Skip to content

chore(deps): bump brace-expansion, agent-browser and @askjo/camofox-browser - #26

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8e6bd51030
Closed

chore(deps): bump brace-expansion, agent-browser and @askjo/camofox-browser#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8e6bd51030

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown

Bumps brace-expansion to 5.0.7 and updates ancestor dependencies brace-expansion, agent-browser and @askjo/camofox-browser. These dependencies need to be updated together.

Updates brace-expansion from 2.1.0 to 5.0.7

Release notes

Sourced from brace-expansion's releases.

v4.0.1

  • fmt 5a5cc17
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

  • feat: use string replaces instead of splits (#64) 278132b
  • fmt dd72a59
  • add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

  • pkg: publish on tag 3.x 3059c07
  • fmt 8229e6f
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

  • Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
  • added jsdoc (#55) 68c0e37
  • node 16 is EOL 9e781e9
  • add standard 3494c4d
  • use const and let (#57) dd5a4cb
  • docs 6dad209
  • remove test e3dd8ae
  • ci: update node versions d23ede9
  • docs: add @​lanodan to contributors 1eb3fa4
  • docs 1e7c9cd
  • switch from tape to test module (#60) 2520537
  • Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
  • Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
  • docs: add back ci badge 8ee5626
  • Add github actions, remove travis. Closes #52 (#53) 5c8756a
  • CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.1.1

  • Backport v5.0.6 change to v2 (#109) c3a817c

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates agent-browser from 0.13.0 to 0.32.3

Release notes

Sourced from agent-browser's releases.

agent-browser@0.23.2

Patch Changes

  • 3c942e2: ### New Features

    • Dashboard session creation - Sessions can now be created directly from the dashboard UI. A new session dialog provides a unified selector grid for local engines (Chrome, Lightpanda) and cloud providers (Browserbase, Browserless, Browser Use, Kernel) with async creation, loading state, and error display (#1092)
    • Dashboard provider icons - The session sidebar now shows the provider or engine icon for each session, making it easy to identify which backend a session is using (#1092)

    Bug Fixes

    • Fixed Browser Use provider using an intermediate API call instead of connecting directly via WSS (wss://connect.browser-use.com), which caused connection failures (#1092)
    • Fixed Browserbase provider not sending an explicit JSON body and Content-Type header, causing session creation to fail (#1092)
    • Fixed provider navigation hanging because wait_for_lifecycle waited for page load events that remote providers may not emit. Navigation with --provider now automatically sets waitUntil=none (#1092)
    • Fixed remote CDP connections timing out by increasing the CDP connect timeout from 10s to 25s for cloud providers (#1092)
    • Fixed zombie daemon processes not being cleaned up when a provider connection fails during session creation from the dashboard (#1092)

agent-browser@0.23.1

Patch Changes

  • fbcab37: ### New Features

    • Auto-dismissal for alert and beforeunload dialogs - JavaScript alert() and beforeunload dialogs are now automatically accepted to prevent the agent from blocking indefinitely. confirm and prompt dialogs still require explicit dialog accept/dismiss commands. Disable with --no-auto-dialog flag or AGENT_BROWSER_NO_AUTO_DIALOG environment variable (#1075)
    • Puppeteer browser cache fallback - Chrome discovery now searches ~/.cache/puppeteer/chrome/ (or PUPPETEER_CACHE_DIR) for Chrome binaries, so users with an existing Puppeteer installation can use agent-browser without a separate install step (#1088)
    • Console output improvements - console.log of objects now shows the actual object preview (e.g. {userId: "abc", count: 42}) instead of "Object". JSON output includes a raw args array for programmatic access (#1040)

