github Skyvern-AI/skyvern v1.0.54
Release v1.0.54

7 hours ago

What's Changed

Version bumped from 1.0.53 to 1.0.54

Recent Changes

  • Bump version to 1.0.54 (#8632) (2352506)
  • Preserve onboarding example attribution (#SKY-16818) (#8633) (0e6274f)
  • Stop syncing dev_scripts to the open source repo and inline the invisible hCaptcha test fixture (#8631) (b6749ea)
  • Remove the fake captcha test site and inline the invisible hCaptcha fixture into its test (#8626) (9a3ee5e)
  • Rename CodeBlock redaction test constant so OSS CodeQL stops flagging it (SKY-16595) (#8624) (e93325e)
  • Keep CodeBlock log records and name the failure when parameter redaction gives up (SKY-16595) (#8619) (99c2268)
  • Register per-org OpenRouter gpt-5.6-luna configs and fix the responses-bridge guard they expose (SKY-16623) (#8618) (3261840)
  • Build Twilio test fixture ids at runtime so the OSS sync passes push protection (SKY-16550) (#8612) (e2f4014)
  • Skip the OpenRouter provider that returns action-less extract responses (SKY-16508) (#8610) (2c9eb72)
  • Keep a saved dialog handler in force for the whole workflow run on the secure runner (SKY-16343) (#8609) (b992b31)
  • Copilot writes code block Goals as outcome then route, and the AI fallback no longer crashes [SKY-16386] (#8607) (1f62250)
  • Log the provider response id on LLM duration metrics (SKY-16508) (#8606) (26eb9ef)
  • Task V3 observe: stop listing an unnamed control no scroll can reach, on a per-run arm (SKY-16501) (#8605) (55702a5)
  • Name the challenge frame inside a covering layer instead of telling the agent to dismiss it (SKY-16365) (#8603) (ce62b63)
  • Let Workflow Copilot author workflows from demonstration videos (#8602) (4425b38)
  • Send "Start Building" to sign-up and redirect unknown emails from sign-in to a prefilled sign-up (#8601) (5f22dbf)
  • Record a challenge raised by a scouted click as an effect (SKY-16363) (#8600) (e319436)
  • Enable staging pressure observation with a runtime compatibility handshake (#8599) (53c122a)
  • Capitalize Task in the workflow recording menu (#8598) (feb9fe2)
  • Add Web Search block with Google and Exa (SKY-16450) (#8597) (aa4eb42)
  • Keep Copilot on the right during recording (#8596) (fc02544)
  • Count a visible Cloudflare challenge frame as a present captcha in the solve ladder (SKY-16235) (#8595) (81042d7)
  • Prevent incremental DOM observer memory growth (#8594) (ad220bc)
  • Persist Task V3's own URL navigations as goto_url actions (SKY-16374) (#8593) (c288f17)
  • Skip same-process sandboxed iframes when clearing session storage on raw-CDP (SKY-16341) (#8592) (edb26e1)
  • Let the copilot find and read the org's saved workflows (SKY-10184) (#8591) (6316ac6)
  • Unblock CI by integrating three mutually-blocked fixes into one branch (#8590) (7fa048e)
  • Recover from dead blank working page by closing it and falling back to the remaining page (SKY-15371) (#8589) (d23ceb4)
  • fix(webeye): allow raw-CDP screenshot rescue on persistent-context browsers (#8588) (24d08f8)
  • Gate passkey 2FA behind the enterprise plan with a visible book-a-demo upsell tile (SKY-14535) (#8587) (9297629)
  • Run each Copilot build test in a browser that matches where the test starts (SKY-16164) (#8586) (a93ad78)
  • Give type's forced click the same focus fallback as the plain click (SKY-16451) (#8585) (f4b5607)
  • SKY-16029 / SKY-16325: Add FDE hours and payment terms to organization pricing (#8583) (b8d86f0)
  • Class the file-attached-no-request upload result apart from a failed upload, and accept an upload control that is not the input (SKY-16449) (#8582) (f0e263b)
  • Task V3: hide signed URLs rendered into the goal, system guidance or starting URL behind opaque tokens (SKY-16412) (#8581) (955d8b9)
  • Make unset authenticator keys directly editable (#8580) (92ad577)
