chore(deps): bump cloakbrowser from 0.3.32 to 0.4.8 in /browser-search

[dependabot]

Bumps cloakbrowser from 0.3.32 to 0.4.8.

Changelog

Sourced from cloakbrowser's changelog.

[0.4.8] — 2026-07-05

• [binary] Chromium 148.0.7778.215.5 (Pro, Windows + Linux; macOS follows) — the biggest fingerprint update yet. Pro license required; v146 stays free.
  • More common, more coherent hardware identities — each --fingerprint seed is built from the most common real-world hardware values (screen, GPU, RAM, CPU cores, color depth, fonts, audio), chosen together so they form a popular, self-consistent device with no internal contradictions.
  • Deeper, more consistent Windows persona — expanded and localized font populations, tighter graphics/display alignment, and seed-coherent screen size, color depth, and audio across browser- and OS-level signals.
  • Expanded NVIDIA GPU profiles, each matched to a plausible CPU, RAM, and screen combination.
  • Window and screen geometry coherence in both headed and headless modes (pairs with the wrapper's new maximized-window default).
  • Greater WebGL and WebGPU realism, including consistent behavior under timing inspection.
  • Cleaner proxy behavior — better proxy-auth handling and less proxy-specific reload and cache leakage.
  • New pass-through debug mode (--fingerprint=off) and a third-party-cookie compatibility flag (--fingerprint-allow-3p-cookies).
  • Runtime Pro license sessions — privacy-preserving groundwork for future session-limit enforcement (--license-through-proxy opts these calls onto your proxy, Linux only for now).
• [wrapper] geoip=True now works without a proxy — on a direct connection it resolves the machine's own public IP for timezone, locale, and the WebRTC exit IP (previously it no-oped without a proxy, leaving UTC + en-US in bare Docker/cloud launches). Locale coverage expanded from 50 to 132 countries. Python, JS, and .NET.
• [wrapper] Headed and headless launches now open maximized on the newest Pro binaries (version-gated, same threshold as the headless no-viewport default), so the window fills the spoofed screen and window/screen geometry stays self-consistent. Suppressed when you set an explicit window size/position or viewport; older and free binaries are unchanged. Python, JS, and .NET.
• [docs] Documented the Chromium 148+ pass-through and compatibility flags you can pass via args: --fingerprint=off (native pass-through debug mode), --fingerprint-allow-3p-cookies (third-party-cookie compatibility for reCAPTCHA v3 / SSO / payment challenges), and --license-through-proxy (route license/session calls through your proxy, Linux only for now).

[0.4.7] — 2026-07-02

• [docker] Update the public cloaktest suite to use free-tier-stable bot-detection checks while Pro continues to verify reCAPTCHA v3 at 0.9. The Docker smoke test now runs Sannysoft, Incolumitas, Rebrowser, deviceandbrowserinfo, BrowserScan, and CreepJS lies/noise=false; FingerprintJS and reCAPTCHA v3 are no longer hard-pass checks for the free v146 image.

[0.4.6] — 2026-07-02

• [wrapper] The resolved Pro license key is now passed to the browser process at launch (via CLOAKBROWSER_LICENSE_KEY) so the Pro binary can authenticate itself, including when you supply a custom env. Fixes launch failures on the newest Pro binaries. Python, JS, and .NET.
• [wrapper] Headless launches on the newest Pro binaries now track the real screen surface instead of a fixed emulated viewport, keeping window geometry self-consistent (version-gated — older and free binaries keep the deterministic headless viewport). Passing an explicit viewport=/no_viewport (Python) or viewport/defaultViewport (JS) still overrides. Python, JS, and .NET.

