[kernel-internal]

Automated Release PR

0.129.0 (2026-10-21)

Features

• chore(stlc): seal custom-code tracking files (3153f7e)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Renaming BrowserLocationSource from metro to default is a breaking change for typed clients, and the new vault capture_token is sensitive credential material that must be handled carefully.

Overview
Release 0.129.0 bumps package version metadata and changelog only for the release machinery; the substantive SDK changes are regenerated OpenAPI types.

Browser location renames the BrowserLocationSource value from metro to default and updates related docstrings on BrowserLocation. Callers that branch on "metro" need to use "default" instead.

Browser viewport docstrings now state that when refresh_rate is omitted, GPU browsers default to 60 Hz while other browsers still derive it from width and height.

Vault card enrollment adds an optional capture_token on CardEnrollmentAction for Kernel-wallet embedded capture (@onkernel/vault-react), with guidance to treat it as secret and not log or persist it.

^{Reviewed by Cursor Bugbot for commit 8a63e56. Bugbot is set up for automated code reviews on this repo. Configure here.}

[tnsardesai]

Release 0.129.0: renames the browser location source metro to default (kernel/kernel#4926), plus the pending vault item and viewport changes. Checks pass.

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-python-sdk/releases/tag/v0.129.0 🌻