chore(deps): bump cloakbrowser from 0.3.32 to 0.4.10 in /browser-search

[dependabot]

Bumps cloakbrowser from 0.3.32 to 0.4.10.

Changelog

Sourced from cloakbrowser's changelog.

[0.4.10] — 2026-07-09

• [wrapper] Fix JS CLI silently exiting with no output when run via npx/node_modules/.bin (#427). The entry-point guard compared import.meta.url to an unresolved process.argv[1]; symlinked bin installs (npm/pnpm/npx) never matched, so no subcommand ran. Now realpath-resolves the invoked path before comparing.
• [wrapper] Fix humanize=True breaking interactions with elements inside iframes (#428). frame.locator("#btn").click() / fill() / hover() / etc. (and the frame-level frame.click(...) equivalents) now resolve the selector in the owning sub-frame's own document instead of misrouting to the top page, which previously raised ElementNotAttachedError. Humanized mouse motion is preserved inside iframes. Python only (the JS and .NET wrappers were already frame-correct).

[0.4.9] — 2026-07-09

• [wrapper] Free-tier launch banner and cloakbrowser info upgrade hint now surface the 7-day free Pro trial (Chromium 148). Python, JS, and .NET.
• [wrapper] info/update never diverge from the Pro build that actually launches — info now shows both the cached build that will launch and the server's latest Pro version so the two can no longer silently disagree. Unpinned launches prefer the server's latest when it's newer than (or replaces a missing) cached build; update is license-aware (a valid Pro key updates the Pro binary, everyone else updates free); the background Pro update check is now a rate-limited foreground check (one call/hour, honors CLOAKBROWSER_AUTO_UPDATE=false); a valid Pro license never silently falls back to free; binary verification failures now surface verbatim instead of falling back to a cached build. Python, JS, and .NET.
• [wrapper] info/doctor Windows-font check now covers the full 8-font set (adds the two monospace fonts) and reports a strict N/8 count, with the launch-time warning firing on any incomplete set rather than only a fully-missing one. Adds a separate Office-font group (10 fonts) reported as informational N/10 with no install nudge. Python, JS, and .NET.

[0.4.8] — 2026-07-05

• [binary] Chromium 148.0.7778.215.5 (Pro, Windows + Linux; macOS follows) — the biggest fingerprint update yet. Pro license required; v146 stays free.
  • More common, more coherent hardware identities — each --fingerprint seed is built from the most common real-world hardware values (screen, GPU, RAM, CPU cores, color depth, fonts, audio), chosen together so they form a popular, self-consistent device with no internal contradictions.
  • Deeper, more consistent Windows persona — expanded and localized font populations, tighter graphics/display alignment, and seed-coherent screen size, color depth, and audio across browser- and OS-level signals.
  • Expanded NVIDIA GPU profiles, each matched to a plausible CPU, RAM, and screen combination.
  • Window and screen geometry coherence in both headed and headless modes (pairs with the wrapper's new maximized-window default).
  • Greater WebGL and WebGPU realism, including consistent behavior under timing inspection.
  • Cleaner proxy behavior — better proxy-auth handling and less proxy-specific reload and cache leakage.
  • New pass-through debug mode (--fingerprint=off) and a third-party-cookie compatibility flag (--fingerprint-allow-3p-cookies).
  • Runtime Pro license sessions — privacy-preserving groundwork for future session-limit enforcement (--license-through-proxy opts these calls onto your proxy, Linux only for now).
• [wrapper] geoip=True now works without a proxy — on a direct connection it resolves the machine's own public IP for timezone, locale, and the WebRTC exit IP (previously it no-oped without a proxy, leaving UTC + en-US in bare Docker/cloud launches). Locale coverage expanded from 50 to 132 countries. Python, JS, and .NET.
• [wrapper] Headed and headless launches now open maximized on the newest Pro binaries (version-gated, same threshold as the headless no-viewport default), so the window fills the spoofed screen and window/screen geometry stays self-consistent. Suppressed when you set an explicit window size/position or viewport; older and free binaries are unchanged. Python, JS, and .NET.
• [docs] Documented the Chromium 148+ pass-through and compatibility flags you can pass via args: --fingerprint=off (native pass-through debug mode), --fingerprint-allow-3p-cookies (third-party-cookie compatibility for reCAPTCHA v3 / SSO / payment challenges), and --license-through-proxy (route license/session calls through your proxy, Linux only for now).

