Highlights
- Opt-in invalid-certificate support: loads pages with expired, self-signed, hostname-mismatched, or otherwise unverifiable TLS certificates while keeping verification enabled by default
- Safer unverified scraping: isolates relaxed TLS handling to the individual request, reports the certificate error, and guards against crossed-host landings
- Authenticated favicon collection: returns the complete declared favicon set plus
/favicon.ico, fetched inside the established browser session with its cookies, challenge clearance, and proxy egress - Correct encoded proxy responses: preserves original gzip, Brotli, deflate, zstd, stacked encoding, validator, and range metadata in Tier 1 responses
- Refreshed runtime stack: updates compatible transitive dependencies and Redis to 8.10.2 while retaining compatibility-tested Camoufox, Playwright, Bun, Nuxt, and TypeScript versions
Major changes
- 805b1ae and cd8f12e add safe opt-in loading of pages with invalid TLS certificates, including per-request isolation and crossed-landing protection (#153, #154). Thanks @TNorden
- 1190066 and ba7ef93 add bounded favicon collection from inside authenticated browser sessions (#155, #156). Thanks @TNorden
- 17c8b94 preserves encoded Tier 1 response bytes and their representation metadata through the MITM proxy (#152, #157). Thanks @oyedejioyewole
- 9e1b360 prepares v1.6.3, aligns all workspace versions, refreshes compatible transitive dependencies, and updates Redis to 8.10.2
Full changelog: v1.6.2...v1.6.3