Sourced fromgithub.com/coder/coder/v2's releases.

v2.29.0

Changelog

[!NOTE]This is a mainline Coder release. We advise enterprise customers without a staging environment to install ourlatest stable release while we refine this version. Learn more about ourRelease Schedule.

[!IMPORTANT]This release is also the next Extended Support Release for Coder. For guidance on upgrading from the first ESR,Coder 2.24, see the detailed upgrade noteshere.

BREAKING CHANGES

• chore!: allow coder MCP tools to not be injected (#20713, 04f809f2d) (@​dannykopping)

  Coder MCP tools were previously automatically injected; this will now need to be explicitly enabled withCODER_AIBRIDGE_INJECT_CODER_MCP_TOOLS=true

• feat(cli)!: enable keyring usage by default (#20851, 6238a9927) (@​zedkipp)

  In order to move away from storing the CLI session token in plain text file, this change begins using the operating system keyring for CLI session token storage by default on Windows and macOS. This will be a breaking change for any users depending on the session token being stored to or read from disk. Users can opt-out and restore file usage via the --use-keyring=false flag.

• refactor!: remove TaskAppID from codersdk.WorkspaceBuild (#20583, d80b5fc8e) (@​DanielleMaywood)

  The task_app_id field has been removed from the codersdk.WorkspaceBuild struct and API responses. If your code or integrations rely on WorkspaceBuild.task_app_id to identify the task's associated app, you should migrate to using Task.WorkspaceAppID instead (available on the Task object directly). The deprecated ai_task_sidebar_app_id field remains temporarily but also points to the new location.

Features

Bridge

• Add page for ai-bridge interception logs (#20331, 3bb7975a1) (@​jakehwll)
• Addduration to the Request Logs details (#20756, f559e51d7) (@​jakehwll)
• Add configurable retention for aibridge (#20828, 5a7d4f69f) (@​dannykopping)
• Exposeaibridged metrics (#20865, c6631e1e5) (@​dannykopping)

CLI

• Optionally store session token in OS keyring (#20256, 139dab7cf) (@​zedkipp)
• Add macOS support for session token keyring storage (#20613, 5e85663ce) (@​zedkipp)
• Promote tasks commands from experimental to GA (#20916, ad8ba4aac) (@​mafredri)

Dashboard

• Fix build timeline to include entire stage timings (#20805, aff208048) (@​Emyrk)
• Associate task icon with workspaces (#20834, 2a9afc77d) (@​ssncferreira)
• Add startup script error alerts to Task Page (#20820, 8e22cd707) (@​DanielleMaywood)
• Use display name field for tasks (#20918, 2f399eafa) (@​ssncferreira)

Experimental Features

• Add agent unit manager (#20715, 500c17e25) (@​SasSwart)
• Add agent socket API (#20717, 2840fdcb5) (@​SasSwart)
• Implement agent socket api, client and cli (#20758) (#20976, abe66a38e)

... (truncated)

• ba71b32 fix: remove a sensitive field from an agent log line (#20968) (#21063)
• c94c470 fix: pass context with authorization to agentapi (#21045)
• 8430dd6 fix(cli): remove defaulting to keyring when --global-config set (cherry-pick)...
• 0bd0990 feat: add notification warning alert to Tasks page (#20900) (#20981)
• 10e70f8 fix: show task display name in task topbar (#20957) (#20980)
• abe66a3 feat: implement agent socket api, client and cli (#20758) (#20976)
• cd9d3ef fix: ensure we check if the user can actually seeai bridge (#20964)
• c0a2522 fix(site): only show active tasks in waiting for input tab (#20933) (#20955)
• dfa25d5 chore: document bedrock setup process foraibridge (#20956) (#20966)
• c87c33f perf: add index to improve the GetWorkspaceAgentByInstanceID query performanc...
• Additional commits viewable incompare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)