Skip to content

release: 0.146.0 - #236

Merged
chruffins merged 3 commits into
mainfrom
release-please--branches--main--changes--next--components--sdk
Nov 10, 2026
Merged

chruffins merged 3 commits into
mainfrom
release-please--branches--main--changes--next--components--sdk

Conversation

@kernel-internal

@kernel-internal kernel-internal Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Automated Release PR

0.146.0 (2026-11-10)

Features

  • Allow auto-starting replays during browser creation and pool acquire (f7caf3e)

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions


Note

Medium Risk
Workflow credential handling changes affect automated doc/MCP updates; the public API change is an optional field with low breakage risk.

Overview
Releases @onkernel/sdk0.146.0 and documents the feature in CHANGELOG.md.

The SDK adds optional start_replay on browser create, browser pool create/update, and pool acquire, so replay recording can start automatically instead of only via a separate call. Matching API tests include the new field.

CI security: Pi-based updater workflows (update-docs, update-mcp-coverage) no longer inject ANTHROPIC_API_KEY / OPENAI_API_KEY into the generate job. They mint short-lived model credentials via llm-credentials (OIDC: id-token: write) immediately before the agent step and tear them down with if: always(). semgrep and vuln-remediation gain the same OIDC permission, and update-coverage-security.test.mjs asserts the new layout (context key only, credential lifecycle).

Reviewed by Cursor Bugbot for commit 39ea008. Bugbot is set up for automated code reviews on this repo. Configure here.

…quire

Stainless-Generated-From: ac0f236613cf91b306bf2e1b88d17f621cc30785
rgarcia and others added 2 commits November 10, 2026 11:24
* Use federated model credentials for pi

* Pin llm-credentials action to a commit

---------

Co-authored-by: rgarcia <72655+rgarcia@users.noreply.github.com>
@kernel-internal
kernel-internal Bot force-pushed the release-please--branches--main--changes--next--components--sdk branch from dac16c4 to 39ea008 Compare November 10, 2026 16:26
@chruffins
chruffins merged commit 0e72dfa into main Nov 10, 2026
13 checks passed
@kernel-internal

Copy link
Copy Markdown
Contributor Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants