## zaproxy/zap-extensions — zest-v48.11.0…zest-v48.12.0

_248+ commits._

### Features
- **Release add-on(s)** (0ec339f)
- **Release add-on(s)** (e8fb3f1)
- **af: Add client auth handling for standalone scripts** (f37cec0)
- **Release add-on(s)** (c10b3c7)
- **Add maven properties for published add-ons** (43b542d)
- **Release add-on(s)** (6c63788)
- **graphql: Add Circular Type Reference Detection** (ee80f20)
- **Add initial AGENTS.md** (2e66967)
- **llm: Support multiple model providers** (58caab7)
- **Release add-on(s)** (e812791)
- **Release add-on(s)** (fb5f0c5)
- **client: Support 3rd party browser exts** (3df054d)
- **automation: Add relocation status panel** (30d631a)
- **Merge pull request #7072 from thc202/spider/add-msg** (0aea990)
- **pscanrules: Adjust build so ANTLR doesn't balloon the add-on size** (fe6fc4b)
- **Release add-on(s)** (1451434)
- **openapi: Add Swagger Secret Detector Script** (c65721d)
- **ascanrulesBeta: add unit tests for GitMetadata** (e129d04)
- **llm: Add chat panel** (786d272)

### Fixes
- **Merge pull request #7132 from psiinon/zest/record-fix** (bbb9bf8)
- **zest: fixed client recording bug** (c3e04d6)
- **Merge pull request #7119 from kingthorin/fix/graphql-tech-detection-handler-reset** (12411de)
- **Fix Tech Detection handler reset bug in GraphQL fingerprinter** (33e1144)
- **Merge pull request #7097 from giveen/llm-fix** (9be80f2)
- **Fix deprecated URL(String) usage in LLM add-on** (5167a3a)
- **authhelper: Fix NPE in auth diags** (79467c6)

