[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
vercel-labs/agent-browser	patch	0.39.1 → 0.39.2	0.39.4 (+1)

---

Release Notes

vercel-labs/agent-browser

v0.39.2

Compare Source

Bug Fixes

• Fixed paused network requests being lost when the CDP event receiver falls behind, preventing requests from remaining stalled (#​2110)
• Fixed domain-filtered redirects so open reports an error when the main document redirects to a blocked host (#​2114)
• Fixed Eve compatibility with the current tool contract and sandbox execution model (#​2157)
• Fixed browser launch arguments so commas and negative coordinates inside flag values are preserved in --args and AGENT_BROWSER_ARGS (#​2141)
• Fixed MCP argument validation so undeclared keys return an error instead of silently selecting default behavior (#​2175)
• Fixed click and double-click targeting so hidden, disabled, and off-viewport elements return an error instead of reporting success (#​2173)
• Fixed CDP attachment persistence so follow-up commands retain the attached browser (#​2155)
• Fixed stale element references so ambiguous recovery fails instead of selecting another element (#​2145)
• Fixed target and session invalidation when related CDP events arrive in the same batch (#​2176)
• Fixed policy loading failures so unreadable or invalid policy files deny actions instead of continuing without the policy (#​2179)

Testing

• Made native E2E fixtures independent of live websites and installed the required Obscura binary for engine verification (#​2113)

Contributors

• @​Railly
• @​lahfir
• @​cmpadden
• @​holny
• @​KimHyeongRae0
• @​jin-2-kakaoent
• @​asif786ka
• @​tlq5l
• @​aniketsaurav18
• @​jerryfane

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

TL;DR for garyj

Patch release for vercel-labs/agent-browser, mostly bug fixes for CDP/MCP-driven automation reliability.

• Several fixes tighten error handling instead of silent failures: MCP undeclared args, stale element recovery, invalid policy files now deny-by-default and click targeting on hidden/disabled elements now errors rather than reporting success.
• CDP attachment persistence fixed so follow-up commands keep the attached browser, useful if you're scripting multi-step browser sessions.
• Fixed paused network requests getting lost when the CDP event receiver falls behind, could have caused stalled requests in automation flows.
• Minor: --args/AGENT_BROWSER_ARGS parsing now preserves commas and negative coordinates in flag values.

No breaking changes or CVEs; safe to merge.

_{Auto-summarized by claude-sonnet-5 from the release notes above. Add/remove the deps-summary label to control this.}