSER_TYPE routing (#7121) (7bd572c)
• fix(llm): disable Gemini safety filters for agent calls (SKY-11766) (#7120) (552f0dd)
• test(SKY-11847): case-table the script-reviewer validator tests (118→46, coverage-identical) (#7119) (4dc6094)
• feat(SKY-11891): restore learned run-class studio pane layout (#7118) (7eecd12)
• test(SKY-11847): consolidate failure-classifier tests to a category matrix (66→15, coverage-identical) (#7117) (8f61fe8)
• test(SKY-11847): it.each the FE css-vars/datadog-filter/tagTypes suites (84 to 39 it blocks, cases preserved) (#7115) (5106524)
• test(SKY-11847): matrix extraction-cache identity tests (80→33, coverage-identical) (#7116) (eeec9f3)
• feat(SKY-11846): shared test-fixture library slice + first consolidation exemplars (#7114) (ec773e0)
• test(SKY-11845): delete verified-redundant unit tests (zero coverage loss) (#7113) (f2f3399)
• feat(SKY-11890): persist edit-class studio pane layout (#7112) (8ab0db1)
• fix(downloads): upload downloads under their final name — wait out the in-flight extension rename (SKY-11849) (#7111) (cef0be8)
• fix(SKY-11885/11887/11888): block header cosmetic polish (#7110) (f78ad44)
• security: bump litellm >=1.84.0 in integrations/langchain (#6911) (cc485df)
• test(SKY-11812): unit-cover the copilot auto-open-Editor one-shot (#7109) (ade173e)
• fix(SKY-11832): remove Inspecting chip from studio screenshots view (#7108) (b38764d)
• fix(SKY-11886): stop URL sync from reverting focus on repeat block adds (#7107) (a050833)
• fix(copilot): keep composer placeholder on one line in narrow panes (#7106) (23f94b9)
• fix(SKY-11882): resolve run-detail workflow via run join so template runs don't 404 (#7105) (e82ad57)
• feat(SKY-11814): jump-to-start/end buttons for long workflows (#7104) (3672af5)
• feat(SKY-11813): block search with focus-and-jump in the studio editor (#7103) (a77a3bb)
• feat(captcha): element-tree placeholder for visible Cloudflare Turnstile frames (SKY-11616) (#7102) (54bc868)
• SKY-11855: bind scout-proven held-out inputs into copilot build-test runs + producer-recorded required_input_unbound (#7101) (e594525)
• feat(SKY-11852): positive independent-evidence carriers for requested-output completion (#7100) (b72f4be)
• fix(SKY-11591): actuate the separated-spine output-contract violation instead of returning unchanged (#7099) (10d2b44)
• fix(SKY-11854): recycle a scouting-only avoidable output-field-confirmation ASK instead of refusing (#7098) (2d94acf)
• feat: hint that Copilot accepts pasted recorded steps from other agents (#7097) (121d323)
• fix(SKY-11711): stage pdf_fill smoke-test source PDFs inside the run download dir (#7093) (a95bab8)
• Reconcile 3 download-path files with OSS main to stop the sync re-introducing a path-injection (#7092) (69ae62d)
• SKY-11724: bind recorded-outcome repair as a typed convergence constraint, not prose (#7091) (d36556a)
• feat(SKY-11842): positive independent-evidence binding for requested-output completion (#7090) (31c333a)
• fix(SKY-11843): gate copilot repair-ceiling terminalization on an executed-run guard (#7087) (1fc396e)
• fix(SKY-11722): carry hollow act-observe on-screen values into the typed build-test outcome (#7088) (2d99adc)
• SKY-11833: type judgment-boolean provenance through Copilot completion grading (#7086) (973f67b)
• fix(SKY-11825): tolerate non-JSON extracted_information in task read path (#7085) (7f8f302)
• fix(SKY-7996): release local Playwright driver for remote-CDP browser states (#7084) (a62dbe9)
• SKY-11818: unify build-scout goal-completeness with the typed requested-output contract (#7081) (ece73f5)
• test: consolidate copilot unit tests (−1,346 lines, coverage-preserving) (#7073) (085c718)
• chore: update qa evidence signed Linear flow (#7071) (9842cb5)
