Starstruk Logo MarkStarstruk

v1.0.39

Alishahryar1/free-claude-codev1.0.39Jun 8, 2026by github-actions[bot]

AI Summary

Focuses on security hardening, Copilot code-first authoring, and new frontend capabilities like speech-to-text and credential folders. Key highlights include adding speech-to-text for prompts, implementing code-first copilot policies, and fixing high-severity vulnerabilities in the langchain integration.

Key Highlights

  • Added speech-to-text microphone for prompt boxes and workflow copilot
  • Implemented code-first Copilot authoring policy and rollout config
  • Added credential folders (frontend and backend)
  • Fixed 5 high-severity pip vulnerabilities in langchain integration

New Features

  • Speech-to-text functionality
  • Code-first Copilot authoring
  • Credential folders
  • Claude Opus 4.8 LLM configs
  • Security patches

Full Release Notes

## What's Changed

Version bumped from 1.0.38 to 1.0.39

### Recent Changes
- fix: re-inject UI env vars on every container start (#6401) (7f97fe8fd)
- fix(SKY-9402): skip force-visible for shadow DOM inputs in closed dropdowns (#6433) (79dfc8aa3)
- perf(SKY-10319): add screenshots_included/speculative attrs to LLM request spans (#6432) (1d1076ab5)
- feat(observability): attribute complete_verify span with caller trigger (SKY-10319) (#6431) (54a084d21)
- [codex] Add session replay artifact groundwork (#6429) (7db4eaae8)
- SKY-10580: organize public API reference taxonomy + auto-sync openapi spec (#6428) (0f90279e4)
- Track OpenRouter LLM token counts and cost in get_call_stats (#6427) (d2e9caf5c)
- SKY-10711: trim redundant full-DOM re-scrape in composition inspect; drop dead page-evidence cache (#6426) (dc92711e5)
- chore: add qa-evidence skill for routing QA artifacts to Linear and PRs (#6423) (859f97cd7)
- security: fix banks RCE + urllib3 header leak in llama_index integration (#6416) (7a013d19c)
- Update API specifications with fern api update (#6422) (c4b9c79de)
- Gate CUA and Opus models for enterprise (#6420) (ddf6f6cf4)
- [codex] Compress browser session recordings (#6419) (7a6f1c068)
- chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /skyvern-ts/client in the npm_and_yarn group across 1 directory (#5911) (6fbe6a6d3)
- SKY-10673: add code-first Copilot code block preflight (#6410) (1843917f9)
- feat(SKY-10669): add Claude Opus 4.8 LLM configs (direct + Bedrock) (#6409) (dda925704)
- docs: update changelog — Week of June 1, 2026 (#6408) (5840be272)
- SKY-10673: add code-first Copilot authoring policy (#6407) (4f4dfcd61)
- chore(observability): trim high-volume production log noise (#6406) (85a3885ab)
- SKY-10703: make tiktoken encoding load non-blocking in token_counter (#6405) (f4314b2bb)
- fix(SKY-10695): initialize credential edit form once per modal open (#6404) (3438fd0e3)
- docs: update changelog — Week of June 1, 2026 (#6403) (8ddea80ce)
- feat(tagging): Phase 6 frontend — tag chips, filter, editor, delete-key (SKY-10105) (#6402) (35d1532d0)
- fix(SKY-10682): harden conditional branch evaluation against malformed LLM batches (#6400) (f9289402f)
- perf(SKY-10319): add action_type/step_order attrs to post-action screenshot spans (#6399) (d5dedd9dc)
- Revert "feat(frontend): defer blank agent creation until first save" (#6398) (a30b45044)
- SKY-10673: add code-first Copilot rollout config (#6397) (706da796a)
- Live Record Browser Interpretation (backend) (#6396) (7c9f50044)
- feat(frontend): add speech-to-text mic for prompt box and workflow copilot (#6395) (30f8ccfa2)
- feat(SKY-10075): tiered slim LLM output prompts (slim_safe / slim_terse) (#6392) (634dc11e0)
- SKY-10565: invalidate copilot verified-block trust when a workflow edit changes a block (#6391) (d63a103e2)
- fix(SKY-10605): interrupt active runs on terminal evidence (#6390) (e7361f26c)
- feat(SKY-10083): downscale LLM screenshots to 768px to cut vision-token cost (#6389) (5456e8792)
- SKY-10566: add LLM-backed TurnIntent classifier (#6388) (20691546e)
- SKY-10643: fix cancelled Copilot draft terminal state (#6387) (fb92fd6b1)
- Normalize duplicate www URL prefixes (#6386) (1796016a8)
- chore(SKY-6661): address whimsy PR review feedback (#6367) (b42a7d677)
- fix(SKY-9402): make zero-rect CSS pseudo-content icon buttons visible (#6385) (2d82945a5)
- SKY-10580: rebrand Workflows → Agents in the public docs (with redirects) (#6384) (c847199fa)
- SKY-10580: expose the workflows API as /agents + accept agent_id (backwards-compatible) (#6383) (ac62f74b8)
- feat(SKY-10083): instrument per-call LLM image token + cost metrics (#6382) (9c3efc879)
- fix(SKY-10456): make the large + button clickable to open the block menu (#6381) (51a7f0a80)
- fix(SKY-10655): derive credential-test trigger_type from x-user-agent (#6380) (fa2c89f10)
- SKY-9954: polish toast action button into a frosted pill (#6379) (d71a50aee)
- fix(SKY-10653): stop browser profile dropdown clipping its last item (#6378) (d74864843)
- feat(SKY-9957): clarify Browsers vs Browser Profiles subheader copy (#6377) (2b8db6a23)
- SKY-10578: Add credential folders (frontend) (#6376) (817cc9f07)
- security: fix 5 high-severity pip vulnerabilities in langchain integration (#6353) (3985d49ef)
- SKY-10578: Add credential folders (backend) (#6375) (7e6ea829d)
- fix(SKY-10622): clean up child entities on workflow run timeout (#6374) (66d1fe98d)