[0.4.5] — 2026-06-29

• [wrapper] info is now a full diagnostics command — it reports the binary that will actually launch given your license, runs a launch test (chrome --version, plus a missing-shared-library probe on Linux), validates the license key to show the real tier (free/solo/team/business, or invalid), and checks Windows-font availability (Linux), the GeoIP database, and optional dependencies. --quick skips the launch test; --json emits machine-readable output. Python, JS, and .NET.
• [wrapper] One-time startup notice when spoofing the Windows platform on a Linux host without Windows fonts installed, with guidance to install them for best results. Best-effort and silent on error; suppress with CLOAKBROWSER_SUPPRESS_FONT_WARNING=1. Python, JS, and .NET.
• [wrapper] The first-launch banner now re-shows to free users every 3 days (Pro users still see it once). Python, JS, and .NET.

[0.4.4] — 2026-06-27

• [wrapper] Exact version pinning / rollback — pin a specific Chromium build with browser_version= (browserVersion in JS, BrowserVersion in .NET) or the CLOAKBROWSER_VERSION environment variable, e.g. launch(browser_version="148.0.7778.215.2"). Works for both Free and Pro binaries and lets you roll back if a new build regresses on your site. A pin never overwrites the cached "latest" marker, so a later unpinned launch returns to the newest build. Python, JS, and .NET.
• [wrapper] The Pro version check now sends the client platform so each OS resolves its own latest build independently — a new release for one platform no longer affects the others. Python, JS, and .NET.
• [binary] Chromium 148.0.7778.215.3 (Pro) — fingerprint fixes and alignment across Linux, Windows, and macOS (Apple Silicon + Intel). Pro license required; v146 stays free.

[0.4.3] — 2026-06-24

• [wrapper] .NET 8 / C# client — CloakBrowser now ships as a NuGet package (CloakBrowser), mirroring the Python and JS wrappers. Contributed by @​evelaa123 in PR #385.
• [wrapper] macOS Pro is now available — the latest binary (Chromium 148.0.7778.215.2) downloads on macOS (Apple Silicon + Intel) with a Pro license, the same as Linux and Windows. v146 stays free.
• [wrapper] A valid Pro license now hard-fails on a Pro download error on every platform instead of silently downgrading to the free binary. The temporary macOS-only free fallback added in 0.4.2 is removed now that the macOS Pro build ships. Python, JS, and .NET.

[0.4.2] — 2026-06-23

• [wrapper] macOS Pro licenses now fall back to the free binary (macOS Pro build coming) instead of failing to launch. Transient and signature-verification failures still hard-fail. Python and JS.

[0.4.1] — 2026-06-23

• [wrapper] Humanize: fix "Viewport size not available" crash on headed launches. Headed mode defaults to no_viewport (since 0.4.0), so page.viewport_size is None — human scroll now falls back to the live window.innerWidth/window.innerHeight. Covers Playwright (Python sync/async, JS) and Puppeteer.
• [wrapper] [docker] Widevine: opt-in CDM auto-fetch for persistent contexts. Set CLOAKBROWSER_FETCH_WIDEVINE and the Docker entrypoint pulls the Widevine CDM from Google's component server (arch-aware, SHA-256 verified, atomic, cached), so DRM playback works without a local Chrome to copy from. Off by default; bare-metal Linux users can run bin/fetch-widevine.py directly.

... (truncated)

Commits

• 330d7b8 release: v0.4.8 — geoip works proxy-free (132 locales) + maximized window + f...
• 01c6105 fix: harden geoip proxy-free + maximize parity (review follow-ups)
• d029f21 feat: open the browser window maximized on 148.0.7778.215.4+ builds
• 88d62e0 feat: geoip works without a proxy + expand locale map to 132 countries
• a3e0994 release: v0.4.7 — update cloaktest
• 49a9cfc release: v0.4.6 — pass Pro license key to browser process + version-gated hea...
• f54c870 feat: version-gate headless no_viewport across all three wrappers
• 60d9788 fix: pass Pro license key to browser process
• b4fdf63 release: v0.4.5 — info diagnostics command + Windows-font notice
• 23e2b39 chore(deps): bump the javascript group across 1 directory with 6 updates (#378)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #20.