chore(deps): bump cloakbrowser from 0.3.32 to 0.4.12 in /browser-search

[dependabot]

Bumps cloakbrowser from 0.3.32 to 0.4.12.

Changelog

Sourced from cloakbrowser's changelog.

[0.4.12] — 2026-07-18

• [binary] Chromium 150.0.7871.114.3 (Pro, all platforms) — 71 source-level patches. A full rebase onto the Chromium 150 line with the complete patch set ported forward, plus a round of coherence work. Pro license required; v146 stays free.
  • Closer alignment with a real Chrome install across speech and language profiles, font handling, and graphics parameters.
  • More self-consistent identities — values that a real browser reports consistently now stay consistent across repeat reads and across launch modes.
  • macOS coherence — display characteristics hold together across headed and headless launches.
  • The reported Chrome version tracks real Chrome, independent of the version we build from.
  • New --fingerprint-sapi-voices=false for the Windows voice tables (see the flags table in the README).
  • Clearer license failures — the license gate now exits with a distinct code per denial reason, which the wrapper surfaces as a specific CloakBrowserLicenseError.
• [wrapper] Fix the first-launch banner reporting the wrong Pro major version — a Pro install downloading the Chromium 150 binary printed "Pro active (v148)", and the free-tier upgrade hint named the same stale version. Cosmetic only; binary download, verification, and launch were unaffected. Python, JS, and .NET.

[0.4.11] — 2026-07-16

• [wrapper] When the Pro binary refuses a launch for a license reason, launch() now raises a clear CloakBrowserLicenseError (invalid, expired, or missing key; session limit reached; license server unreachable; or a local config problem) instead of an opaque "target/browser closed" error. Non-license launch failures are re-raised unchanged. New exported CloakBrowserLicenseError type. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] Authenticated HTTP/HTTPS proxies now use the browser's native proxy authentication on every platform whose binary supports it — resolved per platform and binary version — and fall back to the standard proxy path on older binaries that don't. Fixes credentialed HTTP/HTTPS proxies on macOS and ARM, which previously could not use the native path. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] cloakbrowser info now shows the number of Pro sessions currently in use ("Sessions: N seats in use") for a valid Pro license, so you can see how many concurrent sessions are running without contacting support. The count is never cached, skipped under --quick, and reports "unavailable" rather than a guessed number when it cannot be determined. Python, JS, and .NET.

[0.4.10] — 2026-07-09

• [wrapper] Fix JS CLI silently exiting with no output when run via npx/node_modules/.bin (#427). The entry-point guard compared import.meta.url to an unresolved process.argv[1]; symlinked bin installs (npm/pnpm/npx) never matched, so no subcommand ran. Now realpath-resolves the invoked path before comparing.
• [wrapper] Fix humanize=True breaking interactions with elements inside iframes (#428). frame.locator("#btn").click() / fill() / hover() / etc. (and the frame-level frame.click(...) equivalents) now resolve the selector in the owning sub-frame's own document instead of misrouting to the top page, which previously raised ElementNotAttachedError. Humanized mouse motion is preserved inside iframes. Python only (the JS and .NET wrappers were already frame-correct).

[0.4.9] — 2026-07-09

• [wrapper] Free-tier launch banner and cloakbrowser info upgrade hint now surface the 7-day free Pro trial (Chromium 148). Python, JS, and .NET.
• [wrapper] info/update never diverge from the Pro build that actually launches — info now shows both the cached build that will launch and the server's latest Pro version so the two can no longer silently disagree. Unpinned launches prefer the server's latest when it's newer than (or replaces a missing) cached build; update is license-aware (a valid Pro key updates the Pro binary, everyone else updates free); the background Pro update check is now a rate-limited foreground check (one call/hour, honors CLOAKBROWSER_AUTO_UPDATE=false); a valid Pro license never silently falls back to free; binary verification failures now surface verbatim instead of falling back to a cached build. Python, JS, and .NET.
• [wrapper] info/doctor Windows-font check now covers the full 8-font set (adds the two monospace fonts) and reports a strict N/8 count, with the launch-time warning firing on any incomplete set rather than only a fully-missing one. Adds a separate Office-font group (10 fonts) reported as informational N/10 with no install nudge. Python, JS, and .NET.

