API Reliability & SDK Improvements

This release improves API reliability with several important fixes. Decommissioned snapshot runners are now properly cleaned up, preventing stale data from accumulating. Archive operations are hardened against race conditions, and failed authentication attempts now trigger rate limit blocks to protect against brute-force attempts.

The Go SDK adds signed preview link generation, making it easier to share sandbox previews securely. All SDKs and API clients now send custom User-Agent headers, improving request traceability. The dashboard fixes failed payment invoice handling and centralizes privacy consent state.

Documentation gains OpenAPI specification references, and the Python API client now correctly serializes datetime values.

Release Details

Features:

api: decommissioned snapshot runner cleanup (#4272)
docs: add openapi specification references (#3546)
sdk-go: signed GetPreviewLink in Go SDK (#4211)

Fixes:

api: reorder runner controller routes (#4263)
api: update org invitation status (#4265)
api: handle error in sandbox created event (#4269)
api: updateWhere on sandbox sync error (#4268)
api: preview access redis key (#4279)
api: v2 archive race conditions (#4270)
api: failed auth rate limit block (#4282)
api-client-python: serialize datetime values (#4208)
dashboard: make failed payment invoices payable (#4259)
dashboard: centralize privacy consent state & sync (#4075)
docs: update billing and limits (#4015)

Chores:

sync go.sum for v0.158.1 (#4254)
harden GitHub Actions workflows (#4249)
add supply chain package age quarantine (#4283)
docs: update python sdk readme (#4261)
sdk,api-client,toolbox-api-client: set custom User-Agent headers and standardize sdk-* source names (#4266)
sdk-go: bump to v0.159.0 (#4286)
sdk-python: add isort known_first_party config to fix local/CI import-order parity (#4255)