What's Changed
Version bumped from 1.0.24 to 1.0.25
Recent Changes
- v1.0.25 (#5209) (992066a)
- Streamline CLI quickstart: browser setup, LLM models, Ollama support (#5214) (0afc593)
- Add CDP screencast streaming and interactive input for local mode (#4904) (86a4f6a)
- fix: resolve 4 CodeQL alerts in extract_form_fields.js (#5212) (5fa0ff6)
- fix: allow artifact bucket URIs in managed file access check (SKY-8520) (#5210) (85487a7)
- feat: enable multiline wrapping for conditional block expressions (#5208) (7931848)
- fix: keep parameter order consistent across run UI (SKY-8467) (#5207) (1d7f0d4)
- fix: move "Add new credential" to top of credential selector dropdowns (#5206) (3a748b3)
- fix: preserve credential parameters during MCP workflow updates (#5205) (e3a2609)
- fix: increase active ring opacity on timeline items for visible focus border (SKY-8457) (#5204) (c537bae)
- feat: persist save_browser_session_intent checkbox state (SKY-8329) (#5203) (750fb22)
- fix: prevent proactive captcha detection false positives on invisible reCAPTCHA (SKY-8515) (#5202) (cdf1dfe)
- fix: add validation error detection to phone format checker (#SKY-8504) (#5201) (474936b)
- Update LangChain integration dependency overrides and bump fastmcp / py-key-value-aio (#5200) (8a3ea80)
- fix: resolve 3 CodeQL alerts in extract_form_fields.js (#5198) (236c6cb)
- Update API specifications with fern api update (#5196) (a244869)
- [SKY-8441] Remove python-ecdsa from integration lock files (#5190) (d77c6a1)
- Update API specifications with fern api update (#5185) (860a515)
- [SKY-8441] Address Minerva timing attack on P-256 in python-ecdsa (#5184) (25bf5c0)
- Gate script reviewer on actual script execution (#5183) (74a2f61)
- fix: restrict managed storage URI reads by organization (#5182) (62ae173)
- feat: strengthen login test prompt and remove max_steps cap (SKY-8329) (#5181) (f87a96f)
- [NO-TICKET] Add Logging for Scheduled Workflows (#5180) (641792a)
- Add PostHog custom events for builder interactions (SKY-8413) (#5179) (59c28ae)
- Teach script reviewer to handle blank page errors with wait calls (#5178) (de572a0)
- [NO-TICKET] Limit Schedules Created By Tier (#5177) (d81665c)
- Force ai_fallback=True for adaptive caching runs (#5176) (b496d20)
- feat: add live view link in credential testing UI (SKY-8329) (#5175) (ccb253a)
- feat: replace saved-profile badge with save icon (SKY-8329) (#5174) (6023661)
- fix: for_loop script generation uses loop_over parameter key (#5173) (afca9b5)
- fix: improve conditional prompt for jinja+natlang consistency (SKY-8465) (#5172) (fe460f4)
- feat: improve reCAPTCHA/hCaptcha solving with prompt fix and proactive detection (SKY-8421) (#5171) (4c185b9)
- Fix: guard scroll_to_top/scroll_to_next_page against non-numeric JS returns (#5170) (3889c2b)
- Bundle artifacts to reduce S3 objects (#5169) (ba8a724)
- security: fix Python dependency vulnerabilities (#5130) (2198613)
- fix: prevent settings page crash for self-hosted Docker builds (#5163) (56275c8)
- Readd removed commits (#5167) (c4006bd)
- Revert "feat: add MiniMax LLM provider support" (#5153) (1c1ae1a)
- refactor: remove broken effective_browser_session_id suppression (SKY-8465) (#5166) (42755ce)
- [Critical] Fix CodeBlock sandbox: remove asyncio, block dangerous attrs (#SKY-7897) (#5165) (3af173f)
- fix: prevent settings page crash for self-hosted users (#5164) (a995b6e)
- Add workflow runs links from scheduler pages (#SKY-8468) (#5162) (1d2a398)
- Fix: Collapse Upcoming Runs card when schedule is paused (SKY-8452) (#5158) (7ed9cfe)
- fix: harden Workflow Copilot against prompt injection (SKY-8362) (#5156) (e52428c)
- fix: replace page.wait_for_timeout with asyncio.sleep to avoid CDP detection (#5157) (a9b590d)
- Fix: export conditional from skyvern module (#5154) (f40aa8a)
- fix: credential selectors stuck on skeleton during background refetch (#5151) (d80938d)
- [NO-TICKET] Remove tests (#5161) (c0751e1)
- Fix: generate if/else for conditional blocks in Code 2.0 + branch return validation (#5160) (975cdd8)
- [NO-TICKET] Remove bad tests (#5159) (640cdeb)
- Rate limit browser session refresh in debug UI (#SKY-7514) (#5152) (7722d1f)
- Fix: Add confirmation dialog for bulk schedule deletion (SKY-8450) (#5149) (2b4778f)
- fix: show Used instead of Generated when run uses cached script without fallback (#5147) (f28e2bc)
- Fix bulk operations: defer selection clear, add concurrency control and summary toast (#SKY-8451) (#5148) (bf01aba)
- docs/fix: update TOTP docs, SDK reference, light mode logo, and broken API key links (#5150) (d57ced3)
- feat: add frontend schedule panel to workflow editor (#SKY-8184) (#5146) (cfe01b0)
- feat: report FILE_PARSER_ERROR code on file parser block failures (SKY-7939) (#5145) (b76de94)
- Add workflow schedules support (DB model, API routes, Temporal integration) (#SKY-8182) (#5144) (1c68fbd)
- fix: resolve Code 2.0 script UI issues (SKY-8444–8448) (#5143) (8ff6102)
- fix: replace instant download check with progress-aware polling loop (#SKY-8433) (#5142) (a128dc2)
- fix: skip script_block entries for blocks with no actions (#SKY-8443) (#5141) (416b6b4)
- feat: DB migration for workflow schedules (#SKY-8181) (#5140) (e321c89)
- fix: refresh credentials list on mount to show saved-profile tag (#5138) (203e0ac)
- build(deps): bump the uv group across 2 directories with 3 updates (#5135) (7c3fbb1)
- fix: show and allow editing 2FA method in credential edit modal (SKY-8430) (#5137) (2003d6c)
- feat: improve workflow run page feedback during execution (SKY-8345) (#5136) (4510c45)
- fix: update Python dependencies to fix security vulnerabilities (SKY-8441) (#5134) (d4d9788)
- fix: don't early-return on syntax error so Script Update Card shows (#SKY-8434) (#5133) (032bbbb)
- refactor: rename browser type to stealth-chromium (#5131) (bcf19c8)
- fix: fail cached download block when no file is downloaded locally (#SKY-8433) (#5127) (cb34d86)
- fix: remove cloud captcha import from OSS module, add CI guard (SKY-8406) (#5124) (77bc207)
- make posthog default timeout 2 seconds (#4842) (ddfb558)
- build(deps): bump the npm_and_yarn group across 4 directories with 6 updates (#5101) (b15f176)
- build(deps): bump the uv group across 2 directories with 6 updates (#5126) (c64b344)
- fix: use
is not Nonechecks in update_persistent_browser_session (#4977) (e16d113) - feat: add MiniMax LLM provider support (#5109) (69a7a3f)
- fix: prevent country code duplication in phone format checker (SKY-8395) (#5125) (9de05b2)
- Fix: Diagnostics button always visible for completed task blocks (SKY-8398) (#5120) (db66b66)
- fix: S3 upload and rename ordering in cached download path (#5115) (bd68e1a)
- fix handling action log (#5113) (e486711)
- feat: add script pinning backend support (#5112) (9ddc970)
- feat: add enriched script version detail endpoint (#5111) (f2062b6)
- feat: add Workflow Scripts Page foundation (#5110) (7427607)
- Revert "fix: upload downloaded files to S3 in cached download path" (#5106) (be63522)
- feat: add script version comparison endpoint (#5108) (25820a5)
- fix: support download_suffix in cached script execution (#5107) (752d0ac)
- fix: upload downloaded files to S3 in cached download path (#5105) (7260dea)
- docs: remove --database-string example from README quickstart (#SKY-8287) (#5041) (574090c)
- Update API specifications with fern api update (#5104) (0b7009e)
- Fix: retry empty LLM responses in extraction task generation (#SKY-8264) (#5103) (54b73c0)
- Add browser_metadata field with website_url to step output (#5102) (5ef7bc8)
- Fix Copilot creating disconnected workflow paths (#SKY-8292) (#5093) (8c5fd3e)
- feat: add user context field for credential login testing — frontend (#SKY-8074) (#5100) (d2b69f6)
- fix: self-hosted model keys resolve to unregistered fallback configs (#5099) (1bedb95)
- feat: auto-review on script failures with daily cap per wpid (SKY-8334) (#5098) (c55d9f4)
- feat: teach script reviewer about page.terminate() with conditional-only rule (SKY-8334) (#5097) (ef4e68a)
- feat: implement page.terminate() for Code 2.0 cached execution (SKY-8334) (#5096) (c45d145)
- fix: only show delete confirmation dialog when output is referenced (SKY-8326) (#5095) (477cd70)
- fix: use started_at for run history duration calculation (#5094) (76bb2de)
- Add bundle key to artifact model (#5092) (e08ff39)
- fix: reject empty download URLs with clear error (SKY-8334) (#5091) (f7749e4)
- fix: preserve loop block connections when conditionals filter branch targets (#5090) (525ce13)
- fix: add browser-level download monitor for CDP downloads bypassing Fetch (#5089) (e80ded3)
- VNC streaming support in docker (#5088) (cece22f)
- Revert "DOM parser perf phase 5: deep sweep optimizations" (#5087) (9b61deb)
Full Changelog: v1.0.24...v1.0.25
What's Changed
- Revert "DOM parser perf phase 5: deep sweep optimizations" by @wintonzheng in #5087
- VNC streaming support in docker by @wintonzheng in #5088
- fix: add browser-level download monitor for CDP downloads bypassing Fetch by @LawyZheng in #5089
- fix: preserve loop block connections when conditionals filter branch targets by @celalzamanoglu in #5090
- fix: reject empty download URLs with clear error (SKY-8334) by @pedrohsdb in #5091
- Add bundle key to artifact model by @wintonzheng in #5092
- fix: use started_at for run history duration calculation by @wintonzheng in #5094
- fix: only show delete confirmation dialog when output is referenced (SKY-8326) by @celalzamanoglu in #5095
- feat: implement page.terminate() for Code 2.0 cached execution (SKY-8334) by @pedrohsdb in #5096
- feat: teach script reviewer about page.terminate() with conditional-only rule (SKY-8334) by @pedrohsdb in #5097
- feat: auto-review on script failures with daily cap per wpid (SKY-8334) by @pedrohsdb in #5098
- fix: self-hosted model keys resolve to unregistered fallback configs by @pedrohsdb in #5099
- feat: add user context field for credential login testing — frontend (#SKY-8074) by @celalzamanoglu in #5100
- Fix Copilot creating disconnected workflow paths (#SKY-8292) by @celalzamanoglu in #5093
- Add browser_metadata field with website_url to step output by @wintonzheng in #5102
- Fix: retry empty LLM responses in extraction task generation (#SKY-8264) by @wintonzheng in #5103
- Update API specifications with fern api update by @wintonzheng in #5104
- docs: remove --database-string example from README quickstart (#SKY-8287) by @suchintan in #5041
- fix: upload downloaded files to S3 in cached download path by @wintonzheng in #5105
- fix: support download_suffix in cached script execution by @wintonzheng in #5107
- feat: add script version comparison endpoint by @pedrohsdb in #5108
- Revert "fix: upload downloaded files to S3 in cached download path" by @wintonzheng in #5106
- feat: add Workflow Scripts Page foundation by @pedrohsdb in #5110
- feat: add enriched script version detail endpoint by @pedrohsdb in #5111
- feat: add script pinning backend support by @pedrohsdb in #5112
- fix handling action log by @wintonzheng in #5113
- fix: S3 upload and rename ordering in cached download path by @wintonzheng in #5115
- Fix: Diagnostics button always visible for completed task blocks (SKY-8398) by @wintonzheng in #5120
- fix: prevent country code duplication in phone format checker (SKY-8395) by @LawyZheng in #5125
- feat: add MiniMax LLM provider support by @octo-patch in #5109
- fix: use
is not Nonechecks in update_persistent_browser_session by @andrewneilson in #4977 - build(deps): bump the uv group across 2 directories with 6 updates by @dependabot[bot] in #5126
- build(deps): bump the npm_and_yarn group across 4 directories with 6 updates by @dependabot[bot] in #5101
- make posthog default timeout 2 seconds by @wintonzheng in #4842
- fix: remove cloud captcha import from OSS module, add CI guard (SKY-8406) by @pedrohsdb in #5124
- fix: fail cached download block when no file is downloaded locally (#SKY-8433) by @pedrohsdb in #5127
- refactor: rename browser type to stealth-chromium by @wintonzheng in #5131
- fix: don't early-return on syntax error so Script Update Card shows (#SKY-8434) by @pedrohsdb in #5133
- fix: update Python dependencies to fix security vulnerabilities (SKY-8441) by @AronPerez in #5134
- feat: improve workflow run page feedback during execution (SKY-8345) by @celalzamanoglu in #5136
- fix: show and allow editing 2FA method in credential edit modal (SKY-8430) by @celalzamanoglu in #5137
- build(deps): bump the uv group across 2 directories with 3 updates by @dependabot[bot] in #5135
- fix: refresh credentials list on mount to show saved-profile tag by @celalzamanoglu in #5138
- feat: DB migration for workflow schedules (#SKY-8181) by @AronPerez in #5140
- fix: skip script_block entries for blocks with no actions (#SKY-8443) by @pedrohsdb in #5141
- fix: replace instant download check with progress-aware polling loop (#SKY-8433) by @pedrohsdb in #5142
- fix: resolve Code 2.0 script UI issues (SKY-8444–8448) by @pedrohsdb in #5143
- Add workflow schedules support (DB model, API routes, Temporal integration) (#SKY-8182) by @AronPerez in #5144
- feat: report FILE_PARSER_ERROR code on file parser block failures (SKY-7939) by @suchintan in #5145
- feat: add frontend schedule panel to workflow editor (#SKY-8184) by @AronPerez in #5146
- docs/fix: update TOTP docs, SDK reference, light mode logo, and broken API key links by @ritiksahni in #5150
- Fix bulk operations: defer selection clear, add concurrency control and summary toast (#SKY-8451) by @wintonzheng in #5148
- fix: show Used instead of Generated when run uses cached script without fallback by @pedrohsdb in #5147
- Fix: Add confirmation dialog for bulk schedule deletion (SKY-8450) by @wintonzheng in #5149
- Rate limit browser session refresh in debug UI (#SKY-7514) by @celalzamanoglu in #5152
- [NO-TICKET] Remove bad tests by @AronPerez in #5159
- Fix: generate if/else for conditional blocks in Code 2.0 + branch return validation by @pedrohsdb in #5160
- [NO-TICKET] Remove tests by @AronPerez in #5161
- fix: credential selectors stuck on skeleton during background refetch by @celalzamanoglu in #5151
- Fix: export conditional from skyvern module by @pedrohsdb in #5154
- fix: replace page.wait_for_timeout with asyncio.sleep to avoid CDP detection by @wintonzheng in #5157
- fix: harden Workflow Copilot against prompt injection (SKY-8362) by @wintonzheng in #5156
- Fix: Collapse Upcoming Runs card when schedule is paused (SKY-8452) by @wintonzheng in #5158
- Add workflow runs links from scheduler pages (#SKY-8468) by @wintonzheng in #5162
- fix: prevent settings page crash for self-hosted users by @celalzamanoglu in #5164
- [Critical] Fix CodeBlock sandbox: remove asyncio, block dangerous attrs (#SKY-7897) by @wintonzheng in #5165
- refactor: remove broken effective_browser_session_id suppression (SKY-8465) by @celalzamanoglu in #5166
- Revert "feat: add MiniMax LLM provider support" by @AronPerez in #5153
- Readd removed commits by @AronPerez in #5167
- fix: bake APP_VERSION into self-hosted Docker images by @celalzamanoglu in #5163
- security: fix Python dependency vulnerabilities by @AronPerez in #5130
- Bundle artifacts to reduce S3 objects by @wintonzheng in #5169
- Fix: guard scroll_to_top/scroll_to_next_page against non-numeric JS returns by @LawyZheng in #5170
- feat: improve reCAPTCHA/hCaptcha solving with prompt fix and proactive detection (SKY-8421) by @LawyZheng in #5171
- fix: improve conditional prompt for jinja+natlang consistency (SKY-8465) by @celalzamanoglu in #5172
- fix: for_loop script generation uses loop_over parameter key by @pedrohsdb in #5173
- feat: replace saved-profile badge with save icon (SKY-8329) by @celalzamanoglu in #5174
- feat: add live view link in credential testing UI (SKY-8329) by @celalzamanoglu in #5175
- Force ai_fallback=True for adaptive caching runs by @pedrohsdb in #5176
- [NO-TICKET] Limit Schedules Created By Tier by @AronPerez in #5177
- Teach script reviewer to handle blank page errors with wait calls by @pedrohsdb in #5178
- Add PostHog custom events for builder interactions (SKY-8413) by @wintonzheng in #5179
- [NO-TICKET] Add Logging for Scheduled Workflows by @AronPerez in #5180
- feat: strengthen login test prompt and remove max_steps cap (SKY-8329) by @celalzamanoglu in #5181
- fix: restrict managed storage URI reads by organization by @wintonzheng in #5182
- Gate script reviewer on actual script execution by @pedrohsdb in #5183
- [SKY-8441] Address Minerva timing attack on P-256 in python-ecdsa by @AronPerez in #5184
- Update API specifications with fern api update by @wintonzheng in #5185
- [SKY-8441] Remove python-ecdsa from integration lock files by @AronPerez in #5190
- Update API specifications with fern api update by @wintonzheng in #5196
- fix: resolve 3 CodeQL alerts in extract_form_fields.js by @wintonzheng in #5198
- Update LangChain integration dependency overrides and bump fastmcp / py-key-value-aio by @AronPerez in #5200
- fix: add validation error detection to phone format checker (#SKY-8504) by @LawyZheng in #5201
- fix: prevent proactive captcha detection false positives on invisible reCAPTCHA (SKY-8515) by @LawyZheng in #5202
- feat: persist save_browser_session_intent checkbox state (SKY-8329) by @celalzamanoglu in #5203
- fix: increase active ring opacity on timeline items for visible focus border (SKY-8457) by @celalzamanoglu in #5204
- fix: preserve credential parameters during MCP workflow updates by @marcmuon in #5205
- fix: move "Add new credential" to top of credential selector dropdowns by @celalzamanoglu in #5206
- fix: keep parameter order consistent across run UI (SKY-8467) by @celalzamanoglu in #5207
- feat: enable multiline wrapping for conditional block expressions by @celalzamanoglu in #5208
- fix: allow artifact bucket URIs in managed file access check (SKY-8520) by @celalzamanoglu in #5210
- fix: resolve 4 CodeQL alerts in extract_form_fields.js by @pedrohsdb in #5212
- Add CDP screencast streaming and interactive input for local mode by @andrewneilson in #4904
- Streamline CLI quickstart: browser setup, LLM models, Ollama support by @suchintan in #5214
- v1.0.25 by @wintonzheng in #5209
New Contributors
- @octo-patch made their first contribution in #5109
- @ritiksahni made their first contribution in #5150
Full Changelog: v1.0.24...v1.0.25