v1.0.43

## What's Changed

Version bumped from 1.0.41 to 1.0.43

### Recent Changes
- Bump version to 1.0.43 (#6701) (2a4a20c05)
- SKY-11180 Fix Copilot directory synthesized code binding (#6702) (d02ead94f)
- Make free credits a one-time grant (#6700) (ae05ec184)
- fix(SKY-11112): credit data captured inside a navigate block in task_v2 (#6698) (f906ea83d)
- fix(SKY-11177): harden element-tree scrape against undefined className and isElementVisible recursion (#6697) (ada154bd1)
- Bump version to 1.0.42 (#6684) (6bdb772e7)
- fix(ui): tolerate legacy `npm run start` override + add official Helm chart (#6683) (4d0b72196)
- feat(SKY-11150): give terminate actions a distinct terminated visual (amber triangle) (#6693) (b5ad77594)
- Revert "SKY-11139: Harden code block runtime boundary" (#6692) (a824fb991)
- feat(SKY-10862): show which run occupies a browser session (#6691) (3f4193844)
- SKY-10323: send replMode on main-world Runtime.evaluate to avoid let/const redeclare (#6690) (3799f019f)
- SKY-11168: Prioritize credential blocker over code safety (#6689) (4c29a9dde)
- fix(SKY-11140): harden copilot code downloads (#6688) (90cf3c54e)
- feat(SKY-10648): add SDK-backed remote browser provider (#6687) (cb0eb8c5f)
- SKY-11139: Harden code block runtime boundary (#6686) (ef62e8aaf)
- Fail-fast shadow observability (Phase 0) (#6685) (dad762956)
- Fix truncated output on OpenRouter deepseek/mimo configs (#6681) (bf682bdca)
- SKY-11165 Defer AWS session creation for missing profiles (#6680) (d3a036f59)
- fix(SKY-11153): land adopted-session downloads run-side via eager save + url re-fetch (#6679) (3010c0ab5)
- SKY-11067 stabilize Copilot repair root-cause signatures (#6678) (b844eb4e9)
- fix(SKY-10807): propagate CancelledError so run timeouts actually stop the run (#6677) (c3faa4ca4)
- fix(SKY-11151): gate run-timeline action/step rows to code blocks (#6675) (9e9519566)
- feat(SKY-11050): typed extraction schema for copilot code blocks (data_schema parity) (#6674) (64aa5cacd)
- fix(SKY-10954): bound copilot chat reply length with a soft user_response budget (#6673) (efbf5051b)
- SKY-10964 Block verified success on artifact-health failures (#6672) (5e66b1692)
- SKY-10985: reconcile WIP-rescue terminal frame on coverage-complete adjudication failure (#6671) (7b64c080f)
- SKY-11118: opt-in headless turn-drain gate for copilot live browser (#6670) (ad858e93d)
- Revert "fix(SKY-10776): use NullPool for screenshot-worker replica reads" (#6668) (db83d3e8a)
- SKY-11121: collapse code-first copilot rung flags into the two master gates (#6669) (be16e5353)
- fix(SKY-11153): bind adopted-session download dir to the run key FileUploadBlock scans (#6667) (96812553b)
- SKY-10919 Thread missing completion evidence (#6666) (87029c4b1)
- feat(observability): sample more high-frequency agent INFO logs (#6665) (22d402535)
- chore(observability): drop low-value high-volume logs (delete captcha-negative, downgrade startup chatter to debug) (#6664) (32de1a6ab)
- feat(SKY-10847): validate and reconcile code-block step line spans server-side (#6662) (35af3238d)
- SKY-11101: Improve PDF Fill field mapping with positional field labels (#6663) (9659998ea)
- fix(SKY-10991): stop max update depth loop on workflow build page (#6660) (44f45b020)
- fix(SKY-11132): handle ClientDisconnect in raw-request logging middleware (#6659) (595164f9b)
- fix(SKY-11133): tolerate misnamed `block` arg in copilot validate_block (#6658) (baf204a52)
- fix(SKY-11131): surface parse errors instead of crashing FileParserBlock (#6657) (7cba2b2cf)
- fix: refresh expired model in update_workflow_run_if_not_final (#6655) (3b94344b3)
- perf(SKY-11099): default scrape to skip visual bounding box overlay (#6654) (e7047891a)
- SKY-10323: add main-world JS evaluation hook for remote browsers (#6653) (24ba340bc)
