Tags

Tags give the ability to mark specific points in history as being important
  • v0.1.4

    v0.1.4
    
    - Updated Semgrep in the development image to 1.182.1 and refreshed its locked dependencies. certifi 2026.10.23 drops the emSign root CAs whose intermediate keys were compromised (GHSA-6q48-6c7w-9gw2).
    - Dependabot no longer opens pull requests for `mcp` or the OpenTelemetry packages in `requirements-semgrep.txt`. Semgrep pins their versions itself, so bumping one of them on its own cannot install.
    - Updated kin-openapi, which the code generator uses, from 0.142.0 to 0.149.0. The newer version fixes several panics on malformed specs reported in GitHub security advisories.
    - The security scan merges its two gitleaks runs into one SARIF run. GitHub code scanning rejects a report with two runs from the same tool, so no scan results had been uploaded.
  • v0.1.3

    v0.1.3
    
    - The development image is based on Debian (`golang:1.26.10-trixie`) instead of Alpine. Alpine keeps only the latest build of each package, so the exact pins broke the image build whenever a package was updated. System packages now come from the snapshot.debian.org date the base image was built from, which keeps them fixed for a given base image digest. jq 1.8.2, shellcheck 0.11.0 and shfmt 3.13.1 keep their versions, and Semgrep runs in its own virtual environment.
    - Raised the minimum Go version in `go.mod` from 1.26.9 to 1.26.10, which fixes the `crypto/x509` vulnerability GO-2026-6809 found by govulncheck.
    - The issue-pull workflow runs at hours derived from the repository name instead of the same four hours as every other repository.
  • v0.1.2

    v0.1.2
    
    - Documentation only. The agent skill explains how to look up every endpoint, parameter and model with `go doc` or on pkg.go.dev, and declares its license.
    - The skill no longer lists the API credentials under OpenClaw's `requires.env`, which kept OpenClaw from loading it until they were set. It requires only `go`; the credentials are still documented as what your program reads.
    - The README points to the full API reference, and the examples in the README and the skill were checked against the current code.
  • v0.1.1

    v0.1.1
    
    - Generated doc comments keep the API's own description text. The spec patch no longer rewrites dashes or wording in descriptions.
    - `make sec` uses Semgrep 1.181.0. Its pinned requirements now hash every published file, so the development image also builds on arm64.
  • v0.1.0

    v0.1.0
    
    - Added `browseruse`, a REST client generated with oapi-codegen from Browser Use Public API v4, spec version 4.0.0, OpenAPI 3.1.0. It covers all 50 operations across runs, sessions, workspaces, files, wallets, integrations, extensions, browsers, and profiles.
    - `make generate` downloads `https://docs.browser-use.com/cloud/openapi/v4.json`, converts nullable unions, constants, and exclusive numeric bounds to OpenAPI 3.0.3 forms, normalizes description prose, and regenerates the client. The spec is not committed.
    - Unformatted number fields use `float64`; decimal cost strings stay strings. Added HTTP contract tests, the usage example, and agent integrations.