• SKY-11591: author-time output contract for Copilot build-time repair (#7069) (ac0bfa2)
• feat(SKY-11774): HTTP Request block fetches response values as secrets + passes secrets between blocks (#7054) (778257a)
• test(SKY-11786): characterization tests for execute_step exception handling (#7052) (56fb4f8)
• Show agent-scoped analytics snapshot above the runs list (#7051) (dcb5a24)
• fix(SKY-11826): gate the legacy Visual/Code toggle to /edit and anchor it under the header (#7065) (86e31de)
• SKY-11552: Show conditional and loop prompts in settings (#7050) (babe19b)
• feat(SKY-11764): workflow studio launch polish — button grammar, pane UX, run-view defaults, resilience (#7056) (c7fead5)
• SKY-11721: enforce Copilot completion evidence provenance (#7055) (b934c61)
• feat(SKY-11767): rotate login credentials across a pool per workflow run (#7053) (234ebcb)
• Add ZIP support to FileParserBlock [SKY-11711] (#7049) (b8e789d)
• [frontend] Fix run/block duration display dropping days past 24h (#7058) (6e78852)
• fix(SKY-11679): keep CDP-mode Record Browser alive across the transport swap (#7048) (7feeefe)
• feat(SKY-11755): studio pane drag-reorder, resizable widths, greedy browser layout (SKY-11756, SKY-11760) (#7047) (7b4dd9a)
• feat(SKY-11758): timeline pane rename, cold-entry layout mappings, append-only continuity (SKY-11763) (#7046) (6bb4098)
• feat(SKY-11758): slim the studio Run pane into a timeline + run-data pane (#7045) (34d3196)
• feat(SKY-11758): studio Browser pane absorbs run visuals + single pane header (SKY-11762) (#7044) (c1c2f65)
• fix(SKY-11759): studio editor pane — recenter on pane layout changes + start-anchored initial viewport (SKY-11761) (#7043) (4439cab)
• SKY-11640: avoid unsafe fallback for blocked anchor clicks (#7042) (36f0d47)
• feat(SKY-11729): migrate self-healing enablement from PostHog to a workflow setting (#7041) (6d63c55)
• SKY-11724 Ground recorded outcome repair attempts (#7040) (852040d)
• [codex] Tolerate missing local LLM setup (#6947) (db3c87b)
• SKY-8927 Block format-string sandbox escape in code blocks (#7039) (e79393b)
• security: bump joserfc >=1.6.8 to fix CVE-2026-49852 (HMAC auth bypass) (#7038) (38d160c)
• SKY-11526 Collapse autocomplete fanout (#7037) (0401d09)
• Browser recording front-end: live draft panel replaces editor, clean screenshots, new step kinds (#7036) (d10191f)
• refactor(SKY-11703): remove the AgentDB *args facade entirely (#7033) (bb9c183)
• feat(SKY-11051): back Save & Reuse Session with auto-managed browser profiles (#7032) (03e23fe)
• fix(SKY-11722): scout hollow act-observe outcome recording (#7031) (1c5ec09)
• feat(SKY-11487): advanced full-screen YAML editing mode in workflow editor (#7030) (d735f17)
• SKY-11678 Add local credential vault persistence to OSS Docker (#7003) (720d47d)
• SKY-11570 log shadow-match disagreement details (#7027) (ef22a35)
• SKY-11702 Migrate workflow params AgentDB callers (#7026) (1fea7f8)
• feat(SKY-11075): recent-activity history view on workflow build canvas (#7025) (c49ab35)
• SKY-11602 Surface run output signals in new UI (#7024) (3536333)
• fix: keep run view escapable from recording (#7021) (e60b983)
• feat(evals): MCP eval scaffold + seed datasets (connector E1) (#7023) (226796b)
• Fix default open Studio Copilot (#7022) (53474e4)
• SKY-11701: Migrate scripts and schedules AgentDB callers (#7020) (6fcbbda)
• feat(mcp): MCP_CODE_ONLY_MODE org flag + code-only default middleware (connector F1) (#7019) (42edab6)
• feat(copilot): emit workflow_run_id on block-running tool-result SSE frames (#7018) (ae61830)
• feat(mcp): code-block lint + synthesize tools (Copilot connector, M4) (#7017) (56dc1c5)
• chore(SKY-11691): relocate artifact-storage tests out of the shipped skyvern package (#7016) (b111a8b)
