> ## Documentation Index
> Fetch the complete documentation index at: https://www.checklyhq.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Checkly Agent Changelog

> Release history for the Checkly Agent

For major release announcements and summaries, see Checkly's [product changelog](https://feedback.checklyhq.com/changelog?c=Checkly+Agent), filtered by `Checkly Agent`.

Learn more about:

* updating to the latest version in
  [updating the agent container](https://www.checklyhq.com/docs/platform/private-locations/agent-configuration.md#updating-the-agent-container)
* supported runtimes for each agent version in
  [agent version and runtimes](https://www.checklyhq.com/docs/platform/private-locations/agent-configuration.md#agent-version-and-runtimes)

## Full release history

**v8.11.0**

* Expanded native Fetch API support in runtimes 2025-04 and 2026-04. Scripts can now use FormData, Blob, File, Headers, Request, and Response, including multipart/form-data requests and file uploads with native fetch().
* Added compression for logs and reports from scheduled checks, enabled per account, to reduce artifact upload sizes.
* Updated agent and bundled 2026-04 runtime dependencies to fix vulnerabilities.

**v8.10.1**

* Fixed SSL checks that could report success when a server rejected the supplied client certificate.
* Removed unnecessary live updates for scheduled checks.

**v8.10.0**

* Expanded the APIs available to check scripts with support for AbortController, AbortSignal, and Node.js stream/promises, enabling cancellable operations and promise-based stream handling.
* Reduced memory use when processing large error messages.

**v8.9.0**

* Added support for the Coralogix US3 region.
* Updated bundled runtime dependencies to fix vulnerabilities.

**v8.8.1**

* Improved private location agent image builds to avoid inclusion of unneeded runtimes in intermediate layers.
* Updated the bundled 2026-04 runtime dependencies to remove vulnerabilities, including updates to @faker-js/faker, @xmldom/xmldom, csv-parse, imapflow, mysql2, prisma, and nodemailer.
* Improved client certificate selection across supported check types. URL-based requests can now match certificates by optional path scope, while host-only checks continue to match by host.

**v8.8.0**

* Update various dependencies to fix vulnerabilities
* Improvements in uploading larger assets for [Playwright Check Suites](https://www.checklyhq.com/docs/detect/synthetic-monitoring/playwright-checks/overview.md)

**v8.7.0**

* Internal errors of the agent's Node.js component (which runs browser, multistep and Playwright checks) are now reported to the private location's Errors tab, like the Go component's already were

**v8.6.0**

* Fixed a bug that prevented pcap files from being cleaned up
* Expose `CHECKLY_TRACE_ID` to API check setup & teardown scripts
* Playwright Check Suites: add support for [Checkly Traces](https://www.checklyhq.com/docs/resolve/traces/overview.md)
* Update various dependencies to fix vulnerabilities

**v8.5.0**

* Uptime checks can run with response time limits up to 45s (TCP, API and URL), enabled per account
* gRPC checks support server-streaming methods, plus improved encoding for advanced schema types
* Browser checks can simulate constrained bandwidth
* API check responses render image previews
* Playwright Check Suites: network and console entries are extracted from traces, and trace retention now follows your account setting
* Fixes: pnpm workspace caching on repeated runs, empty Playwright video assets, artifact upload reliability, multi-step method timeouts, and SSL hostname handling
* Update various dependencies to fix vulnerabilities

**v8.4.2**

* Added automatic Web Vitals collection for Playwright Check Suites on Chromium.
* Playwright Check Suites now respect your trace settings, with tracing enabled on the first retry by default.
* Improved reporting of internal errors so affected Playwright Check Suites return a result instead of leaving the run incomplete.
* Added SSL assertions for individual certificate properties.
* gRPC checks now always store response bodies.
* Corrected the default UDP traceroute probe port to 33434.

**v8.4.1**

* Improved SSL certificate diagnostics, including detection of incomplete certificate chains and stapled certificate revocation status.
* Fixed SSL hostname validation when an SNI override is configured.
* Fixed API checks with text-body assertions on binary responses.
* Improved Playwright Check Suite configuration handling.
* Pinned npm to a version compatible with the bundled Node.js runtimes.

**v8.4.0**

* Support for running gRPC, traceroute, and SSL checks
* Always scrub potentially sensitive headers (Authorization, x-api-key, cookie, etc) even if they don’t contain secrets
* Downgrade one of the dependencies that prevented the agent from running on older CPU hardware

**v8.3.4**

* Update various dependencies to fix vulnerabilities
* Add `--refresh-cache` functionality

**v8.3.3**

* Fixed a bug that caused agent health and readiness probes to fail during graceful shutdown.

