Cloud August 28, 2026

August 28, 2026

Kobiton now uses date-based release versioning. Instead of version numbers such as 4.26S or 4.19.3, releases are identified by date. Build numbers use a format such as 202608.28, and release notes display the corresponding date as August 28, 2026.

Portal auto-logout (organization setting)

Highlights

  • Portal now supports an organization-level auto-logout policy configured in Org Settings. Admins can enable the toggle and pick a timeout from a duration dropdown.

  • Active sessions are respected. When the timeout hits, Portal defers the logout until all in-progress sessions complete.

  • On expiry, the session-expiry handler redirects to the login page with an expiry message and a deep-link back to the page the user was on.

  • The timeout is enforced in the Portal auth middleware, so it applies across surfaces that share the same session.

Appium AI enhancements

Highlights

  • Added support for Kobiton-hosted LLM at llm.kobiton.com.

  • Added support for the Anthropic LLM client.

  • Added override capabilities for vision coordinate mode.

  • Full-resolution screenshots are now preserved when sending to the LLM. Previously screenshots were downscaled before being sent.

  • Vision responses now support two common bbox conventions: Pixel and Normalized 0-1000.

  • LLM API keys inherited server-side are only applied when the endpoint is server-controlled (security tightening — prevents leaking a server-side key to a customer-controlled endpoint).

  • System prompt simplified for compatibility with newer LLMs.

  • LlmClient.Temperature removed; the client now supports model-specific request parameters instead.

Restricted ADB shell — allow list retired, deny list active

The restricted ADB shell used on public cloud and trial devices has been re-architected from an allow list into a deny list. This is a significant policy shift that follows the whitelist-expansion + safe-path work from the August 14 release.

Highlights

  • Access is now deny-based: commands are permitted unless explicitly rejected. Previously the whitelist blocked anything not explicitly permitted.

  • The rejection surface still covers the same abuse classes (interactive shell, pipes/redirection, shell metacharacters, .. traversal, oversized command lines, unsafe write targets).

  • Fixed adb shell toolbar in Portal manual sessions bypassing the restricted-shell protection on public Android devices. The toolbar now goes through the same sanitizer as the CLI.

Reports

  • New report: Parallel Sessions over time — tracks concurrent session counts across a time range.

API v2

  • The installed-applications API now returns the App Version ID alongside the application identifiers.

  • New Portal API to retrieve the gRPC URL for the caller’s session.

Kobiton CLI

  • New: CLI sessions are now supported on public cloud devices. Previously public cloud restricted CLI session starts.

  • Fixed the Direct Hub not propagating CLI failures for unsafe-directory pushes. These failures were silently hidden — they are now surfaced to the caller, matching the CLI’s error-propagation fix from earlier releases.

Bluetooth Keyboard for iOS 26 and unsupervised passcodes

  • Added Bluetooth Keyboard support on iOS 26 devices, including passcode entry on unsupervised devices. Previously the Bluetooth Bridge did not cover iOS 26 or unsupervised-device passcode entry.

deviceConnect

  • Fixed a network-capture burst deadlocking a session’s upstream writes and freezing screenshots.

  • Added a Xiaomi deviceidle whitelist so Xiaomi devices no longer enter deep idle during long automation runs.

Component versions

This release includes the following component versions:

  • deviceConnect 2608.26

  • gigacap 2608.25