Coder x64 Version 2.33.8.0
v2.33.8 Latest$$$Stable (since June 11; 2026)$$$Changelog$$$BREAKING CHANGES$$$fix(coderd)!: restrict OIDC email fallback to first-time account linking (#25712; 36c011d)$$$fix!: reject OIDC login when email_verified claim is non-bool or absent (#25713; 335df24)$$$fix!: validate HostnameSuffix and SSHConfigOptions (#26154; 6d0d4e0)$$$fix!: only trust x-forwarded-host from configured trusted proxies (conflicts) (#26204; fa46906) (@geokat)$$$Features$$$Cli: add support for supplying ephemeral parameters at workspac… (#26279; 863eb7c)$$$Bug fixes$$$Clamp template port sharing level in SubAgentAPI (#26061; 0ff82f1)$$$Require update permission to recreate devcontainers (#25812; 7fd2977)$$$Escape agent log HTML (#25808; bdfdf6c)$$$Escape appearance values in HTML output (#25804; 345a88c)$$$Always verify TLS on aibridgeproxyd upstream transport (#26131; d875dd1)$$$Allow lifecycle code path to retry failed stop jobs (#26277; 0847137)$$$Agent: Prevent command injection in shell execer (#26235; 049f5b1) (@zedkipp)$$$Server: Prevent cross-tenant workspace app rebinding (#26103; 071f067) (@dylanhuff-at-coder)$$$Validate agent-supplied AllowedIPs in coordinator (#26144; fa9d7a3) (@f0ssel)$$$Server: Prevent user-admin from resetting owner password (#25709; fb9fe63)$$$Reject oversized and invalid zip uploads (#25877; 97f9e3d)$$$Validate FileSize in NewDataBuilder to prevent OOM DoS (#25710; 15ff74a)$$$Rename bundled rstudio.svg to rproject.svg; add real RStudio icon (#26216; d654d6d)$$$Use a random value for a simulated hash for built-in users (#26205; 53c2523)$$$Server: Verify workspace owner matches app username (#26085; de92756)$$$Prevent session token exfiltration via external app URLs (#26146; 91d1865) (@zedkipp)$$$Add max bytes request limit to aibridge (#26164; 481857f)$$$Check user user is active in aibridge auth (#26173; f9486be)
Coder x64 Version 2.33.7.0
v2.33.7 Latest$$$@github-actions github-actions released this 12 hours ago$$$ v2.33.7$$$ 54d2dca $$$Stable (since June 08; 2026)$$$Changelog$$$Bug fixes$$$Upgrade go-git to v5.19.1 (CVE-2026-45570; CVE-2026-45571) (#25773; 5e73950)$$$Upgrade golang.org/x/net to v0.55.0 (5 CVEs) (backport 2.33) (#25774; 921d037)$$$Upgrade Go to 1.25.11 (CVE-2026-27145; CVE-2026-42507) (#26065; 757e570)$$$fix(aibridge): strip proxy headers from bridge requests to fix Bedrock SigV4 signing (#26019; 056a7e4) (@ssncferreira)$$$Exclude service accounts from license seat count (#24401; ce8724e)$$$Documentation$$$Update the architecture diagrams (#25816; 332c365)$$$Fix broken references and add users oidc-claims to manifest (#25706; 54d2dca)$$$Compare: v2.33.6...v2.33.7$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.33.7$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.32.5.0
v2.32.5 Latest$$$Stable (since May 30; 2026)$$$Changelog$$$Bug fixes$$$Do not clobber dynamic parameters$$$Upgrade golang.org/x/crypto to v0.52.0 (12 ssh CVEs)$$$Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 $$$Upgrade golang.org/x/net to v0.55.0 (5 html CVEs) $$$Documentation$$$Fix broken references and add users oidc-claims to manifest
Coder x64 Version 2.32.5.0
v2.32.5 Latest$$$Stable (since May 30; 2026)$$$Changelog$$$Bug fixes$$$Do not clobber dynamic parameters$$$Upgrade golang.org/x/crypto to v0.52.0 (12 ssh CVEs)$$$Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 $$$Upgrade golang.org/x/net to v0.55.0 (5 html CVEs) $$$Documentation$$$Fix broken references and add users oidc-claims to manifest
Coder x64 Version 2.32.4.0