- fix(SKY-11119): make skyvern CLI robust to click 8.2+ and lift the click<8.2 pin (#6652) (78bd72078)
- feat(SKY-11092): 1Password item picker for credential inputs (#6651) (d940e36fd)
- SKY-11111: dispatch input/change events on credential-fill so JS-gated multi-step logins advance (#6650) (8670e78d6)
- fix(SKY-11114): fresh session for login-replaying repair re-runs (flag-gated) (#6649) (997186b62)
- SKY-11113: disambiguate bare role/tag selectors in copilot code-block synthesis (#6648) (318b506b7)
- fix(SKY-11072): reconnect a dead reused browser state before block run (#6647) (d04b5a650)
- security: fix 7 HIGH pip vulnerabilities in uv.lock (#6646) (9f68f9cbb)
- fix(SKY-8929): gate worker startup on X display readiness; sanitize browser headers (#6645) (911b60992)
- feat(tagging): gate workflow tagging UI behind WORKFLOW_TAGGING flag (frontend) (SKY-10683) (#6644) (d78d78cc4)
- fix(SKY-10607): rename Settings "API Keys" nav child to "General" (#6642) (2506938f7)
- feat(tagging): gate workflow tagging behind WORKFLOW_TAGGING flag (backend) (SKY-10683) (#6643) (49b0fe928)
- fix(SKY-11086): don't serve unfinalized per-run recording for session runs (#6641) (3a0ec0010)
- SKY-11094: finish the leveled / tri-state completion-adjudication contract (#6639) (4d8da05e1)
- SKY-11057 Fix Copilot download synthesis replay (#6638) (f9d6f2603)
- SKY-11093: bind copilot synthesized download blocks so the file actually downloads (#6637) (4a2bdc3d0)
- Register OpenRouter Xiaomi MiMo-V2.5 LLM handler (#6636) (a97e5726e)
- SKY-11081: sunset copilot scout flags (#6635) (cdcd66991)
- SKY-11087 Default unset runtime proxy to none (#6634) (b6cd2cf47)
- SKY-11107: restore Inputs field in code-first code block Code view (#6633) (33de2b625)
- GCP Self-Host: App-wiring for storage and vault (#6632) (209d715a4)
- feat(SKY-10971): revamp workflows/folders list into a directory tree (#6631) (cb6854bc5)
- fix(llm): route OpenRouter registry keys through LLMCaller for cost tracking (SKY-11074) (#6630) (377d13adc)
- docs: update changelog for week of June 15, 2026 (#6629) (888c98dfa)
- SKY-11083: guard None run_id and rebind the CDP download interceptor on adoption (#6626) (3c6ef3a0f)
- Fix Copilot selector-none post hooks (#6628) (e9d4680a8)
- fix(SKY-8685): report action-based total_cost on workflow runs (#6627) (ed3e10a9c)
- fix(SKY-11085): capture screenshot for page.evaluate code-block actions (#6624) (1e5f814cb)
- fix(SKY-11084): address remaining review nits on code-block recording artifact (#6625) (0986298ac)
- SKY-11081: steer scout-act to observe, not evaluate-click; couple the gate to author-steer (#6623) (dde701270)
- feat(observability): opt-in INFO-log sampling for high-volume orgs (#6621) (2bf439417)
- SKY-10944: Add PDF Fill workflow block (local AcroForm + flat-PDF OCR fill) (#6622) (edd80635d)
- SKY-11083: run-scope the download dir on persistent-session adoption (#6618) (b05655140)
- SKY-11081: require a scout-act before authoring a copilot download block (#6620) (00741613b)
- SKY-11061: fail closed on copilot download blocks that cannot register a real download (#6619) (f1c559f91)
- SKY-11060: synthesize a real expect_download block from the reached-download target (#6617) (c4551d98e)
- feat: add managed browser provider integration (#6616) (46ad8367f)
- feat(SKY-10702): cap browser-session S3 growth via deterministic reaps (#6615) (974dbc4a3)
- feat(SKY-10701): write back reused browser profiles + graceful fallback on a missing profile (#6614) (5f809e5c1)
- fix(frontend): prevent React crashes from browser translation DOM mutation (#6613) (3b57f2671)
- fix(SKY-10799): gate sequential runs on queue order, not a single dependency edge (#6611) (4fd53c6c6)
- fix(agent): seed CUA extraction prompt (SKY-10694) (#6610) (02fad3997)
- SKY-10691: harden removeBoundingBoxes against Prototype.js-style remove() polyfill (#6609) (ba276b03c)
