[pateat-release-bot]

🤖 I have created a release beep boop

0.1.0 (2026-11-12)

Features

• api: ask Clef through Workers AI before Claude for sign-in forms (ADR 0083) (#1254) (405dcce)
• api: use Temporal in the Worker through workerd's temporal flag (#1327) (00d6b53)
• bitwarden: leave out an item the account mapper cannot admit instead of failing the sync (#1485) (6af446c)
• bitwarden: leave out an organization whose key does not open instead of failing the vault (#1490) (d42f3b2)
• diagnostics: filter log exports by time and severity (#1501) (0aa267d)
• extension: ask Clef first with this device's Cloudflare token (ADR 0083) (#1255) (e0ad149)
• extension: fill a password-only page at once and check its account at the click (#1222) (db18960)
• extension: log in at once when the popup sets the site default (#1282) (bc99895)
• extension: log where a login's own time went, on the device only (#1218) (2bcbb29)
• extension: offer a frame's account choice in the popup and say why a frame is not logged in (#1402) (69d400c)
• extension: offer ARIA widgets an attribute names as signed-in markers (#1275) (9e6edef)
• extension: propose an identity item's fields first for a personal detail (#1473) (8f8a52f)
• extension: read a sign-in at once and correct it when its form comes back (#1224) (329c611)
• extension: read and finish logins in frames like logins in the tab's page (#1394) (fb87cc0)
• extension: repair stale custom-field bindings from the popup (#1524) (8643616)
• extension: send a shown frame's sign-in page for generation (ADR 0086) (#1403) (8364867)
• extension: send a sign-in form shown in place later, once per path (#1287) (836a742)
• extension: use passkeys of related origins (ADR 0084) (#1259) (b721a9e)
• extension: wait on the page's signals instead of set times (#1216) (4fe3095)
• hand Clef's calls to a paired device with its own key (ADR 0083) (#1257) (f93874a)
• hold a recipe's sign-in form and its list of accounts together (#1267) (8438cdd)
• inference: add the first request-log corpus (#1231) (46a0697)
• inference: benchmark field mapping on Cloudflare Clef (#1233) (72537dc)
• inference: build an evaluation corpus from the request log (#1225) (04c6ca4)
• inference: Clef element and slot views plus page questions (ADR 0083) (#1253) (0d4b9dd)
• login: replace a disabled final advance by its page (#1223) (8dc8be3)
• manage: browse and filter login history (#1502) (18eeb0c)
• options: show the last automatic sync's failure on its connection (#1468) (52ee6f6)
• send where a login's own time went with its login record (#1228) (1bba7e3)
• vault: leave out an item strict decryption refuses instead of failing the vault (#1471) (3d9b467)
• vault: use a partly readable item without the fields that do not decrypt (#1495) (640e669)

