v2.12.0

Changelog

Note

This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Networking Performance Improvements

Since version 2.9.0, we've made several improvements to our networking layer, culminating in remarkable performance gains in 2.12.0. You’ll immediately notice faster file transfers to and from your Coder Workspaces, more stable connections with less initial stutter, and a smoother experience when testing resource-heavy applications.

Read more about this on our blog: How We Improved Performance of Userspace TCP Stack in Go by 5x

Features

• Mask coder login token to enhance security (#12948, 060f023) (@michaelbrewer)
• Use latest gVisor and go 1.22.3 (#13338, b43344b) (@spikecurtis)
• Add support for multiple banners (#13081, d8e0be6) (@aslilac)
• Measure pubsub latencies and expose metrics (#13126, 4671ebb) (@dannykopping)
• Popover paywall in appearance settings (#13217, 7eb228e) (@aslilac)
• Store coder_workspace_tags in the database (#13294, b8b80fe) (@mtojek)
• Open most recent directory or workspace when launching VS Code (#13326, 8e78b94) (@code-asher)
• Allow workspaces to select a provisioner tag (#13333, c2837a6) (@mtojek)
• Server: Add times_used to coder_apps in insights API (#13292, a0fce36) (@mafredri)
• Server: Add endpoints for editing and deleting organizations (#13287, 3f1e9c0) (@aslilac)
• Provisioner: Pass owner git ssh key via Terraform (#13366, cca3cb1) (@johnstcn)
• Dashboard: Open README links in new tab (#13264, a5a6494) (@BrunoQuaresma)
• Dashboard: Show number of times coder_app is opened (#13335, f27f5c0) (@BrunoQuaresma)
  
• Dashboard: Show "update and start" button when updates are required by the template (#13334, 78deaba) (@BrunoQuaresma)

Bug fixes

• Install openrc service on alpine (#12294) (#12870, b20c63c) (@recanman)
• Make handleManifest always signal dependents (#13141, d51c691) (@spikecurtis)
• Use a native websocket.NetConn for agent RPC client (#13142, e76b595) (@spikecurtis)
• Prevent extending if template disallows (#13182, 24448e7) (@BrunoQuaresma)
• Skip license review for dependabot (#13239, 82c1562) (@sreya)
• Fix nix flake sed command (#13243, ee817b4) (@sreya)
• Properly convert max port share level for oss (#13261, ebee928) (@f0ssel)
• Update tests for useClipboard to minimize risks of flakes (#13250, 63e0685) (@Parkreiner)
• Wait for PGCoordinator to clean up db state (#13351, a0962ba) (@spikecurtis)
• Respect --disable-direct-connections on coder speedtest (#13377, a551aa5) (@spikecurtis)
• Stop logging workspace agent unless verbose (#13378, 84b3121) (@spikecurtis)
• Block writes from gVisor to tailscale instead of dropping (#13389, b7edf5b) (@spikecurtis)
• Increses DERP send queue length to 512 for increased throughput (#13406, 5aea803) (@spikecurtis)
• Return error if agent init script fails to download valid binary (#13280, 59ab505) (@dannykopping)
• Update install.sh to remove dead doc link (#13308, bee4ece) (@Kira-Pilot)
• Update DeleteWorkspaceOptions to pick properties correctly (#13423, 19530c6) (@Parkreiner)
• CLI: Skip optional coder_external_auth (#13368, bc8126f) (@michaelbrewer)
• Installer: Install from github when using --stable on macOS (#13216, e14f8fb) (@aslilac)
• Dashboard: Fix group badge visual (#13263, f149279) (@BrunoQuaresma)
• Dashboard: Fix floating number on duration fields (#13209, 4af0f09) (@BrunoQuaresma)
• Dashboard: Correct the size and position of the timeline trail in safari (#13348, d748c6d) (@aslilac)

