v1.7.0

Added

• Added a Hadolint pull request check and Docker-backed npm run docker:lint
  command for Dockerfile linting.
• Added ESLint plugin coverage for Node.js, import, Vitest, and regular
  expression checks.
• Added comparison and recipe documentation that explains when to use
  CloakBrowser MCP instead of plain upstream @playwright/mcp.
• Added README and docs homepage demo video coverage for npm startup, humanized
  prompt typing, web research, daily automation, and testing workflows.
• Added an Animated WebP demo asset and npm commands for rendering the README
  and docs demo from the generated MP4.

Changed

• Updated the CloakBrowser dependency to ^0.4.8 and forwarded
  CloakBrowser-generated default launch args such as --start-maximized.
• Updated contributor and security policy documentation to reflect the current
  Node.js requirement and published release support policy.
• Made bridge CLI boolean environment variables reject unknown string values
  instead of silently treating typos as false.

Fixed

• Handled malformed Streamable HTTP Host or URL values without surfacing an
  internal routing error.

Security

• Narrowed upstream child-process environment inheritance to an allowlist so
  unrelated tokens and CI secrets are not forwarded by default.
• Added an advisory filesystem lock for persistent browser profiles across
  bridge processes.
• Added a Streamable HTTP startup warning for non-loopback HTTP binds without
  built-in auth or TLS, and documented the Docker no-sandbox trade-off.