v2.32.4$$$Stable (since May 19; 2026)$$$Changelog$$$Bug fixes$$$Update tailscale fork to fix TSMP/ICMP callback leak (backport 2.32) (#25473; 17aed0a)$$$Server: Detect concurrent refresh race to prevent cache poisoning (#24228; 26e1515)$$$Server: Detect rate-limit 403 and narrow isFailedRefresh (#24334; e4defea)$$$Compare: v2.32.3...v2.32.4 - https://github.com/coder/coder/compare/v2.32.3...v2.32.4$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.32.4
Coder x64 Version 2.32.4.0
v2.32.4$$$Stable (since May 19; 2026)$$$Changelog$$$Bug fixes$$$Update tailscale fork to fix TSMP/ICMP callback leak (backport 2.32) (#25473; 17aed0a)$$$Server: Detect concurrent refresh race to prevent cache poisoning (#24228; 26e1515)$$$Server: Detect rate-limit 403 and narrow isFailedRefresh (#24334; e4defea)$$$Compare: v2.32.3...v2.32.4 - https://github.com/coder/coder/compare/v2.32.3...v2.32.4$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.32.4
Coder x64 Version 2.32.2.0
v2.32.2 Latest$$$@github-actions github-actions released this 10 hours ago$$$· 1 commit to release/2.32 since this release$$$ v2.32.2$$$ 5f343bc $$$Stable (since May 13; 2026)$$$Changelog$$$Bug fixes$$$Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25224; 561e42d)$$$fix(go.mod): bump gomarkdown to fix GHSA-77fj-vx54-gvh7 (v2.32) (#25225; a7e6c6e)$$$Cherry-pick OTel SDK v1.43.0 for CVE-2026-39883 (v2.32.x) (#25227; be2cd7a)$$$Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#25240; bbe0286)$$$Dashboard: Move pagination test from vitest to storybook story (#24165; da939aa)$$$Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25228; 315e800)$$$fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25249; d944b92)$$$Server: Harden Azure identity certificate fetch (cherry-pick v2.32) (#25277; 25219f3)$$$Verify PKCS7 signature on Azure instance identity tokens (backport 2.32) (#25303; d6e9344)$$$Server: Backport frame-ancestors CSP fixes to 2.32 (#24474; #24529) (#24806; 5f343bc)
Coder x64 Version 2.32.2.0
v2.32.2 Latest$$$@github-actions github-actions released this 10 hours ago$$$· 1 commit to release/2.32 since this release$$$ v2.32.2$$$ 5f343bc $$$Stable (since May 13; 2026)$$$Changelog$$$Bug fixes$$$Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25224; 561e42d)$$$fix(go.mod): bump gomarkdown to fix GHSA-77fj-vx54-gvh7 (v2.32) (#25225; a7e6c6e)$$$Cherry-pick OTel SDK v1.43.0 for CVE-2026-39883 (v2.32.x) (#25227; be2cd7a)$$$Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#25240; bbe0286)$$$Dashboard: Move pagination test from vitest to storybook story (#24165; da939aa)$$$Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25228; 315e800)$$$fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25249; d944b92)$$$Server: Harden Azure identity certificate fetch (cherry-pick v2.32) (#25277; 25219f3)$$$Verify PKCS7 signature on Azure instance identity tokens (backport 2.32) (#25303; d6e9344)$$$Server: Backport frame-ancestors CSP fixes to 2.32 (#24474; #24529) (#24806; 5f343bc)
Coder x64 Version 2.31.11.0
v2.31.11 Latest$$$@github-actions github-actions released this last week$$$ v2.31.11$$$ 49be5f3 $$$Stable (since May 01; 2026)$$$Changelog$$$Bug fixes$$$fix(externalauth): prevent race condition in token refresh with optimistic locking (backport to 2.31) (#22904; bd06fc5)$$$Server: Save refreshed token before validation (backport to 2.31) (#24332; 1a07879)$$$Server: Backport frame-ancestors CSP fixes to 2.31 (#24474; #24529) (#24807; 49be5f3)$$$Compare: v2.31.10...v2.31.11$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.31.11
Coder x64 Version 2.31.11.0
v2.31.11 Latest$$$@github-actions github-actions released this last week$$$ v2.31.11$$$ 49be5f3 $$$Stable (since May 01; 2026)$$$Changelog$$$Bug fixes$$$fix(externalauth): prevent race condition in token refresh with optimistic locking (backport to 2.31) (#22904; bd06fc5)$$$Server: Save refreshed token before validation (backport to 2.31) (#24332; 1a07879)$$$Server: Backport frame-ancestors CSP fixes to 2.31 (#24474; #24529) (#24807; 49be5f3)$$$Compare: v2.31.10...v2.31.11$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.31.11
