What Skyvern-AI/skyvern shipped
Written by FoxPlug from the repository's own releases; not affiliated with Skyvern. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/Skyvern-AI/skyvern; Skyvern did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of November 2, 2026
What shipped
- Self-hosted AWS deployments can now store Credentials-page secrets in AWS Secrets Manager. Pull request #9281
- Google and Microsoft connections can be reconnected in place, keeping their existing grants and account. Pull request #9301
- Agent step tool calls now appear in order beside each step on the canvas, each with its settings. Pull request #9290
- Organizations can sign in to Bitwarden with a personal API key, and runs stop at once on code prompts. Pull request #9295
- Adapter configuration access now requires admin regardless of RBAC. Pull request #9302
- A loop's list slot now offers a list field from an earlier step. Pull request #9296
- Agent settings are grouped into six folding groups with change summaries. Pull request #9284
Changelog entry
- Store Credentials-page secrets in AWS Secrets Manager on self-hosted AWS. Pull request #9281
- Reconnect a Google or Microsoft connection in place and keep its grants and account. Pull request #9301
- Show agent step tool calls in order beside the step on the canvas, each with its settings. Pull request #9290
- Let orgs sign in to Bitwarden with a personal API key and stop at once on code prompts. Pull request #9295
- Require admin for adapter configuration access regardless of RBAC. Pull request #9302
- Offer a list field of an earlier step in a loop's list slot. Pull request #9296
- Group Agent settings into six folding groups with change summaries. Pull request #9284
- Accept a Power BI result that exactly fills the saved row limit. Pull request #9286
- Keep the workflow live view streaming after a VNC close. Pull request #9311
Week of October 26, 2026
What shipped
- Inline workflow secrets are now write-only. Pull request #9157
- An unverified secret field is cleared before the run fails closed. Pull request #9192
- Task V3 can type into a field that already holds the caret under an invisible layer. Pull request #9161
- Forced browser sessions are created only when the run starts. Pull request #9176
- Block outcome writes are refused from an execution that no longer owns the run. Pull request #9152
- A workflow run that won its terminal status write is no longer cancelled on lease loss. Pull request #9148
- Added the foundation for ingesting forwarded email two-factor codes. Pull request #9189
- Legacy Excel exports are accepted when claimed as.xls. Pull request #9188
- Workflow YAML block validation is bounded by dispatching on block type. Pull request #9168
- Workflow steps now support notes and descriptions. Pull request #9169
Why it matters
This week hardens the basics: workflow secrets are now write-only, stale executions can no longer write block outcomes or be cancelled after a run wins its terminal status write, and forced browser sessions only start when a run does. It also expands what the editor and runs accept, from legacy Excel exports to step notes and descriptions, and adds the foundation for forwarded email two-factor codes.
Changelog entry
- Make inline workflow secrets write-only. Pull request #9157
- Clear an unverified secret field before failing closed. Pull request #9192
- Let Task V3 type into a field that already holds the caret under an invisible layer. Pull request #9161
- Create forced browser sessions only when the run starts. Pull request #9176
- Refuse block outcome writes from an execution that no longer owns the run. Pull request #9152
- Keep a refused final write from shielding a stale run, and deliver external cancels to the running owner. Pull request #9151
- Keep a workflow run that won its terminal status write from being cancelled on lease loss. Pull request #9148
- Add OSS email 2FA forwarding ingestion foundation. Pull request #9189
- Receive and recover forwarded email 2FA codes. Pull request #9190
- Accept legacy Excel exports under.xls claims. Pull request #9188
- Bound workflow YAML block validation by dispatching on
block_type. Pull request #9168 - Add notes and descriptions on workflow steps. Pull request #9169
Workflow secrets are now write-only. Stale executions can no longer write block outcomes, and a run that won its terminal status write is no longer cancelled on lease loss. Also: step notes and descriptions,.xls export support, and YAML block validation bounded by block type.
This week's changes for Skyvern users: Inline workflow secrets are now write-only, and an unverified secret field is cleared before the run fails closed. Run ownership is tighter: block outcome writes are refused from executions that no longer own the run, a run that won its terminal status write is no longer cancelled on lease loss, and forced browser sessions are created only when the run starts. Editor and input handling: workflow steps can carry notes and descriptions, workflow YAML block validation is bounded by block type, legacy Excel exports are accepted as.xls, and Task V3 can type into a field that already holds the caret under an invisible layer. We also added the foundation for ingesting forwarded email two-factor codes.
