v1.0.46

upstash/context7v1.0.46Jul 8, 2026by github-actions[bot]

AI Summary

This release focuses on bug fixes and security updates, primarily bumping the MCP dependency to resolve high-severity alerts. It includes improvements to download handling, SSRF protection, and changes logging behavior for timeouts.

Key Highlights

Bumped MCP to 1.28.1 to fix high-severity Dependabot alerts
Fixed session-scoped downloads to use configured suffix
Guarded server-side fetch URLs against SSRF attacks
Reaped stale PSM v2 adoption cache entries to stop API pod driver leaks
Changed page-analysis timeouts from error to warning logs

New Features

Added workflow-copilot lite LLM environment key

Full Release Notes

## What's Changed

Version bumped from 1.0.47 to 1.0.46

### Recent Changes
- chore(deps): bump mcp to 1.28.1 to fix 3 high-severity Dependabot alerts (#7496) (14439528f)

**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.47...v1.0.46


## What's Changed
* fix(SKY-11997,SKY-12004): name session-scoped downloads by configured download_suffix by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7172
* fix(SKY-11948): consume output-contract grants at dispatch by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7188
* SKY-11498: Route request-policy classifier through lite Copilot model setting by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7191
* fix(SKY-11992): capture blob: URL downloads in the CDP download monitor by @LawyZheng in https://github.com/Skyvern-AI/skyvern/pull/7192
* Add workflow-copilot lite LLM env key by @andrewneilson in https://github.com/Skyvern-AI/skyvern/pull/7194
* fix(SKY-12013): return missing dropdown target failures by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7195
* fix(SKY-11912): guard server-side fetch URLs against SSRF by @AronPerez in https://github.com/Skyvern-AI/skyvern/pull/7173
* fix(SKY-11848): reap stale PSM v2 adoption cache entries to stop API pod driver leaks by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7196
* fix: log page-analysis timeouts at warning instead of error by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7197
* fix: log expected goal-complete check failures at warning, not error by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7198
* Bump version to 1.0.46 by @wintonzheng in https://github.com/Skyvern-AI/skyvern/pull/7199


**Full Changelog**: https://github.com/Skyvern-AI/skyvern/compare/v1.0.45...v1.0.46