Documentation

• Show the proper Redirect URI for Gitea (#13162, 6f5c183) (@Idleite)
• Bump mainline version to v2.11.0 (#13202, c73d5a2) (@stirby)
• Describe AWS hard NAT (#13205, 1832a75) (@spikecurtis)
• Bump k8s install version (#13302, 92c5dfa) (@coadler)
• Describe workspace tags (#13352, 98fa823) (@mtojek)
• docs(admin/external-auth.md): add JFrog Artifactory guide (#13166, 7c3ec51) (@matifali)
• docs(ides): document connection via JetBrains Fleet (#13179, 6790993) (@matifali)

Code refactoring

• Improve test isolation for Axios API logic (#13125, f13b1c9) (@Parkreiner)
• Dashboard: Refactor the workspace settings form (#13198, 35cb572) (@BrunoQuaresma)
• Dashboard: Hide unavailable usage information (#13341, 390ff9a) (@BrunoQuaresma)

Tests

• Database: Fix DST issue in dbpurge test (#13170, 619ec92) (@mafredri)

Continuous integration

• Sync terraform version (#13187, 05facc9) (@matifali)
• Only send docs-check notifications on schedule (#13191, b56c9c4) (@matifali)
• Fix test-migrations target when main branch is not present locally (#13306, f23d480) (@johnstcn)
• Re-pin actions/dependency-review-action back to a release (#13309, f176ff5) (@coadler)
• Re-enable test migrations in release workflow (#13307, 45b45f1) (@johnstcn)
• Build base image on PRs (#13409, 6730c24) (@matifali)
• Fix syntax issue in docker-base.yaml (#13412, 7a7bef0) (@matifali)

