Vercel Labs pin sync — thorough (2026-05)

What changed upstream for the three Labs packages, and what landed in the OrchestKit skill bodies. Supersedes the auto-filed pin-only PR #1751 — this playground is the “why each bump matters” companion.

agent-browser

0.26.0 → 0.27.0 · released 2026-05-07
Skill body delta: 0.27 bullets added at top of “New in 2026-04 → 2026-05” section; commands & flags tables extended; safety hook table picks up init scripts and react fiber dumps warns.

json-render

0.18.0 → 0.19.0 · CHANGELOG.md HEAD (npm published)
Skill body delta: directives bullets added at top of “New in 2026-04 → 2026-05” header; ecosystem list extended with @json-render/directives and @json-render/devtools rows. Why it matters for AI-safe GenUI: directives are the escape hatch that lets AI emit computed values without forcing the catalog to widen to z.any().

portless

0.12.0 → 0.13.0 · released 2026-05-08
Skill body delta: frontmatter description bumped v0.10.xv0.13.x and reorganized to mention Tailscale + service install. Quick Start block gained a boot-persistence example. No breaking changes in 0.13.0.