github-featured / browser-use--browser-use

发布

RSS 订阅源

0.13.10 5c892e013a

比较
chore: pin release dependencies for 0.13.10 (#5670)

frostbyte_neo 发布于 2026-09-04 03:28:40 +00:00
Summary
- release Browser Use 0.13.10 with exact pins for browser-harness
  0.1.13, Pydantic 2.13.5, pydantic-settings 2.15.0, MCP 2.1.1, and pypdf
  6.16.2
- migrate both MCP servers and the MCP client/controller to the MCP 2
  low-level server API
- pin Hatchling 1.32.0
- make pydantic-settings an explicit runtime dependency instead of
  relying on MCP 1 to provide it transitively
The publish-workflow uv pin is split into #5669 because repository
policy requires workflow-guardians approval for .github/workflows/**.
This PR replaces #5667 with identical source tree changes but clean
history so the workflow-only rule is scoped correctly.

Security
- pypdf 6.16.2 resolves all three open Dependabot alerts on main
  (GHSA-23w6-3w8w-8484, GHSA-763m-79hh-57f2, GHSA-jp53-mhqp-8xcg)
- all external direct, optional, dev, and build dependencies in
  pyproject.toml are exact-pinned
- all newly selected PyPI artifacts checked have digital provenance
  attestations
- isolated installed-runtime pip-audit: no known vulnerabilities
Verification
- all GitHub test shards passed on the identical code tree in #5667
- code style, type checker, CodeQL, GitGuardian, and Cubic review passed
- clean wheel installs and CLI smoke passed on macOS, Linux, Windows,
  and uvx
- real stdio MCP initialization/list-tools passed for both browser-use --mcp and browser-use --cli-mcp
- 204 focused PDF/save/filesystem tests passed
- wheel and sdist build passed
A local live OpenAI agent probe could navigate to example.com, but the
configured local OpenAI credential returns 401. GitHub model adapter
tests passed.

Summary by cubic

Pins release dependencies for 0.13.10 and migrates the MCP servers and
client to MCP 2's low-level request-handler API.
- Exact pins: browser-harness==0.1.13, pydantic==2.13.5,
  pydantic-settings==2.15.0, mcp==2.1.1, pypdf==6.16.2,
  hatchling==1.32.0.
- pydantic-settings is now an explicit runtime dependency instead of
  coming transitively via MCP 1.
- The MCP server now reports the real package version instead of the
  hardcoded 0.1.0.
Migration
- Request handlers registered via add_request_handler replace the
  list_tools/call_tool decorators.
- Tool schemas and results use MCP 2 field names: input_schema,
  is_error, read_only_hint.
- Tool failures and unknown tool calls now return is_error=True
  results instead of plain error text.
Security
- pypdf==6.16.2 fixes three Dependabot alerts (GHSA-23w6-3w8w-8484,
  GHSA-763m-79hh-57f2, GHSA-jp53-mhqp-8xcg).
^{Written for commit 743f630923.

Summary will update on new commits.}
下载附件
- 源代码 (ZIP)
- 源代码 (TAR.GZ)

0 发布 148 Git 标签

chore: pin release dependencies for 0.13.10 (#5670)

Summary

Security

Verification

Summary by cubic