Typos and other errors often result in invalid presets in a template.Coder would import these broken templates and present them to users whenthey create workspaces. An unsuspecting user who chooses a broken presetwould then experience a failed workspace build with no obvious errormessage.This PR adds additional validation beyond what is possible in theTerraform provider schema. Coder will now present a more helpful errormessage to template authors when they upload a new template version:<img width="1316" height="286" alt="Screenshot 2025-07-14 at 12 22 49"src="https://github.com/user-attachments/assets/7f5f778f-d9ae-487a-95e2-f6f1ca604a9c"/>The frontend warning is less helpful right now, but I'd like to addressthat in a follow-up since I need frontend help:<img width="1102" height="616" alt="image"src="https://github.com/user-attachments/assets/e838ffc8-ef4f-428d-9280-74fa0c491666"/>closes#17333<!-- This is an auto-generated comment: release notes by coderabbit.ai-->## Summary by CodeRabbit* **New Features*** Improved validation and error reporting for template presets,providing clearer feedback when presets cannot be parsed or referenceundefined parameters.* **Bug Fixes*** Enhanced error handling during template version creation to betterdetect and report issues with presets.* **Tests*** Added new tests to verify validation of both valid and invalidTerraform presets during template version creation.* Improved test reliability by enabling dynamic control over errorinjection in database-related tests.* **Chores*** Updated a dependency to the latest version for improved stability andfeatures.<!-- end of auto-generated comment: release notes by coderabbit.ai -->(cherry picked from commitf256a23)

…19114)We disable the logic that allows autostarting discovered devcontainersby default. We want this behavior to be opt-in rather than opt-out.---------Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>(cherry picked from commitb8e2344)

16.0.0 was yanked from the macOS runners, so this will likely need cherry picking into the upcoming release branch.We've already checked everything builds fine on#19125.In a few releases we'll stop building the dylib and also therefore remove xcode as a dependency on coder/coder altogether.(cherry picked from commitb95cf47)

Document how to start a remote MCP Coder server. Addressescoder/internal#823.(cherry picked from commita02d1c1)

# Add OAuth2 Provider DocumentationThis PR adds comprehensive documentation for the experimental OAuth2Provider feature, which allows Coder to function as an OAuth2authorization server. The documentation covers:- Feature overview and experimental status warning- Setup requirements and enabling the feature- Methods for creating OAuth2 applications (UI and API)- Integration patterns including standard OAuth2 and PKCE flows- Discovery endpoints and token management- Testing and development guidance- Troubleshooting common issues- Security considerations and current limitationsThe documentation is marked as experimental and includes appropriatewarnings about production usage.Signed-off-by: Thomas Kosiewski <tk@coder.com>(cherry picked from commit247efc0)

Adds the oauth2-provider doc page to the manifest so it's rendered inthe docs, fixes formatting in the oauth2-provider doc, and links to itfrom the MCP doc.To see the formatting issues, visithttps://coder.com/docs/@4bcf44a/admin/integrations/oauth2-provider. Tosee the doc after the fixes, visithttps://coder.com/docs/@f05969a/admin/integrations/oauth2-provider.(cherry picked from commitc94333d)

Work around for following issue:```Run sudo mdutil -a -i off  sudo mdutil -a -i off  sudo mdutil -X /  sudo launchctl bootout system /System/Library/LaunchDaemons/com.apple.metadata.mds.plist  shell: /bin/bash -e {0}4 files/directories removedBoot-out failed: 5: Input/output error```This can happen if spotlight has already been disabled.(cherry picked from commit6a35400)