release: 0.122.0

[kernel-internal]

Automated Release PR

0.122.0 (2026-10-09)

Features

• Accept client-encrypted credential values in vault items (c203c7e)
• Add feature-gated Korean ISP proxies (168ca36)
• Describe vault fill as safe to retry (207ed0d)
• Infer a challenge result for unobserved captcha providers in the relay (454206a)
• Support proxy routes in browser pools (08ae962)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds vault client-side encryption and changes documented semantics for egress allowlists, proxy routes, and vault fill retries; credential handling and browser networking behavior deserve extra review.

Overview
Release 0.122.0 bumps the SDK version and documents five API-facing features in generated types and client methods.

Vault credentials add Vaults.GetEncryptionKey and VaultEncryptionKey types so custom collection UIs can submit JWE ciphertext via encrypted_value on credential field create/update (mutually exclusive with value). Vault fill operation docs now state retries are safe after failure, unknown outcomes, or transport errors.

Browser networking updates clarify that proxy_routes apply from session start (including start_url) and are supported on browser pools (with proxy-v3); allowed_hosts can only be changed on browsers that were created with an allowlist, not added later. Pool create/update network docs mention proxy_routes and proxy-v3 provisioning.

Captcha telemetry extends challenge/solve events with captcha_provider, task_kind, and inferred challenge results (task_id vs challenge_id); captcha_type is deprecated.

Proxies add KR to managed ISP country codes across proxy and config-registry types.

^{Reviewed by Cursor Bugbot for commit b42ea03. Bugbot is set up for automated code reviews on this repo. Configure here.}

[rgarcia]

Reviewed: vault encryption key method/type and encrypted_value on credential field input/update are modeled correctly.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-go-sdk/releases/tag/v0.122.0 🌻