docs: add 2026-02-23 release notes, update CanvasLab for WebGL/WebGL2, bump profiles to 145.0.7632.110

Author: MSTU0

ADVANCED_FEATURES.md

@@ -453,7 +453,7 @@ All commands live under the `BotBrowser` CDP domain. Send them through a CDP ses
 - [Per-Context Fingerprint](PER_CONTEXT_FINGERPRINT.md) - Independent fingerprint per BrowserContext
 - [Validation Results](VALIDATION.md) - Research and testing data
 - [Mirror](tools/mirror/) - Distributed privacy consistency verification
-- [CanvasLab](tools/canvaslab/) - Canvas forensics and tracking analysis tool
+- [CanvasLab](tools/canvaslab/) - Canvas 2D / WebGL / WebGL2 forensics and tracking analysis tool
 - [Examples](examples/) - Playwright, Puppeteer, bot-script integration
 - [Main README](README.md) - Project overview and quick start
 

CHANGELOG.md

@@ -3,6 +3,24 @@
 > **Research scope:** Entries in this changelog describe features evaluated in authorized labs and defensive benchmarking programs. Follow the [Legal Disclaimer](DISCLAIMER.md) and [Responsible Use Guidelines](RESPONSIBLE_USE.md). We work with security vendors to investigate any misuse, so report concerns to [support@botbrowser.io](mailto:support@botbrowser.io).
 
 
+## [2026-02-23]
+### Major
+- **Chromium Core → 145.0.7632.110**: Updated to Chrome 145 stable (145.0.7632.110). Web Platform consistency, rendering accuracy, and security patches stay aligned with upstream Chrome.
+
+### New
+- **CanvasLab WebGL/WebGL2 Recording**: CanvasLab now records WebGL and WebGL2 API calls in addition to Canvas 2D, enabling complete analysis of graphics-based fingerprint collection across all canvas contexts.
+
+- **Profile Compression**: Optimized fingerprint profile format to reduce file size by 25-30% without affecting privacy protection. Reduces disk I/O and speeds up profile loading, especially beneficial for large-scale deployments.
+
+### Improvements
+- **Per-Context Proxy Routing Completeness**: `botbrowserFlags` now supports the full proxy parameter set (`--proxy-server`, `--proxy-ip`, `--proxy-bypass-list`, `--proxy-bypass-rgx`) across both `Target.createBrowserContext` and `BotBrowser.setBrowserContextFlags` CDP paths.
+
+### Fixes
+- **SpeechSynthesis Voice Consistency**: `speechSynthesis.getVoices()` now returns profile-defined voices on headless Linux hosts and Docker containers, matching the target platform's voice list regardless of host TTS availability.
+
+- **Cross-Platform Renderer Stability**: Resolved a rare renderer crash when loading certain pages with cross-platform profile configurations on macOS.
+
+
 ## [2026-02-18]
 ### Major
 - **Chromium Core → 145.0.7632.76**: Updated to Chrome 145 stable. This ensures Web Platform consistency, rendering accuracy, and security patches stay aligned with upstream Chrome.

CLI_FLAGS.md

@@ -222,17 +222,17 @@ Accepts a JSON string containing bookmark data for startup.
 ### `--bot-canvas-record-file`
 Canvas forensics and tracking analysis.
 
-Records all Canvas 2D API calls to a JSONL file for forensic analysis and future replay capabilities.
+Records all Canvas 2D, WebGL, and WebGL2 API calls to a JSONL file for forensic analysis and replay.
 
 ```bash
 --bot-canvas-record-file="/tmp/canvaslab.jsonl"
 ```
 
 **Key Features:**
-- Complete Canvas 2D API call recording with full parameter serialization
+- Complete Canvas 2D, WebGL, and WebGL2 API call recording with full parameter serialization
 - Deterministic capture (noise variance disabled during recording)
 - JSONL format for easy parsing and analysis
-- HTML viewer included for interactive event inspection
+- HTML replay viewer with WebGL enum reverse-lookup and source location mapping
 
