Starstruk Logo MarkStarstruk

v0.187.0

daytonaio/daytonav0.187.0Jun 11, 2026by github-actions[bot]

AI Summary

A significant security update requires specific write permissions for temporary push access endpoints. The dashboard gains new limit classes tabs, and a debug metrics server is exposed via the proxy.

Key Highlights

  • Require write permissions for push access endpoints
  • Add limits classes tabs to dashboard
  • Expose debug metrics server

Breaking Changes

  • GET /object-storage/push-access and GET /docker-registry/registry-push-access now require the caller to hold either write:snapshots or write:sandboxes (previously no specific permission was required).

New Features

  • Add limits classes tabs
  • Add android and linked sandboxes
  • Expose debug metrics server

Full Release Notes

## 0.187.0 (2026-06-11)

### 🚀 Features

- **dashboard:** limits classes tabs ([#4978](https://github.com/daytonaio/daytona/pull/4978))
- **docs:** add android and linked sandboxes ([#4614](https://github.com/daytonaio/daytona/pull/4614))
- **proxy:** expose debug metrics server ([#5012](https://github.com/daytonaio/daytona/pull/5012))

### 🩹 Fixes

- ⚠️  **api:** require a write permission for temporary push access endpoints ([#4971](https://github.com/daytonaio/daytona/pull/4971))
- **api:** redirect root requests to /dashboard ([#4977](https://github.com/daytonaio/daytona/pull/4977))
- **cli:** drop redundant BucketExists probes in minio client ([#5013](https://github.com/daytonaio/daytona/pull/5013), [#5014](https://github.com/daytonaio/daytona/pull/5014))

### Chores

- sync go.sum for v0.186.0 ([#4975](https://github.com/daytonaio/daytona/pull/4975))
- split publish jobs per project ([#5011](https://github.com/daytonaio/daytona/pull/5011))
- **sdk-go:** bump to v0.187.0 ([#5015](https://github.com/daytonaio/daytona/pull/5015))

### ⚠️  Breaking Changes

- **api:** `GET /object-storage/push-access` and `GET /docker-registry/registry-push-access` now require the caller to hold either `write:snapshots` or `write:sandboxes` (previously no specific permission was required). Migration: grant `write: snapshots` or `write:sandboxes` to API keys that push snapshots or build declarative images with a local context.

### ❤️ Thank You

- Ante Projić @aprojic
- Juraj Štefanić @stefanicjuraj
- Nikola Radisic
- Robert Pavlinic @rpavlini
- Toma Puljak @Tpuljak