Week of October 19, 2026
What shipped
- Self-hosted installs now have telemetry disabled by default. Pull request #9073
- Self-hosted deployments can sign in through OpenID Connect from the UI. Pull request #9054
- File Download jobs can now read files from an SFTP server. Pull request #9072
- On-prem admins can now view the members who are signed in. Pull request #9058
- Step and task archive ZIPs are now built on a thread so deflate no longer blocks the event loop. Pull request #9080
- API runs that omit a proxy region now use the region configured on the agent. Pull request #9047
- The runs list search now finds a complete run or task ID by primary key. Pull request #9078
- International phone fields now keep the country calling code and stop reporting a wrong one as entered. Pull request #9042
- Organization audit events now record impersonating staff. Pull request #9069
- Request bodies are now omitted for restricted organizations. Pull request #9056
Why it matters
This week adds self-hosted sign-in through OpenID Connect, admin visibility into signed-in members, and audit events for those sign-ins and for impersonating staff. Self-hosted installs also stop sending telemetry by default, and restricted organizations no longer keep request bodies. File Download jobs gain an SFTP source, and several smaller fixes cover proxy regions, run ID search and phone fields.
Changelog entry
- Disable telemetry by default for self-hosted installs. Pull request #9073
- Add OpenID Connect sign-in to the self-hosted UI. Pull request #9054
- Add OIDC principals to self-hosted RBAC. Pull request #9053
- Let on-prem admins view signed-in members. Pull request #9058
- Audit OIDC sign-ins. Pull request #9057
- Record impersonating staff in organization audit events. Pull request #9069
- Read files from an SFTP server as a File Download source. Pull request #9072
- Build step and task archive ZIPs on a thread so deflate does not block the event loop. Pull request #9080
- Apply an agent's configured proxy region to API runs that omit one. Pull request #9047
- Look up a complete run or task ID by primary key in the runs list search. Pull request #9078
- Omit request bodies for restricted organizations. Pull request #9056
- Keep the country calling code in an international phone field and stop reporting a wrong one as entered. Pull request #9042
This week: OpenID Connect sign-in for the self-hosted UI, on-prem admins can see signed-in members, audit events for OIDC sign-ins and impersonating staff, telemetry off by default on self-hosted installs, an SFTP source for File Download, and archived ZIPs built off the event lo
This week's changes to the project: Self-hosted deployments can now sign in with OpenID Connect, and on-prem admins can view signed-in members. Sign-ins and staff impersonation are recorded in organization audit events. Self-hosted installs now ship with telemetry disabled by default. File Download jobs can read files from an SFTP server, and run and task archive ZIPs are built on a thread so compression no longer blocks the event loop. Smaller fixes: the runs list search finds complete run and task IDs by primary key, API runs without a proxy region use the agent's configured region, and international phone fields keep their country calling code.
Week of October 12, 2026
What shipped
- Released v1.0.56, which bumps the version from 1.0.55 and includes skipping DataDragon ledger DDL when the schema is current so concurrent runs stop deadlocking and preventing HIPAA organizations' browsers from sending anything to PostHog. Release
- Added a cloud event trigger management API. Pull request #8933
- Added a signed event trigger receiver. Pull request #8936
- Added an event trigger dispatcher. Pull request #8938
- Added a 1Password credential import UI. Pull request #8953
- Imported and refreshed selected 1Password items. Pull request #8952
- Runs orphaned by a crashed self-hosted server now fail instead of hanging. Pull request #8925
- Credentials and request bodies are now kept off cross-origin redirects, and internal errors no longer appear in workflow-create responses. Pull request #8949
- Access to credential folders is now restricted. Pull request #8950
- Browsers for HIPAA organizations no longer send anything to PostHog. Pull request #8913
Why it matters
This week brought an event trigger path users can manage through an API and a signed receiver, plus a release that fixes a concurrent-run deadlock in the ledger setup. It also tightened credential handling around redirects and folders, added 1Password import, and stopped crashed self-hosted servers from leaving runs stuck.
Changelog entry
- Release v1.0.56, version bumped from 1.0.55 to 1.0.56. Release
- Add cloud event trigger management API. Pull request #8933
- Add signed event trigger receiver. Pull request #8936
- Add event trigger dispatcher. Pull request #8938
- Add 1Password credential import UI. Pull request #8953
- Import and refresh selected 1Password items. Pull request #8952
- Restrict access to credential folders. Pull request #8950
- Keep credentials and request bodies off cross-origin redirects and internal errors out of workflow-create responses. Pull request #8949
- Fail runs orphaned by a crashed self-hosted server. Pull request #8925
- Prevent HIPAA organizations' browsers from sending anything to PostHog. Pull request #8913
- Add trigger receipt tables and repositories. Pull request #8931
- Harden script sandbox validation. Pull request #8937
V1.0.56 is out. This week: cloud event trigger management API, a signed event trigger receiver and dispatcher, 1Password credential import, restricted credential folders, and orphaned runs now fail after a self-hosted server crash.
