browser-use/browser-harness v0.1.10 is a pure agent-security release: CDP credentials redacted from logs and orchestrator daemons now fail closed

GitHub·high signalXBlueskyLinkedInCopy link

browser-harness (17,145 stars, MIT, a separate repo from browser-use itself) shipped v0.1.10 on 2026-08-26 at 00:49 UTC, and every notable item is about containment rather than capability. It redacts Chrome DevTools Protocol credentials from daemon logs (PR #639), makes orchestrator-owned daemons fail closed on shutdown (PR #640), adds a machine-readable daemon health check (PR #653), separates the screenshot response timeout from the IPC connect timeout (PR #641) and allows suppressing the Cloud live viewer (PR #642). For anyone running a browser agent unattended, the CDP-credential leak fix is the one to upgrade for, since CDP endpoints grant full control of the browser session.