• fix(SKY-11675): heal to end-of-block and verify heals with action history (#7015) (81ab993)
• fix(SKY-11295): verify wrapped mini-goals against the mini goal (#7014) (07618ce)
• feat(SKY-11664): studio editor pane — build-mode canvas at pane widths (#7013) (8a118ca)
• Rename /workflows URLs to /agents (backwards-compatible) [SKY-11668] (#7011) (6ebf0c6)
• feat(SKY-11666): studio Run pane — Browser-pane interplay, run concurrency UX, output parity (#7010) (d1cee63)
• feat(SKY-11667): studio first-run experience — progressive disclosure (#7009) (6b3d91e)
• feat(SKY-11665): studio Browser pane — lock take-control while a block run executes (#7008) (cddad3a)
• feat(SKY-11662, SKY-11663): studio spine + side-by-side panes (?panes= URL state), Copilot as a peer pane (#7007) (cd088a4)
• fix: tolerate networkidle readiness failures (SKY-11613) (#7006) (e94e2c0)
• perf(record): event-driven message pump instead of 1ms busy-poll drain (#7005) (8a8af0d)
• perf(record): single exfiltration transport + None-tolerant dedup (#7004) (cfb3922)
• fix(record): start a fresh interpretation session per recording (#7002) (3b6cba4)
• Avoid inherited blank page workflow URLs (#7001) (830674a)
• fix(SKY-11638): persist Copilot review proof outputs (#7000) (e164e26)
• fix(record): stop NaN coordinates from killing the live-draft channel (#6999) (4e40b03)
• feat(mcp): enforce code-only mode on workflow persist path (connector, M4) (#6998) (fe84736)
• feat(mcp): code-only mode for block validation (Copilot connector, M4) (#6997) (5950e00)
• SKY-11642 repair read-only extraction verification (#6996) (fb6ff27)
• perf(record): emit interpretation deltas instead of full snapshots (#6995) (e52e90f)
• SKY-11545: Fail closed requested output grounding (#6994) (86ae763)
• SKY-11630: Repair missing output dependency handling (#6993) (83edbca)
• style: align block picker padding (SKY-11595) (#6991) (542dcc5)
• feat(SKY-11554): CodeBlock runner action + post-action screenshot broker (#6990) (b3fb369)
• fix: open diagnostics on selected code step (#6989) (53d3955)
• fix: clarify applied Copilot changes label (#6988) (a372449)
• SKY-11457 Clarify Copilot queued send action (#6987) (0ca97ff)
• feat(SKY-11461): add Studio browser activity indicator (#6986) (744e0b3)
• SKY-11607: Make screenshots easier to find in run UI (#6985) (f4efa23)
• Update changelog — Week of June 30, 2026 (#6984) (dd88233)
• feat(SKY-11649): studio editor uses build mode (inline collapsible blocks) (#6982) (fbfe3ab)
• SKY-11582: Stop repair loops on ungradeable requested-output checks (#6981) (cae1885)
• perf(record): faster live-draft enrichment (Gemini Flash Lite) + snappier debounce (#6973) (4f752a0)
• feat(SKY-11276): bounded code-block self-heal floor (#6971) (6ea5783)
• fix: run_alembic_check.sh must use the repo venv's alembic, not a global one (#6970) (7c643b6)
• feat: persist workflow studio block selection in URL (#6969) (ebb6f8f)
• feat(SKY-11348): gate 720p browser recording behind PostHog flag (#6968) (93151f6)
• fix(SKY-11608): restore syntax highlighting on large webhook payloads (#6967) (798689d)
• SKY-11550: Hide empty extra HTTP headers (#6966) (5808d8d)
• fix(SKY-11634): move ignore system prompt into advanced settings (#6964) (5155891)
• SKY-6452: Explain invalid JSON in workflow editor (#6963) (17cbbef)
• fix: enforce LLM block schema outputs (#6965) (4ee1e13)
• feat: dispatch copilot block runs to the UI worker (#6962) (53ad490)
• SKY-10620: Route data-only validation without page evidence (#6960) (527e9d2)
• Add browser runtime observability label (#6959) (86c4a5e)
• SKY-11611 credit corroborated requested-output abstentions (#6957) (5fafb3b)
