Update dependency @browserbasehq/stagehand to v3.6.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@browserbasehq/stagehand (source)	3.0.8 → 3.6.0

---

Release Notes

browserbase/stagehand (@​browserbasehq/stagehand)

v3.6.0

Compare Source

Minor Changes

• #​2178 c49a3fc Thanks @​seanmcguire12! - add support for WebMCP

Patch Changes

• #​2217 147e310 Thanks @​monadoid! - Add Azure OpenAI Microsoft Entra ID model auth support.

• #​2231 cf3603d Thanks @​miguelg719! - Add claude-fable-5 support: native structured outputs via the @​ai-sdk/anthropic bump, adaptive thinking (including the new "xhigh" effort) on the agent path, the API's built-in server-side refusal fallback to claude-opus-4-8, and auto tool choice for the final done call on models that reject forced tool use.

• #​2233 8d7d414 Thanks @​seanmcguire12! - Normalize URLs in ActCache key derivation by sorting query parameters before hashing. Semantically equivalent URLs that differ only in parameter order (e.g. ?utm_source=email&id=42 vs ?id=42&utm_source=email) now hit the cache instead of silently missing. Fragments and duplicate keys are preserved.

• #​2229 fd42e65 Thanks @​seanmcguire12! - launch local browser with --enable-features=WebMCPTesting,DevToolsWebMCPSupport by default

• #​2220 a64c6b7 Thanks @​monadoid! - Fix Stagehand-generated shadow-root XPath resolution so deterministic actions can target elements inside web components.

• #​2132 ed3e566 Thanks @​miguelg719! - Add canonical verifier evidence normalization for screenshots and text signals without requiring image dependencies in core installs.

• #​2133 840aac8 Thanks @​miguelg719! - Add the rubric-based verifier engine with normalized public rubric output and bounded failure-step parsing.

v3.5.0

Compare Source

Minor Changes

• #​2149 6e75725 Thanks @​miguelg719! - Added a screenshot option to extract() that sends the current viewport screenshot with the a11y tree for extraction.

• #​2127 78bcde8 Thanks @​seanmcguire12! - Add ignoreDefaultArgs option to selectively remove chrome-launcher's built-in default flags (e.g. --disable-extensions) when running locally

• #​2160 49575d6 Thanks @​monadoid! - Forward constructor and request model configuration when initializing API-backed sessions.

• #​2171 dc1445d Thanks @​seanmcguire12! - add native clipboard API

Patch Changes

• #​2146 3a53ed4 Thanks @​shriyatheunicorn! - Pass local browser launch options through when attaching over CDP so explicit viewport settings are respected.

• #​2107 8fc16d2 Thanks @​miguelg719! - Fix Anthropic CUA triple_click action mapping.

• #​2118 3e95a87 Thanks @​monadoid! - Add Vertex auth parameters to the core and server API schemas.

• #​2126 ebbdcd3 Thanks @​seanmcguire12! - fix(core): import ToolSet from ai public export

• #​2120 12703a6 Thanks @​miguelg719! - Fix structuredOutputMode for newer Anthropic models

• #​2170 1db5f1c Thanks @​Kylejeong2! - Add Claude Opus 4.8 to the supported CUA model whitelist.

• #​2116 cb586a1 Thanks @​seanmcguire12! - include "[selected]" or "[checked]" state in snapshot

• #​2129 765861c Thanks @​miguelg719! - Add a backend-selectable v3 evaluator facade while preserving the legacy evaluator path.

• #​2157 2cd60a3 Thanks @​miguelg719! - Add verifier trajectory, rubric, and evaluation-result types with normalized public naming.

• #​2131 e102a89 Thanks @​miguelg719! - Capture verifier trajectory evidence from agent evidence callbacks for offline scoring.

v3.4.0

Minor Changes

• #​2084 0641d44 Thanks @​seanmcguire12! - add ignoreSelectors param to extract()

• #​2096 a11603d Thanks @​seanmcguire12! - add ignoreSelectors to observe()

Patch Changes

• #​2080 21c78b3 Thanks @​miguelg719! - Add variables support to v3 agentExecute API schema and remove experimental requirement

• #​2077 f437f73 Thanks @​monadoid! - Fix frame registry handling for OOPIF pages

• #​2098 a783b99 Thanks @​seanmcguire12! - bump transitive deps to patched versions

• #​2089 8d2f354 Thanks @​shrey150! - Strengthen observe prompts so LLMs return complete encoded element IDs.

• #​2047 a87c1fc Thanks @​tkattkat! - Set default agent mode to hybrid with auto routing to dom for non compatible models

• #​2101 26e6c96 Thanks @​seanmcguire12! - move playwright-core, puppeteer-core, patchright-core from optional dependencies to peer dependencies

• #​2068 1d176c4 Thanks @​filip-michalsky! - Remove the default temperature setting from v3 agent AI SDK calls so reasoning models that do not support temperature run without provider warnings.

