This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Patch Changes, https://github.com/seanmcguire12, and https://github.com/miguelg719 across a mixed release.
Full changelog
Minor Changes
- #2178
c49a3fcThanks @seanmcguire12! - add support for WebMCP
Patch Changes
-
#2217
147e310Thanks @monadoid! - Add Azure OpenAI Microsoft Entra ID model auth support. -
#2231
cf3603dThanks @miguelg719! - Add claude-fable-5 support: native structured outputs via the @ai-sdk/anthropic bump, adaptive thinking (including the new "xhigh" effort) on the agent path, the API's built-in server-side refusal fallback to claude-opus-4-8, and auto tool choice for the final done call on models that reject forced tool use. -
#2233
8d7d414Thanks @seanmcguire12! - Normalize URLs inActCachekey derivation by sorting query parameters before hashing. Semantically equivalent URLs that differ only in parameter order (e.g.?utm_source=email&id=42vs?id=42&utm_source=email) now hit the cache instead of silently missing. Fragments and duplicate keys are preserved. -
#2229
fd42e65Thanks @seanmcguire12! - launch local browser with --enable-features=WebMCPTesting,DevToolsWebMCPSupport by default -
#2220
a64c6b7Thanks @monadoid! - Fix Stagehand-generated shadow-root XPath resolution so deterministic actions can target elements inside web components. -
#2132
ed3e566Thanks @miguelg719! - Add canonical verifier evidence normalization for screenshots and text signals without requiring image dependencies in core installs. -
#2133
840aac8Thanks @miguelg719! - Add the rubric-based verifier engine with normalized public rubric output and bounded failure-step parsing.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v@browserbasehq/[email protected] Changes `setScreenshotProvider` callback to return `{ base64, mediaType }` instead of bare base64 string.
- vstagehand-server-v3/v3.7.0 Delete packages/server-v4 entirely.
- vstagehand-server-v3/v3.6.10 Remove cli release workflow
- vstagehand-server-v3/v3.6.9 Integration libraries moved to peer dependencies.
- v@browserbasehq/[email protected] move playwright-core, puppeteer-core, patchright-core from optional dependencies to peer dependencies
Beta — feedback welcome: [email protected]