  • Raise AWS-only 0.5vcpu fairness lane CPU request to 625m (Hetzner stays 575m) (#8579) (896de61)
  • Name the blocks the copilot is drafting while it writes them (SKY-12830) (#8578) (5f9f7fc)
  • Refuse every fill tool in a Task V3 extraction block (SKY-16398) (#8575) (026c3c0)
  • Delete the unused drafting-gap timer and phase-checklist code from the copilot chat (SKY-13002) (#8574) (bfb2a83)
  • Report which visibility check dropped each hidden control in Task V3 observe (SKY-16393) (#8573) (a8b488c)
  • Scope WorkflowService background-task set per instance to fix cross-event-loop CI flake (SKY-15698) (#8572) (55136ec)
  • Let Task V3 hold and report a set-valued selection (SKY-16270) (#8570) (d655dbf)
  • Validate Bitwarden items before accepting CLI advisories (SKY-16319) (#8569) (73fecfa)
  • Let a page larger than one read be gathered across reads (#8568) (0e42bf0)
  • Retry a no-policy initializer failure in process before failing the run, and route the sequential-credential rejection through the helper (SKY-16388) (#8567) (63113be)
  • Deliver the run webhook when a run without an attempt row fails before execution (SKY-16380) (#8566) (64b5947)
  • Copilot keeps the turn when Skyvern's own proxy tunnel fails (SKY-15738) (#8565) (000d8a3)
  • Use the download directory as a fallback, not a second opinion (SKY-16322 follow-up) (#8564) (14e2592)
  • Show saved logins at the Copilot credential checkpoint, not just create-new (SKY-15784) (#8563) (345ff60)
  • Remove browser stream transport badge (#8562) (6599329)
  • Fix four workflow-retry follow-ups: durable no-policy failures, Batch attempt resume, download dedupe cutoff, analyzer retry state (SKY-15922) (#8560) (e76ed66)
  • Preserve interaction fidelity when refining recordings (#8559) (9728e24)
  • Add workflow retry policy settings and attempt-aware run views (SKY-15802) (#8558) (cf65e53)
  • Retry a workflow run under the same run id when it ends in a chosen status or error code (SKY-15802) (#8557) (5fe4810)
  • Serve the saved clear-browsing-data page on the secure code-block runner (SKY-16259) (#8556) (5c0a104)
  • Accept page.on('dialog', handler) on the secure CodeBlock runner by replaying it into the dialog policy (SKY-16258) (#8555) (6585581)
  • Add controlled CDP-first screenshot experiment (#8554) (a1a40f7)
  • Log screenshot capture-deadline timeouts at warning, not error (#8553) (59ea3a2)
  • Run a task's skipped terminal cleanup once when its handler could not fail the row (SKY-15729) (#8552) (678dda7)
  • Preserve prerequisite actions in recording refinement (#8551) (ab00bff)
  • Add user-selectable browser type for workflows and runs (backend) (#8550) (3135143)
  • Add provider download polling lifecycle logs (#8548) (ba206b0)
  • Improve screenshot capture failure observability (#8547) (4822876)
  • Fix recording refinement tool surface (#8546) (71fc88d)
  • Run a new non-enterprise workflow's task blocks on Task V3 by default (SKY-16293) (#8545) (fcc14e8)
  • Alert when the weekly test-durations refresh stops landing (SKY-16225) (#8544) (26bd1d2)
  • Send a refused combobox back to the rows the tool named (SKY-16261) (#8543) (bb33e95)
  • Release the copilot turn's cached browser driver when the turn exits (SKY-16220) (#8541) (9870858)
  • Record Browser: intent-aware refinement of code-first recordings (#8540) (57a697c)
  • Re-check run status at the block execute handoff so canceled runs stop before any effect (SKY-16168) (#8539) (5604d8c)
  • Copilot writes the saved-credential login when the page it scouted was already signed in (SKY-15656) (#8537) (ce942f4)
  • Admit verification-URL blocks into the workflow-block engine A/B (SKY-14816) (#8536) (412c833)
  • Flag a nested helper's global on a block-local name and repair it as one scope defect (SKY-16213) (#8535) (34d0393)
  • Tell Copilot how to read a saved generic secret in a code block (SKY-16181) (#8533) (12f0528)
  • Return the producer-output facts the copilot binds against (SKY-15900) (#8532) (1402a0c)
  • Name the branch behind each solve_captcha ok on the record (SKY-16237) (#8531) (e3ecbcb)
  • Fix Agents header layout on narrow screens (#8530) (68d20bf)
  • SKY-15844: Publish blog categories and unblock content builds (#8529) (76ea4ee)
  • Keep a Copilot proposal across a server restart (SKY-15853) (#8528) (8d13919)
  • Stop appending the run ID to Send Email subjects (SKY-16062) (#8527) (f748fcc)
  • Pass persisted failure reasons to user-defined error detection (#8526) (1aeb4e1)
  • Raise whole-display recorder startup ACK deadline to 15s (SKY-15708) (#8525) (b7cf856)
  • Stop the agents-list Edit action from inverting against the theme (SKY-16087) (#8524) (b340c6a)
  • SKY-9971: capture delayed download 5xx responses (#8523) (d1b3c3e)
  • Say which criterion wins when both describe the page (SKY-16193) (#8522) (bb59c6e)
  • Name the click hit class for what it measures, and time the probe where production calls it (#8521) (89c9148)
  • Report no success rate instead of 0% when an analytics window has no final runs (SKY-16218) (#8520) (9355f47)
  • Recreate a wiped browser console-log directory instead of dropping the page's output (SKY-15843) (#8519) (615c3e9)
  • Evict detached CodeBlock frames on every page operation, not only in the frame report (SKY-15626) (#8518) (4f233c0)
  • SKY-16064: Fix Recipes docs navigation, API-key auth, and cookbook (#8517) (d0c8440)
  • SKY-16169: Give the scrolling screenshot one millisecond budget covering capture, fallback and restore (#8516) (ce5f97b)
  • Name the typeahead row-listing refusals on the error_class facet (SKY-16149) (#8515) (5e9a253)
  • Report session identity and dispatch facts when a copilot browser call dies mid-protocol (SKY-15786) (#8513) (68e6f1a)
  • Declare one safe-namespace contract for both CodeBlock executors (SKY-14776) (#8512) (2ca614c)
  • Make the blocked-inline recovery timeout test assert the bound, not the scheduler (#8511) (1ad3fe1)
  • Account for the error_class values the source census cannot read (SKY-16131) (#8510) (be7007f)
  • Carry the billing tier into Task V3's engine-routing experiments (SKY-16082) (#8508) (1c3af4c)
  • SKY-15740 Use question-response URLs for credential handoff (#8507) (6a74721)
  • Stop re-asking for a credential the user already approved (SKY-15795) (#8506) (1b0cbe0)
  • Record how each Task V3 tool call addressed its target, and why it failed (#8505) (f1a1d8e)
  • Backfill the docs changelog for July 2 to September 7, 2026 (SKY-15824) (#8504) (bea8fff)
  • Record each run's resolved browser family and proxy vendor in a cloud-only sidecar table (SKY-14593) (#8499) (7cd6e84)
  • Stop a non-owning broker daemon from clobbering the live daemon's state and control socket (SKY-15846) (#8497) (35cfb31)
  • Admit a blog route removal only behind a reviewed 301 redirect (SKY-15847) (#8496) (46fc8f0)
  • Keep a run's repairable block failure when a later record concludes nothing (SKY-15902) (#8495) (491da16)
  • Hold a give-up while verification-code polling budget is still unspent (SKY-15918) (#8494) (d0615cb)
  • Report a draft test's repair against the snapshot the run executed (SKY-15658) (#8493) (3098ea0)
  • SKY-15889: Record CAPTCHA helper attempts across code executors (#8492) (f31ddd1)
  • Reuse saved credentials and recover login selection in Copilot (SKY-15796) (#8491) (fa5bd08)
  • Keep the recording mouse follower visible through page changes (#8490) (fa66df6)
  • Avoid replaying ordinary JavaScript ReferenceErrors (SKY-15778) (#8489) (eaf9942)
  • Guard the browser console-log append against a wiped log directory (SKY-15843) (#8487) (709f804)
  • SKY-15908: Let Copilot edit pending workflow drafts (#8485) (90dee48)

Full Changelog: v1.0.53...v1.0.54

What's Changed

  • SKY-15908: Let Copilot edit pending workflow drafts by @andrewneilson in #8485
  • Guard the browser console-log append against a wiped log directory (SKY-15843) by @AronPerez in #8487
  • Avoid replaying ordinary JavaScript ReferenceErrors (SKY-15778) by @andrewneilson in #8489
  • Keep the recording mouse follower visible through page changes by @cindehaa in #8490
  • Reuse saved credentials and recover login selection in Copilot (SKY-15796) by @andrewneilson in #8491
  • SKY-15889: Record CAPTCHA helper attempts across code executors by @andrewneilson in #8492
  • Report a draft test's repair against the snapshot the run executed (SKY-15658) by @andrewneilson in #8493
  • Hold a give-up while verification-code polling budget is still unspent (SKY-15918) by @pedrohsdb in #8494
  • Keep a run's repairable block failure when a later record concludes nothing (SKY-15902) by @andrewneilson in #8495
  • Admit a blog route removal only behind a reviewed 301 redirect (SKY-15847) by @wintonzheng in #8496
  • Stop a non-owning broker daemon from clobbering the live daemon's state and control socket (SKY-15846) by @wintonzheng in #8497
  • Record each run's resolved browser family and proxy vendor in a cloud-only sidecar table (SKY-14593) by @wintonzheng in #8499
  • Backfill the docs changelog for July 2 to September 7, 2026 (SKY-15824) by @wintonzheng in #8504
  • Record how each Task V3 tool call addressed its target, and why it failed by @pedrohsdb in #8505
  • Stop re-asking for a credential the user already approved (SKY-15795) by @andrewneilson in #8506
  • SKY-15740 Use question-response URLs for credential handoff by @andrewneilson in #8507
  • Carry the billing tier into Task V3's engine-routing experiments (SKY-16082) by @wintonzheng in #8508
  • Account for the error_class values the source census cannot read (SKY-16131) by @pedrohsdb in #8510
  • Make the blocked-inline recovery timeout test assert the bound, not the scheduler by @AronPerez in #8511
  • Declare one safe-namespace contract for both CodeBlock executors (SKY-14776) by @andrewneilson in #8512
  • Report session identity and dispatch facts when a copilot browser call dies mid-protocol (SKY-15786) by @andrewneilson in #8513
  • Name the typeahead row-listing refusals on the error_class facet (SKY-16149) by @pedrohsdb in #8515
  • SKY-16169: Give the scrolling screenshot one millisecond budget covering capture, fallback and restore by @andrewneilson in #8516
  • SKY-16064: Fix Recipes docs navigation, API-key auth, and cookbook by @wintonzheng in #8517
  • Evict detached CodeBlock frames on every page operation, not only in the frame report (SKY-15626) by @AronPerez in #8518
  • Recreate a wiped browser console-log directory instead of dropping the page's output (SKY-15843) by @AronPerez in #8519
  • Report no success rate instead of 0% when an analytics window has no final runs (SKY-16218) by @AronPerez in #8520
  • Name the click hit class for what it measures, and time the probe where production calls it by @pedrohsdb in #8521
  • Say which criterion wins when both describe the page (SKY-16193) by @pedrohsdb in #8522
  • SKY-9971: capture delayed download 5xx responses by @LawyZheng in #8523
  • Stop the agents-list Edit action from inverting against the theme (SKY-16087) by @AronPerez in #8524
  • Raise whole-display recorder startup ACK deadline to 15s (SKY-15708) by @LawyZheng in #8525
  • Pass persisted failure reasons to user-defined error detection by @LawyZheng in #8526
  • Stop appending the run ID to Send Email subjects (SKY-16062) by @AronPerez in #8527
  • Keep a Copilot proposal across a server restart (SKY-15853) by @andrewneilson in #8528
  • SKY-15844: Publish blog categories and unblock content builds by @wintonzheng in #8529
  • Fix Agents header layout on narrow screens by @cindehaa in #8530
  • Name the branch behind each solve_captcha ok on the record (SKY-16237) by @pedrohsdb in #8531
  • Return the producer-output facts the copilot binds against (SKY-15900) by @andrewneilson in #8532
  • Tell Copilot how to read a saved generic secret in a code block (SKY-16181) by @andrewneilson in #8533
  • Flag a nested helper's global on a block-local name and repair it as one scope defect (SKY-16213) by @andrewneilson in #8535
  • Admit verification-URL blocks into the workflow-block engine A/B (SKY-14816) by @pedrohsdb in #8536
  • Copilot writes the saved-credential login when the page it scouted was already signed in (SKY-15656) by @andrewneilson in #8537
  • Re-check run status at the block execute handoff so canceled runs stop before any effect (SKY-16168) by @andrewneilson in #8539
  • Record Browser: intent-aware refinement of code-first recordings by @cindehaa in #8540
  • Release the copilot turn's cached browser driver when the turn exits (SKY-16220) by @andrewneilson in #8541
  • Send a refused combobox back to the rows the tool named (SKY-16261) by @pedrohsdb in #8543
  • Alert when the weekly test-durations refresh stops landing (SKY-16225) by @AronPerez in #8544
  • Run a new non-enterprise workflow's task blocks on Task V3 by default (SKY-16293) by @wintonzheng in #8545
  • Fix recording refinement tool surface by @cindehaa in #8546
  • Improve screenshot capture failure observability by @LawyZheng in #8547
  • Add provider download polling lifecycle logs by @LawyZheng in #8548
  • Add user-selectable browser type for workflows and runs (backend) by @LawyZheng in #8550
  • Preserve prerequisite actions in recording refinement by @cindehaa in #8551
  • Run a task's skipped terminal cleanup once when its handler could not fail the row (SKY-15729) by @pedrohsdb in #8552
  • Log screenshot capture-deadline timeouts at warning, not error by @AronPerez in #8553
  • Add controlled CDP-first screenshot experiment by @LawyZheng in #8554
  • Accept page.on('dialog', handler) on the secure CodeBlock runner by replaying it into the dialog policy (SKY-16258) by @andrewneilson in #8555
  • Serve the saved clear-browsing-data page on the secure code-block runner (SKY-16259) by @andrewneilson in #8556
  • Retry a workflow run under the same run id when it ends in a chosen status or error code (SKY-15802) by @wintonzheng in #8557
  • Add workflow retry policy settings and attempt-aware run views (SKY-15802) by @wintonzheng in #8558
  • Preserve interaction fidelity when refining recordings by @cindehaa in #8559
  • Fix four workflow-retry follow-ups: durable no-policy failures, Batch attempt resume, download dedupe cutoff, analyzer retry state (SKY-15922) by @wintonzheng in #8560
  • Remove browser stream transport badge by @cindehaa in #8562
  • Show saved logins at the Copilot credential checkpoint, not just create-new (SKY-15784) by @andrewneilson in #8563
  • Use the download directory as a fallback, not a second opinion (SKY-16322 follow-up) by @pedrohsdb in #8564
  • Copilot keeps the turn when Skyvern's own proxy tunnel fails (SKY-15738) by @andrewneilson in #8565
  • Deliver the run webhook when a run without an attempt row fails before execution (SKY-16380) by @wintonzheng in #8566
  • Retry a no-policy initializer failure in process before failing the run, and route the sequential-credential rejection through the helper (SKY-16388) by @wintonzheng in #8567
  • Let a page larger than one read be gathered across reads by @pedrohsdb in #8568
  • Validate Bitwarden items before accepting CLI advisories (SKY-16319) by @LawyZheng in #8569
  • Let Task V3 hold and report a set-valued selection (SKY-16270) by @pedrohsdb in #8570
  • Scope WorkflowService background-task set per instance to fix cross-event-loop CI flake (SKY-15698) by @LawyZheng in #8572
  • Report which visibility check dropped each hidden control in Task V3 observe (SKY-16393) by @pedrohsdb in #8573
  • Delete the unused drafting-gap timer and phase-checklist code from the copilot chat (SKY-13002) by @AronPerez in #8574
  • Refuse every fill tool in a Task V3 extraction block (SKY-16398) by @pedrohsdb in #8575
  • Name the blocks the copilot is drafting while it writes them (SKY-12830) by @AronPerez in #8578