Coder x64 Version 2.31.9.0
v2.31.9$$$Stable (since April 09; 2026)$$$Changelog$$$Performance improvements$$$Cap count queries; use native UUID ops for audit/conn logs (backport #23835) (#24129; 2f5d21d)$$$Chores$$$Backport Go 1.25.8 bump to release/2.31 (#23941; 2587364)$$$Backport high and critical Iron Bank dependency fixes (#24110; 960b8e7)
Coder x64 Version 2.31.9.0
v2.31.9$$$Stable (since April 09; 2026)$$$Changelog$$$Performance improvements$$$Cap count queries; use native UUID ops for audit/conn logs (backport #23835) (#24129; 2f5d21d)$$$Chores$$$Backport Go 1.25.8 bump to release/2.31 (#23941; 2587364)$$$Backport high and critical Iron Bank dependency fixes (#24110; 960b8e7)
Coder x64 Version 2.30.4.0
v2.30.4 Stable (since March 16; 2026)$$$Changelog$$$Bug fixes$$$Prevent ui error when last org member is removed (#23018; b49c4b3)$$$Networking: Retry after transport dial timeouts (cherry-pick/v2.30) (#22977; 26e3da1)$$$Bump aibridge to v1.0.9 to forward Anthropic-Beta header (#22936; 2970c54)$$$Compare: v2.30.3...v2.30.4$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.30.4$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.30.4.0
v2.30.4 Stable (since March 16; 2026)$$$Changelog$$$Bug fixes$$$Prevent ui error when last org member is removed (#23018; b49c4b3)$$$Networking: Retry after transport dial timeouts (cherry-pick/v2.30) (#22977; 26e3da1)$$$Bump aibridge to v1.0.9 to forward Anthropic-Beta header (#22936; 2970c54)$$$Compare: v2.30.3...v2.30.4$$$$$$Container image$$$docker pull ghcr.io/coder/coder:2.30.4$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.29.7.0
v2.29.7 Stable (since February 23; 2026)$$$Changelog$$$BREAKING CHANGES$$$feat(site)!: add consent prompt for auto-creation with prefilled parameters $$$$$$Features$$$Convert soft_limit to limit $$$$$$Bug fixes$$$Avoid re-using AuthInstanceID for sub agents$$$$$$Chores$$$Bump versions of gh actions for 2.29$$$Bump bundled terraform to 1.14.5 for 2.29
Coder x64 Version 2.29.7.0
v2.29.7 Stable (since February 23; 2026)$$$Changelog$$$BREAKING CHANGES$$$feat(site)!: add consent prompt for auto-creation with prefilled parameters $$$$$$Features$$$Convert soft_limit to limit $$$$$$Bug fixes$$$Avoid re-using AuthInstanceID for sub agents$$$$$$Chores$$$Bump versions of gh actions for 2.29$$$Bump bundled terraform to 1.14.5 for 2.29
Coder x64 Version 2.29.6.0
v2.29.6 Stable (since February 05; 2026)$$$Changelog$$$Chores$$$Backport fixes (#21957; b275be2)$$$$$$This change propagates the correct exit code on agent shutdown; improves logging; fixes an issue where prebuild claims were not included in the in-flight transaction; and resolves an errant nil panic in the agentsocket client.$$$$$$Compare: v2.29.5...v2.29.6
Coder x64 Version 2.29.6.0
v2.29.6 Stable (since February 05; 2026)$$$Changelog$$$Chores$$$Backport fixes (#21957; b275be2)$$$$$$This change propagates the correct exit code on agent shutdown; improves logging; fixes an issue where prebuild claims were not included in the in-flight transaction; and resolves an errant nil panic in the agentsocket client.$$$$$$Compare: v2.29.5...v2.29.6
Coder x64 Version 2.28.6.0
Stable (since December 09; 2025)$$$Changelog$$$Security Update$$$Update react to apply patch for CVE-2025-55182 (#21084) (#21175; df47153)$$$Coder is not affected. This vulnerability specifically targets implementations using React Server Components. As Coder does not utilize Server Components; there is no exploitable attack surface. We are applying this patch proactively to limit security tooling noise and avoid unnecessary concerns.
