Skip to content

daytona

v0.187.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 1mo Containers & Orchestration
βœ“ No known CVEs patched
Read the diff β†’ Tool health β†’ What is this tool? β†’

✓ No known CVEs patched in this version

Topics

agentic-workflow ai ai-agents ai-runtime ai-sandboxes code-execution
+2 more
code-interpreter developer-tools

Affected surfaces

auth rbac breaking_upgrade

ReleasePort's take

Moderate signal
editorial:auto 1mo

API endpoints for push access now require write permission; the root API redirects to /dashboard.

Why it matters: Endpoints GET /object-storage/push-access and GET /docker-registry/registry-push-access enforce write permission, affecting clients lacking that scope. Root requests are redirected to /dashboard, altering request routing logic.

Summary

AI summary

Updates ❀️ Thank You, πŸš€ Features, and 🩹 Fixes across a mixed release.

Changes in this release

Breaking High

api endpoints now require write permission for push access

api endpoints now require write permission for push access

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Feature Low

dashboard limits classes tabs

dashboard limits classes tabs

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Feature Low

proxy exposes debug metrics server

proxy exposes debug metrics server

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Dependency Low

sdk-go bumped to v0.187.0

sdk-go bumped to v0.187.0

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Bugfix Medium

api redirects root requests to /dashboard

api redirects root requests to /dashboard

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Bugfix Medium

cli drops redundant BucketExists probes in minio client

cli drops redundant BucketExists probes in minio client

Source: llm_adapter@2026-06-11

Confidence: high

 β€”
Bugfix Medium

api requires write permission for temporary push access endpoints

api requires write permission for temporary push access endpoints

Source: llm_adapter@2026-06-11

Confidence: low

 β€”
Full changelog

0.187.0 (2026-06-11)

πŸš€ Features

  • dashboard: limits classes tabs (#4978)
  • docs: add android and linked sandboxes (#4614)
  • proxy: expose debug metrics server (#5012)

🩹 Fixes

  • ⚠️ api: require a write permission for temporary push access endpoints (#4971)
  • api: redirect root requests to /dashboard (#4977)
  • cli: drop redundant BucketExists probes in minio client (#5013, #5014)

Chores

  • sync go.sum for v0.186.0 (#4975)
  • split publish jobs per project (#5011)
  • sdk-go: bump to v0.187.0 (#5015)

⚠️ Breaking Changes

  • api: GET /object-storage/push-access and GET /docker-registry/registry-push-access now require the caller to hold either write:snapshots or write:sandboxes (previously no specific permission was required). Migration: grant write: snapshots or write:sandboxes to API keys that push snapshots or build declarative images with a local context.

❀️ Thank You

  • Ante ProjiΔ‡ @aprojic
  • Juraj Ε tefaniΔ‡ @stefanicjuraj
  • Nikola Radisic
  • Robert Pavlinic @rpavlini
  • Toma Puljak @Tpuljak

Breaking Changes

  • `GET /object-storage/push-access` and `GET /docker-registry/registry-push-access` now require either `write:snapshots` or `write:sandboxes` permission (previously none).
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track daytona

Get notified when new releases ship.

Sign up free

About daytona

Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code

All releases β†’

Related context

Earlier breaking changes

  • v0.180.0 /api/workspace endpoints are removed; migrate to /api/sandbox equivalents.
  • v0.180.0 GET /api/sandbox now returns paginated response; deprecates /api/sandbox/paginated.

Beta — feedback welcome: [email protected]