Upload links replace files in root-owned folders
A PUT link from POST /v1/sandboxes/{id}/files:link to a path under /workspace whose folder is owned by root (for example, a tarball extracted with sudo) returned 404 with This upload is not open in the sandbox. The upload now replaces the file atomically, as files_write does, and the new file is owned by the sandbox user. When the sandbox user cannot write the folder (outside /workspace), the link returns 403 permission_denied with the folder named, instead of 404.
Same day.
- Better Stack's monitors API over Uptime checksBetter Stack Uptime API calls for monitors (GET and POST /api/v2/monitors; GET, PATCH and DELETE /api/v2/monitors/{id}) run against Runti…
- GitHub Codespaces API for Dev environmentsThe Codespaces endpoints of GitHub's REST API are served under /compat/github, so Octokit and other GitHub clients manage Dev environment…
- Containers: Google Cloud Run Admin API v2Containers now accept the Cloud Run Admin API v2 services methods at /compat/google-cloud-run: set the client's endpoint to https://<your…
- Containers: flyctl and fly-goflyctl and Fly's Go client (fly-go) now run against Runtime's Fly Machines API unchanged.
- Queues: SQS-compatible status codes for authentication and size errorsThe SQS-compatible endpoint now returns 403 for AccessDenied and for every InvalidClientTokenId, and 413 for RequestEntityTooLarge; these…
- Functions: AWS Lambda InvokeThe AWS Lambda API on Runtime Functions now supports Invoke, so invoke in AWS's SDKs runs a function after you change only the endpoint a…
- Browserbase session list filters on BrowsersGET /compat/browserbase/v1/sessions (sessions.list in Browserbase's SDK) accepts status (PENDING, RUNNING, COMPLETED or ERROR) and q in B…
- Browserbase's session debug URLs on BrowsersGET /compat/browserbase/v1/sessions/{id}/debug (sessions.debug in Browserbase's SDK) returns the session's wsUrl (its Chrome DevTools Pro…
- Queues: SQS-compatible error status codesThe SQS-compatible endpoint now returns the HTTP status Amazon SQS returns for each error.
- Checkly's checks API over Uptime checksCheckly API calls for API and URL checks (POST /v1/checks/api, POST /v1/checks/url, PUT on each, GET /v1/checks, GET and DELETE /v1/check…
- Balancers and Ports: target weights and failoverEach entry in spec.targets accepts weight (1 to 1,000, default 1) and backup (default false).
- Apps, Functions and Containers: health checks while servinghealthPath is now also checked while a copy serves: every 5 seconds, each copy is sent a GET of the path, and a copy that fails 2 consecu…
- Containers: Fly Machines restartPOST /compat/fly/v1/apps/{app_name}/machines/{machine_id}/restart is now supported.
- Speed page: daily history charts and provider comparisonThe speed page now charts each listed operation's median own time for each of the last 90 days, against its physical floor.
- CI/CD: a job that fails because its machine ran out of disk says so in its reasonWhen a job's machine runs out of disk, the error is often never written to the job's log, because the log is on the same full disk.
- Speed: browser create time and rival providers, measured the same waybrowsers.create is now measured every five minutes.
- Sites (beta): static websites served with no machineA site is files and a route table (redirects, rewrites, headers, Markdown for agents, 404 pages) served by every front.
- Speed history by the hour and by the dayEach listed operation's hourly and daily p50, p95 and p99 (Runtime's own time, the network's part and the total), sample count and failur…
- Containers: Fly Machines APIContainers now accept Fly's Machines REST API at /compat/fly/v1, so clients written for api.machines.dev run against Runtime after you ch…
- Sandboxes: E2B APISandboxes now accept E2B's REST API at /compat/e2b, so code that uses E2B's SDKs (e2b, @e2b/code-interpreter) can create and manage Runti…
- Browserbase's sessions API on BrowsersBrowserbase's Node.js SDK (@browserbasehq/sdk) works with Runtime Browsers when BROWSERBASE_BASE_URL is set to https://<your API host>/co…
- Functions: AWS Lambda APIFunctions now accept the AWS Lambda API, signed with AWS Signature Version 4, so code that uses AWS's SDKs (such as boto3) runs against R…
- Notebooks: connect JupyterLab, VS Code or any Jupyter clientThe URL that POST /v2/notebooks/{id}:open returns now also accepts its secret as a Jupyter token, sent as Authorization: token <secret> o…
- FirewallsPOST /v2/firewalls creates a named rule set that ports and balancers attach to with firewallId.
- KV: Cloudflare Workers KV APIKV stores now accept Cloudflare's Workers KV REST API at /compat/cloudflare/client/v4, so code that uses Cloudflare's SDKs runs against R…
- Browsers: capture a page with POST /v2/browsers/{id}:screenshotOpens url in a new tab, waits for its load event, and returns the image as base64 with the page's final URL, title and HTTP status; witho…
- Balancers: health checksA balancer's spec.health sets how each target is checked, with the fields of an AWS ALB target group: path, intervalSeconds, timeoutSecon…
- GitHub Actions runners in every SDK/v2/runners is now in the API reference and the OpenAPI document, and every SDK makes its calls as runners.settings, runners.enable, runn…
- Sandboxes: lists and lookups include every sandbox of an organization being moved to Runtime 2.0While an organization has sandboxes on both Runtime 1.0 and Runtime 2.0, GET /v1/sandboxes returns them all in one paginated list, in the…
- Plans: includedMicros, yearlyOnly and trialUsageMicrosGET /v1/plans returns three new fields on each plan: includedMicros, the usage included each month (null when the fee and bonusMicros are…