Skyvern v1.0.56 is out. This week the project added a cloud event trigger management API, a signed event trigger receiver and an event trigger dispatcher. Credentials got several changes: 1Password import with a UI, restricted access to credential folders, and credentials and request bodies kept off cross-origin redirects. Runs orphaned by a crashed self-hosted server now fail instead of staying open, and the release skips DataDragon ledger DDL when the schema is current so concurrent runs stop deadlocking.
Week of October 5, 2026
What shipped
- A workflow run now fails within seconds when its worker container restarts, instead of hanging or reporting a delayed failure. Pull request #8828
- After Record Browser generates steps, you now get a helpful or not-helpful feedback prompt. Pull request #8825
- A site rate-limit or 403 page is now classified as bot protection rather than an AI model error. Pull request #8824
- A download filename can keep the site's own name by using {{
original_filename}}. Pull request #8852 - Credential search now finds a credential by its exact ID. Pull request #8848
- A workflow version and its definition are now committed in a single transaction. Pull request #8850
- The Temporal describe call was taken off browser-session close, action logs and GET reads, reducing overhead on those paths. Pull request #8820
- Filtered ui-select options are now committed by clicking the exact row. Pull request #8823
- The low-credit banner was redesigned as a single meter row. Pull request #8841
- The Python and TypeScript SDK clients were regenerated with Fern, catching them up to the OpenAPI spec after several releases without a regen. Pull request #8760
Why it matters
This week's changes touch day-to-day reliability: runs fail fast when a worker restarts, a download keeps the site's filename, credential search finds an exact ID, and a workflow version commits with its definition in one transaction. People running workflows should also see fewer false classifications of rate limits and 403 pages as model errors, and Record Browser now collects feedback on the steps it generates. The SDKs were regenerated so they match the API spec after several releases without one.
Changelog entry
- Workflow runs now fail within seconds when their worker container restarts. Pull request #8828
- Record Browser asks for helpful or not-helpful feedback after generating steps. Pull request #8825
- Site rate-limit and 403 pages are classified as bot protection rather than AI model errors. Pull request #8824
- Download filenames can keep the site's own name via {{
original_filename}}. Pull request #8852 - Credential search matches a credential by its exact ID. Pull request #8848
- A workflow version and its definition are committed in one transaction. Pull request #8850
- Removed the Temporal describe from browser-session close, action logs and GET reads. Pull request #8820
- Filtered ui-select options are committed by clicking the exact row. Pull request #8823
- Low-credit banner redesigned as a single meter row. Pull request #8841
- Python and TypeScript SDK clients regenerated with Fern. Pull request #8760
- Windows CLI tests made portable; browser-extension fixtures ported and terminal-dependent setup prompting removed. Pull request #8788
- A swept workflow run now finishes even when its child cascade fails. Pull request #8827
New this week: workflow runs fail in seconds when a worker container restarts. Download filenames can keep the site's own name. Credential search matches an exact ID. Workflow versions and definitions commit together. Rate limits and 403 pages count as bot protection. SDKs regene
Changes this week: a workflow run now fails within seconds when its worker container restarts, instead of hanging. A download filename can keep the site's own name with {{ original_filename }}. Credential search finds a credential by its exact ID. A workflow version and its definition commit in one transaction. A site rate-limit or 403 page is classified as bot protection, not an AI model error. The Temporal describe call was removed from browser-session close, action logs and GET reads. Record Browser now asks for helpful or not-helpful feedback after generating steps. Filtered ui-select options commit by clicking the exact row, and the low-credit banner is a single meter row. The Python and TypeScript SDKs were regenerated with Fern to catch up to the OpenAPI spec.