 Learn more: [CanvasLab Documentation](tools/canvaslab/)
 

PER_CONTEXT_FINGERPRINT.md

@@ -128,11 +128,12 @@ await page.goto('https://example.com');
 
 ### Via Target.createBrowserContext
 
-Pass fingerprint flags when creating the context:
+Pass fingerprint and proxy flags when creating the context:
 
 ```javascript
 const client = await browser.target().createCDPSession();
 
+// Fingerprint-only context
 const { browserContextId } = await client.send('Target.createBrowserContext', {
   botbrowserFlags: [
     '--bot-profile=/path/to/windows-profile.enc',
@@ -141,6 +142,17 @@ const { browserContextId } = await client.send('Target.createBrowserContext', {
   ]
 });
 
+// Context with proxy configured at creation time
+const { browserContextId: ctxWithProxy } = await client.send('Target.createBrowserContext', {
+  botbrowserFlags: [
+    '--bot-profile=/path/to/profile.enc',
+    '--proxy-server=socks5://user:pass@proxy.example.com:1080',
+    '--proxy-ip=203.0.113.1',
+    '--proxy-bypass-list=localhost;127.0.0.1',
+    '--proxy-bypass-rgx=\\.example\\.com$'
+  ]
+});
+
 const { targetId } = await client.send('Target.createTarget', {
   url: 'about:blank',
   browserContextId
@@ -242,11 +254,12 @@ await client1.send('BotBrowser.setBrowserContextFlags', {
     '--bot-profile=/path/to/profile.enc',
     '--proxy-server=socks5://user:pass@us-proxy.example.com:1080',
     '--proxy-ip=203.0.113.1',
+    '--proxy-bypass-list=localhost;127.0.0.1',
     '--bot-config-timezone=America/Chicago'
   ]
 });
 
-// Context 2: UK proxy via botbrowserFlags
+// Context 2: UK proxy via botbrowserFlags (with regex bypass)
 const ctx2 = await browser.createBrowserContext();
 const page2 = await ctx2.newPage();
 const client2 = await page2.createCDPSession();
@@ -256,6 +269,7 @@ await client2.send('BotBrowser.setBrowserContextFlags', {
     '--bot-profile=/path/to/profile.enc',
     '--proxy-server=socks5://user:pass@uk-proxy.example.com:1080',
     '--proxy-ip=198.51.100.1',
+    '--proxy-bypass-rgx=\\.static\\.example\\.com$',
     '--bot-config-timezone=Europe/London'
   ]
 });
@@ -267,7 +281,7 @@ await Promise.all([
 ]);
 ```
 
-You can now configure proxy directly in `botbrowserFlags` without using `createBrowserContext({ proxyServer })`. This provides unified configuration for proxy and other per-context settings in a single call.
+Configure proxy directly in `botbrowserFlags` for unified proxy and fingerprint settings in a single call. Supported proxy flags: `--proxy-server`, `--proxy-ip`, `--proxy-bypass-list`, `--proxy-bypass-rgx`.
 
 > **Tip:** Need to switch proxies at runtime without restarting a context? See [Dynamic Proxy Switching (ENT Tier2)](ADVANCED_FEATURES.md#dynamic-proxy-switching) in Advanced Features.
 

README.md

@@ -161,7 +161,7 @@ Examples: [Playwright](examples/playwright/) • [Puppeteer](examples/puppeteer/
 | Console message suppression | [Behavior Toggles](CLI_FLAGS.md#behavior--protection-toggles) |
 | Headless / GUI parity | [Headless Compatibility](ADVANCED_FEATURES.md#headless-incognito-compatibility) |
 | Mirror: distributed privacy consistency | [Mirror Documentation](tools/mirror/) |
-| CanvasLab: Canvas 2D API recorder | [--bot-canvas-record-file](CLI_FLAGS.md#--bot-canvas-record-file) |
+| CanvasLab: Canvas 2D / WebGL / WebGL2 recorder | [--bot-canvas-record-file](CLI_FLAGS.md#--bot-canvas-record-file) |
 
 ### Session & Behavior