• feat(SKY-11622): show block type in Studio block detail header (#6956) (4d1c0f7)
• docs: June 2026 monthly changelog email (#6955) (7739f43)
• docs: reformat legacy changelog entries to the Week-of format (#6954) (50f4692)
• Improve authenticator setup feedback (#6953) (203ff03)
• SKY-11391: Dedupe run-tab action detail panel (remove ACTIONS(N) + Selected action; bind tabs to child) (#6952) (af4ed12)
• SKY-11396: dedupe run-tab center card header label (#6950) (7d43049)
• fix: dedupe re-captured live browser-recording steps (#6951) (0bd0da7)
• feat(SKY-11392): action-detail card heading redesign (two-tier) (#6948) (6b57877)
• SKY-11398: consolidate live-run Code surfaces to one source of truth (#6945) (8914ba1)
• fix(SKY-11566): recover from active-session token failures on workflow loads (#6946) (8a39e19)
• fix(mcp): accept trailing-slash resource in MCP OAuth authorize (unblocks Codex CLI) (#6944) (a2dda9c)
• feat: execute workflow runs against the version stamped at creation (#6942) (17d4201)
• SKY-11545: Fail closed author-time output gates (#6941) (9266ba3)
• SKY-11545: Add recorded outcome spine (#6939) (1de08f3)
• feat(SKY-11555): auto-provision a browser session for CodeBlock runs (#6938) (ab5d58a)
• feat(SKY-11580): diagnose turns produce a useful diagnosis instead of dead-ending (#6937) (bb3471a)
• [codex] Add custom LLM configuration (#6936) (87dfc5a)

Full Changelog: v1.0.44...v1.0.45

What's Changed

• [codex] Add custom LLM configuration by @suchintan in #6936
• feat(SKY-11580): diagnose turns produce a useful diagnosis instead of dead-ending by @pedrohsdb in #6937
• feat(SKY-11555): auto-provision a browser session for CodeBlock runs by @wintonzheng in #6938
• SKY-11545: Add recorded outcome spine by @andrewneilson in #6939
• SKY-11545: Fail closed author-time output gates by @andrewneilson in #6941
• feat: execute workflow runs against the version stamped at creation by @wintonzheng in #6942
• fix(mcp): accept trailing-slash resource in MCP OAuth authorize (unblocks Codex CLI) by @marcmuon in #6944
• fix(SKY-11566): recover from active-session token failures on workflow loads by @AronPerez in #6946
• SKY-11398: consolidate live-run Code surfaces to one source of truth by @AronPerez in #6945
• feat(SKY-11392): action-detail card heading redesign (two-tier) by @AronPerez in #6948
• fix: dedupe re-captured live browser-recording steps by @cindehaa in #6951
• SKY-11396: dedupe run-tab center card header label by @AronPerez in #6950
• SKY-11391: Dedupe run-tab action detail panel (remove ACTIONS(N) + Selected action; bind tabs to child) by @AronPerez in #6952
• Improve authenticator setup feedback by @suchintan in #6953
• docs: reformat legacy changelog entries to the Week-of format by @suchintan in #6954
• docs: June 2026 monthly changelog email by @suchintan in #6955
• feat(SKY-11622): show block type in Studio block detail header by @AronPerez in #6956
• SKY-11611 credit corroborated requested-output abstentions by @andrewneilson in #6957
• Add browser runtime observability label by @LawyZheng in #6959
• SKY-10620: Route data-only validation without page evidence by @LawyZheng in #6960
• feat: dispatch copilot block runs to the UI worker by @wintonzheng in #6962
• fix: enforce LLM block schema outputs by @suchintan in #6965
• SKY-6452: Explain invalid JSON in workflow editor by @suchintan in #6963
• fix(SKY-11634): move ignore system prompt into advanced settings by @suchintan in #6964
• SKY-11550: Hide empty extra HTTP headers by @AronPerez in #6966
• fix(SKY-11608): restore syntax highlighting on large webhook payloads by @AronPerez in #6967
• feat(SKY-11348): gate 720p browser recording behind PostHog flag by @wintonzheng in #6968
• feat: persist workflow studio block selection in URL by @AronPerez in #6969
