[dependabot]

Bumps @browserbasehq/stagehand from 4.2.0 to 4.4.0.

Changelog

Sourced from @​browserbasehq/stagehand's changelog.

TypeScript SDK 4.4.0

Minor Changes

• #3305 aeb1ba0 Thanks @​miguelg719! - add browser.disconnect(), which closes an attached Stagehand instance and the connection to a browser without closing the browser or releasing its Browserbase session (Browserbase still ends sessions without keepAlive on disconnect). browser.close() after disconnect() now throws (connect again to close the browser), a launched local browser receives Browser.close before it is terminated, browser handles expose cdpUrl (cdp_url in Python) for local browsers, and connected reports whether the handle still has a live connection

• #3325 d59afde Thanks @​miguelg719! - Add an extension watchdog for lost SDK clients

Patch Changes

• #3339 44d99df Thanks @​seanmcguire12! - Adopt cross-origin iframes that were already loaded when Stagehand attached, or that are nested inside another cross-origin iframe, so snapshots and actions can reach them.

• #3330 dc8eb40 Thanks @​seanmcguire12! - bump zod to 4.6.6

• #3340 edb76b0 Thanks @​akeimach! - Fix act, observe and extract with Claude Opus 5.5 by bumping @ai-sdk/anthropic and ai in the extension.

• #3387 066e875 Thanks @​seanmcguire12! - fixed domain policy bypasses involving URLs with credentials, background requests, and speculative page loads

• #3383 1e50db6 Thanks @​seanmcguire12! - skip variable substitution for drag-and-drop arguments in act().

• #3388 18b96f2 Thanks @​seanmcguire12! - fix issue where calling act() prevents cross-origin iframes from loading

Python SDK 4.4.0

Minor Changes

• #3305 aeb1ba0 Thanks @​miguelg719! - add browser.disconnect(), which closes an attached Stagehand instance and the connection to a browser without closing the browser or releasing its Browserbase session (Browserbase still ends sessions without keepAlive on disconnect). browser.close() after disconnect() now throws (connect again to close the browser), a launched local browser receives Browser.close before it is terminated, browser handles expose cdpUrl (cdp_url in Python) for local browsers, and connected reports whether the handle still has a live connection

• #3325 d59afde Thanks @​miguelg719! - Add an extension watchdog for lost SDK clients

Patch Changes

• #3339 44d99df Thanks @​seanmcguire12! - Adopt cross-origin iframes that were already loaded when Stagehand attached, or that are nested inside another cross-origin iframe, so snapshots and actions can reach them.

• #3330 dc8eb40 Thanks @​seanmcguire12! - bump zod to 4.6.6

• #3340 edb76b0 Thanks @​akeimach! - Fix act, observe and extract with Claude Opus 5.5 by bumping @ai-sdk/anthropic and ai in the extension.

• #3387 066e875 Thanks @​seanmcguire12! - fixed domain policy bypasses involving URLs with credentials, background requests, and speculative page loads

• #3383 1e50db6 Thanks @​seanmcguire12! - skip variable substitution for drag-and-drop arguments in act().

• #3388 18b96f2 Thanks @​seanmcguire12! - fix issue where calling act() prevents cross-origin iframes from loading

Extension Runtime 1.3.0

Minor Changes

• #3325 d59afde Thanks @​miguelg719! - Add an extension watchdog for lost SDK clients

... (truncated)

Commits

• 5a5b48a Release Stagehand packages (#3332)
• 18b96f2 [fix]: preserve cross origin iframes after act() (#3388)
• 066e875 [fix]: harden domain policy setting (#3387)
• e02700f [chore]: bump oxfmt (#3373)
• d59afde feat: extension watchdog for lost SDK clients (#3325)
• aeb1ba0 feat: add browser.disconnect() to the TypeScript and Python SDKs (#3305)
• 621c120 Release Stagehand packages (#3200)
• cb9a1d1 [feat]: add extension archive getter (#3267)
• 901eb27 feat: expose browser-side function waits across Stagehand SDKs (#3183)
• ecb2a6b [feat]: expose headers param on localBrowser.connect() (#3263)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)