**v8.3.2**

* Update vm2 dependency: 3.11.3 → 3.11.5.

**v8.3.1**

* Fixed a bug that prevented users of pnpm workspaces to run their PWCS on private locations in certain scenarios.
* Test failures and setup errors are now surfaced in the user-visible log alongside the existing report.

**v8.3.0**

* Added support for cancelling running Playwright check suites
* Playwright check suites can run in different NodeJs or Bun versions (22, 24, 26 or Bun 1.3)

**v8.2.0**

* Improved Playwright browsers installation
* Playwright Check Suites now cache Playwright browsers across runs in the same Private Location Agent
* Upgraded dependencies such as `vm2` 3.10.5 → 3.11.3 and `axios` 1.15.0 → 1.16.1
* Patched Checkly's `markCheckAsDegraded` helper when used with soft assertions

**v8.1.0**

* [Global timeouts](https://playwright.dev/docs/test-timeouts#global-timeout) now apply and surface correctly in Playwright Check Suites
* Improved scheduling for long-running Playwright Check Suites

**v8.0.1**

* Resolved several dependency vulnerabilities in the private location image

**v8.0.0**

Latest agent image with [runtime 2026.04](https://www.checklyhq.com/docs/platform/runtimes/runtime-specification.md#2026-04) only.

* Previous versions bundled two runtimes to support gradual upgrades
* This could surface vulnerabilities from the older runtime in security scans
* From v8 onward, only the latest runtime is included

**Upgrade path**

* Already on `2026-04`: upgrade directly
* On older runtimes: use the [migration image](#v7-0-2) (`7.0.2-migrate-202409-202604`) to move to `2026-04`, then upgrade to v8

**v7.1.0**

* Improved scheduling for long-running Playwright Check Suites to prevent duplicate execution.
* Fixed reporting of Playwright runs that reach the global timeout or are interrupted.
* Added test errors to check logs for easier diagnosis.

**v7.0.3**

Patches vulnerabilities in dependencies bundled with the [2026.04 runtime](https://www.checklyhq.com/docs/platform/runtimes/runtime-specification.md#2026-04). Fix-forward updates only.

Updated packages:

* `@azure/identity` 4.13.0 → 4.13.1
* `@clerk/testing` 1.14.2 → 1.14.3
* `@opentelemetry/exporter-metrics-otlp-grpc` 0.212.0 → 0.215.0
* `@xmldom/xmldom` 0.9.8 → 0.9.10
* `axios` 1.13.5 → 1.15.0
* `imapflow` 1.2.10 → 1.3.1
* `lodash` 4.17.23 → 4.18.1
* `prisma` 7.4.1 → 7.8.0
* `protobufjs` 8.0.0 → 8.0.1

**v7.0.2**

* Includes security patches for runtime `2026-04`
* Migration image (`7.0.2-migrate-202409-202604`) available: Bundles runtimes `2024-09`, `2025-04`, and `2026-04`, allowing you to upgrade from older runtimes to `2026-04`

**v7.0.1**

* [ICMP monitors](https://www.checklyhq.com/docs/detect/uptime-monitoring/icmp-monitors/overview.md) no longer require full root privileges to run
* Fixed broken runtime dependencies in agent containers. Incorrect symlinks for the `2025-04` and `2026-04` runtimes caused dependency resolution failures (affecting agent v6.3.2 and v7.0.0)
* Fixed connectivity issues when IPv6 is disabled. The agent now falls back to IPv4 automatically
* API checks and URL monitors now capture [packets and traceroutes](https://www.checklyhq.com/docs/platform/network-diagnostic-tools.md) on network failures
* Bun is now supported as a package manager in [Playwright Check Suites](https://www.checklyhq.com/docs/detect/synthetic-monitoring/playwright-checks/overview.md)
* Degraded status now correctly appears in the [test reporter](https://www.checklyhq.com/docs/detect/testing/playwright-reporter.md) header

**v7.0.0**

* Added support for running [ICMP](https://www.checklyhq.com/docs/detect/uptime-monitoring/icmp-monitors/overview.md) and [DNS monitors](https://www.checklyhq.com/docs/detect/uptime-monitoring/dns-monitors/overview.md) on Private Locations
* Introduced the [uptime agent image](https://www.checklyhq.com/docs/platform/private-locations/agent-images.md#uptime-image), a lightweight version of the agent for running uptime monitors (URL, DNS, TCP, ICMP) only
* Added [external observability](https://www.checklyhq.com/docs/platform/private-locations/agent-configuration.md#external-observability) for Private Location agents to capture runtime errors
  * Error-level events can be reported to Checkly to help detect crashes, bugs, and environment-related issues
  * Only limited technical metadata is collected (error message, stack trace, agent version, platform, Go runtime)
  * Sensitive data such as API keys, environment variables, check configuration, URLs, headers, and response bodies is never sent
  * Enabled by default, can be disabled with `EXTERNAL_OBSERVABILITY=off`
* Support for runtimes `2026.04` and `2025.04`

**Breaking changes**

* API checks and URL monitors migrated to the Go runner now percent-encode reserved characters in query parameter data, following [RFC 3986, Section 2.2](https://datatracker.ietf.org/doc/html/rfc3986#section-2.2). For example, `(` and `)` are sent as `%28` and `%29`. Target servers that treat the encoded and unencoded forms differently may require changes.
* TLS certificate validation for an IP-address target now requires the certificate to contain that IP address in its Subject Alternative Name as an `iPAddress`, following [RFC 5280, Section 4.2.1.6](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.6). Checks targeting an IP address fail TLS validation when the certificate does not contain a matching IP address SAN.

**v6.3.2**

* Improved error logging for failed Playwright test report uploads, including the report file size
* Increased the maximum artifact upload size from 75 MB to 150 MB

**v6.3.1**

The agent now exposes HTTP health probe endpoints:

* **GET /-/readiness**: Returns `200 OK` when the agent is ready, `503 Service Unavailable` during shutdown
* **GET /-/liveness**: Returns `200 OK`
* **GET /health**: Returns `200 OK`
  Health endpoints run on port 8081 by default, configurable via the `AGENT_HEALTH_PORT` environment variable

**v6.3.0**

* Added [agent-dev image](https://www.checklyhq.com/docs/platform/private-locations/agent-images.md) including build tools to support building native npm packages. Going forward, the dev variant is published as a separate image rather than a tag on the main agent image
* Improved secret scrubbing speed
* Improved error logging for hanging or long running Playwright Check Suite jobs

**v6.2.0**

Ensured `devDependencies` are not installed in the agent image

**v6.1.7**

* Added support for a [dev image](https://www.checklyhq.com/docs/platform/private-locations/agent-images.md) including build tools to support building native npm packages
* Improved internal logging and metrics for [Playwright Check Suites](https://www.checklyhq.com/docs/detect/synthetic-monitoring/playwright-checks/overview.md)
* Browser and Multistep checks using runtime 2025.04 now automatically scrub the `Authorization` header from requests

**v6.1.6**

Added Checkly environment variables and configuration to [Playwright Check Suites](https://www.checklyhq.com/docs/detect/synthetic-monitoring/playwright-checks/overview.md). See the docs on [Playwright Check Suites environment variables](https://www.checklyhq.com/docs/detect/synthetic-monitoring/playwright-checks/environment-variables.md):

* Adds support for `CHECKLY` to all checkly triggered runs: scheduled checks and test sessions triggered through either `npx checkly test`, `npx checkly trigger` or `npx checkly pw-test`
* Includes the environment variable `CI` as true only for test session triggered runs

**v6.1.5**

Added Playwright test metrics to the check overview page, including **Test performance** and **Test statuses** graphs

**v6.1.4**

Minor patches on reporting

**v6.1.3**

Improved and centralized secret scrubbing for more reliable removal of sensitive data

**v6.1.2**

Added support for `CHECKLY_SECRET_*` environment variables. Secrets containing special characters (e.g. `@`, `%`, `!`, `+`) are now reliably scrubbed from traces, including when they appear in encoded form in URLs or request payloads. Learn more in our documentation on [Dynamic Secret Scrubbing](https://www.checklyhq.com/docs/platform/dynamic-secret-scrubbing.md)

**v6.1.1**

Fixed an issue where checks could fail behind proxies during dependency installation because proxy-related environment variables were not consistently available

**v6.1.0**

* Added runtime secret detection for Browser and Multistep checks (enabled for selected accounts)

* See the [product changelog](https://feedback.checklyhq.com/changelog/checkly-agent-610-playwright-check-suites-and-more) for details on changes from version 6.0.1 to 6.1.0

**v6.0.7**

Internal improvements and fixes related to networking and request handling


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.