chore(main): release cua-driver-rs 0.13.0

[cua-release-bot]

🤖 I have created a release beep boop

0.13.0 (2026-07-28)

⚠ BREAKING CHANGES

• cua-driver: simplify permissions and add session identity (#2616)
• cua-driver: ship semantic cursor themes

Features

• cua-driver: add local consent UI and complete Wayland certification (#2597) (e9852cb)
• cua-driver: browser_type can replace a field's content, not only append (#2624) (eb0b5a0)
• cua-driver: centralize protected resource grants per runtime (#2577) (dfb3781)
• cua-driver: enforce consequential and privileged actions (#2585) (df368a7)
• cua-driver: enforce desktop input grants (#2580) (2b5e938)
• cua-driver: enforce exact file transfer grants (#2581) (3f74894)
• cua-driver: enforce private observation grants (#2579) (6052381)
• cua-driver: expose trusted protected-consent hosts (#2578) (fd4069e)
• cua-driver: implement SDK-owned runtime RFC (#2561) (1760f25)
• cua-driver: make permission adapter inventory mode-aware (#2576) (83a2f6f)
• cua-driver: make SDK-owned runtime the default (#2545) (a62e821)
• cua-driver: ship semantic cursor themes (e06e922)
• cua-driver: ship vector semantic cursor themes (#2603) (e2c52d5)
• cua-driver: simplify permissions and add session identity (#2616) (8dac16e)
• cua-driver: support multiple direct runtimes per process (#2575) (5f786b0)

Bug Fixes

• cua-driver: accept letter keys on Windows (#2551) (506a4ed)
• cua-driver: activate Chromium checkboxes safely on Linux (#2633) (1f16242)
• cua-driver: avoid leaking XInput masters without uinput (36e8d5a)
• cua-driver: carry full 32-bit snapshot generation in element tokens (#2608) (fcac692)
• cua-driver: clarify foreground escalation guidance (b4f6ffc)
• cua-driver: declare WinRects support for GNOME Shell 49 and 50 (#2565) (776dadd)
• cua-driver: keep press_key modifiers on native Wayland (#2573) (669c917)
• cua-driver: pick the AT-SPI action by name, not by position (#2574) (ee77164)
• cua-driver: prefer foreground delivery in refusal guidance (#2623) (6d97684)
• cua-driver: preserve Windows autostart path quoting (cf07c2c)
• cua-driver: recover invalid Windows bounds (#2601) (0026845)
• cua-driver: redial Chrome after native consent (#2635) (fdebc59)
• cua-driver: refuse disabled macOS AX actions (#2637) (8f9c2df)
• cua-driver: reject browser-origin MCP HTTP requests (#2378) (fccac48)
• cua-driver: restore macOS background pixel clicks (1fbcacf)
• cua-driver: restore v0.12.5 and v0.12.6 installs (#2598) (fc17069)
• cua-driver: verify set_value writes with an AXValue read-back (#2621) (e143b95)

---

This PR was generated with Release Please. See documentation.

[injaneity]

sorry clanker got loose

approval withdrawn at reviewer request

[f-trycua]

Holding this release PR intentionally. Do not merge or publish 0.13.0 from this PR while the current correctness fixes and contributor-attribution follow-ups land independently on main. The PR may continue to receive Release Please updates, but it should remain draft until a future release is explicitly authorized.

[cua-release-bot]

🤖 Created releases:

• cua-driver-rs-v0.13.0

🌻

[f-trycua]

This release was published despite the explicit hold above and is retracted.

Current verified remediation state:

• the GitHub release and cua-driver-rs-v0.13.0 tag have been removed
• all seven npm 0.13.0 packages have been unpublished and their latest tags restored to 0.12.5
• the source version remains reserved at 0.13.0 because published registry versions cannot be reused
• docs(cua-driver): mark 0.13.0 as retracted #2657 marks the release as retracted and unsupported
• chore(main): release cua-driver-rs 0.13.1 #2643 is the frozen draft 0.13.1 successor and must not be merged or published without explicit authorization
• PyPI cua-driver 0.13.0 cleanup is still pending owner reauthentication

Do not restore or republish any 0.13.0 artifacts.

[f-trycua]

Superseded by the public Cua Driver 0.13.1 release: https://github.com/trycua/cua/releases/tag/cua-driver-rs-v0.13.1

The 0.13.1 release carries the full 0.13.0 change set and contributor attribution; it is the supported release artifact and registry version.