- SKY-11028: halt the non-converging repair loop and escalate honestly (#6608) (34145d36a)
- fix(SKY-11078): emit run-scoped recording artifact for code-block runs (#6607) (250e3ba9b)
- feat(observability): convert event duration metrics to OTEL histogram (#6606) (368d0eba1)
- fix(SKY-11079): show code-block action screenshot on the run Overview (#6605) (b6159bfbb)
- feat(SKY-10837): code-first code block frontend (editor views, highlights, run timeline) (#6604) (03c9981d9)
- fix(SKY-10700): enable browser mic permission prompt for voice input (#6601) (c0d3d0d3a)
- fix(SKY-11077): record page.evaluate as an EXECUTE_JS action in code blocks (#6600) (a2e1e0153)
- fix(deps): bump vitest to 3.2.6 (CVE-2026-47429) (#6596) (a090a632c)
- Update changelog — Week of June 15, 2026 (#6594) (e62255f3c)
- feat(SKY-10837): code-first code block backend (schema, recording proxy, copilot fills, run rendering) (#6593) (269ebb10f)
- SKY-11024: steer copilot to author a terminal download block on a reached affordance (#6592) (b98eded6f)
- SKY-11031: promote copilot outcome-verification and persisted-criteria to unconditional defaults (#6591) (a35c768b3)
- fix(SKY-11012): resolve run-only re-test against the turn's workflow_yaml (#6589) (eaf4ec621)
- SKY-11030: promote scout-act-observe + evaluate-target-steer to unconditional defaults (#6588) (340f4857e)
- SKY-11022: reject 'parameters' field on code block YAML (#6587) (a07820e72)
- SKY-10912 Promote scouted typed values into workflow inputs (#6586) (6d46bf715)
- SKY-10967: Reuse Copilot SDK action runs (#6584) (9fe9d7044)
- SKY-11025: harden extraction guardrail AST traversal (review follow-up to #12165) (#6585) (8cf43bffa)
- SKY-10984: Preserve run authority on turn-intent timeouts (#6583) (93f333e76)
- feat(copilot): fold code into the mode dropdown with a blue glow (SKY-10941) (#6582) (55fee99ae)
- feat(SKY-10937): register code-block browser downloads into block outputs (#6581) (abfc476cd)
- SKY-11025: structured keyed output for copilot extraction code blocks (#6580) (edb298e0d)
- SKY-10910 Preserve terminal evidence in Copilot hard blocks (#6579) (338c91b61)
- SKY-11010: steer + auto-act on repeat evaluate of an unchanged page (#6577) (13ed2d60b)
- SKY-10965 Add Copilot hook log attribution (#6578) (ae8fcddb2)
- SKY-11011: stop logging raw OTP code in poll_otp_value (#6576) (de11bfcbe)
- feat(task_v2): bias the planner toward loop tasks for repeated same-shape work (#6575) (d25ede611)
- feat(task_v2): make the final answer the deliverable + stop synthesis wheel-spinning (#6574) (efda3e732)
- fix(SKY-10969): keep Run Inputs collapsed during Run History filtering (#6573) (dd62cdcda)
- SKY-10819: asymmetric debug-session profile handling for LoginBlock (#6572) (873312a2a)
- SKY-10938: fill-time OTP primitive for the code-block sandbox (#6571) (9814c885d)
- fix(SKY-10987): keep run authority on explicit re-test diagnose turns (#6570) (394bec9ff)
- fix(skyvern): skip click fallbacks after post-dispatch timeout (SKY-10921) (#6569) (4a8e64708)
- Fix post-navigation recording capture and interpretation resume (#6568) (006bce80a)
- Allow uncapped workflow runtime configuration (#SKY-10265) (#6567) (cdacadb95)
- security: bump aiohttp >=3.14.0 and pypdf >=6.12.0 (Dependabot #462 #463 #465 #466) (#6566) (d0e0982dc)
- SKY-10892: Harden request policy fallback (#6564) (0e97f5d80)
- SKY-10876 reject unresolved code sandbox names (#6563) (3ae0e91ba)
- SKY-10931: persist copilot completion criteria per goal epoch with tri-state adjudication (#6562) (4480b8112)
- Browser recording backend: live interpretation, capture pause, draft commit (#6561) (f6450c13b)
- fix(SKY-10854): preserve single-item JSON array workflow inputs on run (#6560) (c6bdf9bab)
- fix(llm): revert Vertex gemini-3.1-flash-lite to the -preview id (#6558) (978922ef9)
- Update API specifications with fern api update (#6557) (9b3f73eb4)