Chores

• Fix build ci (#13164, 886a97b) (@coadler)
• Add EasyNATDERP tailnet integration test (#13138, d956af0) (@deansheather)
• Remove superfluous context.Canceled handling (#13140, 2efb46a) (@spikecurtis)
• Add build targets to nix flake (#13186, 3e31187) (@kylecarbs)
• Add DERP websocket integration tests (#13168, 5e8f97d) (@deansheather)
• Implement easy NAT direct integration test (#13169, 72f2efe) (@deansheather)
• Add tailnet integration test CI job (#13181, 677be9a) (@deansheather)
• Add nginx topology to tailnet tests (#13188, 421c0d1) (@coadler)
• Enable terraform provisioners in e2e by default (#13134, a4bd50c) (@Emyrk)
• Prevent commit signing in tests (#13222, 989575c) (@dannykopping)
• Remove dependabot config for dogfood template (#13230, 6182ee9) (@matifali)
• Add multi-org experiment for UI view toggling (#13260, 9ced001) (@Emyrk)
• Add setting to enable multi-organization ui (#13266, 2b29559) (@aslilac)
• Add workspace activity linter (#13273, 721ab2a) (@f0ssel)
• Expose all organization ids from AuthContext (#13268, a8a0be9) (@aslilac)
• Push rbac actions to policy package (#13274, cb6b5e8) (@Emyrk)
• Remove rbac psuedo resources, add custom verbs (#13276, 1f5788f) (@Emyrk)
• Verify validity of built in rbac roles (#13296, 194be12) (@Emyrk)
• Implement databased backend for custom roles (#13295, cf91eff) (@Emyrk)
• Fix TestMeasureLatency/MeasureLatencyRecvTimeout flake (#13301, 85de0e9) (@coadler)
• Implement api for creating custom roles (#13298, ad8c314) (@Emyrk)
• Update git -> 2.43.4 (#13299, 80538c0) (@coadler)
• Update Terraform -> 1.8.4 (#13429, b723da9) (@coadler)
• Add unique org name constraint to db (#13311, a63d427) (@aslilac)
• Fix tailnet integration test flake (#13313, 2732094) (@deansheather)
• Expose formatExamples enterprise commands (#13304, 0a86d6d) (@Emyrk)
• Update kubernetes.md, bumping stable from v2.9.4 to v2.10.2 (#13275, 7ea4a89) (@jmshoffs0812)
• Generate terraform testdata with matching terraform version (#13343, 3364abe) (@kylecarbs)
• Update scale docs to include guidelines for wsproxies (#13350, c67eba1) (@johnstcn)
• Include custom roles in list org roles (#13336, 1b4ca00) (@Emyrk)
• Add easy NAT integration tests part 2 (#13312, e5bb0a7) (@deansheather)
• Skip Azure TestExpiresSoon (#13385, 79d73f7) (@kylecarbs)
• Add refresh token and error to user's external auth page (#13380, 6293c33) (@Emyrk)
• Hard NAT <-> easy NAT integration test (#13314, 9299e9f) (@deansheather)
• Upgrade go.uber.org/goleak (#13388, 02c3686) (@coadler)
• Move stat reporting into workspacestats package (#13386, 5789ea5) (@f0ssel)
• Update deprecated usage of coder_workspace.owner* fields (#13390, e176867) (@johnstcn)
• Remove git pinning (#13414, 7569ccc) (@dannykopping)
• Move template meta last_used_at update to workspacestats (#13415, de8149f) (@f0ssel)
• Rename notification banners to announcement banners (#13419, b248f12) (@aslilac)
• Documentation: Replace git-auth with external-auth (#13167, 3e77f5b) (@matifali)
• Documentation: Update k8s mainline version (#13346, a40e954) (@coadler)
• Documentation: Update github app permission to read org members (#13362, 47f8f5d) (@matifali)
• Documentation: Add recommendations for dependency management (#13400, 7cc96f5) (@johnstcn)
• chore(dogfood): bump module versions to latest (#13246, 7358c1b) (@matifali)
• chore(README): add hiring link (#13345, ed6ee9a) (@ammario)
• chore(scripts): fix stable release promote script (#13204, f66d044) (@mafredri)
• chore(scripts): remove gh_auth from release.sh (#13347, fa9edc1) (@coadler)
• chore(scripts): handle renamed cherry-pick commits in release script (#13395, 374f0a0) (@mafredri)
• chore(scripts): push version bump pr branch in release script (#13397, 9ae825e) (@mafredri)
• chore(scripts): add custom gh auth to release script (#13396, 5fb2317) (@mafredri)
• chore(scripts): add safety check for difference between dry run release notes (#13398, 9eb797e) (@mafredri)
• chore(scripts): fix expression interpreted as exit code on some Bash versions (#13417, 4758952) (@mafredri)
• Dashboard: Fix portforward issue with vite (#13262, 8412450) (@BrunoQuaresma)
• Fix unbound variable in tag_version.sh (#13428, ba0bf43) (@mafredri)

Other changes

• Added documentation for using JetBrains Fleet (#13363, ec78f54) (@stirby)
• Fixed sharable port + coder_app interaction (#13285, 114fb31) (@stirby)
• Update manifest.json (#1339...

v2.11.2

Stable (since June 04, 2024)

Changelog

Bug fixes

• Properly detect agent resouces in terraform (#13343, 9c5fc3b)
• Prevent stdlib logging from messing up coder ssh (#13161, d53c94b)

Compare: v2.11.1...v2.11.2

Container image

• docker pull ghcr.io/coder/coder:v2.11.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.10.3

Changelog

Chores

• 84ec2dc chore: update git to v2.43.4
  • CVE-2024-32002
  • CVE-2024-32004
  • CVE-2024-32465

Compare: v2.10.2...v2.10.3

Container image

• docker pull ghcr.io/coder/coder:v2.10.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.11.1

Changelog

Note

This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Security

• Update Git to 2.43.4 (#13299, 80538c0) (@coadler)
  • CVE-2024-32002
  • CVE-2024-32004
  • CVE-2024-32465
• Update Terraform to v2.7.5 (#13299, 80538c0) (@coadler)

Compare: v2.11.0...v2.11.1

Container image

• docker pull ghcr.io/coder/coder:v2.11.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.11.0

