Sourced fromgithub.com/coder/coder/v2's releases.

v2.26.0

Changelog

[!NOTE]This is a mainline Coder release. We advise enterprise customers without a staging environment to install ourlatest stable release while we refine this version. Learn more about ourRelease Schedule.

KNOWN ISSUES

• You may see higher numbers of "API Key Created" entries in the audit logs. This is expected due to fixing an audit logging omission (#19672).
• Jetbrains users may experience inflated API key creation. This will be fixed in a future patch to the Jetbrains plugin version.

BREAKING CHANGES

• Support empty or default fields when updating templates (#19256, aab2ccdb3) (@​rafrdz)

  Breaking change to the Coder Go SDK. Field types incodersdk.UpdateTemplateMeta forIcon,Description, andDisplayName changed fromstring to*string. Consumers must pass pointers and handlenil checks. Code that assigns/reads plain strings will no longer compile without updates.

• fix(coderd/prometheusmetrics)!: filter deleted wsbuilds to reduce db load (#19197, 1b66495b7) (@​mafredri)

  Breaking change tocoderd_api_workspace_latest_build Prometheus metric. Thecoderd_api_workspace_latest_build Prometheus metric no longer includes builds belonging to deleted workspaces, as such, this metric will show fewer statuses.

Security Fixes

• Expire token for prebuilds user when regenerating session token (#19667) (#19668, ec660907f) (@​johnstcn)

  ⚠ Fixes an issue allowing previously authenticated users to claim prebuilt workspaces created from templates using thecoder-login module. Read more in ourGHSA for this vulnerability.

• Server: Add audit log on creating a new session key (#19672) (#19684, a79adb155) (@​johnstcn)

  Adds an audit log entry when an API key is created viacoder login.

Features

• Validate presets on template import to prevent publishing an unusable template (#18844, f256a23a7) (@​SasSwart)
• Allow bypassing current CORS magic based on template config (#18706, ffbfaf2a6) (@​cstyan)
• Add MCP tools for ChatGPT. ChatGPT can now create Coder workspaces. (#19102, 79cd80e5c) (@​hugodutka)
• Add prebuild timing metrics to Prometheus (#19503, 0ab345ca) (@​ssncferreira)
• Addauthor filter command to template filtering (#19202, 5b80c47e8) (@​Emyrk)
• Implement rich multi-selector for multi-select in the CLI (#19201, a7fac302b) (@​mtojek)
• Add Sourcegraph Amp logo sourced from presskit (#19421, 7bcbb83c7) (@​DevelopmentCats)
• Claim prebuilds based on workspace parameters instead of preset ID to improve prebuilds usability (#19279, f9a6adc70) (@​SasSwart)
• 📥 External workspaces is now in Early Access. Read more in ourexternal workspaces documentation.
  • CLI: Add enterpriseexternal-workspaces CLI command (#19287, 7b1dcd984) (@​kacpersaw)
  • Server: Addhas_external_agent flag to template_versions and workspace_builds (#19285, 5e4aa79a9) (@​kacpersaw)
  • Server: Add support for external agents to API's and provisioner (#19286, 9edceef0b) (@​kacpersaw)
  • Dashboard: Add support for external agents in the UI and extend CodeExample (#19288, 7f7206770) (@​kacpersaw)
• ☑ Coder Tasks UI improvements:
  • Show workspace build and startup script logs during tasks creation (#19413, 8aafbcb3b) (@​BrunoQuaresma)

    Improved tasks creation UI:

  • Filter tasks that are waiting for user input (#19377, d77c3d022) (@​BrunoQuaresma)
  • Display the number of idle tasks in the navbar (#19471, cde5b624f) (@​BrunoQuaresma)

    Improved visibility when tasks are waiting for user input.

• Show workspace health error alert above agents in workspace page for better visibility (#19400, 9a872f903) (@​aqandrew)
• CLI: Add filtering options toprovisioners list CLI command (#19378, ad5e6785f) (@​rafrdz)

... (truncated)

• a056cb6 chore: add last commit from cherry-pick list for release (#19679)
• 0a73f84 fix: merge cherry-picked items for v2.26.0 (#19678)
• 8083d9d fix(cli): attach org option to task create (#19554)
• f0cf0ad feat: log additional known non-sensitive query param fields in the httpmw log...
• d274f83 chore: improve scroll behavior of DashboardLayout wrapped pages (#19396)
• 59525f8 feat: display startup script logs while agent is starting (#19530)
• a1546b5 refactor: replace task prompt by workspace name in the topbar (#19531)
• 5baaf27 feat(cli): implement exp task status command (#19533)
• c19f430 fix(cli): display workspace created at time instead of current time (#19553)
• ef0d74f chore: improve performance of 'GetLatestWorkspaceBuildsByWorkspaceIDs' (#19452)
• Additional commits viewable incompare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)