This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
Affected surfaces
Summary
AI summaryAny OpenAI‑compatible model can now drive the browser via a generic adapter.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Any OpenAI‑compatible model can now drive the browser via a generic adapter. Any OpenAI‑compatible model can now drive the browser via a generic adapter. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Added `browser://audit/events` MCP resource to list recent audit events. Added `browser://audit/events` MCP resource to list recent audit events. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
CI guard enforces Playwright version parity between controller and browser‑node. CI guard enforces Playwright version parity between controller and browser‑node. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | Low |
Bumped `uvicorn` from 0.49.0 to 0.50.1. Bumped `uvicorn` from 0.49.0 to 0.50.1. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | Low |
Bumped `pydantic-settings` from 2.10.1 to 2.14.2. Bumped `pydantic-settings` from 2.10.1 to 2.14.2. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | Low |
Bumped `pillow` from 12.2.0 to 12.3.0. Bumped `pillow` from 12.2.0 to 12.3.0. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | Low |
Bumped dev `ruff` from 0.15.12 to 0.15.20. Bumped dev `ruff` from 0.15.12 to 0.15.20. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | High |
Fixed controller connection failure to browser node in compose deployments due to version mismatch. Fixed controller connection failure to browser node in compose deployments due to version mismatch. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
`scripts/doctor.sh` now dumps container logs on readiness probe timeout. `scripts/doctor.sh` now dumps container logs on readiness probe timeout. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Refactor | Low |
Superseded the bespoke MiniMax adapter with a generic profile. Superseded the bespoke MiniMax adapter with a generic profile. Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
Added
- Any OpenAI-compatible model can now drive the browser. A single generic adapter serves every model reachable over an OpenAI
/chat/completionsendpoint, so Auto Browser is no longer limited to OpenAI / Claude / Gemini. New providers:openrouter(one key → ~every frontier model — Claude, GPT, Gemini, Grok, DeepSeek, Llama, Mistral, Qwen, …),xai(Grok),deepseek,minimax, andopenai_compatible(a custom base URL for self-hosted Ollama / vLLM / LM Studio, Azure, Together, Groq, Fireworks, …). Vision + function-calling with a content-parse fallback for endpoints that ignoretool_choice; DeepSeek runs text-only from the DOM/accessibility outline. Configure via the*_API_KEY/*_BASE_URL/*_MODELsettings in.env.example(#85). Supersedes the bespoke MiniMax adapter from #77 — MiniMax is now a generic profile. browser://audit/eventsMCP resource — list and read recent audit events across sessions over MCP, guarded onmanager.list_audit_eventsso it no-ops where unavailable (#86, adopted from #48 by @luohui1).- CI guard for Playwright pin parity between the controller (
requirements.txt) and browser-node (package.json) so a single-side bump can no longer merge; andfastapicapped<0.137, whose router-internals change silently drops every mounted route (#84).
Fixed
- Controller could not connect to the browser node in compose deployments. Dependabot #60 bumped browser-node's npm
playwrightto 1.61.1 while the controller's pip pin stayed at 1.60.0; Playwright's websocket protocol requires an exact client/server version match, so everydocker compose up --buildcrash-looped readiness. Fixed in two steps: first re-aligned both sides to the known-good 1.60.0, then landed the coordinated upgrade pinningplaywright==1.61.0on both pip and npm (#76 by @itsreese83, who also diagnosed the mismatch). scripts/doctor.shnow dumps controller and browser-node container logs when the readiness probe times out, so compose-smoke failures are diagnosable from CI output.
Changed
- Dependency bumps:
uvicorn0.49.0 → 0.50.1 (#79),pydantic-settings2.10.1 → 2.14.2 (#80),pillow12.2.0 → 12.3.0 (#81), and devruff0.15.12 → 0.15.20 (#78).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About LvcidPsyche/auto-browser
Give your AI agent a real browser — with a human in the loop. Open-source MCP-native browser agent.
Related context
Beta — feedback welcome: [email protected]