Bug Fixes

• accept a sign-in button beside its form when other page buttons follow it (#1389) (dde8994), closes #1373
• authorize personal-detail form destinations, including every submitter (#1516) (e41f0bb)
• bitwarden: use an item without the URIs the SDK leaves out, as official clients do (#1472) (b738786)
• ci: make the docs release checks wait for propagation and check the real page language (#1377) (739873c)
• clear the small review findings left from the Codex PR batch (#1372) (9174627)
• connections: retire pending sign-ins when locking a vault (#1470) (8c6f3bc)
• contracts: refuse passkey recovery links as passkey buttons (#1396) (6730de3)
• contracts: switch a login's route once each way before a submission (#1290) (098a52b)
• deps: update ai sdk (#1237) (c3320ae)
• deps: update ai sdk (#1252) (602fcf2)
• deps: update ai sdk (#1309) (ddef28b)
• deps: update ai sdk (#1343) (dd1d8b3)
• deps: update ai sdk (#1428) (d0ad088)
• deps: update ai sdk (#1511) (e752a99)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1186 (#1232) (2cbd969)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1187 (#1238) (5ac0368)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1189 (#1266) (d64fb70)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1192 (#1285) (e92ec9a)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1196 (#1297) (6a6ad71)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1199 (#1301) (b3c1105)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1201 (#1305) (c4dfb40)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1202 (#1311) (1a41b36)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1204 (#1313) (b0ca5d8)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1211 (#1329) (862ea8f)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1215 (#1382) (9ca14f5)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1225 (#1445) (bc1d12e)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1231 (#1453) (6e2a6fd)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1233 (#1512) (3cc245e)
• deps: update dependency @bitwarden/sdk-internal to v0.2.0-main.1234 (#1542) (9ba6a1b)
• deps: update dependency @tanstack/react-query to v5.105.3 (#1239) (a7222a4)
• deps: update dependency @tanstack/react-query to v5.106.0 (#1307) (fe8e723)
• deps: update dependency @tanstack/react-query to v5.106.1 (#1314) (6099af1)
• deps: update dependency @tanstack/react-query to v5.107.1 (#1344) (9e6dc3e)
• deps: update dependency ai to v7.0.166 (#1443) (3ff476e)
• deps: update dependency hono to v4.13.17 (#1366) (2f5edc7)
• deps: update dependency hono to v4.13.18 (#1543) (731d7bf)
• deps: update dependency i18next to v26.7.2 (#1330) (09a9ec2)
• deps: update dependency i18next to v27.0.1 (#1424) (9f8737e)
• deps: update dependency i18next to v27.1.0 (#1451) (84c64dd)
• deps: update dependency i18next to v27.1.1 (#1454) (3b7c0a5)
• deps: update dependency lucide-react to v1.67.0 (#1256) (5843a96)
• deps: update dependency lucide-react to v1.68.0 (#1298) (314ce2b)
• deps: update dependency lucide-react to v1.69.0 (#1315) (829a7d2)
• deps: update dependency lucide-react to v1.70.0 (#1336) (9d5039c)
• deps: update dependency lucide-react to v1.71.0 (#1455) (862f859)
• deps: update dependency otpauth to v9.6.0 (#1244) (8fc5251)
• deps: update dependency react-i18next to v17.1.12 (#1286) (4d51ff1)
• deps: update dependency react-i18next to v17.1.13 (#1331) (a2b09f3)
• deps: update dependency react-i18next to v18.0.1 (#1437) (d3dadf5)
• deps: update dependency tldts to v7.4.21 (#1513) (26c3917)
• deps: update dependency xstate to v5.33.4 (#1429) (bc1e4c7)
• deps: update i18next (#1422) (e0f1baa)
• diagnostics: tidy log snapshot, problem export filter and sealed item counts (#1520) (27e5036)
• discover passkeys inside sealed vault items (#1462) (eadbc51)
• docs: serve the docs Worker's assets from a docs/ directory (#1371) (9dc73d3), closes #1322
• enforce settings limits across composed profiles (#1523) (9f321b4)
• expose domain trigger deployment diagnostics (#1496) (da9be64)
• extension: continue on a password input that shares the identifier's test attribute (#1419) (ae4f135)
• extension: count a passkey answer as the sent credential (#1412) (69ef979)
• extension: count a passkey sign-in on another site for a login with a stop (#1264) (7c8fd50)
• extension: count a popup pick's person time only inside the login's time (#1214) (8d73df1)
• extension: describe a code page's role buttons for the judge (#1260) (9a2cb6e), closes #1152
• extension: describe a role button that chooses the authenticator app (#1211) (923058d), closes #1152
• extension: do not count SSO-only items when choosing a site's account (#1388) (1c7224c)
