release: v0.5.3 — Windows font profile feature set + proxy identity and Windows CLI fixes

CHANGELOG.md

@@ -6,8 +6,9 @@ Changes are tagged: **[wrapper]** for Python/JS wrapper, **[binary]** for Chromi
 
 ---
 
-## [Unreleased]
+## [0.5.3] — 2026-07-30
 
+- **[wrapper]** When the Windows font-metrics profile is requested, the launch feature set now matches a stock Chrome install rather than Playwright's test-harness defaults, which switch off a feature stock Chrome ships enabled. Merged into any `--enable-features` value you pass instead of adding a second flag. Python, JavaScript, and .NET.
 - **[wrapper]** **A second browser launched from the same Node process no longer inherits the first one's proxy identity.** When one process called `launch()` more than once with different proxies, every launch after the first reused the earlier connection to the exit-IP lookup service, because Node pools those connections by destination and the destination is the same for every proxy. The tunnel opened through the new proxy was built and then discarded, so later browsers were given the first proxy's exit IP, timezone and locale while their traffic correctly went out through their own proxy. Each launch now resolves its own exit IP. Single-launch processes were never affected. JavaScript only; Python and .NET open a fresh client per lookup.
 - **[wrapper]** Fix GeoIP and WebRTC exit-IP resolution dropping the credentials of an authenticated HTTP proxy given as a settings object — `{"server": ..., "username": ..., "password": ...}` — instead of a URL with inline credentials (#469). Only SOCKS proxies kept their credentials, so the HTTP lookup was rejected and fell back to resolving the proxy gateway's hostname. That returns a real address, so resolution appeared to succeed while reporting the gateway's timezone and locale rather than the session's actual exit IP, and `--fingerprint-webrtc-ip=auto` was dropped entirely. Both forms of the same proxy now resolve identically. Python, JavaScript, and .NET.
 - **[wrapper]** **`cloakbrowser info` no longer aborts partway through on a Windows console.** `cmd.exe` defaults to a code page that cannot represent the report's check mark and arrow, so the command stopped with an encoding error at the first one and the remaining diagnostics were never printed. Those marks now degrade to plain text when the console cannot take them, per character. UTF-8 consoles, including Linux, macOS and Windows Terminal, are unchanged. Python.

README.md

@@ -150,7 +150,7 @@ page.goto("https://example.com")
 
 ---
 
-## Latest: v0.5.2 — 71 source-level stealth patches (Chromium 150.0.7871.114.3 — all platforms)
+## Latest: v0.5.3 — 71 source-level stealth patches (Chromium 150.0.7871.114.3 — all platforms)
 
 - **CloakBrowser Pro** — the latest binary (Chromium 150.0.7871.114.3, 71 source-level patches) is available to Pro subscribers on **Linux, Windows, and macOS**. Set a `license_key` (`licenseKey` in JS) or the `CLOAKBROWSER_LICENSE_KEY` env var and the wrapper fetches the latest build automatically. See [CloakBrowser Pro](#cloakbrowser-pro)
 - **.NET 8 / C# client** — CloakBrowser now ships as a NuGet package (`CloakBrowser`), mirroring the Python and JS wrappers.

cloakbrowser/_version.py

@@ -1 +1 @@
-__version__ = "0.5.2"
+__version__ = "0.5.3"

dotnet/src/CloakBrowser/CloakBrowser.csproj

@@ -10,7 +10,7 @@
 
     <!-- NuGet packaging metadata -->
     <PackageId>CloakBrowser</PackageId>
-    <Version>0.5.2</Version>
+    <Version>0.5.3</Version>
     <Authors>CloakHQ</Authors>
     <Description>Stealth Chromium that passes every bot detection test. Drop-in Playwright (.NET) replacement with source-level fingerprint patches.</Description>
     <PackageLicenseExpression>MIT</PackageLicenseExpression>

dotnet/src/CloakBrowser/CloakVersion.cs

@@ -4,5 +4,5 @@ namespace CloakBrowser;
 public static class CloakVersion
 {
     /// <summary>The CloakBrowser .NET wrapper version.</summary>
-    public const string Version = "0.5.2";
+    public const string Version = "0.5.3";
 }

js/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "cloakbrowser",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "cloakbrowser",
-      "version": "0.5.2",
+      "version": "0.5.3",
       "license": "MIT",
       "dependencies": {
         "tar": "^7.0.0"

js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloakbrowser",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Stealth Chromium that passes every bot detection test. Drop-in Playwright/Puppeteer replacement with source-level fingerprint patches.",
   "type": "module",
   "main": "dist/index.js",