release: 0.127.0

[kernel-internal]

Automated Release PR

0.127.0 (2026-10-15)

Features

• Add atomic preconditions to pool network updates (9869c91)
• Add passkey credential fields and PATCH field add/remove (84a69ad)
• Allow replacing vault cards whose provider outcome is unknown (30f88e1)
• Classify text captchas as token tasks and Binance as a provider (84f71b8)
• Deliver Kernel card details through fill (eed3e7b)
• Raise Kernel card amount cap to $10,000 (483f331)
• Remove Link expires_at, return 400 for missing credential values, and log fill failures (766dd6e)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
SDK surface changes track vault payment, credential schema, and concurrency APIs; integrators must drop Link expires_at and adopt new recovery/delete guidance for card items.

Overview
Release 0.127.0 bumps package version and changelog; the substantive changes are regenerated API types and client methods from the latest OpenAPI spec.

Browser pools: browser_pools.update now accepts optional expected_network for optimistic concurrency on network config (409 stale_network when it does not match).

Vault credentials: Adds passkey as a field type, documents CXF passkey values (not form-fillable), and extends credential PATCH with add_fields / remove_fields plus CredentialVaultFieldDefinitionInputParam. Collection and WebMCP docs treat passkeys like TOTP for forms.

Vault cards: Removes expires_at from Link card create/update params. Kernel card specs raise the amount cap to 1,000,000 minor units and describe fill for delivering checkout details (including cards without agentic network tokens). Docs for recovery_required and deletion now steer callers to delete and recreate rather than retry uncertain updates; Link/Kernel issuance recovery cards may be abandoned via direct delete.

Captcha telemetry: Adds binance to captcha_provider, optional media on solve started/result events, and clarifies site-drawn text captchas under other.

Tests and api.md exports are updated for the new parameters.

^{Reviewed by Cursor Bugbot for commit 98ea479. Bugbot is set up for automated code reviews on this repo. Configure here.}