Release 1.166.3

[odlbot]

Chris Chudzicki

• feat: GET /api/v0/products/{id}/user_pricing/ per-user price quote (feat: GET /api/v0/products/{id}/user_pricing/ per-user price quote #3959) (1ce38e8f)

Tobias Macey

• Return 409 when a new organization's name reuses a page slug (Return 409 when a new organization's name reuses a page slug #3955) (1c8c2d2f)
• fix(sentry): cap request bodies at 1KB and scrub Postgres DETAIL rows (fix(sentry): cap request bodies at 1KB and scrub Postgres DETAIL rows #3936) (469645c0)

cp-at-mit

• Restrict B2B page access to admins (Restrict B2B page access to admins #3957) (52da8b7d)

[github-actions]

OpenAPI Changes

Show/hide changes

## Changes for v0.yaml:
2 changes: 0 error, 0 warning, 2 info
info	[endpoint-deprecated] at head/openapi/specs/v0.yaml
	in API GET /api/v0/products/{id}/user_flexible_price/
		endpoint deprecated

info	[endpoint-added] at head/openapi/specs/v0.yaml
	in API GET /api/v0/products/{id}/user_pricing/
		endpoint added



## Changes for v1.yaml:
2 changes: 0 error, 0 warning, 2 info
info	[endpoint-deprecated] at head/openapi/specs/v1.yaml
	in API GET /api/v0/products/{id}/user_flexible_price/
		endpoint deprecated

info	[endpoint-added] at head/openapi/specs/v1.yaml
	in API GET /api/v0/products/{id}/user_pricing/
		endpoint added



## Changes for v2.yaml:
2 changes: 0 error, 0 warning, 2 info
info	[endpoint-deprecated] at head/openapi/specs/v2.yaml
	in API GET /api/v0/products/{id}/user_flexible_price/
		endpoint deprecated

info	[endpoint-added] at head/openapi/specs/v2.yaml
	in API GET /api/v0/products/{id}/user_pricing/
		endpoint added

Unexpected changes? Ensure your branch is up-to-date with main (consider rebasing).

[sentry]

Bug: A race condition in quote_user_price may cause a paid-amount-off discount to be returned with a null source because the source line is resolved twice without locking.
_{Severity: MEDIUM}

Suggested Fix

Refactor quote_user_price to resolve the discount and its source line in a single step. The discount_product function should return both the calculated price and the source line it used, preventing the need for a second, racy resolution via source_line_for.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: ecommerce/api.py#L1323

Potential issue: A race condition exists in the `quote_user_price` function. The price
for a `paid-amount-off` discount is calculated by resolving an unconsumed source line,
but this result is discarded. The source line is then re-resolved later in the function
to be included in the API response. Between these two resolution steps, a concurrent
request could consume the same source line. This would cause the second resolution to
fail, resulting in the API response correctly showing the discount amount but
incorrectly reporting the `source` as `null`, creating a logical inconsistency for API
clients.

Also affects:

• discount_sources.py:176-182

_{Did we get this right? 👍 / 👎 to inform future reviews.}