Conversation
|
🧪 Testing To try out this version of the SDK: Expires at: Sun, 19 Apr 2026 18:37:42 GMT |
36312c1 to
4e10bef
Compare
4e10bef to
295b88f
Compare
295b88f to
0087d2a
Compare
0087d2a to
ba80773
Compare
ba80773 to
79e6399
Compare
79e6399 to
75dbfaf
Compare
…may take longer than a minute
75dbfaf to
bdf13ba
Compare
bdf13ba to
1c97051
Compare
1c97051 to
f14ac35
Compare
f14ac35 to
b72629a
Compare
b72629a to
c2f49b0
Compare
c2f49b0 to
47c8d1e
Compare
47c8d1e to
1e32e5a
Compare
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
4 similar comments
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
a6c5a24 to
f767442
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| if self.api_key and headers.get("Authorization"): | ||
| return | ||
| if isinstance(custom_headers.get("Authorization"), Omit): | ||
| if headers.get("Authorization") or isinstance(custom_headers.get("Authorization"), Omit): |
There was a problem hiding this comment.
Auth validation bypassed when api_key is None
High Severity
The _validate_headers check was changed from self.api_key and headers.get("Authorization") to just headers.get("Authorization"). Since auth_headers always returns {"Authorization": f"Bearer {api_key}"} regardless of whether api_key is None, the Authorization header is always present and always truthy (e.g. "Bearer None"). This means _validate_headers can never raise its TypeError, effectively disabling API key validation entirely. Users who forget to set api_key will get confusing 401 server errors instead of the helpful local error message.
Additional Locations (1)
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
8 similar comments
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
f767442 to
e7cca40
Compare
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
2 similar comments
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
e7cca40 to
e428af7
Compare
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
e428af7 to
f688df9
Compare
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |
1 similar comment
|
Note: this release PR has been open for more than 60 days. Until this PR is merged, we will temporarily stop pushing codegen updates due to changes to Stainless' codegen. |


Automated Release PR
0.10.0 (2026-03-20)
Full Changelog: v0.9.0...v0.10.0
Features
Bug Fixes
Chores
actions/github-script(ce1aac8)api.mdfiles (9be9c3f)--fixargument to lint script (c6513ca)actions/checkoutversion (b6db8d6)Documentation
This pull request is managed by Stainless's GitHub App.
The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.
For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.
🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions
Note
Medium Risk
Medium risk because it changes core HTTP request construction (JSON/binary body handling, path interpolation, auth-header validation) and increases default timeouts, which can affect all SDK calls and edge-case compatibility.
Overview
Bumps the SDK to
0.10.0and updates release metadata (CHANGELOG.md, manifest/version, license year, dependency locks).Client/request behavior updates: adds first-class binary request bodies via a new
contentparameter (with deprecation warnings for passing raw bytes asbody), introducesopenapi_dumpsfor more robust JSON serialization (e.g., datetimes and Pydantic models), and tightens request option logging/validation around mutually exclusivecontent/json_data/files.API surface tweaks: defaults to a 5-minute timeout, relaxes auth header validation, uses a new
path_template()helper for safe path-parameter interpolation, and extends generated types/endpoints (e.g., assetdisplayName/os, assets listinclude_app_store, iOS sandbox fields,mcpUrlon instance status). CI workflows and dev scripts/docs are also refreshed (GitHub Actions version bumps, lint--fix, mock server removal, added pagination docs/tests).Written by Cursor Bugbot for commit f688df9. This will update automatically on new commits. Configure here.