### Backend
- **Merge pull request #7133 from zapbot/release** (c1ea737)
- **Merge pull request #7131 from zapbot/bump-version** (26263e1)
- **Prepare next dev iteration(s)** (89ed4f4)
- **Merge pull request #7130 from zapbot/webdriver-update** (2c2be83)
- **Webdriver Update** (d80da82)
- **Merge pull request #7122 from kingthorin/try-csp-tt** (0fb2806)
- **Merge pull request #7117 from kingthorin/wapp-test-fixes** (860a547)
- **wappalyzer: Remove Holder interface** (df2d3f0)
- **pscanrules: Update the CSP rule to use htmlunit-csp** (7bbf5d4)
- **Merge pull request #7129 from thc202/quickstart/af-npe** (b38f0dc)
- **quickstart: address NPE in headless mode** (4e60aba)
- **Merge pull request #7128 from zapbot/crowdin-update** (70d7bdf)
- **Update localized resources** (878c794)
- **Merge pull request #7126 from thc202/spider/af/npe** (74e0ab5)
- **spider: address exception in the AF job** (aa63e17)
- **Merge pull request #7125 from zapbot/bump-version** (ab0f8b3)
- **Prepare next dev iteration(s)** (51f1b9a)
- **Merge pull request #7124 from zapbot/release** (7a5af5c)
- **Merge pull request #7123 from zapbot/bump-version** (1ae7f16)
- **Prepare next dev iteration(s)** (56fdf76)
- **Merge pull request #7114 from zapbot/webdriver-update** (7050cf3)
- **Webdriver Update** (199f68d)
- **Merge pull request #7120 from zaproxy/dependabot/gradle/gradle-21a7e92b13** (7a19853)
- **Merge pull request #7115 from zapbot/crowdin-update** (d920e51)
- **Update localized resources** (4ed4262)
- **Merge pull request #7086 from kingthorin/auth-client-scripts** (1762ae4)
- **Merge pull request #7077 from kingthorin/retire-data-load** (6f69cbc)
- **Merge pull request #7112 from zapbot/bump-version** (bf2a8cb)
- **Prepare next dev iteration(s)** (c5878df)
- **retire: Load data once** (7c81e50)
- **Merge pull request #7104 from zapbot/webdriver-update** (443282f)
- **Webdriver Update** (ba3192c)
- **Merge pull request #7110 from thc202/graaljs/engines-closed** (8ed84cf)
- **graaljs: document engine lifecycle** (0095700)
- **Merge pull request #7107 from zaproxy/dependabot/gradle/gradle-1fb170d0a8** (239af83)
- **Merge pull request #7095 from psiinon/llm/multi-providers-antiinject** (630d6b4)
- **Merge pull request #7109 from thc202/openapi/enable-scan-rule** (899ff6b)
- **openapi: reenable scan rule** (b7f216c)
- **llm: Prompt injection countermeasures** (bb97618)
- **Merge pull request #7108 from zapbot/bump-version** (27a8b32)
- **Prepare next dev iteration(s)** (e9fea3a)
- **Merge pull request #7106 from zapbot/release** (f18a402)
- **Merge pull request #7094 from psiinon/agents.md** (e7d19f4)
- **Merge pull request #7105 from zapbot/techs-update** (903cc9c)
- **Tech Detection Update 2026-02-03** (f0fa7ec)
- **Merge pull request #7103 from thc202/maven** (7820227)
- **Merge pull request #7102 from zapbot/bump-version** (891a972)
- **Prepare next dev iteration(s)** (142a6e8)
- **Merge pull request #7101 from zapbot/release** (e2581a5)
- **Merge pull request #7100 from psiinon/webdrivers-ch-rollback** (6f76b4f)
- **webdrivers: Roll back ChromeDriver to 144.0.7559.109.** (9d4b7d0)
- **Merge pull request #7099 from zapbot/crowdin-update** (e94305a)
- **Merge pull request #7098 from zapbot/retirejs-update** (2feaeb2)
- **Update localized resources** (9706b10)
- **retire.js Update 2026-02-02** (20a3248)
- **Merge pull request #6413 from ricekot/graphql/cycle-detection** (2c1a9d7)
- **Merge pull request #7093 from psiinon/client/order** (a2bc655)
- **client: set extension order** (a663a3c)
- **Merge pull request #7064 from psiinon/llm/multi-providers** (0bc3dc8)
- **Merge pull request #7073 from ricekot/automation/moved-tab-panel** (834c512)
- **Merge pull request #7092 from zapbot/bump-version** (f407c55)
- **Prepare next dev iteration(s)** (975484d)
- **Merge pull request #7091 from zapbot/release** (65a25b4)
- **Merge pull request #7090 from zapbot/crowdin-update** (f93cbb7)
- **Merge pull request #7088 from thc202/graaljs/close-engine** (3db547c)
- **Merge pull request #7089 from zapbot/bump-version** (5646201)
- **Update localized resources** (3506509)
- **Prepare next dev iteration(s)** (305d95b)
- **Merge pull request #7087 from zapbot/webdriver-update** (afb9213)
- **graaljs: close engine after use** (f15630f)
- **Webdriver Update** (2d9408b)
- **Merge pull request #7085 from psiinon/authhelper/diags-npe** (4dd9b9b)
- **Merge pull request #7084 from zapbot/bump-version** (4185db3)
- **Prepare next dev iteration(s)** (2a6ec40)
- **Merge pull request #7083 from zapbot/release** (f9abfe8)
- **Merge pull request #7081 from zapbot/bump-version** (4beadd3)
- **Merge pull request #7082 from psiinon/openapi/js-leak** (444e02e)
- **openapi: disable script due to memory leak** (9efedb4)
- **Prepare next dev iteration(s)** (3757587)
- **Merge pull request #7080 from zapbot/webdriver-update** (3a6eb54)
- **Webdriver Update** (9246043)
- **Merge pull request #7078 from zaproxy/dependabot/gradle/gradle-b8378db20f** (ab0b650)
- **Update changelogs, ignore Gradle Wrapper** (ab020c2)
- **Merge pull request #7076 from thc202/spider/no-ref** (9fc88f1)
- **spider: handle persistence errors in automation** (eccef13)
- **Merge pull request #7071 from psiinon/client/pluggable** (245a92d)
- **Update addOns/client/src/main/java/org/zaproxy/addon/client/ClientIntegrationAPI.java** (35000e0)
- **Merge pull request #7075 from thc202/insights/no-prompt** (b884b26)
- **insights: do not prompt on exit when headless** (820bf3b)
- **Merge pull request #7074 from zapbot/crowdin-update** (689c8f9)
- **Update localized resources** (be19e63)
- **spider: use own resource message** (0e61048)
- **Merge pull request #7070 from zapbot/scan-policies-updt** (5082b7f)
- **Update scan policies based on Tags** (653a5a2)
- **Merge pull request #7069 from kingthorin/pscanrules-antlr-reduce** (cfdab48)
- **Merge pull request #7067 from zapbot/crowdin-update** (57975ff)
- **Merge pull request #7068 from zapbot/bump-version** (c6b02c5)
- **Prepare next dev iteration(s)** (d2a9a09)
- **Merge pull request #7066 from zapbot/webdriver-update** (c224a50)
- **Update localized resources** (2c51d37)
- **Webdriver Update** (55d977e)
- **Merge pull request #7065 from zapbot/bump-version** (04e9603)
- **Prepare next dev iteration(s)** (e79aca2)
- **Merge pull request #7063 from zapbot/release** (ef38517)
- **Merge pull request #7062 from zapbot/bump-version** (3a8fc4e)
- **Prepare next dev iteration(s)** (7af1b18)
- **Merge pull request #7061 from zapbot/webdriver-update** (e13151d)
- **Webdriver Update** (6924dcc)
- **Merge pull request #6853 from ricekot/ascanrulesAlpha/swagger-secret-detector-script** (1ed7da6)
- **Merge pull request #7060 from zaproxy/dependabot/gradle/gradle-45f3a18ec1** (c86d3b9)
- **Update changelogs** (6dec3d9)
- **Merge pull request #7036 from psiinon/llm/chat2** (b53a59c)
- **Merge pull request #7056 from zapbot/crowdin-update** (2d17a93)
- **Update localized resources** (29d7f57)
- **Merge pull request #7054 from thc202/replacer/missing-msg** (c5a27e4)
- **Merge pull request #7053 from zaproxy/dependabot/gradle/gradle-a2deb8eef0** (aefe186)
- **replacer: correct resource message key** (d859e1d)
- **Merge pull request #7052 from zapbot/bump-version** (a680ca3)
- **Prepare next dev iteration(s)** (2da5ff7)

### Chore
- **build(deps): bump the gradle group with 6 updates** (f977471)
- **build(deps): bump the gradle group with 4 updates** (954c469)
- **build(deps): bump the gradle group with 5 updates** (ef23e0f)
- **build(deps): bump the gradle group with 6 updates** (9d017ea)
- **build(deps): bump the gradle group with 2 updates** (977d2ee)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/zaproxy/zap-extensions?utm_source=github-action)._