**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.38...v1.0.39


## What's Changed
* fix(SKY-10622): clean up child entities on workflow run timeout by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6374
* SKY-10578: Add credential folders (backend) by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6375
* security: fix 5 high-severity pip vulnerabilities in langchain integration by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/6353
* SKY-10578: Add credential folders (frontend) by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6376
* feat(SKY-9957): clarify Browsers vs Browser Profiles subheader copy by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6377
* fix(SKY-10653): stop browser profile dropdown clipping its last item by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6378
* SKY-9954: polish toast action button into a frosted pill by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6379
* fix(SKY-10655): derive credential-test trigger_type from x-user-agent by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6380
* fix(SKY-10456): make the large + button clickable to open the block menu by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6381
* feat(SKY-10083): instrument per-call LLM image token + cost metrics by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6382
* SKY-10580: expose the workflows API as /agents + accept agent_id (backwards-compatible) by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6383
* SKY-10580: rebrand Workflows → Agents in the public docs (with redirects) by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6384
* fix(SKY-9402): make zero-rect CSS pseudo-content icon buttons visible by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6385
* chore(SKY-6661): address whimsy PR review feedback by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6367
* Normalize duplicate www URL prefixes by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6386
* SKY-10643: fix cancelled Copilot draft terminal state by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6387
* SKY-10566: add LLM-backed TurnIntent classifier by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6388
* feat(SKY-10083): downscale LLM screenshots to 768px to cut vision-token cost by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6389
* fix(SKY-10605): interrupt active runs on terminal evidence by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6390
* SKY-10565: invalidate copilot verified-block trust when a workflow edit changes a block by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6391
* feat(SKY-10075): tiered slim LLM output prompts (slim_safe / slim_terse) by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/6392
* feat(frontend): add speech-to-text mic for prompt box and workflow copilot by @cindehaa in https://github.com/Skyvern-AI/skyvern/pull/6395
* Live Record Browser Interpretation (backend) by @cindehaa in https://github.com/Skyvern-AI/skyvern/pull/6396
* SKY-10673: add code-first Copilot rollout config by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6397
* Revert "feat(frontend): defer blank agent creation until first save" by @cindehaa in https://github.com/Skyvern-AI/skyvern/pull/6398
* perf(SKY-10319): add action_type/step_order attrs to post-action screenshot spans by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6399
* fix(SKY-10682): harden conditional branch evaluation against malformed LLM batches by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6400
* feat(tagging): Phase 6 frontend — tag chips, filter, editor, delete-key (SKY-10105) by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6402
* docs: update changelog — Week of June 1, 2026 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6403
* fix(SKY-10695): initialize credential edit form once per modal open by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6404
* SKY-10703: make tiktoken encoding load non-blocking in token_counter by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6405
* chore(observability): trim high-volume production log noise by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6406
* SKY-10673: add code-first Copilot authoring policy by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6407
* docs: update changelog — Week of June 1, 2026 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6408
* feat(SKY-10669): add Claude Opus 4.8 LLM configs (direct + Bedrock) by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6409
* SKY-10673: add code-first Copilot code block preflight by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6410
* chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /skyvern-ts/client in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/Skyvern-AI/skyvern/pull/5911
* [codex] Compress browser session recordings by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6419
* Gate CUA and Opus models for enterprise by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6420
* Update API specifications with fern api update by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6422
* security: fix banks RCE + urllib3 header leak in llama_index integration by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6416
* chore: add qa-evidence skill for routing QA artifacts to Linear and PRs by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/6423
* SKY-10711: trim redundant full-DOM re-scrape in composition inspect; drop dead page-evidence cache by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6426
* Track OpenRouter LLM token counts and cost in get_call_stats by @cindehaa in https://github.com/Skyvern-AI/skyvern/pull/6427
* SKY-10580: organize public API reference taxonomy + auto-sync openapi spec by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6428
* [codex] Add session replay artifact groundwork by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6429
* feat(observability): attribute complete_verify span with caller trigger (SKY-10319) by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6431
* perf(SKY-10319): add screenshots_included/speculative attrs to LLM request spans by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6432
* fix(SKY-9402): skip force-visible for shadow DOM inputs in closed dropdowns by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/6433
* fix: re-inject UI env vars on every container start by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/6401


**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.38...v1.0.39