v1.0.50

## What's Changed

Version bumped from 1.0.48 to 1.0.50

### Recent Changes
- SKY-13326 Show reconnectable Google account notices in Copilot (#8231) (c6ad8161e)
- Capture post-run page evidence from the run's own browser session (SKY-14254) (#8229) (b50f02566)
- Add the selector engines Skyvern's producers emit to skycdp (SKY-14071) (#8217) (6a6b6383e)
- Bump version to 1.0.50 (#8228) (3c305c911)
- Bump version to 1.0.49 (#8227) (c53ec6dca)
- fix(frontend): render the UTC hover timestamp in UTC, not local time (#7193) (ef7b59bdc)
- docs(aws): drop stale client parameter from get_file_metadata docstring (#7150) (0e5deae9d)
- Recover tenant phone formats deterministically and stop re-clicking committed skill pills (#8216) (05f36a42b)
- Recover blank multi-entry Workday sections via section-scoped add-control fallback (#8215) (586015645)
- SKY-14046 Let Copilot test-run a workflow whose login step already has a saved credential (#8214) (4caac995a)
- Prevent oversized logs from splitting into error fragments (#8213) (2dd95060c)
- Fix SkyCDP reload document lifecycle race (#8212) (f4fe10b07)
- Remove three Copilot sign-in fields that were always false (SKY-14054) (#8211) (0cbfce0b8)
- SKY-13777 Stop telling the copilot that a challenge on the page closes the submit path (#8210) (05d4b9764)
- Match Playwright selector-engine semantics in the skycdp facade (SKY-13461) (#8209) (c658bc9eb)
- Downloads-only CDP interception when the egress monitor is unenrolled (SKY-14066) (#8208) (8d6418564)
- Bill fair-share pod time, not wall clock, on multi-activity pods (SKY-14049) (#8207) (e4e41a8a7)
- SKY-14045 Copilot: stop re-deciding login blocks the workflow already has (#8206) (6dc0104f5)
- SKY-14044 Add an add_block tool so Copilot stops re-sending the whole workflow to add one step (#8205) (595cad7bb)
- SKY-14047 Copilot: require credential approval only for the blocks a test run will execute (#8204) (e7434da6e)
- Recover Task v2 summary deliverable when the LLM skips the response envelope (SKY-14004) (#8203) (4a62365f5)
- Drop the unused drive.file scope from the Google Sheets consent screen (SKY-13427) (#8202) (dba2ceb4b)
- Give Task V3 observe the question context it drops (curb get_html spam) (#8201) (7d7ff3461)
- Let Copilot use a connected inbox for sign-in codes, not just saved credentials (#8200) (22a3292f8)
- SKY-13979: derive the extraction schema instead of asking to confirm it (#8199) (7138ce878)
- Add ask-calibration eval dataset for the workflow copilot (SKY-13981) (#8198) (a783de833)
- Stop reporting browser-extension clipboard refusals as frontend errors (SKY-13996) (#8196) (357b92a16)
- SKY-14030: isolate disabled-control retry cadence (#8195) (6ec6a21f4)
- SKY-14030: isolate Vaadin polling cadence (#8194) (9c26da339)
- Reap a run-owned external browser immediately when its owner goes terminal (SKY-13546) (#8193) (2e07bafc5)
- Bound the Hetzner attach lane's scaler ceiling to its node pool (SKY-14022) (#8192) (5de740283)
- fix(ci): read the OSS sync high-water mark from commits, not the PR body (#8191) (af02e59ce)
- Use one rolling branch for OSS sync PRs (#8186) (27f89abbd)
- Preserve database timeouts during idempotent workflow creation (#8183) (41a4a5c5a)
- Deduplicate copilot credential field sentinel sets (#8182) (eaccc7d88)
- Revert the browser prompt-injection defenses, keeping the download authorization seam (#8140) (30b566fb8)
- Expose MCP code block goals and migration guidance (#8145) (a6b1f31a1)
- fix(execution-channel): release adopted browser_state on every exit (#8112) (9a3d1b1b0)
- SKY-13612: Fix ZIP payload type so the OSS sync build typechecks (#8136) (579d46344)
- Deflake quickstart capture_logs tests against shard-order structlog state (#8110) (09f586580)