Coder x64 Version 2.28.6.0
Stable (since December 09; 2025)$$$Changelog$$$Security Update$$$Update react to apply patch for CVE-2025-55182 (#21084) (#21175; df47153)$$$Coder is not affected. This vulnerability specifically targets implementations using React Server Components. As Coder does not utilize Server Components; there is no exploitable attack surface. We are applying this patch proactively to limit security tooling noise and avoid unnecessary concerns.
Coder x64 Version 2.28.5.0
v2.28.5$$$Stable (since Dec 2; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Do not notify marked for deletion for deleted workspaces (#20937) (#20945; ed5785f)$$$Allow agents to be created on dormant workspaces (#20909) (#20912; d81d7ee)$$$Performance improvements$$$Optimize migration 371 to run faster on large deployments (#20906) (#21042; 8d18875) (@geokat)
Coder x64 Version 2.28.5.0
v2.28.5$$$Stable (since Dec 2; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Do not notify marked for deletion for deleted workspaces (#20937) (#20945; ed5785f)$$$Allow agents to be created on dormant workspaces (#20909) (#20912; d81d7ee)$$$Performance improvements$$$Optimize migration 371 to run faster on large deployments (#20906) (#21042; 8d18875) (@geokat)
Coder x64 Version 2.28.5.0
v2.28.5$$$Stable (since Dec 2; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Do not notify marked for deletion for deleted workspaces (#20937) (#20945; ed5785f)$$$Allow agents to be created on dormant workspaces (#20909) (#20912; d81d7ee)$$$Performance improvements$$$Optimize migration 371 to run faster on large deployments (#20906) (#21042; 8d18875) (@geokat)
Coder x64 Version 2.27.6.0
v2.27.6$$$Stable (since November 12; 2025)$$$Changelog$$$Chores$$$Upgrade aibridge lib to fix cache issue $$$AI Bridges injected MCP tools were not being set in a stable sort order. This lead to invalidation of the cache in upstream AI providers APIs; resulting in more cache writes and therefore higher token spend. Deployments with AI Bridge enabled as well as the oauth2 and mcp-server-http experiments will be affected by this bug; and are highly encouraged to upgrade.$$$$$$Compare: v2.27.5...v2.27.6 - Refer: https://github.com/coder/coder/compare/v2.27.5...v2.27.6
Coder x64 Version 2.27.6.0
v2.27.6$$$Stable (since November 12; 2025)$$$Changelog$$$Chores$$$Upgrade aibridge lib to fix cache issue $$$AI Bridges injected MCP tools were not being set in a stable sort order. This lead to invalidation of the cache in upstream AI providers APIs; resulting in more cache writes and therefore higher token spend. Deployments with AI Bridge enabled as well as the oauth2 and mcp-server-http experiments will be affected by this bug; and are highly encouraged to upgrade.$$$$$$Compare: v2.27.5...v2.27.6 - Refer: https://github.com/coder/coder/compare/v2.27.5...v2.27.6
Coder x64 Version 2.27.3.0
Stable (since October 16; 2025)$$$Changelog$$$Note$$$$$$This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.$$$$$$Bug fixes$$$Fix incorrect rendering of RBAC in Helm chart when workspacePerm… (#20596; 800dd9c)$$$Fixed incorrect rendering of Kubernetes RBAC resources in Helm chart when workspacePerms=false. Previously; Role and RoleBinding resources were still created for workspace namespaces even when workspace permissions were explicitly disabled; potentially granting unintended permissions.