• fix: run_alembic_check.sh must use the repo venv's alembic, not a global one by @pedrohsdb in #6970
• feat(SKY-11276): bounded code-block self-heal floor by @pedrohsdb in #6971
• perf(record): faster live-draft enrichment (Gemini Flash Lite) + snappier debounce by @cindehaa in #6973
• SKY-11582: Stop repair loops on ungradeable requested-output checks by @andrewneilson in #6981
• feat(SKY-11649): studio editor uses build mode (inline collapsible blocks) by @celalzamanoglu in #6982
• Update changelog — Week of June 30, 2026 by @wintonzheng in #6984
• SKY-11607: Make screenshots easier to find in run UI by @AronPerez in #6985
• feat(SKY-11461): add Studio browser activity indicator by @AronPerez in #6986
• SKY-11457 Clarify Copilot queued send action by @AronPerez in #6987
• fix: clarify applied Copilot changes label by @AronPerez in #6988
• fix: open diagnostics on selected code step by @AronPerez in #6989
• feat(SKY-11554): CodeBlock runner action + post-action screenshot broker by @AronPerez in #6990
• style: align block picker padding (SKY-11595) by @AronPerez in #6991
• SKY-11630: Repair missing output dependency handling by @andrewneilson in #6993
• SKY-11545: Fail closed requested output grounding by @andrewneilson in #6994
• perf(record): emit interpretation deltas instead of full snapshots by @cindehaa in #6995
• SKY-11642 repair read-only extraction verification by @andrewneilson in #6996
• feat(mcp): code-only mode for block validation (Copilot connector, M4) by @marcmuon in #6997
• feat(mcp): enforce code-only mode on workflow persist path (connector, M4) by @marcmuon in #6998
• fix(record): stop NaN coordinates from killing the live-draft channel by @cindehaa in #6999
• fix(SKY-11638): persist Copilot review proof outputs by @andrewneilson in #7000
• Avoid inherited blank page workflow URLs by @suchintan in #7001
• fix(record): start a fresh interpretation session per recording by @cindehaa in #7002
• perf(record): single exfiltration transport + None-tolerant dedup by @cindehaa in #7004
• perf(record): event-driven message pump instead of 1ms busy-poll drain by @cindehaa in #7005
• fix: tolerate networkidle readiness failures (SKY-11613) by @LawyZheng in #7006
• feat(SKY-11662, SKY-11663): studio spine + side-by-side panes (?panes= URL state), Copilot as a peer pane by @celalzamanoglu in #7007
• feat(SKY-11665): studio Browser pane — lock take-control while a block run executes by @celalzamanoglu in #7008
• feat(SKY-11667): studio first-run experience — progressive disclosure by @celalzamanoglu in #7009
• feat(SKY-11666): studio Run pane — Browser-pane interplay, run concurrency UX, output parity by @celalzamanoglu in #7010
• Rename /workflows URLs to /agents (backwards-compatible) [SKY-11668] by @celalzamanoglu in #7011
• feat(SKY-11664): studio editor pane — build-mode canvas at pane widths by @celalzamanoglu in #7013
• fix(SKY-11295): verify wrapped mini-goals against the mini goal by @pedrohsdb in #7014
• fix(SKY-11675): heal to end-of-block and verify heals with action history by @pedrohsdb in #7015
• chore(SKY-11691): relocate artifact-storage tests out of the shipped skyvern package by @AronPerez in #7016
• feat(mcp): code-block lint + synthesize tools (Copilot connector, M4) by @marcmuon in #7017
• feat(copilot): emit workflow_run_id on block-running tool-result SSE frames by @trevor-cheung in #7018
• feat(mcp): MCP_CODE_ONLY_MODE org flag + code-only default middleware (connector F1) by @marcmuon in #7019
• SKY-11701: Migrate scripts and schedules AgentDB callers by @AronPerez in #7020
• Fix default open Studio Copilot by @AronPerez in #7022
• feat(evals): MCP eval scaffold + seed datasets (connector E1) by @marcmuon in #7023
