release: 0.125.0

[kernel-internal]

Automated Release PR

0.125.0 (2026-10-13)

Features

• chore(stlc): seal custom-code tracking files (a77f648)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds API key authorization and expiry options on the client surface; changes are additive but touch credential/permission modeling where misuse could narrow or misconfigure access.

Overview
Release 0.125.0 bumps package version metadata (pyproject.toml, _version.py, release manifest) and adds a changelog entry.

The substantive SDK change is scoped API key creation and representation. client.api_keys.create() (sync and async) now accepts optional expires_at (ISO8601/datetime, mutually exclusive with days_to_expire) and policy with allow-list statements (action + resource, wildcards supported). The APIKey model (and thus CreatedAPIKey) gains an optional policy field describing permissions for scoped keys. Generated create-param TypedDicts and API key tests were updated to cover the new fields.

^{Reviewed by Cursor Bugbot for commit 11d911d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-python-sdk/releases/tag/v0.125.0 🌻