release: 0.127.0

[kernel-internal]

Automated Release PR

0.127.0 (2026-10-16)

Features

• Add atomic preconditions to pool network updates (50d68f4)
• Add passkey credential fields and PATCH field add/remove (d1001f3)
• Allow replacing vault cards whose provider outcome is unknown (060038b)
• chore(stlc): seal custom-code tracking files (2b47c61)
• Classify text captchas as token tasks and Binance as a provider (0974d4f)
• Deliver Kernel card details through fill (03d2609)
• Raise Kernel card amount cap to $10,000 (1f992aa)
• Remove Link expires_at, return 400 for missing credential values, and log fill failures (8dea4a0)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Touches vault credentials, card fill/payment flows, and a removed Link expires_at field—callers may need type and request updates when upgrading.

Overview
Release 0.127.0 bumps the package and changelog and regenerates SDK types/docs from the latest Kernel API.

Browser pools & sessions add optional expected_network on pool PATCH for atomic optimistic concurrency (409 stale_network when the saved network differs). Memory request types now document and allow headless tiers 1/2/4 GiB and headful 8/16 GiB (including 4GiB on BrowserMemory).

Vault & payments introduce passkey credential fields (CXF JSON, not form-filled), CredentialVaultFieldDefinitionInput, and credential PATCH add_fields / remove_fields. Kernel cards gain fill-delivered checkout details (including some non–network-token paths), a $10,000 amount cap (1,000,000 minor units), and clearer recovery_required guidance (delete/recreate vs retry). Link card specs drop expires_at; deletion docs cover abandoning Link/Kernel cards in recovery. Credential creation rejects missing values (400).

Telemetry adds binance as a captcha provider, clarifies site-drawn text captchas under other, and optional media (image | video) on captcha solve events.

^{Reviewed by Cursor Bugbot for commit f83fc34. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 1dd357f. Configure here.}

[sjmiller609]

Reviewed the generated request/response and pool-update types: 2GiB and 4GiB headless allocations are present, existing defaults remain server-resolved, and GPU memory types are unchanged. Generator bootstrap, lint, and tests passed; release CI build/lint/tests passed. No blocking findings.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-node-sdk/releases/tag/v0.127.0 🌻