Coder x64 Version 2.26.2.0
Changelog$$$Bug fixes$$$Avoid connection logging crashes in agent [2.26] (#20306; 03440f6)$$$Chores$$$Upgrade coder/clistat to v1.1.1 (#20322) (#20324; 4793806)
Coder x64 Version 2.26.2.0
Changelog$$$Bug fixes$$$Avoid connection logging crashes in agent [2.26] (#20306; 03440f6)$$$Chores$$$Upgrade coder/clistat to v1.1.1 (#20322) (#20324; 4793806)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.25.3.0
v2.25.3 Latest$$$Stable (since October 01; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$Stop reading closed channel for /watch devcontainers endpoint (#19373) (@DanielleMaywood)
Coder x64 Version 2.26.1.0
v2.26.1 Latest$$$@github-actions github-actions released this last week$$$ v2.26.1$$$ 7afe6c8 $$$Stable (since October 7; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$pin pg_dump version when generating schema (#19696; c0f1b9d) (@ethanndickson)$$$Remove expensive GetWorkspaces query from entitlements (#19747; 5369204) (@kacpersaw)
Coder x64 Version 2.25.3.0
v2.25.3 Latest$$$Stable (since October 01; 2025)$$$Changelog$$$Bug fixes$$$Server: Ensure agent WebSocket conn is cleaned up (#19711; 7afe6c8) (@DanielleMaywood)$$$Stop reading closed channel for /watch devcontainers endpoint (#19373) (@DanielleMaywood)
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.25.2.0
v2.25.2 Latest$$$Stable (since September 04; 2025)$$$Changelog$$$Security Fixes$$$Expire token for prebuilds user when regenerating session token$$$? Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using the coder-login module.$$$$$$Server: Add audit log on creating a new session key$$$Adds an audit log entry when an API key is created via coder login.$$$$$$Bug Fixes$$$Fix GCP service accounts$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.25.2
Coder x64 Version 2.24.3.0
v2.24.3 $$$Stable (since August 07; 2025)$$$Changelog$$$Bug fixes$$$Pin Nix version to 2.28.4 to avoid JSON type error (#19223; 9df4992)$$$Upgrade to 1.24.6 to fix race in lib/pq queries (#19214) (#19219; 7f6cefd)$$$? Resolves CVE-2025-47907; details can be found here in golang/go. Additionally; see our blog about this vulnerability.$$$Use system context for querying workspaces when deleting users (#19211) (#19227; c219a9a)$$$Backport coder desktop + corporate vpn fixes for 2.24 (#19177; bc502b5)$$$$$$Chores$$$Publish CLI binaries and detached signatures to releases.coder.com (#18901; 3e0645c)$$$Database: Optimize AuditLogs queries (#19193; 5ff7496) (@kacpersaw)$$$Compare: v2.24.2...v2.24.3$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.24.3
Coder x64 Version 2.24.3.0
v2.24.3 $$$Stable (since August 07; 2025)$$$Changelog$$$Bug fixes$$$Pin Nix version to 2.28.4 to avoid JSON type error (#19223; 9df4992)$$$Upgrade to 1.24.6 to fix race in lib/pq queries (#19214) (#19219; 7f6cefd)$$$? Resolves CVE-2025-47907; details can be found here in golang/go. Additionally; see our blog about this vulnerability.$$$Use system context for querying workspaces when deleting users (#19211) (#19227; c219a9a)$$$Backport coder desktop + corporate vpn fixes for 2.24 (#19177; bc502b5)$$$$$$Chores$$$Publish CLI binaries and detached signatures to releases.coder.com (#18901; 3e0645c)$$$Database: Optimize AuditLogs queries (#19193; 5ff7496) (@kacpersaw)$$$Compare: v2.24.2...v2.24.3$$$$$$Container image$$$docker pull ghcr.io/coder/coder:v2.24.3
Coder x64 Version 2.23.4.0
Changelog$$$Bug fixes$$$CLI: Handle nil unwrap errors when formatting to fix error messages when offline (#18821; a7f0dba) (@ethanndickson)$$$Add RDP icon for modules and Desktop (#18738; 63155d2) (@matifali)$$$sign coder binaries with the release key using GPG (#18867; 1c8ba51) (@jdomeracki-coder)$$$Compare: v2.23.3...v2.23.4
Coder x64 Version 2.23.4.0
Changelog$$$Bug fixes$$$CLI: Handle nil unwrap errors when formatting to fix error messages when offline (#18821; a7f0dba) (@ethanndickson)$$$Add RDP icon for modules and Desktop (#18738; 63155d2) (@matifali)$$$sign coder binaries with the release key using GPG (#18867; 1c8ba51) (@jdomeracki-coder)$$$Compare: v2.23.3...v2.23.4
Coder x64 Version 2.23.3.0
v2.23.3$$$Stable (since July 09; 2025)$$$Changelog$$$Bug fixes$$$Handle paths with spaces when using coder config-ssh (#18778; 049feec) (@spikecurtis)$$$Compare: v2.23.2...v2.23.3$$$Container image$$$docker pull ghcr.io/coder/coder:v2.23.3$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.23.3.0
v2.23.3$$$Stable (since July 09; 2025)$$$Changelog$$$Bug fixes$$$Handle paths with spaces when using coder config-ssh (#18778; 049feec) (@spikecurtis)$$$Compare: v2.23.2...v2.23.3$$$Container image$$$docker pull ghcr.io/coder/coder:v2.23.3$$$Install/upgrade$$$Refer to our docs to install or upgrade Coder; or use a release asset below.