    Bug Fixes

    • Fixed same-document navigation (e.g. SPA hash routing) hanging forever because wait_for_lifecycle waited for a Page.loadEventFired that never fires on same-document navigations (#1059)
    • Fixed save_state only capturing cookies and localStorage for the current origin, silently dropping cross-domain data (e.g. SSO/CAS auth cookies). Now uses Network.getAllCookies and collects localStorage from all visited origins (#1064)
    • Fixed externally opened tabs not appearing in tab list when using --cdp mode. Tabs opened by the user or another CDP client are now detected and tracked (#1042)
    • Fixed dashboard server not picking up installed files without a restart. dashboard install now takes effect immediately on a running server (#1066)
    • Fixed Windows Chrome extraction failing because zip path normalization used forward slashes while the extraction code expected backslashes (#1088)

agent-browser@0.23.0

Minor Changes

  • 0f0f300: ### New Features

    • Observability dashboard - Added a local web UI (dashboard) that shows live browser viewports, command activity feeds, console output, network requests, storage, and extensions for all sessions. Manage it with dashboard start, dashboard stop, and dashboard install. The dashboard runs as a standalone background process and all sessions stream to it automatically (#1034)
    • Runtime stream management - Added stream enable, stream disable, and stream status commands to control WebSocket streaming at runtime. Streaming is now always enabled by default; AGENT_BROWSER_STREAM_PORT overrides the port instead of toggling the feature (#951)
    • Close all sessions - Added close --all flag to close every active browser session at once

    Bug Fixes

    • Fixed Lightpanda engine compatibility (#1050)
    • Fixed Windows daemon TCP bind failing when Hyper-V reserves the port by falling back to an OS-assigned port and writing it to a .port file (#1041)
    • Fixed Windows dashboard relay using Unix socket instead of TCP (#1038)
    • Fixed radio/checkbox elements being dropped from compact snapshot tree because the ref= check required a leading [ that those elements lack (#1008)
Changelog

Sourced from agent-browser's changelog.

0.32.3

New Features

  • Added HAR response body capture with text bodies embedded by default and configurable all, text, and none content modes across the CLI and MCP surfaces (#1578)
  • Added a derive-client skill for recording browser traffic and generating reusable API clients from HAR request and response data (#1578)

Contributors

0.32.2

Improvements

  • Updated eve extension packaging for eve 0.25.1, adopting the new source and dist extension manifest format, updating the eve example to stable AI SDK releases, and keeping extension tests aligned with eve's scoped config registry (#1570)

Contributors

0.32.1

Improvements

  • Widened eve compatibility for @agent-browser/eve to accept eve 0.23 and future major releases without peer-resolution warnings (#1563)

Documentation

  • Standardized eve branding to use lowercase styling across the docs, examples, package readmes, and release notes (#1557)

Contributors

0.32.0

New Features

  • eve extension - Added @agent-browser/eve, an eve extension that mounts the agent-browser tool set with namespaced browser tools, sandbox bootstrap helpers, docs, examples, CI, and release packaging (#1547)

Security

  • Hardened domain allowlists by blocking WebRTC bypasses, applying network containment across launch modes, workers, popups, restored state, and reused daemon sessions, rejecting unsafe startup arguments, and adding Chrome regression coverage (#1546)

Bug Fixes

  • Fixed completed-page waits so load and DOMContentLoaded waits resolve immediately when the current document is already ready, with structured eve wait timeout handling and focused coverage (#1554)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for agent-browser since your current version.


Updates @askjo/camofox-browser from 1.5.2 to 1.13.0

Release notes

Sourced from @​askjo/camofox-browser's releases.

v1.13.0 — Persistence and browser recovery

Highlights

  • Recover zombie browser contexts during tab creation with a configurable 10-second newPageTimeoutMs deadline, targeted context replacement, and one retry — thanks @​Love-JourneY (#5416).
  • Persist IndexedDB alongside cookies and local storage when enabled — thanks @​ianks (#7225).
  • Fully reset persisted session storage through the cookie/session reset flow — thanks @​PluginsKers (#6972).
  • Support a configurable server bind host — thanks @​snapss-dev (#8096).
  • Increase Docker shared memory to 2 GB for improved browser stability — thanks @​lindenau-cedix (#6017).

