Maintenance release

• fix(mcp): do not fail on wsl client w/ windows server - (#38063)

Maintenance release

MCP Changes Since Last Release

• Incremental page snapshots: pageState now supports diffs. Unchanged subtrees are collapsed as - ref=<id> [unchanged]. Reduces noise and payload size. microsoft/playwright#37795
• Encourage relative path usage — MCP now suggests using relative paths for portability microsoft/playwright#37857
• Image size cap — Added limits on rendered image sizes to prevent resource overuse microsoft/playwright#37856

• microsoft/playwright@47f3da3 feat(mcp): support test-id-attribute option (microsoft/playwright#37760)

• microsoft/playwright@86a00d0 chore(mcp): handle cross-fs video moves (microsoft/playwright#37663)
• microsoft/playwright@52b2da8 chore(mcp): support --allowed-hosts=* (microsoft/playwright#37657)
• microsoft/playwright@9f371ad feat(mcp): console error and faster wait (microsoft/playwright#37618)
• microsoft/playwright@2d33cdd chore: do not rename video files outside --save-videos (microsoft/playwright#37616)

Features

• microsoft/playwright@c813e9cf5 feat(mcp): allow saving videos for sessions microsoft/playwright#37531

  # video is saved from the creation of the page to the closure of the context (browser_close call).
  npx @playwright/mcp --save-video=800x600

• microsoft/playwright@fff065816 feat(mcp): add --init-script option microsoft/playwright#37507

  # the code in web-mocks.js will run on page initialization
  npx @playwright/mcp --init-script=./web-mocks.js

• microsoft/playwright@1313fbd47 chore(mcp): introduce allowed-hosts microsoft/playwright#37541

  # Runs MCP server only accessible on 192.168.1.10, defense from DNS rebind
  npx @playwright/mcp --allowed-hosts=192.168.1.10:8080 --port=8080

Bugfixes

• microsoft/playwright@da333232e fix(mcp): snapshot for ai fixes microsoft/playwright#37527
• microsoft/playwright@499d084a5 fix(session): an extra check for session log microsoft/playwright#37508
• microsoft/playwright@2f820cb20 fix(mcp): lax file path sanitization microsoft/playwright#37502

microsoft/playwright@afb59a0ec fix(mcp): tolerate malformed roots microsoft/playwright#37492
microsoft/playwright@0574514a0 feat(mcp): support shared browser context microsoft/playwright#37463

microsoft/playwright@29fb93479 fix(mcp): use single output dir microsoft/playwright#37436
microsoft/playwright@f07c8c0ac chore(mcp): --grant-permissions cli option microsoft/playwright#37431
microsoft/playwright@eb39131eb fix(mcp): --allowed/blocked-origins accept origins not hosts microsoft/playwright#37408
microsoft/playwright@b3d666428 chore: fetch roots lazily microsoft/playwright#37399
microsoft/playwright@4968bc611 chore(mcp): allow to pass extension token via env variable microsoft/playwright#37371

• 🔥 Secrets 🔥 - microsoft/playwright@dea31d86d

  When user prompts

  "Authenticate using X-USERNAME / X-PASSWORD"
  

  the secret values for X-USERNAME and X-PASSWORD are not sent to the LLM.

  # secrets.env
  X-USERNAME=<secret_value>
  X-PASSWORD=<secret_value>

• Action and navigation timeouts can be configured to go beyond standard 5s/60s. - microsoft/playwright@b37caaaf5

• Clicks with keyboard modifiers - microsoft/playwright@cc69e0773

   "Shift+click the last todo item"
  

• Cdp connection headers for the browsers in the ☁️ microsoft/playwright@3e4efe9d7

b176111 chore: roll Playwright to latest (#971)
29d468d chore: add verification tools section (#957)
78298c3 chore: introduce verification tools (#951)
7fb8b0d fix: browser_tabs select action with index 0 failing due to falsy check (#964)
7774ad9 chore(extension): support custom executablePath (#947)