Update dependency stagehand to v3.23.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
stagehand	~=3.5.0 → ~=3.23.0
stagehand	==3.5.0 → ==3.23.0

---

Release Notes

browserbase/stagehand (stagehand)

v3.7.0

Minor Changes

• #​2283 871ca7e Thanks @​seanmcguire12! - add context.setDomainPolicy({ allowedDomains: ["allowed.domain"] }) which allows users to define a set of domains that are accessible to stagehand

• #​2274 f31980f Thanks @​seanmcguire12! - add context.setDomainPolicy({blockedDomains: ["some.domain"]}) which allows users to define a list of domains that will be blocked by stagehand

Patch Changes

• #​2305 cd1daad Thanks @​shrey150! - Remove the noisy AI SDK "system message in messages" warning logged on every hybrid/DOM agent.execute() call.

• #​2328 d287ff4 Thanks @​miguelg719! - Allow modelName "auto" in the constructor and per-primitive model overrides when running through the Stagehand API

• #​2294 3938590 Thanks @​seanmcguire12! - automatically close popups that violate user defined domain policy

• #​2298 892701a Thanks @​seanmcguire12! - Fix CUA keypress actions to press key combinations as a single chord.

• #​2345 21826c7 Thanks @​monadoid! - Repair malformed UTF-16 snapshot text before it reaches model prompts.

• #​2306 8dcef1b Thanks @​seanmcguire12! - Use the screenshot provider's declared media type when sending CUA image payloads. The setScreenshotProvider callback now returns ScreenshotProviderResult ({ base64, mediaType }) instead of a bare base64 string.

• #​2273 93a23d3 Thanks @​miguelg719! - Add support for the new google/gemini-3.5-flash computer-use tools model

• #​2278 022d68f Thanks @​shrey150! - Fix TypeError: Converting circular structure to JSON when creating an agent with MCP integrations that include a Client instance (e.g. a local/stdio server from connectToMCPServer). The agent-creation log serialized the raw integrations array, and a live MCP Client is circular. It now logs a safe descriptor (URL strings kept, client instances summarized) so agent({ integrations: [client] }) works.

• #​2288 bb5ffa6 Thanks @​seanmcguire12! - clean up cdp session event handlers on target detach

v3.6.0

Minor Changes

• #​2178 c49a3fc Thanks @​seanmcguire12! - add support for WebMCP

Patch Changes

• #​2217 147e310 Thanks @​monadoid! - Add Azure OpenAI Microsoft Entra ID model auth support.

• #​2231 cf3603d Thanks @​miguelg719! - Add claude-fable-5 support: native structured outputs via the @​ai-sdk/anthropic bump, adaptive thinking (including the new "xhigh" effort) on the agent path, the API's built-in server-side refusal fallback to claude-opus-4-8, and auto tool choice for the final done call on models that reject forced tool use.

• #​2233 8d7d414 Thanks @​seanmcguire12! - Normalize URLs in ActCache key derivation by sorting query parameters before hashing. Semantically equivalent URLs that differ only in parameter order (e.g. ?utm_source=email&id=42 vs ?id=42&utm_source=email) now hit the cache instead of silently missing. Fragments and duplicate keys are preserved.

• #​2229 fd42e65 Thanks @​seanmcguire12! - launch local browser with --enable-features=WebMCPTesting,DevToolsWebMCPSupport by default

• #​2220 a64c6b7 Thanks @​monadoid! - Fix Stagehand-generated shadow-root XPath resolution so deterministic actions can target elements inside web components.

• #​2132 ed3e566 Thanks @​miguelg719! - Add canonical verifier evidence normalization for screenshots and text signals without requiring image dependencies in core installs.

• #​2133 840aac8 Thanks @​miguelg719! - Add the rubric-based verifier engine with normalized public rubric output and bounded failure-step parsing.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.