Contributors

Thank you to @​Love-JourneY, @​ianks, @​PluginsKers, @​snapss-dev, and @​lindenau-cedix for the contributions included in this release.

Full diff: jo-inc/camofox-browser@v1.12.1...v1.13.0

v1.12.1

VNC reliability

  • Restore initial VNC attachment for Xvfb launched with -displayfd.
  • Preserve per-server display ownership across multi-instance hosts.
  • Reattach x11vnc after browser/Xvfb restarts on the same display.
  • Add GET /vnc/status for attachment and port discovery.
  • Add hermetic watcher coverage and a disposable Linux recovery smoke test.

Includes the VNC work proposed in #4781, #5243, #6549, and #8070. Thanks @​Doud-FR, @​paranoidi, @​modanq, and @​luxles.

v1.12.0 — big set of changes from jo and reliability/compat fixes

This release upstreams reliability work from running Camofox in production at Jo, alongside community fixes.

What changed

Browser reliability

Substantial changes as a result of broad production-usage on residential proxies from askjo.ai

  • Scope process cleanup to browsers owned by the current server.
  • Prevent close/relaunch races and clean up orphaned browser processes.
  • Improve idle-shutdown health checks and memory-pressure recovery.
  • Harden popup, stale-tab, and concurrent tab lifecycle handling.
  • Improve multi-instance tab routing, proxy rotation, and Google prewarming.
  • Bound click fallback lookups and return an actionable 422 instead of a 30-second 500.
  • Skip unstable captcha and bot-detection iframes during ref construction.
  • Normalize browser failures into stable status codes and recovery hints.

Linux and Docker

  • Await VirtualDisplay.get() so launches no longer receive DISPLAY=[object Promise].
  • Remove the fixed context viewport that triggered viewport.isMobile Juggler errors.
  • Default Xvfb to 1280×720×24.
  • Pin camoufox-js to 0.10.2 for reproducible installs.
  • Improve Docker build and dependency installation.

... (truncated)

Commits
  • 8b5b095 v1.13.0
  • f15148b fix: recover zombie browser contexts during tab creation (#5416)
  • f4c219e fix(docker): increase shared memory for make up (#6017)
  • bd2a071 feat(persistence): reset complete session storage state (#6972)
  • 24c414b feat(persistence): optionally include IndexedDB in storage state (#7225)
  • 948c1c4 feat: support configurable server bind host (#8096)
  • 82b9480 v1.12.1
  • 50b5031 fix(vnc): restore attachment recovery and status
  • e95a1cc v1.12.0
  • b00cf21 Merge pull request #8106 from jo-inc/sync/jo-browser-jul17
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​askjo/camofox-browser since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump brace-expansion, agent-browser and @askjo/camofox-b…
edbf181 
…rowser

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.7 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [agent-browser](https://github.com/vercel-labs/agent-browser) and [@askjo/camofox-browser](https://github.com/jo-inc/camofox-browser). These dependencies need to be updated together.


Updates `brace-expansion` from 2.1.0 to 5.0.7
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v2.1.0...v5.0.7)

Updates `agent-browser` from 0.13.0 to 0.32.3
- [Release notes](https://github.com/vercel-labs/agent-browser/releases)
- [Changelog](https://github.com/vercel-labs/agent-browser/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/agent-browser@v0.13.0...v0.32.3)

Updates `@askjo/camofox-browser` from 1.5.2 to 1.13.0
- [Release notes](https://github.com/jo-inc/camofox-browser/releases)
- [Commits](jo-inc/camofox-browser@v1.5.2...v1.13.0)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.7
  dependency-type: indirect
- dependency-name: agent-browser
  dependency-version: 0.32.3
  dependency-type: direct:production
- dependency-name: "@askjo/camofox-browser"
  dependency-version: 1.13.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Author

Superseded by #39.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-8e6bd51030 branch August 1, 2026 04:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants