v1.0.26
Skyvern-AI/skyvernv1.0.26Mar 25, 2026by github-actions[bot]
AI Summary
Introduces artifact bundling to reduce costs, adds comprehensive workflow schedule support, and fixes critical security vulnerabilities.
Key Highlights
- Artifact bundling to reduce S3 objects
- Workflow schedules support (DB model, API routes)
- Security fixes (python-ecdsa, dependabot)
- Code 2.0 script UI fixes
- VNC streaming support in docker
New Features
- Workflow schedules support (DB model, API routes, Temporal integration)
- Artifact bundling
- VNC streaming support in docker
- Code 2.0 script UI fixes
- Script version comparison endpoint
Full Release Notes
## What's Changed Version bumped from 1.0.24 to 1.0.26 ### Recent Changes - Bump version to 1.0.26 (#5224) (07a8e654) - Add HTML and screenshot artifacts to cached script execution path (#5223) (d67d6bb8) - Add workflow_run_id and task_id to LLM duration metrics logs (#5222) (6aad5b00) - fix: restrict SendEmailBlock and UploadToS3Block to workflow download directory (SKY-7900) (#5221) (6d1dc425) - Fix script detail page to only show cached runs + add avg fallbacks (#5220) (85e62136) - fix(SKY-8517): file download block output missing from workflow run API for caching runs (#5219) (bb033ee7) - fix(SKY-8517): rich action data for script reviewer from AI fallback episodes (#5218) (82628cdd) - feat(SKY-8522): add downloadable artifact_url to Print Page block output (#5217) (62129415) - Fix workflow run not inheriting extra_http_headers from definition (#5216) (3631d0d6) - [SKY-8394] Add /v1 route to OSS Kubernetes Ingress (#5199) (eca76cb6) - v1.0.25 (#5209) (992066a9) - Streamline CLI quickstart: browser setup, LLM models, Ollama support (#5214) (0afc5934) - Add CDP screencast streaming and interactive input for local mode (#4904) (86a4f6aa) - fix: resolve 4 CodeQL alerts in extract_form_fields.js (#5212) (5fa0ff67) - fix: allow artifact bucket URIs in managed file access check (SKY-8520) (#5210) (85487a7b) - feat: enable multiline wrapping for conditional block expressions (#5208) (7931848c) - fix: keep parameter order consistent across run UI (SKY-8467) (#5207) (1d7f0d49) - fix: move "Add new credential" to top of credential selector dropdowns (#5206) (3a748b3b) - fix: preserve credential parameters during MCP workflow updates (#5205) (e3a26099) - fix: increase active ring opacity on timeline items for visible focus border (SKY-8457) (#5204) (c537bae3) - feat: persist save_browser_session_intent checkbox state (SKY-8329) (#5203) (750fb22a) - fix: prevent proactive captcha detection false positives on invisible reCAPTCHA (SKY-8515) (#5202) (cdf1dfe1) - fix: add validation error detection to phone format checker (#SKY-8504) (#5201) (474936bf) - Update LangChain integration dependency overrides and bump fastmcp / py-key-value-aio (#5200) (8a3ea80b) - fix: resolve 3 CodeQL alerts in extract_form_fields.js (#5198) (236c6cb3) - Update API specifications with fern api update (#5196) (a2448693) - [SKY-8441] Remove python-ecdsa from integration lock files (#5190) (d77c6a13) - Update API specifications with fern api update (#5185) (860a5158) - [SKY-8441] Address Minerva timing attack on P-256 in python-ecdsa (#5184) (25bf5c06) - Gate script reviewer on actual script execution (#5183) (74a2f618) - fix: restrict managed storage URI reads by organization (#5182) (62ae173a) - feat: strengthen login test prompt and remove max_steps cap (SKY-8329) (#5181) (f87a96f2) - [NO-TICKET] Add Logging for Scheduled Workflows (#5180) (641792ad) - Add PostHog custom events for builder interactions (SKY-8413) (#5179) (59c28ae3) - Teach script reviewer to handle blank page errors with wait calls (#5178) (de572a0f) - [NO-TICKET] Limit Schedules Created By Tier (#5177) (d81665cc) - Force ai_fallback=True for adaptive caching runs (#5176) (b496d202) - feat: add live view link in credential testing UI (SKY-8329) (#5175) (ccb253ac) - feat: replace saved-profile badge with save