Skip to content

Add April 24 changelog entry #339

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
eclairen merged 3 commits into from
Apr 23, 2026
+17 −0
Merged

Add April 24 changelog entry #339

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1778235
Add April 24 changelog entry
eclairen Apr 23, 2026
91222be
Refactor product updates in changelog
eclairen Apr 23, 2026
151f722
Revise changelog for April 17 updates
eclairen Apr 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions changelog.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,23 @@ import { YouTubeVideo } from '/snippets/youtube-video.mdx';
For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-node-sdk/blob/main/CHANGELOG.md), [Python SDK](https://github.com/onkernel/kernel-python-sdk/blob/next/CHANGELOG.md), and [Go SDK](https://github.com/onkernel/kernel-go-sdk/blob/main/CHANGELOG.md) changelogs.
</Note>

<Update label="April 24" tags={["Product", "Docs"]}>
## Product updates

- Kernel is now a [Cloudflare Web Bot Auth partner](https://www.kernel.sh/blog/cloudflare). Kernel browsers can [cryptographically identify themselves](/browsers/bot-detection/web-bot-auth) to Cloudflare-protected sites, so Kernel traffic isn't blocked.
- Anti-detection features are now on by default for all Kernel browsers. [Stealth mode](/browsers/bot-detection/stealth) now specifically adds the managed residential proxy and CAPTCHA solver (both opt-out), and non-stealth browsers fully support [custom proxies](/proxies/custom).
- Revamped the [managed auth hosted login page](/auth/hosted-ui): all available sign-in options (password fields, SSO providers, MFA, alternate sign-in methods) now render together on a single page, so end users can pick the path they want, instead of being funneled through one at a time.
- [Managed auth connections](/auth/overview) now automatically re-authenticate expired sessions during health checks when credentials are available, reducing the need for manual reauth.
- Managed auth input fields now display contextual helper text when the site surfaces hints, reducing user confusion on multi-step logins.
Copy link
Copy Markdown

@cursor cursor Bot Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewer flagged content for removal still present

Medium Severity

A reviewer (@dprevoznik) commented "We are debugging this I would remove," indicating a feature that's still actively being debugged. This changelog bullet about managed auth contextual helper text likely corresponds to that feedback and risks announcing a feature to users that isn't stable yet. The item remains in the diff despite the reviewer's request to remove it.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 151f722. Configure here.

- The "Save credentials after login" option is now automatically disabled when [1Password](/integrations/1password) is selected as the [credential source](/auth/credentials), since those credentials are already managed externally.
- Kernel now supports WebSocket connections through its API, enabling `process attach` and other long-lived streaming workflows.
Copy link
Copy Markdown

@cursor cursor Bot Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Second reviewer-flagged content still not removed

Medium Severity

A reviewer (@dprevoznik) also commented "I'd remove this piece," flagging a second item for removal. The WebSocket / process attach bullet is a likely candidate — it describes new API infrastructure that may not be fully ready for public announcement. This entry remains in the diff despite the reviewer's request.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 151f722. Configure here.

- Exceeding invocation concurrency limits now returns a 429 response immediately, for faster and more actionable feedback.

## Documentation updates

- Rewrote the [stealth mode](/browsers/bot-detection/stealth) and [bot detection overview](/browsers/bot-detection/overview) pages to clarify the new anti-detection defaults, and added a "Bring your own proxy" section to the [proxies overview](/proxies/overview).
</Update>

<Update label="April 17" tags={["Product", "Docs"]}>
## Product updates

Expand Down
Loading