From f23e4911cbcfb30d549e03725b208ad9ce5ff8ec Mon Sep 17 00:00:00 2001 From: eclairen <236733058+eclairen@users.noreply.github.com> Date: Thu, 27 Aug 2026 20:58:53 +0000 Subject: [PATCH 1/2] Add August 28 changelog entry --- changelog.mdx | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/changelog.mdx b/changelog.mdx index af142cc5..32b92bfa 100644 --- a/changelog.mdx +++ b/changelog.mdx @@ -9,6 +9,30 @@ import { YouTubeVideo } from '/snippets/youtube-video.mdx'; For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-node-sdk/blob/main/CHANGELOG.md), [Python SDK](https://github.com/onkernel/kernel-python-sdk/blob/next/CHANGELOG.md), and [Go SDK](https://github.com/onkernel/kernel-go-sdk/blob/main/CHANGELOG.md) changelogs. + +## Product updates + +- Launched a [bug bounty program](/security-vulnerability-reporting) covering the Kernel API, dashboard, MCP server, and browser infrastructure. The published scope and policy define eligible targets, severity tiers, and safe-harbor terms for security researchers. +- Rebranded **Site Configs** to **Config Registry** across the API, SDKs (v0.96.0), and dashboard. The prior route and field names are removed, so move integrations to the `/config-registry` resource path. The API is still pre-release: it requires a paid plan and access is granted per organization. +- Added country-aware config discovery: config lookups now include the exit country so a cached configuration resolved through one country isn't returned to a customer whose proxy allow-list excludes it, and non-US proxies stop returning localized domains for US-scoped sessions. +- Split browser telemetry into `control` (agent-driven browser actions) and a new opt-in `platform` category for VM-management calls like recording capture, profile save, and telemetry publish. The default capture set is now cleaner and cheaper, and `executePlaywrightCode` events include the submitted code (clipped to 8 KB). +- Enabled **WebMCP by default** in Kernel browsers and consolidated the browser feature flags into a single feature list, giving agents Model Context Protocol access out of the box without extra configuration. +- Improved [MCP server](/reference/mcp-server) support for the OpenAI Apps SDK with the required domain verification challenge, so Kernel MCP can be registered as an OpenAI App connector. +- Added a `submit_feedback` tool to the [MCP server](/reference/mcp-server) for product, MCP, documentation, and general feedback, so agents can report a problem without leaving the session. Submissions are redacted of emails, URLs, and token-shaped values before capture. +- Added **ap-southeast** as a placement region, served from a new Singapore metro, across the API, dashboard region pickers, and [CLI](https://github.com/kernel/cli). Regional placement is in preview and enabled per organization; contact us to try it. +- Improved managed auth credential correction: [`@onkernel/managed-auth-react`](https://github.com/kernel/managed-auth-react) surfaces a notice when a field value is rejected, and submitting a corrected value now retries the login instead of failing the flow. Consent prompts are also gated until session initialization completes. +- Extended the [CLI](https://github.com/kernel/cli) (v0.32.0–v0.33.0) with an `ap-southeast` region option on browser commands and an `fx` MCP install target for one-command setup of the fx MCP. +- Reduced Playwright per-frame overhead by memoizing page target IDs, cutting redundant CDP lookups during multi-step automations. +- Upgraded [Hypeman](https://docs.hypeman.sh) to Firecracker v1.16.1, picking up upstream snapshot-restore and jailer fixes for the microVM runtime. New instances and snapshots use v1.16.1; existing snapshots keep restoring on the Firecracker version recorded in their metadata. + +## Documentation updates + +- Documented the new `control` vs `platform` [browser telemetry categories](/browsers/telemetry/categories), including which operations fall into each and how to opt in to platform events. +- Added a **navigation path recommendation** to the [bot detection guide](/browsers/bot-detection) so agents land on target pages through the flows real users take, rather than deep-linking into gated URLs. +- Added an [`fx` MCP setup guide](/reference/mcp-server/clients/fx) covering both CLI and MCP installation paths. +- Made kernel.sh agent-readable: the homepage server-renders with a no-JavaScript fallback, and `llms.txt`, `index.md`, and the OpenAPI, OAuth, and MCP discovery surfaces are published for agents that read the site directly. + + ## Product updates From 475d5f3d80bb75e211087eb565bdfadc8b0deae4 Mon Sep 17 00:00:00 2001 From: eclairen Date: Thu, 27 Aug 2026 14:03:06 -0700 Subject: [PATCH 2/2] Revise changelog for August 28 updates Updated changelog with product and documentation updates, including new features, improvements, and changes to the CLI. --- changelog.mdx | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/changelog.mdx b/changelog.mdx index 32b92bfa..02d73f2b 100644 --- a/changelog.mdx +++ b/changelog.mdx @@ -13,15 +13,12 @@ For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-n ## Product updates - Launched a [bug bounty program](/security-vulnerability-reporting) covering the Kernel API, dashboard, MCP server, and browser infrastructure. The published scope and policy define eligible targets, severity tiers, and safe-harbor terms for security researchers. -- Rebranded **Site Configs** to **Config Registry** across the API, SDKs (v0.96.0), and dashboard. The prior route and field names are removed, so move integrations to the `/config-registry` resource path. The API is still pre-release: it requires a paid plan and access is granted per organization. -- Added country-aware config discovery: config lookups now include the exit country so a cached configuration resolved through one country isn't returned to a customer whose proxy allow-list excludes it, and non-US proxies stop returning localized domains for US-scoped sessions. - Split browser telemetry into `control` (agent-driven browser actions) and a new opt-in `platform` category for VM-management calls like recording capture, profile save, and telemetry publish. The default capture set is now cleaner and cheaper, and `executePlaywrightCode` events include the submitted code (clipped to 8 KB). - Enabled **WebMCP by default** in Kernel browsers and consolidated the browser feature flags into a single feature list, giving agents Model Context Protocol access out of the box without extra configuration. - Improved [MCP server](/reference/mcp-server) support for the OpenAI Apps SDK with the required domain verification challenge, so Kernel MCP can be registered as an OpenAI App connector. - Added a `submit_feedback` tool to the [MCP server](/reference/mcp-server) for product, MCP, documentation, and general feedback, so agents can report a problem without leaving the session. Submissions are redacted of emails, URLs, and token-shaped values before capture. -- Added **ap-southeast** as a placement region, served from a new Singapore metro, across the API, dashboard region pickers, and [CLI](https://github.com/kernel/cli). Regional placement is in preview and enabled per organization; contact us to try it. - Improved managed auth credential correction: [`@onkernel/managed-auth-react`](https://github.com/kernel/managed-auth-react) surfaces a notice when a field value is rejected, and submitting a corrected value now retries the login instead of failing the flow. Consent prompts are also gated until session initialization completes. -- Extended the [CLI](https://github.com/kernel/cli) (v0.32.0–v0.33.0) with an `ap-southeast` region option on browser commands and an `fx` MCP install target for one-command setup of the fx MCP. +- Extended the [CLI](https://github.com/kernel/cli) (v0.32.0–v0.33.0) with an `fx` MCP install target for one-command setup of the fx MCP. - Reduced Playwright per-frame overhead by memoizing page target IDs, cutting redundant CDP lookups during multi-step automations. - Upgraded [Hypeman](https://docs.hypeman.sh) to Firecracker v1.16.1, picking up upstream snapshot-restore and jailer fixes for the microVM runtime. New instances and snapshots use v1.16.1; existing snapshots keep restoring on the Firecracker version recorded in their metadata.