Coder x64 Version 2.28.6.0
Stable (since December 09; 2025)$$$Changelog$$$Security Update$$$Update react to apply patch for CVE-2025-55182 (#21084) (#21175; df47153)$$$Coder is not affected. This vulnerability specifically targets implementations using React Server Components. As Coder does not utilize Server Components; there is no exploitable attack surface. We are applying this patch proactively to limit security tooling noise and avoid unnecessary concerns.
Coder x64 Version 2.28.5.0
v2.28.5$$$Stable (since Dec 2; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Do not notify marked for deletion for deleted workspaces (#20937) (#20945; ed5785f)$$$Allow agents to be created on dormant workspaces (#20909) (#20912; d81d7ee)$$$Performance improvements$$$Optimize migration 371 to run faster on large deployments (#20906) (#21042; 8d18875) (@geokat)
Coder x64 Version 2.28.5.0
v2.28.5$$$Stable (since Dec 2; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Do not notify marked for deletion for deleted workspaces (#20937) (#20945; ed5785f)$$$Allow agents to be created on dormant workspaces (#20909) (#20912; d81d7ee)$$$Performance improvements$$$Optimize migration 371 to run faster on large deployments (#20906) (#21042; 8d18875) (@geokat)
Coder x64 Version 2.27.6.0
v2.27.6$$$Stable (since November 12; 2025)$$$Changelog$$$Chores$$$Upgrade aibridge lib to fix cache issue $$$AI Bridges injected MCP tools were not being set in a stable sort order. This lead to invalidation of the cache in upstream AI providers APIs; resulting in more cache writes and therefore higher token spend. Deployments with AI Bridge enabled as well as the oauth2 and mcp-server-http experiments will be affected by this bug; and are highly encouraged to upgrade.$$$$$$Compare: v2.27.5...v2.27.6 - Refer: https://github.com/coder/coder/compare/v2.27.5...v2.27.6
Coder x64 Version 2.27.6.0
v2.27.6$$$Stable (since November 12; 2025)$$$Changelog$$$Chores$$$Upgrade aibridge lib to fix cache issue $$$AI Bridges injected MCP tools were not being set in a stable sort order. This lead to invalidation of the cache in upstream AI providers APIs; resulting in more cache writes and therefore higher token spend. Deployments with AI Bridge enabled as well as the oauth2 and mcp-server-http experiments will be affected by this bug; and are highly encouraged to upgrade.$$$$$$Compare: v2.27.5...v2.27.6 - Refer: https://github.com/coder/coder/compare/v2.27.5...v2.27.6
Coder x64 Version 2.27.3.0
Stable (since October 16; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Fix incorrect rendering of RBAC in Helm chart when workspacePerm… (#20596; 800dd9c)$$$Fixed incorrect rendering of Kubernetes RBAC resources in Helm chart when workspacePerms=false. Previously; Role and RoleBinding resources were still created for workspace namespaces even when workspace permissions were explicitly disabled; potentially granting unintended permissions.
Coder x64 Version 2.26.2.0
Changelog$$$Bug fixes$$$Avoid connection logging crashes in agent [2.26] (#20306; 03440f6)$$$Chores$$$Upgrade coder/clistat to v1.1.1 (#20322) (#20324; 4793806)
Coder x64 Version 2.26.2.0
Changelog$$$Bug fixes$$$Avoid connection logging crashes in agent [2.26] (#20306; 03440f6)$$$Chores$$$Upgrade coder/clistat to v1.1.1 (#20322) (#20324; 4793806)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.25.3.0
v2.25.3 Latest$$$Stable (since October 01; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$Stop reading closed channel for /watch devcontainers endpoint (#19373) (@DanielleMaywood)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.25.3.0
v2.25.3 Latest$$$Stable (since October 01; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$Stop reading closed channel for /watch devcontainers endpoint (#19373) (@DanielleMaywood)
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.24.3.0
v2.24.3 $$$Stable (since August 07; 2025)$$$Changelog$$$Bug fixes$$$Pin Nix version to 2.28.4 to avoid JSON type error (#19223; 9df4992)$$$Upgrade to 1.24.6 to fix race in lib/pq queries (#19214) (#19219; 7f6cefd)$$$? Resolves CVE-2025-47907; details can be found here in golang/go. Additionally; see our blog about this vulnerability.$$$Use system context for querying workspaces when deleting users (#19211) (#19227; c219a9a)$$$Backport coder desktop + corporate vpn fixes for 2.24 (#19177; bc502b5)$$$$$$Chores$$$Publish CLI binaries and detached signatures to releases.coder.com (#18901; 3e0645c)$$$Database: Optimize AuditLogs queries (#19193; 5ff7496) (@kacpersaw)$$$Compare: v2.24.2...v2.24.3$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.24.3