• extension: end a login whose tab shows no web page at its wait's bound (#1278) (de9f6d1)
• extension: end a login whose wait for the site ran out, also after a worker stop (#1217) (7706136)
• extension: exclude far-future entries from recent diagnostic counts (#1284) (4a30bfa)
• extension: hold a held handler's page drawn again, not shown-again (#1416) (8fe3054)
• extension: judge a page again once it shows something after describing nothing (#1268) (d6e9e88)
• extension: keep a second-factor page from replacing its login recipe (#1249) (8e492f1)
• extension: keep the worker up while a login waits for the site (#1221) (01e5d1a)
• extension: keep values formatted with ASCII separators (#1369) (d346902)
• extension: leave another extension's closed overlay out of the page (#1271) (7830479)
• extension: log a closed tab's login end and keep a login's debug lines (#1274) (22d8cce)
• extension: log why a learned page handler was not entered (#1398) (d9a308c), closes #1381
• extension: name a field by its id and name before its test attributes (#1426) (c30db0e)
• extension: never offer or bind custom fields reserved for SSO methods (#1393) (df1406b)
• extension: never read a code input as the route's sign-in field (#1423) (2bd1c62)
• extension: never send a secret-answer page as a sign-in entry (#1387) (ee08a23)
• extension: never type a username or password into a code input (#1425) (f97f784), closes #1413
• extension: one move rule for every sign-in method (#1408) (6593801)
• extension: press an authenticator button after a passkey, and let a paused pick use its passkey (#1415) (8488fe0)
• extension: read an identifier input's layout label and customer numbers (#1440) (97b7647)
• extension: read pointer tab stops as script buttons (#1386) (4938ca9)
• extension: refuse a same-length rewrite that changes more than case, width or mask (#1420) (032c5c6), closes #1368
• extension: reject a passkey on a failure in a new page after Pateat's answer (#1417) (f89d6ae)
• extension: repair a form that clears a filled input (#1358) (04bf8fe)
• extension: report final watched login failures (#1345) (d61504c)
• extension: report the check that rejected a fill (#1356) (a1e9e61)
• extension: report what a chooser's list missed on a form shown in its place (#1261) (e681ce7)
• extension: start a login's time again after an in-place move or a login it followed (#1220) (2a7a9e0)
• extension: stop reassigning the popup listing timer (#1296) (9dc1c24)
• extension: treat the page after a code or passkey sign-in as after a sign-in (#1414) (936f8d3)
• extension: type a code into split inputs that declare no maxlength (#1258) (07973e3), closes #1152
• extension: wait for the person while a CAPTCHA shows after a step (#1390) (17bd42b)
• extension: watch a login on every route (#1410) (50eceac)
• follow up review findings from the Codex PR batch (#1370) (3d21f0c)
• generation: judge a challenge page again once it shows other inputs (#1342) (2d2b35d)
• generation: judge an undecided page again once it shows other inputs (#1477) (735a349)
• inference: keep request-log value shapes exactly as sent (#1230) (c58344c)
• inference: stop the false submits the first request-log run found (#1234) (b725465)
• keep the judge's code field on Epic Games' and HCP Cloud's code pages (#1404) (c9ceeeb)
• login: release the origin when a login leaves it before submitting (#1431) (dd504b7)
• login: respect disabled fieldsets for native controls (#1482) (4deea9a)
• login: watch every attribute for page targets, count quiet only for listed ones (#1518) (662f1ef)
• observation: read a sentence with inline elements near a field or button whole (#1478) (5dc05da)
• options: tell a wrong master password from an unreadable vault on unlock (#1466) (bb6ad1a)
• page: read forms through prototypes and honor disabled fieldsets everywhere (#1519) (2598367)
• passkeys: cancel pending login-account lookups (#1479) (16bf74e)
• preserve negative numbers when matching date select options (#1550) (5f8317b)
• reconcile production triggers during deployments (#1484) (d05014c)
• restore the extension typecheck on main and fix review wording (#1514) (4d4d1d1)
• select mature ordered Cloudflare Vite betas (#1395) (0771dd3)
• service: take a text input without inputmode as the judge's code field (#1418) (deab8d1), closes #1409
• settings: share server-scoped personal-detail identities (#1483) (963e1cf)
• strip trailing character runs without backtracking regexes (#1291) (29b2e9e)
• submit buttonless forms with shadowed native methods (#1463) (9f5f81b)
• vault: log which check refused which item on crypto-failed (#1459) (0b04e48)

---

This PR was generated with Release Please. See documentation.