  • Raise AWS-only 0.5vcpu fairness lane CPU request to 625m (Hetzner stays 575m) by @LawyZheng in #8579
  • Make unset authenticator keys directly editable by @cindehaa in #8580
  • Task V3: hide signed URLs rendered into the goal, system guidance or starting URL behind opaque tokens (SKY-16412) by @pedrohsdb in #8581
  • Class the file-attached-no-request upload result apart from a failed upload, and accept an upload control that is not the input (SKY-16449) by @pedrohsdb in #8582
  • SKY-16029 / SKY-16325: Add FDE hours and payment terms to organization pricing by @wintonzheng in #8583
  • Give type's forced click the same focus fallback as the plain click (SKY-16451) by @pedrohsdb in #8585
  • Run each Copilot build test in a browser that matches where the test starts (SKY-16164) by @andrewneilson in #8586
  • Gate passkey 2FA behind the enterprise plan with a visible book-a-demo upsell tile (SKY-14535) by @wintonzheng in #8587
  • fix(webeye): allow raw-CDP screenshot rescue on persistent-context browsers by @LawyZheng in #8588
  • Recover from dead blank working page by closing it and falling back to the remaining page (SKY-15371) by @LawyZheng in #8589
  • Unblock CI by integrating three mutually-blocked fixes into one branch by @LawyZheng in #8590
  • Let the copilot find and read the org's saved workflows (SKY-10184) by @andrewneilson in #8591
  • Skip same-process sandboxed iframes when clearing session storage on raw-CDP (SKY-16341) by @andrewneilson in #8592
  • Persist Task V3's own URL navigations as goto_url actions (SKY-16374) by @wintonzheng in #8593
  • Prevent incremental DOM observer memory growth by @LawyZheng in #8594
  • Count a visible Cloudflare challenge frame as a present captcha in the solve ladder (SKY-16235) by @andrewneilson in #8595
  • Keep Copilot on the right during recording by @cindehaa in #8596
  • Add Web Search block with Google and Exa (SKY-16450) by @wintonzheng in #8597
  • Capitalize Task in the workflow recording menu by @cindehaa in #8598
  • Enable staging pressure observation with a runtime compatibility handshake by @LawyZheng in #8599
  • Record a challenge raised by a scouted click as an effect (SKY-16363) by @andrewneilson in #8600
  • Send "Start Building" to sign-up and redirect unknown emails from sign-in to a prefilled sign-up by @cindehaa in #8601
  • Let Workflow Copilot author workflows from demonstration videos by @cindehaa in #8602
  • Name the challenge frame inside a covering layer instead of telling the agent to dismiss it (SKY-16365) by @andrewneilson in #8603
  • Task V3 observe: stop listing an unnamed control no scroll can reach, on a per-run arm (SKY-16501) by @pedrohsdb in #8605
  • Log the provider response id on LLM duration metrics (SKY-16508) by @pedrohsdb in #8606
  • Copilot writes code block Goals as outcome then route, and the AI fallback no longer crashes [SKY-16386] by @andrewneilson in #8607
  • Keep a saved dialog handler in force for the whole workflow run on the secure runner (SKY-16343) by @andrewneilson in #8609
  • Skip the OpenRouter provider that returns action-less extract responses (SKY-16508) by @pedrohsdb in #8610
  • Build Twilio test fixture ids at runtime so the OSS sync passes push protection (SKY-16550) by @wintonzheng in #8612
  • Register per-org OpenRouter gpt-5.6-luna configs and fix the responses-bridge guard they expose (SKY-16623) by @pedrohsdb in #8618
  • Keep CodeBlock log records and name the failure when parameter redaction gives up (SKY-16595) by @andrewneilson in #8619
  • Rename CodeBlock redaction test constant so OSS CodeQL stops flagging it (SKY-16595) by @andrewneilson in #8624
  • Remove the fake captcha test site and inline the invisible hCaptcha fixture into its test by @wintonzheng in #8626
  • Stop syncing dev_scripts to the open source repo and inline the invisible hCaptcha test fixture by @wintonzheng in #8631
  • Preserve onboarding example attribution (#SKY-16818) by @cindehaa in #8633
  • Bump version to 1.0.54 by @wintonzheng in #8632

Full Changelog: v1.0.53...v1.0.54

Don't miss a new skyvern release

NewReleases is sending notifications on new releases.