Week of September 28, 2026
What shipped
- Added serial workflow run groups that submit, recover, and report up to 25 runs as one operation. Pull request #8773
- Skyvern 1.0 is now available in every workflow's engine picker. Pull request #8774
- Task V3 extraction-only blocks now report what the page shows without requiring an experiment flag. Pull request #8771
- Bitwarden credential reads now use fewer CLI processes and keep session keys out of error logs. Pull request #8794
- Runs with invalid parameters are now refused before writing, so a 400 response leaves no failed run. Pull request #8803
- Added logging to show where a step is waiting when it runs past 20 minutes. Pull request #8791
- Improved error messaging to show 'Browser session expired' instead of generic 'Browser error' when appropriate. Pull request #8783
- Task V3 code tool now receives stored run-scoped sign-in links. Pull request #8799
- Added backoff for failed plan-tier reads. Pull request #8776
Changelog entry
- Serial workflow run groups that submit, recover, and report up to 25 runs as one operation Pull request #8773
- Skyvern 1.0 engine option now available in all workflows Pull request #8774
- Task V3 extraction-only blocks report page content without experiment flag Pull request #8771
- Bitwarden credential reads use fewer CLI processes and keep session keys out of errors Pull request #8794
- Refuse runs with invalid parameters before writing to avoid failed run records Pull request #8803
- Log step wait location when execution exceeds 20 minutes Pull request #8791
- Show 'Browser session expired' error message instead of generic 'Browser error' Pull request #8783
- Task V3 code tool receives stored run-scoped sign-in links Pull request #8799
- Drop post-commit refresh reads from artifact, task, TOTP and browser-session inserts Pull request #8808
- Stop other sessions' short secrets from redacting unrelated log paths, status codes and durations Pull request #8804
- Keep Task V3 observe readable when a page defines its own toJSON Pull request #8769
This week: workflow run groups for batch operations, Skyvern 1.0 in the engine picker, and improvements to Task V3 extraction and error handling.
Shipped this week: serial workflow run groups that batch up to 25 runs as one operation, Skyvern 1.0 available in every workflow's engine picker, and improvements across Task V3 extraction, Bitwarden credentials, and error messaging for better visibility when things go wrong.
Week of September 21, 2026
What shipped
- Workflow schedules can run once at a set time. Pull request #8680
- Workflow schedules can run on a fixed elapsed interval from an anchor. Pull request #8660
- Task V3 blocks re-ask once when the site skips the screen its criterion expects. Pull request #8687
- Task V3 keeps perception reads by size and stops rewriting old messages every turn. Pull request #8686
- Search block now uses standard error messages and Data Schema works without a Prompt. Pull request #8679
- Workflow runs record who started them and display this on the Runs page. Pull request #8677
- DataDragon report files in the dashboard are served through signed S3 links. Pull request #8690
Changelog entry
- DataDragon report files served through signed S3 links Pull request #8690
- Task V3 stops charging action steps for refused calls before acting Pull request #8688
- Task V3 re-asks terminated blocks once when the site skips expected screen Pull request #8687
- Task V3 keeps perception reads by size and stops rewriting old messages Pull request #8686
- Workflow schedules can run once at a set time Pull request #8680
- Search block uses standard error messages, Data Schema works without Prompt Pull request #8679
- Workflow runs track who started them and display on Runs page Pull request #8677
- Workflow schedules run on fixed elapsed intervals from an anchor Pull request #8660
Week of September 14, 2026
What shipped
- Added Web Search block supporting Google and Exa search providers to workflows. Pull request #8597
- Task V3 now supports set-valued selections to hold and report multiple selected items. Pull request #8570
- Task V3 now hides signed URLs in goals, system guidance, and starting URLs behind opaque tokens. Pull request #8581
- Recovery mechanism added to close dead blank pages and fall back to remaining active pages. Pull request #8589
- Fixed incremental DOM observer memory growth to prevent leaks during long-running tasks. Pull request #8594
Changelog entry
- Add Web Search block with Google and Exa support Pull request #8597
- Task V3 now supports set-valued selections Pull request #8570
- Task V3 hides signed URLs behind opaque tokens in goals and system guidance Pull request #8581
- Add recovery from dead blank pages by closing and falling back to remaining pages Pull request #8589
- Prevent incremental DOM observer memory growth Pull request #8594
- Allow raw-CDP screenshot rescue on persistent-context browsers Pull request #8588
- Gate passkey 2FA behind enterprise plan with book-a-demo upsell Pull request #8587
- Add FDE hours and payment terms to organization pricing Pull request #8583
- Class file-attached-no-request upload result separately from failed uploads Pull request #8582
- Make unset authenticator keys directly editable Pull request #8580
- Raise AWS 0.5vcpu fairness lane CPU request to 625m Pull request #8579
- Refuse all fill tools in Task V3 extraction blocks Pull request #8575
- Report which visibility check dropped each hidden control in Task V3 Pull request #8573
- Validate Bitwarden items before accepting CLI advisories Pull request #8569