Releases: daytonaio/daytona
Releases · daytonaio/daytona
v0.165.0
0.165.0 (2026-04-14)
🚀 Features
- api: add sandbox fork and snapshot endpoints and jobs (#4452)
- docs: expand volume creation and mounting (#4357)
- guides: AG2 guide with DaytonaCodeExecutor (#4274)
🩹 Fixes
- api: skip JSON body parsing for non-JSON content types (#4431)
- api: remove early return in resize sandbox job success handler (#4430)
- api: parse resize job payload (#4443)
- api: suppress logging for TypeORM EntityNotFoundError in resource access guards (#4432)
- api: snapshot propagation randomness (#4427)
- api: add safe string validator for user-facing display fields (#4342)
- api,cli: serialize nullable snapshot fields as null instead of omitting them (#4434)
- daemon: rotate and compress daemon logs via lumberjack to cap disk usage (#4440)
- docs: update oss deployment note (#4441)
- sdk: default conn pool 100 to 250 (#4409)
Chores
- sync go.sum for v0.164.0 (#4429)
- add batch-dependabot claude agent (#4442)
- rename dependencies from @daytonaio to @daytona (#4411)
- scaffold e2e PR check test (#4381)
- daytona-e2e release fix (d93484546)
- deps: bump flatted from 3.3.3 to 3.4.2 (e8bad9c4a)
- deps: bump h3 from 1.15.8 to 1.15.9 (73f03cf31)
- deps: bump smol-toml from 1.6.0 to 1.6.1 (313231c92)
- deps: bump yaml from 2.8.1 to 2.8.3 (22c1cb24d)
- deps: bump astro from 5.17.3 to 5.18.1 (751413cf0)
- deps: bump nodemailer from 7.0.11 to 8.0.4 (1486eb87a)
- deps: bump node-forge from 1.3.2 to 1.4.0 (78304a2ce)
- deps: bump brace-expansion from 1.1.12 to 1.1.13 (7e2289b7a)
- deps: bump golang.org/x/image in /libs/computer-use (8bc9501ee)
- deps: bump github.com/go-git/go-git/v5 in /apps/daemon (e829f1c06)
- deps: bump aiohttp from 3.13.3 to 3.13.4 (ebd711893)
- deps: bump github.com/go-jose/go-jose/v4 in /apps/proxy (6dab74ed7)
- deps: bump github.com/go-jose/go-jose/v4 in /apps/cli (fa35d74ca)
- deps: bump github.com/distribution/distribution/v3 (869bf6802)
- deps: bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream (fe81afdf1)
- deps: bump github.com/containerd/containerd/v2 in /apps/runner (daf68c288)
- deps: bump github.com/moby/buildkit in /apps/runner (67e118d22)
- deps: bump github.com/aws/aws-sdk-go-v2/service/s3 (4a898481a)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp (7656b8e7b)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (e1fd2c418)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (020b39e96)
- deps: bump go.opentelemetry.io/otel/sdk in /apps/snapshot-manager (9dfada98c)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (4fac9f433)
- deps: bump go.opentelemetry.io/otel/sdk in /libs/common-go (8b5497fc8)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (102a37b2c)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (08099fd40)
- deps: bump go.opentelemetry.io/otel/sdk in /libs/sdk-go (0ebd9642c)
- deps: bump axios from 1.13.2 to 1.14.0 (7a426df96)
- deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (579344dcc)
- deps-dev: bump json from 2.18.0 to 2.19.2 (94f83a555)
- deps-dev: bump pygments from 2.19.2 to 2.20.0 (dafb758b2)
- deps-dev: bump addressable from 2.8.8 to 2.9.0 (2d3410be3)
- devcontainer: bump go to v1.25.5 (834da9138)
- sdk-go: bump to v0.165.0 (#4459)
- security: pin all GitHub Actions to immutable SHA refs (#4408)
- security: add Dependabot config for GitHub Actions updates (#4447)
❤️ Thank You
- Ante Projić @aprojic
- Bruno Grbavac @brunogrbavac
- Fabjan Vučina
- Goran Draganić @gdraganic
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Mirko Džaja @MDzaja
- Mislav Ivanda @mislavivanda
- Toma Puljak @Tpuljak
v0.164.0
0.164.0 (2026-04-10)
🩹 Fixes
- api: sanitize org name in invitation emails to prevent URL auto-linking (#4341)
- api: return 503 when svix is not configured (#4424)
- api: sandbox runner join query uuid (#4425)
- api: handle transient errors in jwt strategy (#4423)
- api: truncate error message audit logs jobs (#4426)
- daemon: write session exit code after output labelers drain (#4422)