icon (SKY-8329) (#5174) (60236619) - fix: for_loop script generation uses loop_over parameter key (#5173) (afca9b5e) - fix: improve conditional prompt for jinja+natlang consistency (SKY-8465) (#5172) (fe460f4b) - feat: improve reCAPTCHA/hCaptcha solving with prompt fix and proactive detection (SKY-8421) (#5171) (4c185b98) - Fix: guard scroll_to_top/scroll_to_next_page against non-numeric JS returns (#5170) (3889c2b8) - Bundle artifacts to reduce S3 objects (#5169) (ba8a7242) - security: fix Python dependency vulnerabilities (#5130) (21986139) - fix: prevent settings page crash for self-hosted Docker builds (#5163) (56275c86) - Readd removed commits (#5167) (c4006bdb) - Revert "feat: add MiniMax LLM provider support" (#5153) (1c1ae1a1) - refactor: remove broken effective_browser_session_id suppression (SKY-8465) (#5166) (42755ce6) - [Critical] Fix CodeBlock sandbox: remove asyncio, block dangerous attrs (#SKY-7897) (#5165) (3af173fb) - fix: prevent settings page crash for self-hosted users (#5164) (a995b6e4) - Add workflow runs links from scheduler pages (#SKY-8468) (#5162) (1d2a398c) - Fix: Collapse Upcoming Runs card when schedule is paused (SKY-8452) (#5158) (7ed9cfeb) - fix: harden Workflow Copilot against prompt injection (SKY-8362) (#5156) (e52428c5) - fix: replace page.wait_for_timeout with asyncio.sleep to avoid CDP detection (#5157) (a9b590df) - Fix: export conditional from skyvern module (#5154) (f40aa8a0) - fix: credential selectors stuck on skeleton during background refetch (#5151) (d80938dc) - [NO-TICKET] Remove tests (#5161) (c0751e1d) - Fix: generate if/else for conditional blocks in Code 2.0 + branch return validation (#5160) (975cdd8f) - [NO-TICKET] Remove bad tests (#5159) (640cdeb7) - Rate limit browser session refresh in debug UI (#SKY-7514) (#5152) (7722d1f7) - Fix: Add confirmation dialog for bulk schedule deletion (SKY-8450) (#5149) (2b4778fa) - fix: show Used instead of Generated when run uses cached script without fallback (#5147) (f28e2bc6) - Fix bulk operations: defer selection clear, add concurrency control and summary toast (#SKY-8451) (#5148) (bf01aba0) - docs/fix: update TOTP docs, SDK reference, light mode logo, and broken API key links (#5150) (d57ced39) - feat: add frontend schedule panel to workflow editor (#SKY-8184) (#5146) (cfe01b0a) - feat: report FILE_PARSER_ERROR code on file parser block failures (SKY-7939) (#5145) (b76de94e) - Add workflow schedules support (DB model, API routes, Temporal integration) (#SKY-8182) (#5144) (1c68fbd4) - fix: resolve Code 2.0 script UI issues (SKY-8444–8448) (#5143) (8ff61021) - fix: replace instant download check with progress-aware polling loop (#SKY-8433) (#5142) (a128dc20) - fix: skip script_block entries for blocks with no actions (#SKY-8443) (#5141) (416b6b41) - feat: DB migration for workflow schedules (#SKY-8181) (#5140) (e321c89f) - fix: refresh credentials list on mount to show saved-profile tag (#5138) (203e0ac7) - build(deps): bump the uv group across 2 directories with 3 updates (#5135) (7c3fbb1f) - fix: show and allow editing 2FA method in credential edit modal (SKY-8430) (#5137) (2003d6c2) - feat: improve workflow run page feedback during execution (SKY-8345) (#5136) (4510c45d) - fix: update Python dependencies to fix security vulnerabilities (SKY-8441) (#5134) (d4d97881) - fix: don't early-return on syntax error so Script Update Card shows (#SKY-8434) (#5133) (032bbbb2) - refactor: rename browser type to stealth-chromium (#5131) (bcf19c8b) - fix: fail cached download block when no file is downloaded locally (#SKY-8433) (#5127) (cb34d86c) - fix: remove cloud captcha import from OSS module, add CI guard (SKY-8406) (#5124) (77bc2079) - make posthog default timeout 2 seconds (#4842) (ddfb558c) - build(deps): bump the npm_and_yarn group across 4 directories with 6 updates (#5101) (b15f1767) - build(deps): bump the uv group across 2 directories with 6 updates (#5126) (c64b3444) - fix: use `is not None` checks