Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitd97b113

Browse files
authored
Merge branch 'main' into dependabot/gradle/main/com.squareup.moshi-moshi-1.15.2
2 parentsda7b728 +aab5916 commitd97b113

File tree

65 files changed

+3583
-1163
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

65 files changed

+3583
-1163
lines changed

‎.github/workflows/build.yml‎

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,9 @@ jobs:
2323
-windows-latest
2424
runs-on:${{ matrix.platform }}
2525
steps:
26-
-uses:actions/checkout@v4.2.2
26+
-uses:actions/checkout@v5.0.0
2727

28-
-uses:actions/setup-java@v4
28+
-uses:actions/setup-java@v5
2929
with:
3030
distribution:zulu
3131
java-version:17
@@ -56,11 +56,11 @@ jobs:
5656
steps:
5757
# Check out current repository
5858
-name:Fetch Sources
59-
uses:actions/checkout@v4.2.2
59+
uses:actions/checkout@v5.0.0
6060

6161
# Setup Java 11 environment for the next steps
6262
-name:Setup Java
63-
uses:actions/setup-java@v4
63+
uses:actions/setup-java@v5
6464
with:
6565
distribution:zulu
6666
java-version:17
@@ -82,7 +82,8 @@ jobs:
8282
echo "::set-output name=name::$NAME"
8383
echo "::set-output name=changelog::$CHANGELOG"
8484
echo "::set-output name=pluginVerifierHomeDir::~/.pluginVerifier"
85-
./gradlew listProductsReleases # prepare list of IDEs for Plugin Verifier
85+
# prepare list of IDEs for Plugin Verifier
86+
./gradlew printProductsReleases
8687
8788
# Run plugin build
8889
-name:Run Build
@@ -140,7 +141,7 @@ jobs:
140141

141142
# Check out current repository
142143
-name:Fetch Sources
143-
uses:actions/checkout@v4.2.2
144+
uses:actions/checkout@v5.0.0
144145

145146
# Remove old release drafts by using the curl request for the available releases with draft flag
146147
-name:Remove Old Release Drafts

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ jobs:
1515

1616
# Check out current repository
1717
-name:Fetch Sources
18-
uses:actions/checkout@v4.2.2
18+
uses:actions/checkout@v5.0.0
1919
with:
2020
ref:${{ github.event.release.tag_name }}
2121

2222
# Setup Java 17 environment for the next steps
2323
-name:Setup Java
24-
uses:actions/setup-java@v4
24+
uses:actions/setup-java@v5
2525
with:
2626
distribution:zulu
2727
java-version:17

‎.gitignore‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@
1414
## Gradle
1515
.gradle
1616
build
17+
jvm/
1718

1819
## Qodana
1920
.qodana

‎CHANGELOG.md‎

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,109 @@
66

77
###Added
88

9+
- support for disabling SSH wildcard config.
10+
11+
##2.22.3 - 2025-09-19
12+
13+
###Fixed
14+
15+
- relaxed SNI hostname resolution
16+
17+
##2.22.2 - 2025-09-08
18+
19+
###Fixed
20+
21+
- api keys are no longer created each time workspaces are polled
22+
23+
##2.22.1 - 2025-07-30
24+
25+
###Added
26+
27+
- support for skipping CLI signature verification
28+
29+
##2.22.0 - 2025-07-25
30+
31+
###Added
32+
33+
- support for checking if CLI is signed
34+
- improved progress reporting while downloading the CLI
35+
- URL validation is stricter in the connection screen and URI protocol handler
36+
37+
##2.21.1 - 2025-06-26
38+
39+
###Fixed
40+
41+
- marketplace logo
42+
43+
##2.21.0 - 2025-06-25
44+
45+
###Changed
46+
47+
- the logos and icons now match the new branding
48+
- the plugin is functionally the same but built with the new plugin system
49+
50+
##2.20.1 - 2025-05-20
51+
52+
###Changed
53+
54+
- Retrieve workspace directly in link handler when using wildcardSSH feature
55+
56+
###Fixed
57+
58+
- installed EAP, RC, NIGHTLY and PREVIEW IDEs are no longer displayed if there is a higher released version available for download.
59+
- project path is prefilled with the`folder` URI parameter when the IDE&Project dialog opens for URI handling.
60+
61+
##2.19.0 - 2025-02-21
62+
63+
###Added
64+
65+
- Added functionality to show setup script error message to the end user.
66+
67+
###Fixed
68+
69+
- Fix bug where wildcard configs would not be written under certain conditions.
70+
71+
##2.18.1 - 2025-02-14
72+
73+
###Changed
74+
75+
- Update the`pluginUntilBuild` to latest EAP
76+
77+
##2.18.0 - 2025-02-04
78+
79+
###Changed
80+
81+
- Simplifies the written SSH config and avoids the need to make an API request for every workspace the filter returns.
82+
83+
##2.17.0 - 2025-01-27
84+
85+
###Added
86+
87+
- Added setting "Check for IDE updates" which controls whether the plugin
88+
checks and prompts for available IDE backend updates.
89+
90+
##2.16.0 - 2025-01-17
91+
92+
###Added
93+
94+
- Added setting "Default IDE Selection" which will look for a matching IDE
95+
code/version/build number to set as the preselected IDE in the select
96+
component.
97+
98+
##2.15.2 - 2025-01-06
99+
100+
###Changed
101+
102+
- When starting a workspace, shell out to the Coder binary instead of making an
103+
API call. This reduces drift between what the plugin does and the CLI does.
104+
- Increase workspace polling to one second on the workspace list view, to pick
105+
up changes made via the CLI faster. The recent connections view remains
106+
unchanged at five seconds.
107+
108+
##2.15.1 - 2024-10-04
109+
110+
###Added
111+
9112
- Support an "owner" parameter when launching an IDE from the dashboard. This
10113
makes it possible to reliably connect to the right workspace in the case where
11114
multiple users are using the same workspace name and the workspace filter is

