Stable (since September 04, 2025)

Changelog

Security Fixes

• Expire token for prebuilds user when regenerating session token (#19667) (#19668,ec66090) (@johnstcn)

  ⚠ Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using thecoder-login module. Read more in ourGHSA for this vulnerability.

• Server: Add audit log on creating a new session key (#19672) (#19684,a79adb1) (@johnstcn)

  Adds an audit log entry when an API key is created viacoder login.

Bug Fixes

• Fix GCP service accounts (#19312) (#19315,d324cf7) (@ethanndickson)

Compare:v2.25.1...v2.25.2

Container image

• docker pull ghcr.io/coder/coder:v2.25.2

Install/upgrade

Refer to our docs toinstall orupgrade Coder, or use a release asset below.

Contributors