chore(deps): bump cloakbrowser from 0.3.32 to 0.5.9 in /browser-search

[dependabot]

Bumps cloakbrowser from 0.3.32 to 0.5.9.

Changelog

Sourced from cloakbrowser's changelog.

[0.5.9] — 2026-08-25

• [wrapper] Fix humanize=True selecting the wrong element, so humanized actions now resolve the same visible target Playwright would (#512). Text matching ignores non-rendered document content, open Shadow DOM matches are ordered exactly as Playwright orders them for broad first/nth selectors, and elements with no box of their own (display: contents) get actionable geometry derived from their rendered text and visible descendants. Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Restore get_by_* locators (test id, placeholder/alt/title, text, label) under humanize=True. They had stopped resolving after an earlier internal read path was closed off; the engines are reimplemented in the isolated world so the locators work again without reopening that path. get_by_role and >> chaining remain unsupported, and the error now names what is supported. Python, JavaScript, and .NET.
• [wrapper] Preserve the exact target element across a delayed humanized interaction, and skip the pointer check entirely under force=True to match Playwright. Pointer events are no longer dispatched if the original target is detached or replaced while the cursor is moving. Python, JavaScript, and .NET.
• [wrapper] cloakbrowser info now reports concurrent session seats as used out of the plan limit instead of a bare count, so you can tell whether you are at capacity, and names the real reason when the count is unavailable (server unreachable, timeout, invalid key, inactive license, rate limited, or reported unknown while degraded) (#513). Adds SessionSeats / getSessionSeats; get_active_session_count keeps its signature. Python, JavaScript, and .NET.
• [wrapper] Fix the license session guard on launch_persistent_context_async not having its denial path available after installation. Python.
• [wrapper] Declare the URW base35 fonts explicitly in the published Docker image so the Latin fallback for Verdana, Georgia, Trebuchet MS and Tahoma cannot be silently dropped by a future window-manager change. No runtime change.

---

[0.5.8] — 2026-08-18

• [wrapper] Fix humanize=True actions (fill, click, type) failing with an element-not-attached error after a navigation driven by a click or form submission instead of goto. The pre-action element checks could stay bound to the previous document and never recover; they now refresh on every navigation. Regression from 0.5.6. Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Fix humanize=True page.selectOption() hanging until timeout instead of selecting. The saved original delegated back to the patched main-frame method and recursed indefinitely. JavaScript Playwright only; Python and .NET were unaffected.
• [wrapper] Stop a humanized action from spending its full scroll budget (~7s) on an element that is already fully visible but off-center while the page is pinned at the top or bottom and cannot scroll any further toward the target zone. The scroll now bails immediately in that case instead of looping to no effect. Python, JavaScript, and .NET.
• [binary] Chromium 150.0.7871.114.6 (Pro Stable, Linux x64 + arm64 and Windows x64) — 71 source-level patches. Linux advances from 150.0.7871.114.4; Windows advances from 150.0.7871.114.3. macOS remains on Stable 150.0.7871.114.3.
  • Identity and hardware: expanded the Windows hardware-profile pool and tightened alignment between graphics, CPU, memory, and display characteristics. Fixed seeds may resolve to a different complete hardware identity than on the previous Stable build.
  • Windows fidelity: completed text measurements and font availability across a broader real-world font set, refined platform-specific path handling, improved headed window geometry, and expanded locale coverage including Greek.
  • Browser consistency: aligned identity across top-level and nested frames under automation overrides, normalized storage reporting across contexts, improved deterministic rendering behavior, stabilized native Linux profiles across seeds, and unified the reported browser build number.
  • Network identity: improved consistency for IPv4, IPv6, dual-stack, direct, proxied, and automatically located sessions, including automatic proxy fallback for licensing connectivity.
  • Runtime and compatibility: improved extension and worker reliability under cross-platform profiles, strengthened interrupted-session cleanup and local license diagnostics, and improved host-font isolation for cross-platform personas.

---

[0.5.7] — 2026-08-11

• [wrapper] Preserve the caller-specified delay for humanized key press actions instead of replacing it with an immediate key-up or an internally generated hold time. Covers page, frame, locator, element-handle, and keyboard press paths across Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Apply humanize=True recursively to frames nested more than one level deep instead of patching only the main frame and its direct children. Python and JavaScript Playwright.

---

[0.5.6] — 2026-08-08

• [wrapper] Fix humanize=True triggering invisible CAPTCHA challenges during clicks. Humanized pre-click checks are now stealth-safe without sacrificing actionability, smooth scrolling, accurate targeting, or common selector support. Python, JavaScript, and .NET.
• [wrapper] Humanize frames created after page load instead of leaving dynamically attached frames with raw Playwright/Puppeteer behavior. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] Fix .NET NewCDPSessionAsync() throwing NullReferenceException when passed a wrapped page or frame. Adds Humanize.Unwrap() for APIs that require Playwright's concrete handles.

---

[0.5.5] — 2026-08-05

• [wrapper] cloakbrowser info --proxy <url> now resolves the exit IP, timezone, and locale a launch would apply through that proxy. Previously info only reported whether the GeoIP database file was present; it never resolved anything, so there was no way to confirm a proxy hands you a timezone and locale that match its exit IP before launching. Passing --proxy runs the same resolution geoip=True uses at launch (downloading the GeoIP database if it is not cached) and prints the exit IP, timezone, and locale, in text and --json output. Plain info is unchanged and still makes no network call; it now points at the new flag. Python, JavaScript, and .NET.
• [wrapper] humanize=True no longer raises TypeError on Python 3.14 with a license key set. Python 3.14 made functools.partial a method descriptor. The license guard stored each wrapped page method as a partial, relying on it not being a descriptor so that humanize could copy the methods onto a holder object and read them back unchanged. Under 3.14 the partial re-bound on access and injected a spurious first argument, so the first humanized page call raised TypeError (#488). The guard now wraps methods in a non-descriptor callable, inert wherever it is stored, on every Python version. Python only; JavaScript and .NET were unaffected.
• [wrapper] humanize=True no longer misses clicks on pages that are still loading. When a page kept reflowing after the element was scrolled into view, the wrapper waited for the position to settle but never scrolled again — by then the element could have been pushed off screen, so the click was dispatched at coordinates outside the viewport and landed on nothing. The action reported success and the click had simply not happened. The element is now re-scrolled into view after the settle wait, and the pointer-events check no longer downgrades an already-confirmed miss to "undetermined" when a later probe times out, so a click that cannot land raises instead of passing silently. Measured on a page reflowing for 10–25 seconds: previously a silent miss after ~32s, now a successful click. Pages that reflow longer than the call's timeout still raise, as before. Python, JavaScript, and .NET.

---

[0.5.4] — 2026-08-04

... (truncated)

Commits

• 0811704 release: v0.5.9 — humanize selector fixes + info seat reporting
• 1164eca fix(humanize): restore get_by_* selectors and harden isolated-world reads
• f7ca311 fix(humanize): support display contents targets
• f12e47d fix(js): align humanized selector behavior
• b90c670 fix(banner): bump PRO_MAJOR to 151
• c2421da feat(info): report session seats as used/limit with real failure reasons
• 2e5d493 release: v0.5.8 — humanize post-nav, selectOption, and scroll fixes
• a91d105 fix(humanize): refresh pre-action element checks after click/form navigation ...
• cf194eb chore(deps-dev): bump the javascript group across 1 directory with 2 updates ...
• 5494ac1 fix(humanize): skip futile scroll for fully-visible boundary elements
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #32.