[dependabot]

Bumps browser-use from 0.13.6 to 0.13.10.

Release notes

Sourced from browser-use's releases.

0.13.10

Browser Use 0.13.10

• Upgrade Browser Harness to 0.1.13.
• Exact-pin all declared runtime, optional, development, and build dependencies.
• Upgrade and migrate to MCP Python SDK 2.1.1.
• Add pydantic-settings 2.15.0 as an explicit runtime dependency.
• Pin Pydantic 2.13.5 and Hatchling 1.32.0.
• Upgrade pypdf to 6.16.2, resolving the three current pypdf Dependabot advisories.
• Report unknown MCP tool calls as application errors instead of successful results.

Validation includes the full GitHub test matrix, model adapters, MCP stdio handshakes, cross-platform wheel installation, focused PDF tests, CodeQL, GitGuardian, and an installed-runtime vulnerability audit.

0.13.9

What's Changed

• fix(llm): make bu-2-0 the ChatBrowserUse default again, keep mini opt-in by @​sauravpanda in browser-use/browser-use#5488
• ci: remove the dead cloud_evals image-build trigger by @​sauravpanda in browser-use/browser-use#5491
• fix(filesystem): report missing target text in replace_file by @​uczltw6 in browser-use/browser-use#5498
• fix(filesystem): escape plain text in generated PDFs by @​primorLee in browser-use/browser-use#5502
• docs: highlight rerunnable Cloud scripts by @​MagMueller in browser-use/browser-use#5551
• docs(cloud): update tools guide for CLI 3.0 by @​MagMueller in browser-use/browser-use#5553
• fix(deps): bump dependency versions by @​sauravpanda in browser-use/browser-use#5382
• fix: Update DeepSeek default model to deepseek-v4-flash by @​DipsyHou in browser-use/browser-use#5563
• fix(llm): stop putting format/stream inside Ollama options by @​official-burak in browser-use/browser-use#5561
• fix(deps): update vulnerable Click, MCP, and pypdf pins by @​green3sf in browser-use/browser-use#5526
• fix(browser): clear cookies via Storage domain, not Network by @​MrLeit in browser-use/browser-use#5562
• fix(filesystem): render markdown emphasis in PDF export by @​leilei3167 in browser-use/browser-use#5540
• fix(llm): ignore empty reasoning model patterns by @​ECD5A in browser-use/browser-use#5545
• fix(dom): expose image context for clickable elements by @​UniversePeak in browser-use/browser-use#5541
• build: require Browser Harness 0.1.10 by @​MagMueller in browser-use/browser-use#5507
• fix(registry): replace sensitive placeholders inside tuple params by @​LambIessz in browser-use/browser-use#5570
• Fix WebSocket drops during reconnect window by @​Soundcreates in browser-use/browser-use#5373
• docs(cloud): replace retired V1 API examples with V4 by @​MagMueller in browser-use/browser-use#5578
• Upgrade datamodel-code-generator to 0.75.1 by @​sauravpanda in browser-use/browser-use#5588
• fix: keep balanced trailing brackets in URLs extracted from task text by @​aniketwaghh in browser-use/browser-use#5576
• docs: migrate remote browser skill to CLI 3.0 by @​MagMueller in browser-use/browser-use#5583
• fix: allow pydantic 2.13 by @​MagMueller in browser-use/browser-use#5577
• docs: correct Cloud signup credit by @​MagMueller in browser-use/browser-use#5602
• fix(browser): honor BROWSER_USE_HEADLESS in BrowserProfile (#5420) by @​jiffyaneesh in browser-use/browser-use#5475
• fix(llm/google): keep the first user message when include_system_in_user is set by @​aniketwaghh in browser-use/browser-use#5597
• docs: correct cloud browser session price by @​MagMueller in browser-use/browser-use#5601
• docs(cloud): add API v4 skill reference by @​MagMueller in browser-use/browser-use#5591
• fix(llm): preserve schema-keyword field names by @​MagMueller in browser-use/browser-use#5605
• fix(llm): preserve zero max_retries for Anthropic Bedrock by @​cosin2077 in browser-use/browser-use#5348
• fix(agent): match URL negations as whole words by @​JayLay0310 in browser-use/browser-use#5493
• fix(agent): preserve downloaded file path order by @​oysz in browser-use/browser-use#5453
• fix(browser): read persisted storage state as UTF-8 by @​r266-tech in browser-use/browser-use#5359
• fix(browser): preserve default Chrome arg order by @​MagMueller in browser-use/browser-use#5621
• Add OrcaRouter as a named LLM provider by @​XiaoHuo888-hue in browser-use/browser-use#5451
• fix(openrouter): validate client and response inputs by @​MagMueller in browser-use/browser-use#5599

... (truncated)

Commits

• 5c892e0 chore: pin release dependencies for 0.13.10 (#5670)
• 743f630 test: satisfy MCP handler context typing
• afbc714 fix: report unknown MCP tools as errors
• b1ae95e chore: pin release dependencies for 0.13.10
• 64c1f46 chore: release 0.13.9 with Browser Harness 0.1.12 (#5666)
• 0e0983e Release 0.13.9 with Browser Harness 0.1.12
• 5b50d1f fix(browser): restore session handlers after event bus reset (#5230)
• 780274d Merge branch 'main' into fix/session-handler-registration
• 8963744 fix: detect browser process exit early in _wait_for_cdp_url (#4599)
• f4e2bb1 Merge branch 'main' into fix/issue-4471-fail-fast-browser-startup
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #24.