• fix: keep run view escapable from recording by @AronPerez in #7021
• SKY-11602 Surface run output signals in new UI by @AronPerez in #7024
• feat(SKY-11075): recent-activity history view on workflow build canvas by @AronPerez in #7025
• SKY-11702 Migrate workflow params AgentDB callers by @AronPerez in #7026
• SKY-11570 log shadow-match disagreement details by @marcmuon in #7027
• SKY-11678 Add local credential vault persistence to OSS Docker by @suchintan in #7003
• feat(SKY-11487): advanced full-screen YAML editing mode in workflow editor by @celalzamanoglu in #7030
• fix(SKY-11722): scout hollow act-observe outcome recording by @andrewneilson in #7031
• feat(SKY-11051): back Save & Reuse Session with auto-managed browser profiles by @suchintan in #7032
• refactor(SKY-11703): remove the AgentDB *args facade entirely by @AronPerez in #7033
• Browser recording front-end: live draft panel replaces editor, clean screenshots, new step kinds by @cindehaa in #7036
• SKY-11526 Collapse autocomplete fanout by @marcmuon in #7037
• security: bump joserfc >=1.6.8 to fix CVE-2026-49852 (HMAC auth bypass) by @AronPerez in #7038
• SKY-8927 Block format-string sandbox escape in code blocks by @AronPerez in #7039
• [codex] Tolerate missing local LLM setup by @suchintan in #6947
• SKY-11724 Ground recorded outcome repair attempts by @andrewneilson in #7040
• feat(SKY-11729): migrate self-healing enablement from PostHog to a workflow setting by @pedrohsdb in #7041
• SKY-11640: avoid unsafe fallback for blocked anchor clicks by @LawyZheng in #7042
• fix(SKY-11759): studio editor pane — recenter on pane layout changes + start-anchored initial viewport (SKY-11761) by @celalzamanoglu in #7043
• feat(SKY-11758): studio Browser pane absorbs run visuals + single pane header (SKY-11762) by @celalzamanoglu in #7044
• feat(SKY-11758): slim the studio Run pane into a timeline + run-data pane by @celalzamanoglu in #7045
• feat(SKY-11758): timeline pane rename, cold-entry layout mappings, append-only continuity (SKY-11763) by @celalzamanoglu in #7046
• feat(SKY-11755): studio pane drag-reorder, resizable widths, greedy browser layout (SKY-11756, SKY-11760) by @celalzamanoglu in #7047
• fix(SKY-11679): keep CDP-mode Record Browser alive across the transport swap by @celalzamanoglu in #7048
• [frontend] Fix run/block duration display dropping days past 24h by @abhay-codes07 in #7058
• Add ZIP support to FileParserBlock [SKY-11711] by @suchintan in #7049
• feat(SKY-11767): rotate login credentials across a pool per workflow run by @suchintan in #7053
• SKY-11721: enforce Copilot completion evidence provenance by @andrewneilson in #7055
• feat(SKY-11764): workflow studio launch polish — button grammar, pane UX, run-view defaults, resilience by @celalzamanoglu in #7056
• SKY-11552: Show conditional and loop prompts in settings by @AronPerez in #7050
• fix(SKY-11826): gate the legacy Visual/Code toggle to /edit and anchor it under the header by @celalzamanoglu in #7065
• Show agent-scoped analytics snapshot above the runs list by @AronPerez in #7051
• test(SKY-11786): characterization tests for execute_step exception handling by @AronPerez in #7052
• feat(SKY-11774): HTTP Request block fetches response values as secrets + passes secrets between blocks by @suchintan in #7054
• SKY-11591: author-time output contract for Copilot build-time repair by @andrewneilson in #7069
• chore: update qa evidence signed Linear flow by @suchintan in #7071
• test: consolidate copilot unit tests (−1,346 lines, coverage-preserving) by @andrewneilson in #7073
• SKY-11818: unify build-scout goal-completeness with the typed requested-output contract by @andrewneilson in #7081
• fix(SKY-7996): release local Playwright driver for remote-CDP browser states by @wintonzheng in #7084