- proxy: remove auth header after successful validation (#4419)
- sdk: conn pool saturation warning (#4386)
- toolbox: add RFC 5987 encoding for Unicode filenames in multipart downloads (#4331)
Refactor
- auth guards (#4149)
Chores
- sync go.sum for v0.163.0 (#4407)
- ci: invalidate Nx build cache when set-version changes package version (#4410)
- runner: conflicting go dependencies in Dockerfile (#4420)
- sdk-go: bump to v0.164.0 (#4428)
❤️ Thank You
- Bruno Grbavac @brunogrbavac
- Fabjan Vučina
- Ivan Dagelic @idagelic
- Mirko Džaja @MDzaja
- Toma Puljak @Tpuljak
- Zim
v0.163.0
0.163.0 (2026-04-09)
🚀 Features
- api,dashboard: include actor api key in audit log (#3695)
- daemon: emit daytona_snapshot as OTel resource attribute (#4400)
- daemon: custom OTel resource labels (#4402)
- daemon,sdk-python,sdk-typescript: standardize typed errors (#4228)
- docs: add agent skills reference (#4403)
🩹 Fixes
- api: improve api responses on unauthorized (#4344)
Refactor
- api: custom snapshot repository (#4284)
Chores
- sync go.sum for v0.162.0 (#4385)
- ci: ensure go.work.sum generated in docker build job (#4388)
- sdk-go: bump to v0.163.0 (#4405)
- security: add permissions blocks and checkout hardening (#4382)
❤️ Thank You
- Akhilesh Shastri @as-flow
- Ante Projić @aprojic
- Fabjan Vučina
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Muhammad Hashmi @mu-hashmi
- Toma Puljak @Tpuljak
v0.162.0
0.162.0 (2026-04-08)
🚀 Features
🩹 Fixes
- computer-use: fix scroll action blocking indefinitely (#4353)
- daemon: wsClient write mutex (#4178)
- runner: preserve sparse files during rsync copy to prevent quota overflow (#4368)
- sdk-python: fix async download_files multipart header loss across chunk boundaries (#4365)
- sdk-python,sdk-ruby: resolve O(n²) GIL-blocking bug in demux_log (#4366)
Chores
- sync go.sum for v0.161.0 (#4348)
- add zip to CI system dependencies for Java Maven Central publish (#4367)
- add nix and AGENTS.md (#4373)
- configure nx cloud for remote caching (#4374)
- api,dashboard,docs,opencode-plugin,sdk-typescript: rename all TypeScript packages from @daytonaio/* to @daytona/* with dual-publish (#4340)
- ci: scope secrets to job/step level to reduce blast radius (#4334)
- sdk-go: bump to v0.162.0 (#4383)
❤️ Thank You
- Ante Projić @aprojic
- Bruno Grbavac @brunogrbavac
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Lovre Pešut @rovle
- Mirko Džaja @MDzaja
- Toma Puljak @Tpuljak
v0.161.0
0.161.0 (2026-04-03)
🚀 Features
🩹 Fixes
- dashboard: cpu utilization in cores (#4335)
- docs: add proxy origin handling and header requests filtering (#4343)
- sdk: connection pool size config (#4336)
Chores
- sync go.sum for v0.160.0 (#4318)
- Mastra guide dependencies bump (#4319)
- docs: update ruby sdk readme (#4300)
- sdk-go: bump to v0.161.0 (#4346)
❤️ Thank You
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Mirko Džaja @MDzaja
- Mislav Ivanda @mislavivanda
- Toma Puljak @Tpuljak
v0.160.0
0.160.0 (2026-04-02)
🚀 Features
- dashboard: migrate create dialogs to sheets (#4252)
- docs: add custom 404 page with suggestions (#4231)
- docs: redirect sitemap.xml to sitemap-index.xml (#4289)
- docs: add sandbox lifecycle state, descriptions, and references (#4262)
- docs: add auto-stop behavior and update lifecycle state references (#4310)
- proxy: reduce invalid auth cache TTL (#4291)
- sdk: exponential backoff on create (#4288)
🩹 Fixes
- api: reset backup state on v2 sandbox start/create/recover (#4250)
- api: undefined reading id on snapshot remove event (#4305)
- api: uuid parsing 500 on snapshot actions (#4306)
- ci: remediate template injection in workflow_dispatch workflows (#4299)
- daemon: source session commands from file (#4235)
- dashboard: make only one-off invoices voidable (15abf50ed)
- dashboard: remove pay handler check (874e80370)
- docs: update support contact (#4294)
- docs: remove toolbox actions (#4304)
- runner: image name from resource id in remove snapshot (#4290)
