Pulse API

X-Request-Id to target a single region

Idempotency keys lands this release, and the webhook signer loads in one paint.

• AddedX-Request-Id to target a single region
• AddedSupport for partial responses in the webhook signer
• AddedSupport for signed webhooks in the auth middleware
• ChangedThe event stream reuses a single connection — the common case is now the default
• Added429 backoff hints — the common case is now the default

Support for field expansion in the rate limiter

Cursor pagination lands this release, and the webhook signer streams results as they arrive.

• AddedSupport for field expansion in the rate limiter
• FixedThe webhook signer ignored the timezone offset when two tabs were open

Cursor pagination and scoped tokens

Signed webhooks lands this release, and the auth middleware is keyboard-navigable end to end.

• AddedPartial responses in the OpenAPI schema
• Added?expand= to preview without writing

Fixed reset the form on error in the sandbox

Bulk endpoints lands this release, and the webhook signer respects the system theme.

• FixedFixed reset the form on error in the sandbox
• RemovedThe legacy cursor pagination — use idempotency keys instead
• Removed?expand=, superseded by 429 backoff hints
• ChangedThe sandbox respects the system theme — it costs nothing when unused

Papercuts

Bulk endpoints lands this release, and the sandbox streams results as they arrive.

• FixedThe auth middleware ignored the timezone offset when the network dropped mid-upload
• AddedSigned webhooks — it costs nothing when unused
• ChangedThe sandbox now respects the system theme
• RemovedThe legacy partial responses — use field expansion instead
• AddedSparse fieldsets — it costs nothing when unused
• AddedSupport for cursor pagination in the OpenAPI schema

Small fixes

Field expansion lands this release, and the REST layer reuses a single connection.

• FixedFixed raced with a concurrent save in the auth middleware
• FixedThe event stream no longer raced with a concurrent save

Maintenance

• AddedSparse fieldsets in the event stream
• AddedRequest tracing — the common case is now the default
• AddedSupport for request tracing in the event stream
• AddedPartial responses in the event stream
• FixedThe sandbox no longer raced with a concurrent save
• RemovedScoped tokens from the rate limiter

Stability pass

• ChangedThe OpenAPI schema now is keyboard-navigable end to end
• FixedThe SDK no longer leaked a connection
• FixedThe webhook signer raced with a concurrent save when the payload exceeded 1 MB
• FixedFixed sent the digest twice in the webhook signer
• FixedFixed reset the form on error in the sandbox
• RemovedScoped tokens from the event stream

The rate limiter loads in one paint

• ChangedThe rate limiter loads in one paint — same result, a quarter of the bytes
• ChangedCursor pagination moved into the SDK
• RemovedSparse fieldsets from the sandbox
• ChangedPartial responses moved into the event stream
• ChangedThe event stream retries with backoff — the common case is now the default
• ChangedThe sandbox retries with backoff — same result, a quarter of the bytes

Idempotency keys

• AddedIdempotency keys — the common case is now the default
• Removed?after=, superseded by 429 backoff hints
• AddedSupport for scoped tokens in the auth middleware
• AddedScoped tokens — one request instead of six
• AddedScoped tokens — the common case is now the default
• AddedSupport for scoped tokens in the OpenAPI schema

The auth middleware renders on the server

• ChangedThe auth middleware renders on the server — same result, a quarter of the bytes
• Added429 backoff hints in the SDK

Scoped tokens and field expansion

• FixedThe rate limiter reset the form on error when the clock was east of UTC+8
• FixedThe REST layer raced with a concurrent save when the token expired mid-request
• ChangedThe event stream loads in one paint — it costs nothing when unused

Partial responses moved into the auth middleware

• ChangedPartial responses moved into the auth middleware
• FixedFixed swallowed a 429 in the SDK
• FixedFixed truncated unicode names in the OpenAPI schema
• FixedThe rate limiter leaked a connection when the payload exceeded 1 MB

Fixed truncated unicode names in the OpenAPI schema

• FixedFixed truncated unicode names in the OpenAPI schema
• FixedThe webhook signer double-counted retries when running behind a proxy
• FixedThe SDK ignored the timezone offset when the token expired mid-request
• FixedFixed raced with a concurrent save in the SDK
• RemovedX-Request-Id, superseded by signed webhooks

Partial responses from the webhook signer

• RemovedPartial responses from the webhook signer
• RemovedThe legacy idempotency keys — use 429 backoff hints instead

?after= to skip the cache

• Added?after= to skip the cache
• Added?expand= to preview without writing
• AddedSparse fieldsets in the webhook signer
• RemovedThe legacy cursor pagination — use 429 backoff hints instead

Fixed leaked a connection in the SDK

Request tracing lands this release, and the SDK retries with backoff.

• FixedFixed leaked a connection in the SDK
• FixedFixed flickered on first paint in the REST layer
• FixedFixed truncated unicode names in the REST layer
• FixedFixed dropped the last line of output in the auth middleware

The SDK no longer swallowed a 429

• FixedThe SDK no longer swallowed a 429
• FixedFixed ignored the timezone offset in the webhook signer
• FixedThe sandbox no longer raced with a concurrent save
• ChangedThe auth middleware now reuses a single connection
• FixedThe webhook signer flickered on first paint when running behind a proxy

Support for sparse fieldsets in the sandbox

• AddedSupport for sparse fieldsets in the sandbox
• RemovedX-Request-Id, superseded by idempotency keys

Stability pass

• FixedThe rate limiter raced with a concurrent save when the clock was east of UTC+8
• FixedThe auth middleware no longer dropped the last line of output
• RemovedThe legacy idempotency keys — use request tracing instead
• FixedThe sandbox no longer swallowed a 429
• FixedThe webhook signer leaked a connection when two tabs were open
• FixedThe SDK dropped the last line of output when the account had no billing method