Starstruk Logo MarkStarstruk

v1.0.46

Skyvern-AI/skyvernv1.0.46Jul 8, 2026by github-actions[bot]

AI Summary

This release focuses on download naming conventions, introduces a Copilot lite LLM environment key, and hardens server-side fetch URLs against SSRF attacks.

Key Highlights

  • Name session-scoped downloads by configured download_suffix
  • Add workflow-copilot lite LLM env key
  • Guard server-side fetch URLs against SSRF
  • Fix SKY-11992: capture blob: URL downloads in the CDP download monitor
  • Log page-analysis timeouts at warning instead of error

New Features

  • Session-scoped download naming
  • Copilot lite LLM env key
  • SSRF protection
  • Blob URL download capture

Full Release Notes

## What's Changed

Version bumped from 1.0.47 to 1.0.46

### Recent Changes
- chore(deps): bump mcp to 1.28.1 to fix 3 high-severity Dependabot alerts (#7496) (14439528f)

**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.47...v1.0.46


## What's Changed
* fix(SKY-11997,SKY-12004): name session-scoped downloads by configured download_suffix by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7172
* fix(SKY-11948): consume output-contract grants at dispatch by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7188
* SKY-11498: Route request-policy classifier through lite Copilot model setting by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7191
* fix(SKY-11992): capture blob: URL downloads in the CDP download monitor by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/7192
* Add workflow-copilot lite LLM env key by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7194
* fix(SKY-12013): return missing dropdown target failures by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7195
* fix(SKY-11912): guard server-side fetch URLs against SSRF by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7173
* fix(SKY-11848): reap stale PSM v2 adoption cache entries to stop API pod driver leaks by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7196
* fix: log page-analysis timeouts at warning instead of error by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7197
* fix: log expected goal-complete check failures at warning, not error by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7198
* Bump version to 1.0.46 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7199


**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.45...v1.0.46