Changelog

Note

This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Features

• Add owner groups to workspace data (#12841, f96ce80) (@f0ssel)
• Remove health link from deployment sidebar (#12914, 08451ce) (@mtojek)
• Add s suffix to use HTTPS for ports (#12862, 1d4bf30) (@f0ssel)
• Link with protocol on shared ports (#12908, acaa254) (@f0ssel)
• Add agent acks to in-memory coordinator (#12786, e801e87) (@coadler)
• Add listening ports protocol selector (#12915, 3ab5a51) (@f0ssel)
• Add warning about use of old/removed/invalid experiments (#12962, b85d5d8) (@dannykopping)
• Show version on login page (#13033, 215dd7b) (@aslilac)
• Specify a custom "terms of service" link (#13068, 74f2771) (@aslilac)

  New login page preview with placeholder version
  

• Add switch http(s) button to error page (#12942, 8ba05a9) (@f0ssel)
• Sign windows binaries (#13086, 8269124) (@sreya)
• Influence parameter defaults through cli flag/env (#13039, 0e3dc2a) (@aaronlehmann)
• Add deployment_id to the ui and licenses (#13096, 1bda8a0) (@kylecarbs)
• Try IPv6 when dialing IPv4 in workspaces (#13116, f2dd0a8) (@deansheather)
• Move shared ports out of experiment and into GA (#13120, c550d06) (@f0ssel)

  Sharable ports is now general access with some new polish
  

• CLI - Support bundle: dump healthcheck summary (#12963, 407e61e) (@johnstcn)
• CLI - Support bundle: show links to docs/admin/healthcheck (#12974, 8e1e0f0) (@johnstcn)

  Read more about this in our guide on creating a support bundle.

• CLI: Add --env flag for coder ssh (#12991, 8a12162) (@aaronlehmann)
• Database: Keep only 1 day of workspace_agent_stats after rollup (#12674, e17e8aa) (@mafredri)
• Server: Improve detection of STUN issues (#12951, 9a4703a) (@johnstcn)
• Enterprise: Add ready for handshake support to pgcoord (#12935, 777dfbe) (@coadler)
• Scripts: add script to check schema between migrations (#13037, e57ca3c) (@johnstcn)

Bug fixes

• Fix race in assertWorkspaceLastUsedAtUpdated (#12899, 3b7380f) (@spikecurtis)
• Update typo in audit log field (#12907, d82f2fd) (@coryb)
• Stop logging session shutdown as warning (#12922, 5469011) (@spikecurtis)
• Ignore gomock temporary files (#12924, b6359b0) (@mtojek)
• Show template autostop setting when it overrides the workspace setting (#12910, 2ad7fcc) (@aslilac)
• Use provided username when fetching workspaces (#12955, d3790bb) (@kylecarbs)
• Disable azureidentity test on darwin (#12979, 942e902) (@coadler)
• Add grace period before showing replicas license error (#12989, 227e632) (@kylecarbs)
• Update API code to use Axios instances (#13029, 3f21cb8) (@Parkreiner)
• Start packet capture immediately on speedtest (#13128, 3de737f) (@spikecurtis)
• Remove mention of protocol lag (#13133, 699e187) (@f0ssel)
• Ensure signing out cannot cause any runtime render errors (#13137, 7873c96) (@Parkreiner)
• Add more tests for metadata hook functionality (#13145, 34a3bdc) (@Parkreiner)
• Agent: Keep track of lastReportIndex between invocations of reportLifecycle(#13075, 99dda4a) (@johnstcn)
• CLI: Allow generating partial support bundles with no workspace or agent (#12933, fad97a1) (@johnstcn)
• CLI: Scaletest: ignore errors syncing output (#13076, 365231b) (@johnstcn)
• Server: Properly calculate query latency for tailnet queries (#12944, 231fc26) (@coadler)
• Database: Reduce db load via dbpurge advisory locking (#13021, 3adcccb) (@mafredri)
• Server: Avoid logging error for no rows (#12988, 9219044) (@mafredri)
• Enterprise: Mark nodes from unhealthy coordinators as lost (#13123, ebacced) (@coadler)
• Examples: Copy /etc/skel on init in docker template (#12913, 0178bfe) (@mafredri)
• Installer: Use --version when provided (#12873, 61e5721) (@michaelbrewer)
• Installer: Change post-install advisory when installing specific version (#12878, c243210) (@mafredri)
• Installer: Remove extracted files after installation (#12879, b06452e) (@mafredri)
• Dashboard: Fix template schedule options (#13084, 053c56c) (@BrunoQuaresma)
• Dashboard: Fix template schedule update overriding other settings (#13114, 71a03a8) (@BrunoQuaresma)
• Support: Correctly rename existing agent connection info, add real netcheck (#12946, b163bc7) (@johnstcn)