[0.4.8] — 2026-07-05

• [binary] Chromium 148.0.7778.215.5 (Pro, Windows + Linux; macOS follows) — the biggest fingerprint update yet. Pro license required; v146 stays free.
  • More common, more coherent hardware identities — each --fingerprint seed is built from the most common real-world hardware values (screen, GPU, RAM, CPU cores, color depth, fonts, audio), chosen together so they form a popular, self-consistent device with no internal contradictions.
  • Deeper, more consistent Windows persona — expanded and localized font populations, tighter graphics/display alignment, and seed-coherent screen size, color depth, and audio across browser- and OS-level signals.
  • Expanded NVIDIA GPU profiles, each matched to a plausible CPU, RAM, and screen combination.
  • Window and screen geometry coherence in both headed and headless modes (pairs with the wrapper's new maximized-window default).
  • Greater WebGL and WebGPU realism, including consistent behavior under timing inspection.
  • Cleaner proxy behavior — better proxy-auth handling and less proxy-specific reload and cache leakage.
  • New pass-through debug mode (--fingerprint=off) and a third-party-cookie compatibility flag (--fingerprint-allow-3p-cookies).
  • Runtime Pro license sessions — privacy-preserving groundwork for future session-limit enforcement (--license-through-proxy opts these calls onto your proxy, Linux only for now).
• [wrapper] geoip=True now works without a proxy — on a direct connection it resolves the machine's own public IP for timezone, locale, and the WebRTC exit IP (previously it no-oped without a proxy, leaving UTC + en-US in bare Docker/cloud launches). Locale coverage expanded from 50 to 132 countries. Python, JS, and .NET.
• [wrapper] Headed and headless launches now open maximized on the newest Pro binaries (version-gated, same threshold as the headless no-viewport default), so the window fills the spoofed screen and window/screen geometry stays self-consistent. Suppressed when you set an explicit window size/position or viewport; older and free binaries are unchanged. Python, JS, and .NET.
• [docs] Documented the Chromium 148+ pass-through and compatibility flags you can pass via args: --fingerprint=off (native pass-through debug mode), --fingerprint-allow-3p-cookies (third-party-cookie compatibility for reCAPTCHA v3 / SSO / payment challenges), and --license-through-proxy (route license/session calls through your proxy, Linux only for now).

[0.4.7] — 2026-07-02

• [docker] Update the public cloaktest suite to use free-tier-stable bot-detection checks while Pro continues to verify reCAPTCHA v3 at 0.9. The Docker smoke test now runs Sannysoft, Incolumitas, Rebrowser, deviceandbrowserinfo, BrowserScan, and CreepJS lies/noise=false; FingerprintJS and reCAPTCHA v3 are no longer hard-pass checks for the free v146 image.

[0.4.6] — 2026-07-02

• [wrapper] The resolved Pro license key is now passed to the browser process at launch (via CLOAKBROWSER_LICENSE_KEY) so the Pro binary can authenticate itself, including when you supply a custom env. Fixes launch failures on the newest Pro binaries. Python, JS, and .NET.

... (truncated)

Commits

• fd2b602 release: v0.4.12 — Chromium 150 version facts + banner fix
• 86d1d76 release: v0.4.11 — proxy auth + license errors + info session count
• d2a72f1 feat(cli): show active session count in info
• ca232fd feat(license): surface Pro binary license failures as clear errors
• 111b725 Fix authenticated HTTP proxies across all platforms
• 08415d9 release: v0.4.10 — iframe humanize + JS CLI npx fixes (#427, #428)
• 045219b fix: JS CLI silently exited via npx/symlinked bin (#427)
• 0624df8 release: v0.4.9 — Pro trial promo, info/update version parity, font check fixes
• 0664bd8 feat: promote 7-day Pro trial in banner, CLI hint, and READMEs
• a00bcca fix: info/update never diverge from the Pro build that actually launches
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #24.