‎CONTRIBUTING.md‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,70 @@ There are three ways to get into a workspace:
1616

1717
Currently the first two will configure SSH but the third does not yet.
1818

19+
##GPG Signature Verification
20+
21+
The Coder Gateway plugin starting with version*2.22.0* implements a comprehensive GPG signature verification system to
22+
ensure the authenticity and integrity of downloaded Coder CLI binaries. This security feature helps protect users from
23+
running potentially malicious or tampered binaries.
24+
25+
###How It Works
26+
27+
1.**Binary Download**: When connecting to a Coder deployment, the plugin downloads the appropriate Coder CLI binary for
28+
the user's operating system and architecture from the deployment's`/bin/` endpoint.
29+
30+
2.**Signature Download**: After downloading the binary, the plugin attempts to download the corresponding`.asc`
31+
signature file from the same location. The signature file is named according to the binary (e.g.,
32+
`coder-linux-amd64.asc` for`coder-linux-amd64`).
33+
34+
3.**Fallback Signature Sources**: If the signature is not available from the deployment, the plugin can optionally fall
35+
back to downloading signatures from`releases.coder.com`. This is controlled by the`fallbackOnCoderForSignatures`
36+
setting.
37+
38+
4.**GPG Verification**: The plugin uses the BouncyCastle library shipped with Gateway app to verify the detached GPG
39+
signature against the downloaded binary using Coder's trusted public key.
40+
41+
5.**User Interaction**: If signature verification fails or signatures are unavailable, the plugin presents security
42+
warnings
43+
to users, allowing them to accept the risk and continue or abort the operation.
44+
45+
###Verification Process
46+
47+
The verification process involves several components:
48+
49+
-**`GPGVerifier`**: Handles the core GPG signature verification logic using BouncyCastle
50+
-**`VerificationResult`**: Represents the outcome of verification (Valid, Invalid, Failed, SignatureNotFound)
51+
-**`CoderDownloadService`**: Manages downloading both binaries and their signatures
52+
-**`CoderCLIManager`**: Orchestrates the download and verification workflow
53+
54+
###Configuration Options
55+
56+
Users can control signature verification behavior through plugin settings:
57+
58+
-**`disableSignatureVerification`**: When enabled, skips all signature verification. This is useful for clients running
59+
custom CLI builds, or
60+
customers with old deployment versions that don't have a signature published on`releases.coder.com`.
61+
-**`fallbackOnCoderForSignatures`**: When enabled, allows downloading signatures from`releases.coder.com` if not
62+
available from the deployment
63+
64+
###Security Considerations
65+
66+
- The plugin embeds Coder's trusted public key in the plugin resources
67+
- Verification uses detached signatures, which are more secure than attached signatures
68+
- Users are warned about security risks when verification fails
69+
- The system gracefully handles cases where signatures are unavailable
70+
- All verification failures are logged for debugging purposes
71+
72+
###Error Handling
73+
74+
The system handles various failure scenarios:
75+
76+
-**Missing signatures**: Prompts user to accept risk or abort
77+
-**Invalid signatures**: Warns user about potential tampering and prompts user to accept risk or abort
78+
-**Verification failures**: Prompts user to accept risk or abort
79+
80+
This signature verification system ensures that users can trust the Coder CLI binaries they download through the plugin,
81+
protecting against supply chain attacks and ensuring binary integrity.
82+
1983
##Development
2084

2185
To manually install a local build:

‎README.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,10 @@ Follow](https://img.shields.io/twitter/follow/CoderHQ?label=%40CoderHQ&style=soc
1010
The Coder Gateway plugin lets you open[Coder](https://github.com/coder/coder)
1111
workspaces in your JetBrains IDEs with a single click.
1212

13+
>[!NOTE]
14+
>We recommend using the[Coder Toolbox plugin](https://github.com/coder/coder-jetbrains-toolbox), which offers significant stability and connectivity benefits over Gateway. Future updates of the Coder plugin on Jetbrains will be made to the Toolbox plugin. Reference our[documentation](https://coder.com/docs/user-guides/workspace-access/jetbrains/toolbox) for more information.
15+
16+
1317
**Manage less**
1418

1519
- Ensure your entire team is using the same tools and resources

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp