This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Patch Changes, Minor Changes, and https://github.com/shrey150 across a mixed release.
Full changelog
Minor Changes
-
#2246
303ab2cThanks @shrey150! -browse screenshotnow writes a file by default instead of printing base64 to stdout. Bare invocations save toscreenshot-<yyyymmdd-hhmmss>.<type>in the current directory (with a collision counter instead of overwriting) and print{ "saved": "<path>" }. A new--base64flag preserves the legacy behavior of printing{ "base64": "..." }to stdout; it is mutually exclusive with--path.--pathbehavior is unchanged.Note for scripts that parsed the bare-invocation base64 output: pass
--base64to keep the old stdout contract.
Patch Changes
-
#2250
8b83bb7Thanks @shrey150! - Fixbrowse skills addon Windows and bound the unbounded installer stages.- Quote the
npxcommand and arguments when spawning through cmd.exe (shell: truefor.cmd/.batshims), so the defaultC:\Program Files\nodejs\npx.cmdpath and install paths with spaces (e.g.C:\Users\First Last\...) no longer split at the space and fail with "'C:\Program' is not recognized". - Kill the
npx skills addchild after a 180s deadline (SIGTERM, then SIGKILL) and fail with a clear message and a distinctskill_install_timeouttelemetry result code instead of hanging forever. - Bound the catalog and skill-file fetches with a 10s abort timeout, preserving the existing catalog-unavailable fallback semantics when a fetch hangs.
- Quote the
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v@browserbasehq/[email protected] Changes `setScreenshotProvider` callback to return `{ base64, mediaType }` instead of bare base64 string.
- vstagehand-server-v3/v3.7.0 Delete packages/server-v4 entirely.
- vstagehand-server-v3/v3.6.10 Remove cli release workflow
- vstagehand-server-v3/v3.6.9 Integration libraries moved to peer dependencies.
- v@browserbasehq/[email protected] move playwright-core, puppeteer-core, patchright-core from optional dependencies to peer dependencies
Beta — feedback welcome: [email protected]