V0.165.0

Sandbox Fork & Snapshot Endpoints

Sandbox Fork & Snapshot Endpoints Sandbox Fork & Snapshot Endpoints

This release improves sandbox management with the introduction of fork and snapshot API endpoints. Users can now create copy-on-write forks of running sandboxes and capture snapshots of sandbox state, with full support in the dashboard including fork tree visualization and recursive delete.

The daemon now rotates and compresses its own logs using lumberjack, capping disk usage at 100 MiB per file with automatic archival — resolving reports of 5 GB log files exhausting sandbox storage. The Python SDK also increases its default connection pool from 100 to 250 connections.

This version includes a major security hardening pass, pinning all GitHub Actions to immutable SHA refs and adding Dependabot coverage for Actions updates.

Release Details

Features:

  • api: add sandbox fork and snapshot endpoints and jobs (#4452)

  • docs: expand volume creation and mounting (#4357)

  • guides: AG2 guide with DaytonaCodeExecutor (#4274)

Fixes:

  • api: skip JSON body parsing for non-JSON content types (#4431)

  • api: remove early return in resize sandbox job success handler (#4430)

  • api: parse resize job payload (#4443)

  • api: suppress logging for TypeORM EntityNotFoundError in resource access guards (#4432)

  • api: snapshot propagation randomness (#4427)

  • api: add safe string validator for user-facing display fields (#4342)

  • api,cli: serialize nullable snapshot fields as null instead of omitting them (#4434)

  • daemon: rotate and compress daemon logs via lumberjack to cap disk usage (#4440)

  • docs: update oss deployment note (#4441)

  • sdk: default conn pool 100 to 250 (#4409)

Chores:

  • sync go.sum for v0.164.0 (#4429)

  • add batch-dependabot claude agent (#4442)

  • rename dependencies from @daytonaio to @daytona (#4411)

  • scaffold e2e PR check test (#4381)

  • daytona-e2e release fix (d93484546)

  • deps: bump flatted from 3.3.3 to 3.4.2 (e8bad9c4a)

  • deps: bump h3 from 1.15.8 to 1.15.9 (73f03cf31)

  • deps: bump smol-toml from 1.6.0 to 1.6.1 (313231c92)

  • deps: bump yaml from 2.8.1 to 2.8.3 (22c1cb24d)

  • deps: bump astro from 5.17.3 to 5.18.1 (751413cf0)

  • deps: bump nodemailer from 7.0.11 to 8.0.4 (1486eb87a)

  • deps: bump node-forge from 1.3.2 to 1.4.0 (78304a2ce)

  • deps: bump brace-expansion from 1.1.12 to 1.1.13 (7e2289b7a)

  • deps: bump golang.org/x/image in /libs/computer-use (8bc9501ee)

  • deps: bump github.com/go-git/go-git/v5 in /apps/daemon (e829f1c06)

  • deps: bump aiohttp from 3.13.3 to 3.13.4 (ebd711893)

  • deps: bump github.com/go-jose/go-jose/v4 in /apps/proxy (6dab74ed7)

  • deps: bump github.com/go-jose/go-jose/v4 in /apps/cli (fa35d74ca)

  • deps: bump github.com/distribution/distribution/v3 (869bf6802)

  • deps: bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream (fe81afdf1)

  • deps: bump github.com/containerd/containerd/v2 in /apps/runner (daf68c288)

  • deps: bump github.com/moby/buildkit in /apps/runner (67e118d22)

  • deps: bump github.com/aws/aws-sdk-go-v2/service/s3 (4a898481a)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp (7656b8e7b)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (e1fd2c418)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (020b39e96)

  • deps: bump go.opentelemetry.io/otel/sdk in /apps/snapshot-manager (9dfada98c)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (4fac9f433)

  • deps: bump go.opentelemetry.io/otel/sdk in /libs/common-go (8b5497fc8)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (102a37b2c)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (08099fd40)

  • deps: bump go.opentelemetry.io/otel/sdk in /libs/sdk-go (0ebd9642c)

  • deps: bump axios from 1.13.2 to 1.14.0 (7a426df96)

  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (579344dcc)

  • deps-dev: bump json from 2.18.0 to 2.19.2 (94f83a555)

  • deps-dev: bump pygments from 2.19.2 to 2.20.0 (dafb758b2)

  • deps-dev: bump addressable from 2.8.8 to 2.9.0 (2d3410be3)

  • devcontainer: bump go to v1.25.5 (834da9138)

  • sdk-go: bump to v0.165.0 (#4459)

  • security: pin all GitHub Actions to immutable SHA refs (#4408)

  • security: add Dependabot config for GitHub Actions updates (#4447)