• #​2040 1fa9613 Thanks @​monadoid! - Prefer STAGEHAND_API_URL for Stagehand API overrides while retaining STAGEHAND_BASE_URL as a deprecated fallback.

• #​2065 9ff70dd Thanks @​miguelg719! - Add support for CUA models: openai/gpt-5.4-mini, openai/gpt-5.5, and anthropic/claude-haiku-4-5

• #​2039 7640381 Thanks @​monadoid! - Deprecate Browserbase project ID configuration.

v3.3.0

Minor Changes

• #​1980 e471d2e Thanks @​shrey150! - Support Browserbase verified session settings and bump the Browserbase SDK.

Patch Changes

• #​1954 732b384 Thanks @​github-actions! - Update Anthropic CUA to use adaptive thinking

• #​2001 20b601d Thanks @​shrey150! - Include agent.execute() usage in stagehand.metrics for API-backed sessions.

• #​1983 8543c11 Thanks @​github-actions! - Add variable substitution to the keys tool in both live execution and cache replay paths. When keys steps with method="type" contain %variableName% tokens, they are now resolved against the provided variables. This brings the keys tool to parity with the type tool's variable handling.

• #​1973 14b64ec Thanks @​monadoid! - Enable strict structured outputs for supported model paths.

• #​2028 a500de1 Thanks @​tkattkat! - Remove deprecated provider option

• #​1975 8f7192c Thanks @​seanmcguire12! - make file upload elements more explicit in page snapshot

v3.2.1

Patch Changes

• #​1843 144e18e Thanks @​seanmcguire12! - apply user defined toolTimeout to all agent tools (other than wait & think tools)

• #​1872 d3c3736 Thanks @​tkattkat! - Add support for LLM provider middleware

• #​1953 5c889df Thanks @​github-actions! - (NEW) Model Gateway: make model api key optional on API

• #​1924 a1ab39e Thanks @​seanmcguire12! - fix issue where stagehand could not attach to new tabs that were created manually.

• #​1874 f3fe7ce Thanks @​miguelg719! - Add headers (LLM) to ModelConfig

• #​1964 5fb9785 Thanks @​github-actions! - chore: update examples

• #​1901 f5d1f1f Thanks @​seanmcguire12! - pass timeout as timeoutMs in goto()

• #​1858 8bf5db8 Thanks @​monadoid! - Add explicit SSE event names for local v3 streaming and update the generated SDK contract to match.

• #​1899 6dc2276 Thanks @​tkattkat! - fix: include screenshot in openai cua agents first message

v3.2.0

Compare Source

Minor Changes

• #​1779 2f43ffa Thanks @​shrey150! - feat: add cdpHeaders option to localBrowserLaunchOptions for passing custom HTTP headers when connecting to an existing browser via CDP URL

• #​1834 63ee247 Thanks @​tkattkat! - Update stagehand agents search tool

• #​1774 521a10e Thanks @​seanmcguire12! - add new page.setExtraHTTPHeaders() method

Patch Changes

• #​1759 505e8c6 Thanks @​shrey150! - Add bedrock to the provider enum in model configuration schemas and regenerate OpenAPI spec.

• #​1814 7dc35f5 Thanks @​tkattkat! - Change usage of openai provider in agent to default to store:false

• #​1846 335cf47 Thanks @​aq17! - Fix streaming finished event being silently dropped. The final SSE event containing the result payload (success status, message, actions, usage, and messages) was previously discarded instead of being yielded to the caller.

• #​1764 6ba0a1d Thanks @​shrey150! - Expose headers in GoogleVertexProviderSettings so model configs can pass custom provider headers (for example X-Goog-Priority) without TypeScript errors.

• #​1847 4ff3bb8 Thanks @​miguelg719! - Enable FlowLogger on BROWSERBASE_FLOW_LOGS=1

• #​1752 c27054b Thanks @​derekmeegan! - fix: pause Browserbase agents while captcha solving is active and improve CUA recovery after the solve completes

• #​1800 2abf5b9 Thanks @​shrey150! - Make projectId optional for Browserbase sessions — only BROWSERBASE_API_KEY is required

• #​1766 7817fcc Thanks @​tkattkat! - Add configurable timeout to tools in agent

• #​1749 7390508 Thanks @​pirate! - When connecting to a browser session that has zero open tabs, Stagehand now automatically creates an initial about:blank tab so the connection can continue.

• #​1761 611f43a Thanks @​seanmcguire12! - fix issue where handlePossibleNavigation was producing unnecessary error logs on clicks that trigger page close

• #​1817 2402a3c Thanks @​tkattkat! - Add support for passing custom headers in clientOptions

v3.1.0

Compare Source

Minor Changes

• #​1681 e3db9aa Thanks @​tkattkat! - Add cookie management APIs: context.addCookies(), context.clearCookies(), & context.cookies()

• #​1672 b65756e Thanks @​seanmcguire12! - add boolean keepAlive parameter to allow for configuring whether the browser should be closed when stagehand.close() is called.