• fix(SKY-11825): tolerate non-JSON extracted_information in task read path by @wintonzheng in #7085
• SKY-11833: type judgment-boolean provenance through Copilot completion grading by @andrewneilson in #7086
• fix(SKY-11722): carry hollow act-observe on-screen values into the typed build-test outcome by @andrewneilson in #7088
• fix(SKY-11843): gate copilot repair-ceiling terminalization on an executed-run guard by @andrewneilson in #7087
• feat(SKY-11842): positive independent-evidence binding for requested-output completion by @andrewneilson in #7090
• SKY-11724: bind recorded-outcome repair as a typed convergence constraint, not prose by @andrewneilson in #7091
• Reconcile 3 download-path files with OSS main to stop the sync re-introducing a path-injection by @andrewneilson in #7092
• fix(SKY-11711): stage pdf_fill smoke-test source PDFs inside the run download dir by @wintonzheng in #7093
• feat: hint that Copilot accepts pasted recorded steps from other agents by @cindehaa in #7097
• fix(SKY-11854): recycle a scouting-only avoidable output-field-confirmation ASK instead of refusing by @andrewneilson in #7098
• fix(SKY-11591): actuate the separated-spine output-contract violation instead of returning unchanged by @andrewneilson in #7099
• feat(SKY-11852): positive independent-evidence carriers for requested-output completion by @andrewneilson in #7100
• SKY-11855: bind scout-proven held-out inputs into copilot build-test runs + producer-recorded required_input_unbound by @andrewneilson in #7101
• feat(captcha): element-tree placeholder for visible Cloudflare Turnstile frames (SKY-11616) by @LawyZheng in #7102
• feat(SKY-11813): block search with focus-and-jump in the studio editor by @celalzamanoglu in #7103
• feat(SKY-11814): jump-to-start/end buttons for long workflows by @celalzamanoglu in #7104
• fix(SKY-11882): resolve run-detail workflow via run join so template runs don't 404 by @cindehaa in #7105
• fix(copilot): keep composer placeholder on one line in narrow panes by @cindehaa in #7106
• fix(SKY-11886): stop URL sync from reverting focus on repeat block adds by @celalzamanoglu in #7107
• fix(SKY-11832): remove Inspecting chip from studio screenshots view by @celalzamanoglu in #7108
• test(SKY-11812): unit-cover the copilot auto-open-Editor one-shot by @celalzamanoglu in #7109
• security: bump litellm >=1.84.0 in integrations/langchain by @AronPerez in #6911
• fix(SKY-11885/11887/11888): block header cosmetic polish by @celalzamanoglu in #7110
• fix(downloads): upload downloads under their final name — wait out the in-flight extension rename (SKY-11849) by @wintonzheng in #7111
• feat(SKY-11890): persist edit-class studio pane layout by @celalzamanoglu in #7112
• test(SKY-11845): delete verified-redundant unit tests (zero coverage loss) by @suchintan in #7113
• feat(SKY-11846): shared test-fixture library slice + first consolidation exemplars by @suchintan in #7114
• test(SKY-11847): matrix extraction-cache identity tests (80→33, coverage-identical) by @suchintan in #7116
• test(SKY-11847): it.each the FE css-vars/datadog-filter/tagTypes suites (84 to 39 it blocks, cases preserved) by @suchintan in #7115
• test(SKY-11847): consolidate failure-classifier tests to a category matrix (66→15, coverage-identical) by @suchintan in #7117
• feat(SKY-11891): restore learned run-class studio pane layout by @celalzamanoglu in #7118
• test(SKY-11847): case-table the script-reviewer validator tests (118→46, coverage-identical) by @suchintan in #7119
• fix(llm): disable Gemini safety filters for agent calls (SKY-11766) by @wintonzheng in #7120
• Add vendor worker queues with DYNAMIC_BROWSER_TYPE routing by @LawyZheng in #7121
• feat(SKY-11471): prefill login block goal from saved credential instructions by @celalzamanoglu in #7122
• fix(SKY-11500): drop the throwaway default-tab recording by @celalzamanoglu in #7123
• test(SKY-11847): matrix workflow-parameter-validation tests (65→28, coverage-identical) by @suchintan in #7133
• test(SKY-11847): table-drive CDP download interceptor tests (67→34, coverage-identical) by @suchintan in #7134
• security: fix 7 HIGH npm vulnerabilities in skyvern-ts/client (vite, fast-uri, rollup, serialize-javascript) by @AronPerez in #7082
• security: update cryptography to fix CVE-2024-12797 in langchain integration by @AronPerez in #7012
• SKY-11865: mint-time satisfiability + typed fail-safe degrade on the classifier-fallback completion producer by @andrewneilson in #7135
• SKY-11575 Restore unified runs toolbar with gesture zoom and pulse feedback by @AronPerez in #7136
• fix(SKY-11793): remove non-sandboxed second render in TextPromptBlock (SSTI) by @AronPerez in #7137
• feat(editor): highlight run-blocking blocks and gate the Run CTA (SKY-10569) by @AronPerez in #7139
• Revert "feat(editor): highlight run-blocking blocks and gate the Run CTA (SKY-10569)" by @AronPerez in #7140
• feat(SKY-11879): family-uniform output-contract actuation — no bail returns unchanged by @andrewneilson in #7141
• fix(SKY-11914): require auth for pylon email hash by @AronPerez in #7142
• SKY-11527 Collapse custom select fanout by @marcmuon in #7143
• fix(SKY-11917): validate script deploy file paths by @AronPerez in #7145
• SKY-11527: scope custom-select hard-fail to checkbox/radio + settle async read-back by @marcmuon in #7146
• fix(SKY-11881): persist typed code-block recorder actions by @AronPerez in #7147
• security: add .npmrc ignore-scripts to skyvern-ts/client by @wintonzheng in #7094
• feat(SKY-11609): attribute Temporal activity-timeout workflow finalization by @LawyZheng in #7148
• fix(SKY-11899): Copilot fresh-session replay frontier by @andrewneilson in #7149
• fix(SKY-11916): tighten cloud credentialed CORS by @AronPerez in #7151
• fix: broaden CDP download interceptor to capture XHR file responses with generic binary MIME types by @LawyZheng in #7153
• fix(llm): inject Gemini safety_settings per-deployment so Azure fallback survives (SKY-11766, incident #646) by @AronPerez in #7154
• fix(llm): fall back to non-Gemini model on Gemini content_filter (SKY-11766) by @wintonzheng in #7155
• fix(SKY-11982): restore real filenames for downloaded files (upload regression) by @AronPerez in #7156
• fix(credentials): edit-test corruption + browser-profile name reuse (partial unique index) by @wintonzheng in #7157
• feat(SKY-11993): warn that PDF Fill works best on fillable PDFs by @suchintan in #7158
• perf(SKY-8227): re-add DB pool timeout/recycle knobs and API-only pool sizing by @AronPerez in #7159
• fix(credentials): close secret-leak gap in temp-credential cleanup + regression test by @celalzamanoglu in #7160
• fix(SKY-11965): report valid PostgreSQL start command in skyvern status by @marcmuon in #7161
• fix(llm): re-point Vertex gemini-3.1-flash-lite at the GA id (preview sunsets 2026-07-09) by @pedrohsdb in #7162
• fix(SKY-11910): surface custom dropdown options in MCP observe + non-leaking action errors by @marcmuon in #7165
• fix(SKY-12003): restore hosted /mcp/ connectivity and freeze Docker deps to uv.lock by @marcmuon in #7166
• chore(SKY-12003): cap fastmcp below 3.4 as temporary safety upper bound by @marcmuon in #7168
• feat(SKY-8207): consistent egress IP for Save & Reuse Session runs by @suchintan in #7169
• Bump version to 1.0.45 by @wintonzheng in #7167

New Contributors

• @abhay-codes07 made their first contribution in #7058

Full Changelog: v1.0.44...v1.0.45