Documentation

• Describe multi-cloud architecture (#12857, 90efa1b) (@mtojek)
• Describe devcontainers as deployment model (#12877, 7c0fac9) (@mtojek)
• Describe air-gapped architecture (#12897, 28754a7) (@mtojek)
• Explain that mainline stays around for one month now (#12993, f5a32b3) (@bpmct)
• Add island integration guide (#13113, 565b45d) (@ericpaulsen)

  Read the guide on our integration with the island.io secure enterprise browser.

Code refactoring

• Dashboard: Verify deployment config flags in e2e tests (#12986, ee7dda8) (@mtojek)
• Dashboard: Reorganize template schedule settings form (#13031, 2f7f9d0) (@BrunoQuaresma)

Tests

• Verify that enterprise tests are being run (#12871, c4b26f3) (@aslilac)
• Verify actually uploaded license with assert (#12934, 8da8b89) (@Emyrk)
• Fix url checks in e2e tests (#12881, c5367c2) (@aslilac)
• Add an e2e audit logs test (#12868, 00fcf36) (@aslilac)
• Dashboard: Fix flaky outdated agent test (#12927, e266ecf) (@mtojek)
• Dashboard: Add e2e tests for experiments (#12940, dcf1d3a) (@mtojek)
• Dashboard: Add e2e tests for appearance (#12950, cf2d2a9) (@mtojek)
• Dashboard: Add e2e tests for security (#12961, 4968916) (@mtojek)
• Dashboard: Add e2e tests for user auth (#12971, b598aef) (@mtojek)
• Dashboard: Add e2e tests for network (#12987, cb8c576) (@mtojek)
• Dashboard: Add e2e tests for observability (75223df) (@mtojek)
• Dashboard: Add e2e tests for workspace proxies (#13009, 3d7740b) (@mtojek)

Continuous integration

• Disable enterprise e2e tests temporarily (#12874, bc9ea61) (@aslilac)
• Execute enterprise and non-enterprise e2e tests concurrently (#12872, 9cf2358) (@aslilac)
• Release: test migrations before building (#13051, a04c76c) (@johnstcn)

