This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
ReleasePort's take
Moderate signalGET /api/sandbox now returns a paginated response and deprecates the separate /api/sandbox/paginated endpoint. All /api/workspace endpoints have been removed; migrate to their /api/sandbox equivalents.
Why it matters: Affects API clients using /api/sandbox or /api/workspace; migration required before next release cycle.
Summary
AI summaryUpdates Chores, π©Ή Fixes, and β€οΈ Thank You across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | Medium |
GET /api/sandbox now returns paginated response; deprecates /api/sandbox/paginated. GET /api/sandbox now returns paginated response; deprecates /api/sandbox/paginated. Source: llm_adapter@2026-05-24 Confidence: high |
β |
| Breaking | Medium |
/api/workspace endpoints are removed; migrate to /api/sandbox equivalents. /api/workspace endpoints are removed; migrate to /api/sandbox equivalents. Source: llm_adapter@2026-05-24 Confidence: high |
β |
| Feature | Medium |
Adds sandbox list with cursor pagination. Adds sandbox list with cursor pagination. Source: llm_adapter@2026-05-24 Confidence: low |
β |
| Dependency | Medium |
Adds node-forge as explicit dependency for API. Adds node-forge as explicit dependency for API. Source: llm_adapter@2026-05-24 Confidence: low |
β |
| Bugfix | Medium |
Adds Jest support for uuid v14 ESMβonly package in API. Adds Jest support for uuid v14 ESMβonly package in API. Source: llm_adapter@2026-05-24 Confidence: low |
β |
| Bugfix | Medium |
Anchors sync HTTP client finalizer on the SDKβPython client itself. Anchors sync HTTP client finalizer on the SDKβPython client itself. Source: llm_adapter@2026-05-24 Confidence: low |
β |
| Bugfix | Medium |
Routes stream module through dynamicImport in ESM downloadFile path for SDKβTypeScript. Routes stream module through dynamicImport in ESM downloadFile path for SDKβTypeScript. Source: llm_adapter@2026-05-24 Confidence: low |
β |
Full changelog
0.180.0 (2026-05-24)
π Features
- β οΈ sandbox list with cursor pagination (#4606)
π©Ή Fixes
- api: add node-forge as explicit dependency (4d6f08bcb)
- api: jest support for uuid v14 ESM-only package (36025e46b)
- sdk-python: anchor sync http_client finalizer on the client itself (#4789)
- sdk-typescript: route stream module through dynamicImport in ESM downloadFile path (#4773)
Chores
- sync go.sum for v0.179.0 (ea30f893e)
- deps: bump @astrojs/node from 10.0.4 to 10.0.5 (222406f6c)
- deps: bump uuid from 11.1.0 to 14.0.0 (15d39898b)
- deps: bump ruby/setup-ruby (845f2f97b)
- deps: bump github.com/distribution/distribution/v3 (66f93bd8a)
- deps: bump axios from 1.14.0 to 1.15.2 (bc4e63314)
- deps: bump github.com/in-toto/in-toto-golang in /apps/runner (5ec9e35f5)
- deps: bump apache/skywalking-eyes (b0772c141)
- deps: bump @protobufjs/utf8 from 1.1.0 to 1.1.1 (b847ec1b7)
- deps: bump astro from 6.1.5 to 6.1.10 (a72d42a8e)
- deps: bump github.com/go-git/go-billy/v5 in /apps/daemon (95a22ed87)
- deps: bump fast-xml-builder from 1.1.5 to 1.1.9 (2409b8ec1)
- deps: bump webpack-dev-server from 5.2.2 to 5.2.4 (a2a3ea261)
- deps: bump github.com/go-git/go-git/v5 in /apps/daemon (907ac83a8)
- deps: bump idna from 3.11 to 3.15 (257472382)
- deps: bump ws from 8.18.0 to 8.20.1 (e53656ffc)
- deps: bump ws in /guides/typescript/mastra/coding-agent/openai (be5751c39)
- deps: bump protobufjs (86ffbf217)
- deps: bump uuid in /guides/typescript/mastra/coding-agent/openai (be1eff699)
- deps: bump github.com/containerd/containerd/v2 in /apps/runner (6d6e4989d)
- deps: bump @tootallnate/once from 1.1.2 to 2.0.1 (e8d897a66)
- deps-dev: bump yard from 0.9.38 to 0.9.42 (18974dab2)
- deps-dev: bump postcss from 8.4.38 to 8.5.10 (b90cb4878)
- deps-dev: bump nokogiri from 1.19.1 to 1.19.3 (e1bf370d5)
- sdk-go: bump to v0.180.0 (#4793)
β οΈ Breaking Changes
- The GET /api/sandbox endpoint now returns a paginated response object with full search capabilities built in, and the legacy
/api/sandbox/paginatedendpoint is being deprecated. Additionally, all /api/workspace endpoints are being removed entirely. If you still have integrations hitting /api/workspace routes, migrate them to the corresponding /api/sandbox endpoints.
β€οΈ Thank You
- Daytona Release Bot @daytona-release
- Fabjan VuΔina
- Mirko DΕΎaja @MDzaja
- Toma Puljak @Tpuljak
Breaking Changes
- GET /api/sandbox returns a paginated response object with full search capabilities; legacy `/api/sandbox/paginated` endpoint deprecated.
- /api/workspace endpoints are removed entirely β migrate to corresponding /api/sandbox endpoints.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About daytona
Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code
Related context
Related tools
Beta — feedback welcome: [email protected]