• #​1708 176d420 Thanks @​seanmcguire12! - add context.setExtraHTTPHeaders()

• #​1611 8a3c066 Thanks @​monadoid! - Using mode enum instead of old cua boolean in openapi spec

Patch Changes

• #​1683 7584f3e Thanks @​seanmcguire12! - fix: include shadow DOM in .count() & .nth() & support xpath predicates

• #​1644 1e1c9c1 Thanks @​monadoid! - Fix unhandled CDP detaches by returning the original sendCDP promise

• #​1729 6bef890 Thanks @​shrey150! - fix: support Claude 4.6 (Opus and Sonnet) in CUA mode by using the correct computer_20251124 tool version and computer-use-2025-11-24 beta header

• #​1647 ffd4b33 Thanks @​tkattkat! - Fix [Agent] - Address bug causing issues with continuing a conversation from past messages in dom mode

• #​1614 677bff5 Thanks @​miguelg719! - Enforce - regex validation on act/observe for elementId

• #​1580 65ff464 Thanks @​tkattkat! - Add unified variables support across act and agent with a single VariableValue type

• #​1666 101bcf2 Thanks @​Kylejeong2! - add support for codex models

• #​1728 0a94301 Thanks @​seanmcguire12! - handle potential race condition on .close() when using the Stagehand API

• #​1664 b27c04d Thanks @​seanmcguire12! - fixes issue with context.addInitScript() where scripts were not being applied to out of process iframes (OOPIFs), and popup pages with same process iframes (SPIFs)

• #​1632 afbd08b Thanks @​pirate! - Remove automatic .env loading via dotenv.

  If your app relies on .env files, install dotenv and load it explicitly in your code:

  import dotenv from "dotenv";
  dotenv.config({ path: ".env" });

• #​1624 0e8d569 Thanks @​seanmcguire12! - fix issue where screenshot masks were not being applied to dialog elements

• #​1596 ff0f979 Thanks @​tkattkat! - Update usage/metrics handling in agent

• #​1631 2d89d2b Thanks @​miguelg719! - Add right and middle click support to act and observe

• #​1697 aac9a19 Thanks @​shrey150! - fix: support <frame> elements in XPath frame boundary detection so act() works on legacy <frameset> pages

• #​1692 06de50f Thanks @​shrey150! - fix: skip piercer injection for chrome-extension:// and other non-HTML targets

• #​1613 aa4d981 Thanks @​miguelg719! - SupportedUnderstudyAction Enum validation for 'method' on act/observe inference

• #​1652 18b1e3b Thanks @​miguelg719! - Add support for gemini 3 flash and pro in hybrid/cua agent

• #​1706 957d82b Thanks @​chrisreadsf! - Add GLM to prompt-based JSON fallback for models without native structured output support

• #​1633 22e371a Thanks @​tkattkat! - Add warning when incorrect models are used with agents hybrid mode

• #​1673 d29b91f Thanks @​miguelg719! - Add multi-region support for Stagehand API with region-specific endpoints

• #​1695 7b4f817 Thanks @​tkattkat! - Fix: zod bug when pinning zod to v3 and using structured output in agent

• #​1609 3f9ca4d Thanks @​miguelg719! - Add SupportedUnderstudyActions to observe system prompt

• #​1581 49ead1e Thanks @​sameelarif! - Server-side caching is now available.

  When running env: "BROWSERBASE", Stagehand automatically caches act(), extract(), and observe() results server-side — repeated calls with the same inputs return instantly without consuming LLM tokens.

  Caching is enabled by default and can be disabled via serverCache: false on the Stagehand instance or per individual call. Check out the browserbase blog for more details.

• #​1642 3673369 Thanks @​seanmcguire12! - fix issue where scripts added via context.addInitScripts() were not being injected into new pages that were opened via popups (eg, clicking a link that opens a new page) and/or calling context.newPage(url)

• #​1735 c465e87 Thanks @​monadoid! - Supports request header authentication with connectToMCPServer

• #​1705 ae533e4 Thanks @​seanmcguire12! - include error cause in UnderstudyCommandException

• #​1636 ea33052 Thanks @​miguelg719! - Include executionModel on the AgentConfigSchema

• #​1679 5764ede Thanks @​shrey150! - fix issue where locator.count() was not working with xpaths that have attribute predicates

• #​1646 f09b184 Thanks @​miguelg719! - Add user-agent to CDP connections

• #​1637 a7d29de Thanks @​miguelg719! - Improve error and warning message for legacy model format

• #​1685 d334399 Thanks @​tkattkat! - Bump ai sdk & google provider version

• #​1662 44416da Thanks @​seanmcguire12! - fix issue where locator.fill() was not working on elements that require direct value setting

• #​1612 bdd8b4e Thanks @​seanmcguire12! - fix issue where screenshot mask was only being applied to the first element that the locator resolved to. masks now apply to all matching elements.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.