- fix(SKY-10789): pass through explicit non-dict returns in code blocks (#6556) (43e0fdf7b)
- fix(analytics): stop /analytics/summary 500s from tz-mixed serving merge and cold live segments (#6555) (59c11985c)
- Gate recorded wait actions on page activity (backend) (#6554) (10519abe0)
- Cut live recording draft latency: instant placeholders, max-wait debounce, deterministic nav/wait blocks (backend) (#6553) (dbe733bf7)
- SKY-10875 bind repeated challenge stop verdict (#6551) (2e7dfcfc3)
- SKY-10874: require goal-field content for Copilot code results (#6548) (fdcd19df7)
- fix: reorder Claude Fable fallback router (#6552) (6bf56f20e)
- SKY-10982 Fix Copilot loop detector dispatch boundaries (#6550) (fe94791a0)
- SKY-10983 gate run credentials before dispatch (#6549) (6d84d5931)
- fix(copilot): render terminal headline from the typed turn adjudication (SKY-10871) (#6547) (2f8541c47)
- fix(SKY-10928): block task_v2 completion when a required sub-goal is unmet (planner + completion-check) (#6546) (156c63fc4)
- fix(SKY-10980): teach task_v2 planner to segment work past per-operation item limits (#6545) (f67fda31a)
- fix(SKY-10934): honor the task_v2 max_iterations override (#6544) (d31fdc0ec)
- fix(SKY-10979): dedupe generated workflow parameter keys to prevent duplicate-key hard-fail (#6543) (be24e191d)
- fix(SKY-10974): keep clear-credential confirm dialog above dialog overlays (#6542) (15405812e)
- docs(SKY-10878): document opt-in browser profile generation for sessions (#6541) (c4d6ae37e)
- fix(SKY-9178): retarget disabled-wrapper clicks using single-chain rule (#6540) (311d7d016)
- SKY-10936: Add Claude Fable 5 model support (#6539) (5ad7d68d8)
- copilot: hard-block + safe-rewrite residual internal-vocab leaks on REPLY (SKY-10315) (#6538) (964859fb2)
- fix(SKY-8574): render workflow run timeline in execution order, not branch-tree order (#6515) (bb74c38f6)
- fix(SKY-10933): enforce code-only block policy (#6536) (b3a2affba)
- feat(SKY-10775): add Gemini 3.5 Flash to the model router (#6505) (33295db19)
- feat(api): skip api.raw_request logging for successful read requests (SKY-10887) (#6511) (daa0f5f33)
- feat(SKY-10860): multi-tab control for the autonomous agent loop (#6507) (3ab230a9e)
- SKY-10929 Compile scouted Copilot actions at persist seam (#6534) (49cfcd96c)
- fix(persistent-sessions): final video sync budget must outlive the ffmpeg chain (SKY-10680) (#6519) (9bdceef10)
- feat(copilot): render chat block rows from the recorded run outcome verdict (SKY-10873) (#6532) (da9870abf)
- Update changelog — Week of June 8, 2026 (#6530) (0348064f6)
- fix(SKY-10129): re-validate malformed credential IDs against the org (#6529) (2773821fb)
- feat(copilot): emit the recorded per-run outcome verdict as a typed narrative event (SKY-10873) (#6528) (d60296b46)
- SKY-10888: Repair credentialed runtime diagnosis (#6526) (46b4f2e25)
- SKY-10889: gate credentialed code persistence on scouted submit (#6525) (40761ace1)
- fix(recording): revert to Playwright default recording size, add config override (#6524) (8e6794daa)

**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.41...v1.0.43


## What's Changed
* fix(SKY-11177): harden element-tree scrape against undefined className and isElementVisible recursion by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6697
* fix(SKY-11112): credit data captured inside a navigate block in task_v2 by @trevor-cheung in https://github.com/Skyvern-AI/skyvern/pull/6698
* Make free credits a one-time grant by @suchintan in https://github.com/Skyvern-AI/skyvern/pull/6700
* SKY-11180 Fix Copilot directory synthesized code binding by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/6702
* Bump version to 1.0.43 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/6701


**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.42...v1.0.43