in update_persistent_browser_session (#4977) (e16d1133) - feat: add MiniMax LLM provider support (#5109) (69a7a3f7) - fix: prevent country code duplication in phone format checker (SKY-8395) (#5125) (9de05b2c) - Fix: Diagnostics button always visible for completed task blocks (SKY-8398) (#5120) (db66b662) - fix: S3 upload and rename ordering in cached download path (#5115) (bd68e1af) - fix handling action log (#5113) (e4867117) - feat: add script pinning backend support (#5112) (9ddc9703) - feat: add enriched script version detail endpoint (#5111) (f2062b65) - feat: add Workflow Scripts Page foundation (#5110) (74276078) - Revert "fix: upload downloaded files to S3 in cached download path" (#5106) (be63522e) - feat: add script version comparison endpoint (#5108) (25820a50) - fix: support download_suffix in cached script execution (#5107) (752d0acf) - fix: upload downloaded files to S3 in cached download path (#5105) (7260dea9) - docs: remove --database-string example from README quickstart (#SKY-8287) (#5041) (574090ce) - Update API specifications with fern api update (#5104) (0b7009ef) - Fix: retry empty LLM responses in extraction task generation (#SKY-8264) (#5103) (54b73c0e) - Add browser_metadata field with website_url to step output (#5102) (5ef7bc89) - Fix Copilot creating disconnected workflow paths (#SKY-8292) (#5093) (8c5fd3ed) - feat: add user context field for credential login testing — frontend (#SKY-8074) (#5100) (d2b69f6d) - fix: self-hosted model keys resolve to unregistered fallback configs (#5099) (1bedb95f) - feat: auto-review on script failures with daily cap per wpid (SKY-8334) (#5098) (c55d9f42) - feat: teach script reviewer about page.terminate() with conditional-only rule (SKY-8334) (#5097) (ef4e68a8) - feat: implement page.terminate() for Code 2.0 cached execution (SKY-8334) (#5096) (c45d1452) - fix: only show delete confirmation dialog when output is referenced (SKY-8326) (#5095) (477cd700) - fix: use started_at for run history duration calculation (#5094) (76bb2dee) - Add bundle key to artifact model (#5092) (e08ff39a) - fix: reject empty download URLs with clear error (SKY-8334) (#5091) (f7749e49) - fix: preserve loop block connections when conditionals filter branch targets (#5090) (525ce137) - fix: add browser-level download monitor for CDP downloads bypassing Fetch (#5089) (e80ded3a) - VNC streaming support in docker (#5088) (cece22f2) - Revert "DOM parser perf phase 5: deep sweep optimizations" (#5087) (9b61deb7) **Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.24...v1.0.26 ## What's Changed * [SKY-8394] Add /v1 route to OSS Kubernetes Ingress by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/5199 * Fix workflow run not inheriting extra_http_headers from definition by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/5216 * feat(SKY-8522): add downloadable artifact_url to Print Page block output by @celalzamanoglu in https://github.com/Skyvern-AI/skyvern/pull/5217 * fix(SKY-8517): rich action data for script reviewer from AI fallback episodes by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/5218 * fix(SKY-8517): file download block output missing from workflow run API for caching runs by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/5219 * Fix script detail page to only show cached runs + add avg fallbacks by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/5220 * fix: restrict SendEmailBlock and UploadToS3Block to workflow download directory (SKY-7900) by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/5221 * Add workflow_run_id and task_id to LLM duration metrics logs by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/5222 * Add HTML and screenshot artifacts to cached script execution path by @pedrohsdb in https://github.com/Skyvern-AI/skyvern/pull/5223 * Bump version to 1.0.26 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/5224 **Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.25...v1.0.26