chore(deps): bump cloakbrowser from 0.3.32 to 0.5.10 in /browser-search

[dependabot]

Bumps cloakbrowser from 0.3.32 to 0.5.10.

Changelog

Sourced from cloakbrowser's changelog.

[0.5.10] — 2026-08-30

• [wrapper] The first-launch welcome banner no longer aborts a launch on a legacy Windows console. On a non-UTF-8 (cp1252) console its arrow and dash characters raised UnicodeEncodeError on the binary-download path, which blocked license apply and profile launch (notably in CloakBrowser Manager). The banner is now ASCII and every write is guarded, so a cosmetic message can never stop a launch. Python, JavaScript, and .NET.
• [wrapper] A requested GeoIP resolution that fails now aborts the launch instead of silently continuing on the container clock. Failure means the lookup times out, the database cannot be loaded, the lookup cannot complete, or timezone or locale stay unresolved; the default resolution timeout is raised from 5 to 20 seconds. Explicit timezone and locale overrides remain valid without an egress-IP result. Python, JavaScript, and .NET.
• [wrapper] A license key the server rejects (invalid or expired), or one that cannot be validated at all (license server unreachable with no cached result), now raises a clear error instead of silently downloading the older free binary. Passing no key still uses the free binary as before. Python, JavaScript, and .NET.

---

[0.5.9] — 2026-08-25

• [wrapper] Fix humanize=True selecting the wrong element, so humanized actions now resolve the same visible target Playwright would (#512). Text matching ignores non-rendered document content, open Shadow DOM matches are ordered exactly as Playwright orders them for broad first/nth selectors, and elements with no box of their own (display: contents) get actionable geometry derived from their rendered text and visible descendants. Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Restore get_by_* locators (test id, placeholder/alt/title, text, label) under humanize=True. They had stopped resolving after an earlier internal read path was closed off; the engines are reimplemented in the isolated world so the locators work again without reopening that path. get_by_role and >> chaining remain unsupported, and the error now names what is supported. Python, JavaScript, and .NET.
• [wrapper] Preserve the exact target element across a delayed humanized interaction, and skip the pointer check entirely under force=True to match Playwright. Pointer events are no longer dispatched if the original target is detached or replaced while the cursor is moving. Python, JavaScript, and .NET.
• [wrapper] cloakbrowser info now reports concurrent session seats as used out of the plan limit instead of a bare count, so you can tell whether you are at capacity, and names the real reason when the count is unavailable (server unreachable, timeout, invalid key, inactive license, rate limited, or reported unknown while degraded) (#513). Adds SessionSeats / getSessionSeats; get_active_session_count keeps its signature. Python, JavaScript, and .NET.
• [wrapper] Fix the license session guard on launch_persistent_context_async not having its denial path available after installation. Python.
• [wrapper] Declare the URW base35 fonts explicitly in the published Docker image so the Latin fallback for Verdana, Georgia, Trebuchet MS and Tahoma cannot be silently dropped by a future window-manager change. No runtime change.

---

[0.5.8] — 2026-08-18

• [wrapper] Fix humanize=True actions (fill, click, type) failing with an element-not-attached error after a navigation driven by a click or form submission instead of goto. The pre-action element checks could stay bound to the previous document and never recover; they now refresh on every navigation. Regression from 0.5.6. Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Fix humanize=True page.selectOption() hanging until timeout instead of selecting. The saved original delegated back to the patched main-frame method and recursed indefinitely. JavaScript Playwright only; Python and .NET were unaffected.
• [wrapper] Stop a humanized action from spending its full scroll budget (~7s) on an element that is already fully visible but off-center while the page is pinned at the top or bottom and cannot scroll any further toward the target zone. The scroll now bails immediately in that case instead of looping to no effect. Python, JavaScript, and .NET.
• [binary] Chromium 150.0.7871.114.6 (Pro Stable, Linux x64 + arm64 and Windows x64) — 71 source-level patches. Linux advances from 150.0.7871.114.4; Windows advances from 150.0.7871.114.3. macOS remains on Stable 150.0.7871.114.3.
  • Identity and hardware: expanded the Windows hardware-profile pool and tightened alignment between graphics, CPU, memory, and display characteristics. Fixed seeds may resolve to a different complete hardware identity than on the previous Stable build.
  • Windows fidelity: completed text measurements and font availability across a broader real-world font set, refined platform-specific path handling, improved headed window geometry, and expanded locale coverage including Greek.
  • Browser consistency: aligned identity across top-level and nested frames under automation overrides, normalized storage reporting across contexts, improved deterministic rendering behavior, stabilized native Linux profiles across seeds, and unified the reported browser build number.
  • Network identity: improved consistency for IPv4, IPv6, dual-stack, direct, proxied, and automatically located sessions, including automatic proxy fallback for licensing connectivity.
  • Runtime and compatibility: improved extension and worker reliability under cross-platform profiles, strengthened interrupted-session cleanup and local license diagnostics, and improved host-font isolation for cross-platform personas.

---

[0.5.7] — 2026-08-11

• [wrapper] Preserve the caller-specified delay for humanized key press actions instead of replacing it with an immediate key-up or an internally generated hold time. Covers page, frame, locator, element-handle, and keyboard press paths across Python, JavaScript Playwright/Puppeteer, and .NET.
• [wrapper] Apply humanize=True recursively to frames nested more than one level deep instead of patching only the main frame and its direct children. Python and JavaScript Playwright.

---

[0.5.6] — 2026-08-08

• [wrapper] Fix humanize=True triggering invisible CAPTCHA challenges during clicks. Humanized pre-click checks are now stealth-safe without sacrificing actionability, smooth scrolling, accurate targeting, or common selector support. Python, JavaScript, and .NET.
• [wrapper] Humanize frames created after page load instead of leaving dynamically attached frames with raw Playwright/Puppeteer behavior. Python, JavaScript, Puppeteer, and .NET.
• [wrapper] Fix .NET NewCDPSessionAsync() throwing NullReferenceException when passed a wrapped page or frame. Adds Humanize.Unwrap() for APIs that require Playwright's concrete handles.

---

[0.5.5] — 2026-08-05

... (truncated)

Commits

• f04c23d release: v0.5.10 — Windows console banner + geoip/license launch-abort fixes
• bb6f2f0 fix(wrapper): ASCII-safe welcome banner for legacy Windows consoles
• d6bad5d fix(geoip): abort launch when resolution fails
• 8fb3350 fix(license): abort on invalid or unvalidatable key instead of silent free fa...
• 0811704 release: v0.5.9 — humanize selector fixes + info seat reporting
• 1164eca fix(humanize): restore get_by_* selectors and harden isolated-world reads
• f7ca311 fix(humanize): support display contents targets
• f12e47d fix(js): align humanized selector behavior
• b90c670 fix(banner): bump PRO_MAJOR to 151
• c2421da feat(info): report session seats as used/limit with real failure reasons
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)