- fix(SKY-13634): stop the copilot without replaying, locking, or faking failure (#8137) (c13d20729)
- Keep the copilot auto-bind credential receipt at its original position (SKY-13636) (#8138) (2f61e243e)
- docs: fix CLI references and broken links in README/CONTRIBUTING/CLAUDE.md (#7948) (7e07a80a4)
- Bank the live cookie jar when saving a browser profile mid-run; clear crashed-exit markers on load (#8097) (ee7576e08)
- Stop display-capture workers publishing black frames over remote-browser livestreams (SKY-13699) (#8147) (2d0b9b013)
- Extract externalized Gmail OTP body parts so magic-link emails parse with their body (#8091) (c13617047)
- Serve live view for externally hosted browser sessions via per-session CDP screencast (SKY-13291) (#8101) (e829eb819)
- fix(SKY-13728): contain Recordings tab overflow and fix tab hierarchy (#8156) (afa70441b)
- fix(SKY-13729): consolidate browser session status to the DS Badge (#8155) (49a6b7507)
- Fix Bitwarden credential fetch failing when a saved login has no two-factor secret (SKY-13676) (#8103) (e9d3cc8be)
- Gate the four task_v2 planner levers behind one org-scoped flag (SKY-13239) (#8150) (f8d51d872)
- SKY-13612: Bulk agent export emits one ZIP with individual per-agent files (#8105) (ae3b857f0)
- Regenerate the OpenAPI document for the browser session stream_transport field (#8102) (6cbe7f42d)
- Secure and automate Chrome extension re-pairing (#8149) (192d3d557)
- Classify the remaining secure CodeBlock runner error codes out of UNKNOWN (SKY-13561) (#8081) (a3ce92fde)
- SKY-13605: sanitize local lane fallback browser creation errors (#8093) (b65ef9241)
- fix(SKY-13730): remove duplicate logo from browser session header (#8154) (0cdcaf050)
- SKY-13584 persist workflow run browser runtime and fallback signals (#8092) (f0a98e392)
- Open a named site from its credential's login page instead of asking for a URL (#8099) (aa10a95cb)
- Mediate browser and CDP downloads (#8135) (3e8f015f6)
- feat: harden browser prompt injection defenses (#8133) (fa75db9b6)
- fix(SKY-13721): give the initial browser-session load a real spinner (#8157) (8ccec8949)
- Shorten the VNC disconnect message to two sentences (#SKY-13720) (#8159) (3fe6159b6)
- fix(cdp-input): release adopted browser_state on every teardown path (#8111) (93863d003)
- SKY-13503 deduplicate credential placeholder sentinels (#8141) (eca3bc167)
- fix(SKY-13725): use destructive styling for the Stop action (#8153) (c56a015bc)
- fix: exclude dev_scripts-dependent tests from OSS sync (#8184) (7cf050ee1)
- Collapse the two code-block env settings into one tri-state (SKY-13242) (#8152) (65b9bebb4)
- feat(SKY-13761): enable the standalone codeblock-runner on AWS staging/production (#8177) (cb9d09615)
- Default MCP YAML workflows to code version 2 (#8148) (3aa597aa4)
- test(mcp): gate extension bridge and coordinate regressions (#8100) (da93935cb)
- Bound per-value size of run-detail API payloads (SKY-13015) (#8119) (258125eeb)
- fix(cdp-input): Delete key does nothing in hosted browser live view (SKY-13682) (#8114) (a35d34362)
- Survive browser-extension bridge port contention at MCP boot (SKY-13645) (#8098) (9bcc6a962)
- fix(SKY-13585): allow saving a conditional whose merge point is the finally block (#8096) (77aab67fb)
- Revalidate revoked API keys immediately (#8126) (90da0e970)
- feat(live-view): add navigable URL input to hosted browser sessions (SKY-13683) (#8143) (0cce7304f)
- Add a credential Advanced toggle to opt out of automatic browser profiles (frontend) (#8146) (409ebc58d)
- Let users opt out of automatic browser-profile saving per credential (backend) (#8144) (9fab94983)
- Copilot run rows read as plain language, not Playwright selectors (SKY-13637) (#8142) (713d18074)
- SKY-13187 ADR: contain generated cached scripts by mint-time validation (Family B) (#8113) (039c5e15f)
- Handle download-directory containment rejection in the action path (SKY-13390) (#8127) (f0c90e3a6)
- Track which browser profile a boot actually applied; stop silent seed drops (SKY-13545) (#8095) (220a4a5a6)
- Demote per-step 'Video data not found' warning to debug (#8088) (c355f2045)
- Adopt the Chrome Web Store extension identity and add store packaging (SKY-13555) (#8086) (828cc1530)
- SKY-13591: Cut Python CI cost with whole-file duration balancing (#8085) (8375d1739)
- Document the SKY-13575 artifact-URL remint recovery step and close the #14589 review follow-ups (#8087) (bfbc62a08)
- Refuse CLI credentials against the silent production default, everywhere a client is built (SKY-13500) (#8083) (bee072c08)
- SKY-13782 Surface partial download-save failures so the binding verdict abstains instead of failing the block (#8176) (7b57efb73)
- fix(SKY-13697): disable Done until the debug session's browser session id resolves (#8178) (e0e15964d)
- Fix flaky broker spawn cooldown that leaked extra daemon launches (#8173) (70154bcda)
- Re-sign first-party artifact URLs whose signature no longer verifies (SKY-13575) (#8082) (82e8237e4)
- Append the exception class to code-block tab-open failure reasons (SKY-13338 follow-up) (#8040) (da19129d8)
- fix(SKY-13587): keep the finally block out of conditional branch containers (#8130) (da9b8327e)
- Request only the current integration's Google OAuth scopes on the consent screen (#8129) (b7742b5b1)
- fix(SKY-13722): remove unnecessary border from browser session header (#8161) (59ac8db50)
- Fix main: point 4 copilot enforcement tests at the renamed nudge helper (SKY-13692) (#8128) (bb0d5b624)
- fix(SKY-13586): stop the editor flagging a finally block as a disconnected block (#8131) (3f610aeb0)
- Fix mislabeled enforcement telemetry and trim 366 redundant copilot tests (#8077) (ab3744a62)
- Revalidate redirect hops on the remaining navigation sinks (SKY-13070) (#8054) (a5a3741f8)
- Serve MCP initialize without waiting on extension-mode startup side work (SKY-13758) (#8175) (b914f3b8b)
- Share the browser-extension bridge across concurrent agents (SKY-13757) (#8172) (9ec8f1b23)
- Bound workflow idempotency waits (SKY-13795) (#8174) (cb6583018)
- fix(SKY-13726): align timeline empty state with sibling tab pattern (#8160) (9a6fbe3ed)
- Run file parsing off the event loop so the workflow activity keeps heartbeating (SKY-13574) (#8132) (0b36693c0)
- Fix docs canonical base: Mintlify drops the /docs hosting prefix from page paths (#8171) (12095631a)
- Remove Workflow Copilot request-policy classifier pre-pass (#8169) (c7bb0081c)
- Close out the apex cutover: record the permanent 308 and point docs canonicals at www (#8168) (6a32247f5)
- Don't lose the record of a downloaded file when a code block fails or auto-recovers (SKY-13694) (#8167) (a043dbb09)
- Stop the copilot being cut off mid-repair after 35 model calls (SKY-13734) (#8166) (3c0d5da84)
- Let the copilot save an edit to a login step without logging in again (SKY-13709) (#8162) (bd7f9fb61)
- Surface DataTables Select row-checkbox cells in the element tree (SKY-13560) (#8151) (b471155b5)
- Stop Copilot from continuing after a successful workflow run (#8122) (2c8c5561a)
- Let the copilot finish download requests instead of stalling at the results page (#8125) (ac5959e4e)
- feat(browser-engine): enable Rustwright on both image lanes with classical fallback (RUS-5 v2) (#8123) (3c2bed171)
- Add fail-closed dice-image captcha solve path (#8124) (0b68a5526)
- fix: preserve provider-owned remote download handling (#8115) (1948de79c)
- fix: qualify shared browser ownership with live run context (#8121) (c2c2633f8)
- fix: close browsers when only same-run aliases remain (#8118) (4888e45dd)
- fix: self-heal free-text input truncated by the fill/type seam (#8116) (d5a842419)
- SKY-13536 Copilot: solve captchas met while exploring, instead of asking the user (#8078) (d89cb8d5f)
- SKY-13553 Copilot: release a credential onto any site the user named, in words or a link, from any turn (#8079) (a1bf13726)
- Name a new agent as soon as the user says what they want (#8084) (acb2580f0)
- Copilot keeps the code it wrote when editing a workflow; spreadsheet writes fail instead of appending blanks (SKY-13624) (#8104) (416ab0322)
- Stop re-sending outdated copies of the copilot's draft code to the model (SKY-13652) (#8106) (3b04388e4)
- SKY-13579 Copilot: recognize a saved credential by its name, however the message is phrased (#8107) (62bca008a)
- Copilot: stop refusing the credential scouting the credential check requires (SKY-13609) (#8089) (c95a99199)
- Copilot: recognize a credential ID someone pasted, however the message is worded (#8094) (a03968cb3)
- Revert #14581: restore scout-before-code; credential-ID fix returns after the interaction is fixed (#8090) (3c3a10835)
- Copilot: use the credential ID someone pasted, however they worded the message (SKY-13552) (#8076) (dfe02ce8a)
- Fix extension bridge reconnect wedge and CDP child-target hang (SKY-13562) (#8075) (6e237f261)
- Serve the browser a scoped session token instead of the organization API key (SKY-13084) (#8074) (fa4319e5d)
- Classify secure CodeBlock runner fail-closed as an infrastructure error (#8073) (0e5ae31a6)
- Capture download-wait error overlays that animate in after insertion (#8072) (3140edda2)
- SKY-13518: Stop asserting a minted run as browser-session owner in run_sdk_action (#8071) (2f46c1287)
- Control your own browser from Skyvern MCP via a Chrome extension bridge (SKY-13370) (#8070) (37e5a145b)
- Re-arm the sequential-gate wait every 900s instead of 120s (#8069) (b76a8f711)
- Probe viewer presence via a shared S3 marker so Hetzner pools keep live-view gating (#8068) (f4aaec05b)
- fix(SKY-13445): render interim copilot build-test runs neutrally, not as an amber outcome warning (#8067) (d044bec7f)
- Render the login block URL before the credential profile boot (SKY-13479) (#8066) (8fe813439)
- Show a copilot receipt for a silently auto-bound credential, with Change to correct it (#8065) (79242f083)
- Stamp a read-only auto-bind credential signal on the copilot narrative stream (#8064) (38d2d8a92)
- Flush the downloaded profile archive before unzipping it (#8063) (e17cf26c7)
- Store OTP/magic-link values verbatim instead of LLM-retyped (fixes magic-link 400s) (#8062) (b31f2dd64)
- Copilot: stop asking permission for a saved login the workflow already provides (#SKY-13514) (#8061) (036e24571)
- SKY-13517 Stop ending the copilot's turn because a page looked blocked (#8060) (6ca0f9d9e)
- Bound the minted-session ledgers and cover the CDP fan-out with a two-client test (#8059) (d5dabbb3f)
- SKY-13485 Copilot: bind a requested output to the value on screen, and append to the column you pinned (#8058) (9eeafa6f8)
- Fail closed on sandbox facade denials, and collapse the runner's three failure channels into one (#8057) (523228e7a)
- Resolve credential-equal workflow inputs via placeholder tokens in the planning prompt (#8056) (9c6003c71)
- Give late-connecting CDP clients their own page sessions on a shared browser (#8055) (5a2dc37d5)
- [Database] Fix: use portable distinct step count (#7769) (679cafb03)
- docs: fix scheduling examples to use client.schedules API (#7924) (0a9df4899)

**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.48...v1.0.50


## What's Changed
* Bump version to 1.0.50 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/8228


**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.49...v1.0.50