Chores

• Deprecate agent report-stats endpoint (#12880, 189b862) (@Emyrk)
• Remove InsertWorkspaceAgentStat query (#12869, 0a8c8ce) (@Emyrk)
• Add date information to windows startup logs (#12905, 4dc293d) (@Emyrk)
• Merge apikey/token session config values (#12817, 838e8df) (@Emyrk)
• Disable pgcoord (HA) when --in-memory (#12919, a607d56) (@Emyrk)
• Add unit test for pass through external auth query params (#12928, 566f8f2) (@Emyrk)
• Nix shell to support playwright e2e tests (#12917, 7fd9a75) (@Emyrk)
• Deconflict e2e enterprise and AGPL artifacts in ci (#12941, b9936a4) (@Emyrk)
• Add -agpl to agpl e2e artifacts (#12943, 22785a3) (@Emyrk)
• Skip global.setup if first user already exists (#12930, 93b46fe) (@Emyrk)
• Update generated array type definitions in TypeScript to be readonly (#12947, d9da054) (@Emyrk)
• Fix broken links in the jfrog guide (#12835, c13909a) (@stirby)
• Add created_at to workspace resource telemetry (#12969, 41ca6e4) (@kylecarbs)
• Apply shellcheck recommendation which was causing "make lint" to fail locally (#12972, 06e042a) (@dannykopping)
• Fix linting issue (#12945, ba52a4f) (@coadler)
• Add license review to CI (#12981, 80f5978) (@sreya)
• Give additional time in tests for tailnetAPIConnector graceful disconnect (#12980, 6b4eb03) (@coadler)
• Add e2e test against an external auth provider during workspace creation (#12985, 319fd5b) (@dannykopping)
• Fix down migration 196 (#13006, 3aa0d73) (@coadler)
• Fix 404 for managed terraform variables (#13018, 4a6693a) (@michaelbrewer)
• Fix link to install (#13019, d2acb67) (@michaelbrewer)
• Fix broken mainline link (#13015, 7bd1b3b) (@michaelbrewer)
• Reduce dashboard requests from seeded data (#13034, d3f3ace) (@kylecarbs)
• Change site_configs.value to text (#13036, fab5591) (@aslilac)
• Deprecate gauge metrics with _total suffix (#12976, 4682355) (@snark87)
• Correct name for github enterprise example (#13083, 848ea7e) (@michaelbrewer)
• Add network integration test suite scaffolding (#13072, 15157c1) (@coadler)
• Lower azure expires soon (#13097, 1b3185c) (@kylecarbs)
• Centralize build info for site (#13104, fbb98b9) (@kylecarbs)
• Fix dependency review action (#13105, 4e59606) (@kylecarbs)
• Remove GITHUB_TOKEN from dogfood env vars (#13106, d302570) (@kylecarbs)
• Update tailscale to fix leaking dns lookup (#13109, 47993e3) (@kylecarbs)
• Dynamically determine gitlab external auth defaults (#13102, 53f7e9e) (@Emyrk)
• Cover deadline crossing autostart border on start (#13115, 845407f) (@Emyrk)
• Remove codecov (#13124, 93d8812) (@kylecarbs)
• TestIDP to be usable as primary auth (#13132, c2cb0e9) (@Emyrk)
• Enable playwright test extension in vscode (#13135, 7779c0a) (@Emyrk)
• Do network integration tests in isolated net ns (#13117, ed0ca76) (@deansheather)
• Allow terraform & echo built-in provisioners (#13121, 94a3e3a) (...

v2.10.2

Stable (since May 07, 2024)

Changelog

Chores

• Add support for additional Azure Instance Identity RSA Certificates (#13028) (@kylecarbs)

Compare: v2.10.1...v2.10.2

Container image

• docker pull ghcr.io/coder/coder:v2.10.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.9.4

Changelog

Chores

• Add support for additional Azure Instance Identity RSA Certificates (#13028) (@kylecarbs)

Compare: v2.9.3...v2.9.4

Container image

• docker pull ghcr.io/coder/coder:v2.9.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.10.1

Changelog

Features

• Added src_id and dst_id indexes to tailnet_tunnels to mitigate the risk of DB overloading (#12911)

Bug fixes

• Fixed an issue where multiple unhealthy PGCoordinators would cause outages (#12925)
• Fixed the terminal in ssh command on Windows, allowing keyboard navigation (#12990)
• Fixed an issue where code-server would not connect, responding with 502 (#12875)

Compare: v2.10.0...v2.10.1

Container image

• docker pull ghcr.io/coder/coder:v2.10.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.9.3

Changelog

Bug fixes

• Fix: make terminal raw in ssh command on Windows
  (#12990) (@deansheather)

• Fix: stop sending DeleteTailnetPeer when coordinator is unhealthy, causing outages
  (#12923) (@spikecurtis)

Compare: v2.9.2...v2.9.3

Container image

• docker pull ghcr.io/coder/coder:v2.9.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.9.2

Changelog

Bug fixes

• Fix issue causing Coder's external auth to open duplicate windows (#12729) (@aslilac)

• Fix: remove unnecessary href from external auth flow (#12586) (@emryk)

Compare: v2.9.1...v2.9.2

Container image

• docker pull ghcr.io/coder/coder:v2.9.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.