- sdk-python,sdk-typescript,sdk-ruby: use printf instead of echo for env var decoding (#4297)
- ssh-gateway: remove sensitive tokens from log output (#4302)
Refactor
- api: sandbox state in progress response (#4307)
Chores
- sync go.sum for v0.159.0 (#4287)
- remove unused tailwind CQS package (#4285)
- sdk-go: bump to v0.160.0 (#4317)
❤️ Thank You
v0.159.0
0.159.0 (2026-03-31)
🚀 Features
- api: decommissioned snapshot runner cleanup (#4272)
- docs: add openapi specification references (#3546)
- sdk-go: signed GetPreviewLink in Go SDK (#4211)
🩹 Fixes
- api: reorder runner controller routes (#4263)
- api: update org invitation status (#4265)
- api: handle error in sandbox created event (#4269)
- api: updateWhere on sandbox sync error (#4268)
- api: preview access redis key (#4279)
- api: v2 archive race conditions (#4270)
- api: failed auth rate limit block (#4282)
- api-client-python: serialize datetime values (#4208)
- dashboard: make failed payment invoices payable (#4259)
- dashboard: centralize privacy consent state & sync (#4075)
- docs: update billing and limits (#4015)
Chores
- sync go.sum for v0.158.1 (#4254)
- harden GitHub Actions workflows (#4249)
- add supply chain package age quarantine (#4283)
- docs: update python sdk readme (#4261)
- sdk,api-client,toolbox-api-client: set custom User-Agent headers and standardize sdk-* source names (#4266)
- sdk-go: bump to v0.159.0 (#4286)
- sdk-python: add isort known_first_party config to fix local/CI import-order parity (#4255)
❤️ Thank You
- Ante Projić @aprojic
- dagecko
- Fabjan Vučina
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Mirko Džaja @MDzaja
- Muhammad Hashmi @mu-hashmi
- Ravitez Dondeti @dondetir
- Robert Pavlinic @rpavlini
- Saphal @saphalpdyl
- Toma Puljak @Tpuljak
v0.158.1
v0.158.0
0.158.0 (2026-03-27)
🚀 Features
- docs: add force stop sandbox (#4223)
🩹 Fixes
- api: prefer last entrypoint on build (#4239)
- api: allow sandbox actions while backup is in progress (#4197)
- api: allow longer timeout for BUILD_SNAPSHOT and PULL_SNAPSHOT jobs (#4237)
- api: handler for snapshot size (#4212)
- api: handle sandbox operation conflict (#4241)
- daemon: return empty search_files results (#4207)
- docs: add resize sandboxes experimental note (#4234)
- sdk-python: add missing _request_timeout to process.exec() (#4236)
Refactor
- dashboard: remaining entities to react query (#4190)
Chores
- sync go.sum for v0.157.0 (#4221)
- dev: add kill-ports.sh script for killing dangling app runs (#4240)
- docs: RL guides structure update (#4219)
- sdk-go: bump to v0.158.0 (#4242)
❤️ Thank You
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Lovre Pešut @rovle
- Mislav Ivanda @mislavivanda
- Muhammad Hashmi @mu-hashmi
- Robert Pavlinic @rpavlini
- Toma Puljak @Tpuljak
v0.157.0
0.157.0 (2026-03-26)
🚀 Features
- api: clear failed build cache (#4160)
- api,runner,sdk: force stop sandbox (#4172)
- guides: OpenEnv FinQA guide with single-episode demo and GRPO training (#3979)
- sdk-typescript,sdk-python,sdk-ruby: load only DAYTONA_ env vars from dotenv files without polluting env (#4186)
🩹 Fixes
- api: prevent stale sandbox writes (#4146)
- api: migration drift (#3961)
- api: declarative build staleness cron (#4159)
- api: avoid in-place snapshot mutation in sandbox state sync (#4187)
- daemon: close sync session stdin and track async holder process (#4107)
- otel: bump otel SDKs to v1.42.0 (#4213)
- runner: pass inter-sandbox network enabled configuration (#4195)
- sdk-python: retry request on stale connection (#4214)
- sdk-python: surface upload_files error details (#4048, #4206)
Refactor
- sdk-python: optimize Python SDK import time with lazy imports (#4192)
Chores
- sync go.sum for v0.156.0 (#4194)
- docs: update typescript sdk readme and package metadata (#4185)
- docs: update readme (#4176)
- sdk-go: bump to v0.157.0 (#4220)
❤️ Thank You
- Abi @LarytheLord
- Fabjan Vučina
- Ivan Dagelic @idagelic
- Juraj Štefanić @stefanicjuraj
- Lovre Pešut @rovle
- Mirko Džaja @MDzaja
- Muhammad Hashmi @mu-hashmi
- Toma Puljak @Tpuljak