This release adds 3 notable features for engineering teams evaluating rollout.
Published 1mo
Secrets & Credentials
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai-agents
browser-extension
browser-use
security
Affected surfaces
deps
Summary
AI summaryUpdates deps, deps-dev, and Refactor across a mixed release.
Full changelog
What's Changed
- Refactor: single source of truth for RuleId, enforced at compile time by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/243
- Refactor: createScanRule factory for the hand-rolled watcher lifecycle (15 rules) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/244
- Refactor: type cleanup — type-fest helpers + buildRuleRecord by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/245
- Chore(deps): Bump astro from 6.4.2 to 6.4.4 in /docs by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/250
- Chore(deps): Bump react and @types/react in /extension by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/257
- Chore(deps): Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/251
- Chore: group Dependabot updates (react family + prod patches), add pre-commit by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/258
- Chore(deps): Bump react-dom from 19.2.6 to 19.2.7 in /extension by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/256
- Chore(deps): Bump react-router-dom from 7.16.0 to 7.17.0 in /demo-site by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/252
- Chore(deps): Bump @astrojs/starlight from 0.39.2 to 0.39.3 in /docs by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/248
- Chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/247
- Chore(deps): Bump https://github.com/DavidAnson/markdownlint-cli2 from v0.20.0 to 0.22.1 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/264
- Chore(deps): Bump https://github.com/pre-commit/pre-commit-hooks from v4.5.0 to 6.0.0 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/263
- Chore(deps): Bump @biomejs/biome from 2.4.15 to 2.4.16 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/262
- Chore(deps): Bump the react group in /demo-site with 3 updates by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/261
- Chore(deps): Bump https://github.com/biomejs/pre-commit from v2.4.15 to 2.4.16 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/260
- Chore(deps): Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.14 to 0.15.16 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/259
- Chore(deps-dev): Bump the dev-deps group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/254
- Chore(deps-dev): Bump vite from 8.0.14 to 8.0.16 in /demo-site in the dev-deps group across 1 directory by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/249
- Add stylelint for CSS not covered by Biome by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/265
- Chore(deps-dev): Bump the dev-deps group in /extension with 4 updates by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/274
- Chore(deps): Bump astro from 6.4.4 to 6.4.6 in /docs in the production-deps group by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/269
- Chore(deps): Bump https://github.com/rhysd/actionlint from v1.7.8 to 1.7.12 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/271
- Chore(deps-dev): Bump eslint-plugin-unicorn from 64.0.0 to 65.0.1 in /demo-site by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/278
- Chore(deps-dev): Bump @biomejs/biome from 2.4.16 to 2.5.0 in /docs in the dev-deps group by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/272
- Chore(deps): Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.16 to 0.15.17 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/267
- Chore(deps): Bump https://github.com/biomejs/pre-commit from v2.4.16 to 2.5.0 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/268
- Chore(deps): Bump @biomejs/biome from 2.4.16 to 2.5.0 by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/270
- Chore(deps-dev): Bump the dev-deps group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/277
- Chore(deps): Bump @astrojs/starlight from 0.39.3 to 0.40.0 in /docs by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/273
- Chore(deps): Bump sharp from 0.34.5 to 0.35.1 in /docs by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/275
- Chore(deps-dev): Bump eslint-plugin-unicorn from 64.0.0 to 66.0.0 in /extension by @dependabot[bot] in https://github.com/pixiebrix/agent-browser-shield/pull/276
- Ratchet unicorn/better-dom-traversing + prefer-number-is-safe-integer to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/280
- Ratchet unicorn/prefer-includes-over-repeated-comparisons to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/281
- Ratchet unicorn/prefer-type-literal-last to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/282
- Ratchet unicorn/no-global-object-property-assignment to error (off in tests) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/283
- Ratchet unicorn/no-declarations-before-early-exit to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/284
- Ratchet unicorn/prefer-short-arrow-method to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/285
- Ratchet unicorn/prefer-iterator-to-array to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/286
- Disable unicorn/no-this-outside-of-class by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/287
- Disable 5 unicorn rules that only fire on intentional patterns by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/288
- Re-enable no-incorrect-query-selector and require-array-sort-compare by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/289
- Ratchet unicorn/prefer-minimal-ternary to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/290
- Ratchet unicorn/no-unreadable-new-expression to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/291
- Ratchet unicorn/no-unnecessary-global-this to error (off in tests) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/292
- Extend no-unnecessary-global-this test exclusion to test-mocks by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/293
- Disable unicorn/max-nested-calls by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/294
- Disable unicorn/prefer-uint8array-base64 by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/295
- Ratchet unicorn/prefer-number-coercion to error by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/296
- Disable unicorn/prefer-scoped-selector (#279) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/297
- Disable unicorn/no-break-in-nested-loop (#279) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/298
Full Changelog: https://github.com/pixiebrix/agent-browser-shield/compare/v2026.6.10.27...v2026.6.22.28
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent-browser-shield
All releases →Related context
Related tools
Earlier breaking changes
- v2026.6.2.13 Enforce lib/↔rules/ import boundary via no-restricted-paths
Beta — feedback welcome: [email protected]