Coder x64 Version 2.24.3.0
v2.24.3 $$$Stable (since August 07; 2025)$$$Changelog$$$Bug fixes$$$Pin Nix version to 2.28.4 to avoid JSON type error (#19223; 9df4992)$$$Upgrade to 1.24.6 to fix race in lib/pq queries (#19214) (#19219; 7f6cefd)$$$? Resolves CVE-2025-47907; details can be found here in golang/go. Additionally; see our blog about this vulnerability.$$$Use system context for querying workspaces when deleting users (#19211) (#19227; c219a9a)$$$Backport coder desktop + corporate vpn fixes for 2.24 (#19177; bc502b5)$$$$$$Chores$$$Publish CLI binaries and detached signatures to releases.coder.com (#18901; 3e0645c)$$$Database: Optimize AuditLogs queries (#19193; 5ff7496) (@kacpersaw)$$$Compare: v2.24.2...v2.24.3$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.24.3
Coder x64 Version 2.23.4.0
Changelog$$$Bug fixes$$$CLI: Handle nil unwrap errors when formatting to fix error messages when offline (#18821; a7f0dba) (@ethanndickson)$$$Add RDP icon for modules and Desktop (#18738; 63155d2) (@matifali)$$$sign coder binaries with the release key using GPG (#18867; 1c8ba51) (@jdomeracki-coder)$$$Compare: v2.23.3...v2.23.4
Coder x64 Version 2.23.4.0
Changelog$$$Bug fixes$$$CLI: Handle nil unwrap errors when formatting to fix error messages when offline (#18821; a7f0dba) (@ethanndickson)$$$Add RDP icon for modules and Desktop (#18738; 63155d2) (@matifali)$$$sign coder binaries with the release key using GPG (#18867; 1c8ba51) (@jdomeracki-coder)$$$Compare: v2.23.3...v2.23.4
Coder x64 Version 2.23.3.0
v2.23.3$$$Stable (since July 09; 2025)$$$Changelog$$$Bug fixes$$$Handle paths with spaces when using coder config-ssh (#18778; 049feec) (@spikecurtis)$$$Compare: v2.23.2...v2.23.3$$$Container image$$$docker pull ghcr.io/coder/coder:v2.23.3$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.23.3.0
v2.23.3$$$Stable (since July 09; 2025)$$$Changelog$$$Bug fixes$$$Handle paths with spaces when using coder config-ssh (#18778; 049feec) (@spikecurtis)$$$Compare: v2.23.2...v2.23.3$$$Container image$$$docker pull ghcr.io/coder/coder:v2.23.3$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.23.2.0
v2.23.2$$$Changelog$$$Bug fixes$$$Stop tearing down non-TTY processes on SSH session end (#18677; 75e7a93) (@spikecurtis)$$$Resolves an issue with SSH connections via VSCode disconnecting after a short period.$$$Dashboard: Remove trailing comment from cursor.svg (#18378; 8e8dd58) (@ethanndickson)$$$Chores$$$Add windows icon (#18322; bc089f3) (@aslilac)
Coder x64 Version 2.23.2.0
v2.23.2$$$Changelog$$$Bug fixes$$$Stop tearing down non-TTY processes on SSH session end (#18677; 75e7a93) (@spikecurtis)$$$Resolves an issue with SSH connections via VSCode disconnecting after a short period.$$$Dashboard: Remove trailing comment from cursor.svg (#18378; 8e8dd58) (@ethanndickson)$$$Chores$$$Add windows icon (#18322; bc089f3) (@aslilac)
Coder x64 Version 2.22.1.0
Changelog$$$Bug fixes$$$Correct environment variable name for MCP app status slug$$$Remove unnecessary user lookup in AI agent API calls
Coder x64 Version 2.22.1.0
Changelog$$$Bug fixes$$$Correct environment variable name for MCP app status slug$$$Remove unnecessary user lookup in AI agent API calls
Coder x64 Version 2.21.3.0
Changelog$$$Bug fixes$$$Remove site wide perms from creating a workspace (#17296; 3fa1030) (@Emyrk)$$$Add path & method labels to prometheus metrics for current requests (#17362; 1d2af9c) (@ibetitsmike)$$$Log long-lived connections acceptance (#17219; 991d38c) (@ibetitsmike)$$$Extend request logs with auth & DB info (#17497; f8d3fbf) (@ibetitsmike)$$$Reduce excessive logging when database is unreachable (#17363; 9ea3910) (@dannykopping)$$$Log correct error on drpc connection close error (#17265; b1ccf48) (@aaronlehmann)$$$Dont attempt to insert empty terraform plans into the database (cherry-pick #17426) (#17486; 9b3c7d7) (@aslilac)$$$Dont show promote button for members (#17511; 1e8ac6c) (@BrunoQuaresma)$$$Prevent null loading sync settings (#17430; b760f1d) (@Emyrk)$$$Fixes an issue causing front end to not load under certain condition.
Coder x64 Version 2.20.3.0
Changelog$$$Bug fixes$$$Add path & method labels to prometheus metrics for current requests$$$Extend request logs with auth & DB info$$$Reduce excessive logging when database is unreachable$$$Prevent null loading sync settings$$$Fixes an issue causing front end to not load.
Coder x64 Version 2.20.2.0
Stable (since April 1; 2025)$$$Changelog$$$Bug fixes$$$Hide deleted users from org members query$$$Fix deployment settings navigation issues