[0.4.7] — 2026-07-02

• [docker] Update the public cloaktest suite to use free-tier-stable bot-detection checks while Pro continues to verify reCAPTCHA v3 at 0.9. The Docker smoke test now runs Sannysoft, Incolumitas, Rebrowser, deviceandbrowserinfo, BrowserScan, and CreepJS lies/noise=false; FingerprintJS and reCAPTCHA v3 are no longer hard-pass checks for the free v146 image.

[0.4.6] — 2026-07-02

• [wrapper] The resolved Pro license key is now passed to the browser process at launch (via CLOAKBROWSER_LICENSE_KEY) so the Pro binary can authenticate itself, including when you supply a custom env. Fixes launch failures on the newest Pro binaries. Python, JS, and .NET.
• [wrapper] Headless launches on the newest Pro binaries now track the real screen surface instead of a fixed emulated viewport, keeping window geometry self-consistent (version-gated — older and free binaries keep the deterministic headless viewport). Passing an explicit viewport=/no_viewport (Python) or viewport/defaultViewport (JS) still overrides. Python, JS, and .NET.

[0.4.5] — 2026-06-29

• [wrapper] info is now a full diagnostics command — it reports the binary that will actually launch given your license, runs a launch test (chrome --version, plus a missing-shared-library probe on Linux), validates the license key to show the real tier (free/solo/team/business, or invalid), and checks Windows-font availability (Linux), the GeoIP database, and optional dependencies. --quick skips the launch test; --json emits machine-readable output. Python, JS, and .NET.
• [wrapper] One-time startup notice when spoofing the Windows platform on a Linux host without Windows fonts installed, with guidance to install them for best results. Best-effort and silent on error; suppress with CLOAKBROWSER_SUPPRESS_FONT_WARNING=1. Python, JS, and .NET.
• [wrapper] The first-launch banner now re-shows to free users every 3 days (Pro users still see it once). Python, JS, and .NET.

[0.4.4] — 2026-06-27

• [wrapper] Exact version pinning / rollback — pin a specific Chromium build with browser_version= (browserVersion in JS, BrowserVersion in .NET) or the CLOAKBROWSER_VERSION environment variable, e.g. launch(browser_version="148.0.7778.215.2"). Works for both Free and Pro binaries and lets you roll back if a new build regresses on your site. A pin never overwrites the cached "latest" marker, so a later unpinned launch returns to the newest build. Python, JS, and .NET.
• [wrapper] The Pro version check now sends the client platform so each OS resolves its own latest build independently — a new release for one platform no longer affects the others. Python, JS, and .NET.
• [binary] Chromium 148.0.7778.215.3 (Pro) — fingerprint fixes and alignment across Linux, Windows, and macOS (Apple Silicon + Intel). Pro license required; v146 stays free.

[0.4.3] — 2026-06-24

• [wrapper] .NET 8 / C# client — CloakBrowser now ships as a NuGet package (CloakBrowser), mirroring the Python and JS wrappers. Contributed by @​evelaa123 in PR #385.

... (truncated)

Commits

• 08415d9 release: v0.4.10 — iframe humanize + JS CLI npx fixes (#427, #428)
• 045219b fix: JS CLI silently exited via npx/symlinked bin (#427)
• 0624df8 release: v0.4.9 — Pro trial promo, info/update version parity, font check fixes
• 0664bd8 feat: promote 7-day Pro trial in banner, CLI hint, and READMEs
• a00bcca fix: info/update never diverge from the Pro build that actually launches
• ae7fd43 feat: info/doctor reports Windows + Office font completeness
• 330d7b8 release: v0.4.8 — geoip works proxy-free (132 locales) + maximized window + f...
• 01c6105 fix: harden geoip proxy-free + maximize parity (review follow-ups)
• d029f21 feat: open the browser window maximized on 148.0.7778.215.4+ builds
• 88d62e0 feat: geoip works without a proxy + expand locale map to 132 countries
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #21.