Coder x64 Version 2.23.2.0
v2.23.2$$$Changelog$$$Bug fixes$$$Stop tearing down non-TTY processes on SSH session end (#18677; 75e7a93) (@spikecurtis)$$$Resolves an issue with SSH connections via VSCode disconnecting after a short period.$$$Dashboard: Remove trailing comment from cursor.svg (#18378; 8e8dd58) (@ethanndickson)$$$Chores$$$Add windows icon (#18322; bc089f3) (@aslilac)
Coder x64 Version 2.23.2.0
v2.23.2$$$Changelog$$$Bug fixes$$$Stop tearing down non-TTY processes on SSH session end (#18677; 75e7a93) (@spikecurtis)$$$Resolves an issue with SSH connections via VSCode disconnecting after a short period.$$$Dashboard: Remove trailing comment from cursor.svg (#18378; 8e8dd58) (@ethanndickson)$$$Chores$$$Add windows icon (#18322; bc089f3) (@aslilac)
Coder x64 Version 2.22.1.0
Changelog$$$Bug fixes$$$Correct environment variable name for MCP app status slug$$$Remove unnecessary user lookup in AI agent API calls
Coder x64 Version 2.22.1.0
Changelog$$$Bug fixes$$$Correct environment variable name for MCP app status slug$$$Remove unnecessary user lookup in AI agent API calls
Coder x64 Version 2.21.3.0
Changelog$$$Bug fixes$$$Remove site wide perms from creating a workspace (#17296; 3fa1030) (@Emyrk)$$$Add path & method labels to prometheus metrics for current requests (#17362; 1d2af9c) (@ibetitsmike)$$$Log long-lived connections acceptance (#17219; 991d38c) (@ibetitsmike)$$$Extend request logs with auth & DB info (#17497; f8d3fbf) (@ibetitsmike)$$$Reduce excessive logging when database is unreachable (#17363; 9ea3910) (@dannykopping)$$$Log correct error on drpc connection close error (#17265; b1ccf48) (@aaronlehmann)$$$Dont attempt to insert empty terraform plans into the database (cherry-pick #17426) (#17486; 9b3c7d7) (@aslilac)$$$Dont show promote button for members (#17511; 1e8ac6c) (@BrunoQuaresma)$$$Prevent null loading sync settings (#17430; b760f1d) (@Emyrk)$$$Fixes an issue causing front end to not load under certain condition.
Coder x64 Version 2.20.3.0
Changelog$$$Bug fixes$$$Add path & method labels to prometheus metrics for current requests$$$Extend request logs with auth & DB info$$$Reduce excessive logging when database is unreachable$$$Prevent null loading sync settings$$$Fixes an issue causing front end to not load.
Coder x64 Version 2.20.2.0
Stable (since April 1; 2025)$$$Changelog$$$Bug fixes$$$Hide deleted users from org members query$$$Fix deployment settings navigation issues
Coder x64 Version 2.20.2.0
Stable (since April 1; 2025)$$$Changelog$$$Bug fixes$$$Hide deleted users from org members query$$$Fix deployment settings navigation issues
