Changelog

Features

• Dashboard: Add loading <Spinner /> to AgentRow (#24825, 2f36bfd)

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, abe1c85) (@geokat)
• CLI: Show sync wait dependencies (#25089, 0f6e1c3) (@maschwenk)
• Server: Skip stale agents from prior builds in instance-identity auth (#25443, 7fc8a08)
• fix(aibridge/intercept/messages): convert enabled thinking to adaptive for Bedrock Opus 4.7+ (#25335, 7b55456) (@dannykopping)
• Server: Parse task name JSON with trailing text (#25005, ec03b1b)
• fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.10 (#25250, 868fa09)

Documentation

• Update screenshot to point to generic URL (#25314, 1c95911) (@nickvigilante)
• Fix the display of the tab block in External Workspaces (#25341, 3b38e1b) (@nickvigilante)

Compare: v2.33.3...v2.33.4

Container image

• docker pull ghcr.io/coder/coder:2.33.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Stable (since May 18, 2026)

Changelog

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, f7596ad) (@geokat)
• CLI: Show sync wait dependencies (#25369, 882689a)
• Server: Parse task name JSON with trailing text (#25005, f6beb9d)
• fix(scripts/ironbank): build Terraform from source with Go 1.25.9+ (#25259, fcd45a9)

Documentation

• Update screenshot to point to generic URL (#25314, a1c976b) (@nickvigilante)
• Fix the display of the tab block in External Workspaces (#25341, f56e3a8) (@nickvigilante)

Compare: v2.32.2...v2.32.3

Container image

• docker pull ghcr.io/coder/coder:2.32.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, dc3c954) (@geokat)

Documentation

• Update screenshot to point to generic URL (#25314, b5496f2) (@nickvigilante)
• Fix the display of the tab block in External Workspaces (#25341, 45ab522) (@nickvigilante)

Compare: v2.31.12...v2.31.13

Container image

• docker pull ghcr.io/coder/coder:2.31.13

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, 9376bbf)
• fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.10 (#25268, 4ded055)

Compare: v2.30.8...v2.30.9

Container image

• docker pull ghcr.io/coder/coder:2.30.9

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, 78e6568)
• fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.9+ (#25267, c61867b)

Compare: v2.29.13...v2.29.14

Container image

• docker pull ghcr.io/coder/coder:2.29.14

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Server: Add Azure IMDS G2 chain certificates (#25243, 120691b)

Compare: v2.24.5...v2.24.6

Container image

• docker pull ghcr.io/coder/coder:2.24.6

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25230, e5a96f3)
• Cherry-pick go-git v5.19.0 (CVE-2026-45022) (#25229, 4e4e235)
• Dashboard: Show Organizations in admin dropdown for single-org OSS deployments (#25175, bbca430)
• fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25247, 818fc72)
• Server: Harden Azure identity certificate fetch (cherry-pick v2.33) (#25276, 844c1e0)
• Verify PKCS7 signature on Azure instance identity tokens (2.33 cherry-pick) (#25302, 2b778f2)

Compare: v2.33.2...v2.33.3

Container image

• docker pull ghcr.io/coder/coder:2.33.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Stable (since May 13, 2026)

Changelog

Bug fixes

• Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25224, 561e42d)
• fix(go.mod): bump gomarkdown to fix GHSA-77fj-vx54-gvh7 (v2.32) (#25225, a7e6c6e)
• Cherry-pick OTel SDK v1.43.0 for CVE-2026-39883 (v2.32.x) (#25227, be2cd7a)
• Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#25240, bbe0286)
• Dashboard: Move pagination test from vitest to storybook story (#24165, da939aa)
• Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25228, 315e800)
• fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25249, d944b92)
• Server: Harden Azure identity certificate fetch (cherry-pick v2.32) (#25277, 25219f3)
• Verify PKCS7 signature on Azure instance identity tokens (backport 2.32) (#25303, d6e9344)
• Server: Backport frame-ancestors CSP fixes to 2.32 (#24474, #24529) (#24806, 5f343bc)

Compare: v2.32.1...v2.32.2

Container image

• docker pull ghcr.io/coder/coder:2.32.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25213, 836ff8f)
• Bump otel SDK from v1.42.0 to v1.43.0 (CVE-2026-39883) (#25214, 59248df)
• fix(security): bump gomarkdown/markdown to fix OOB read (GHSA-77fj-vx54-gvh7) (#25218, 17b857e)
• Bump goldmark to v1.7.17 to fix XSS (CVE-2026-5160) (#25216, cd6eb46)
• Dashboard: Remove flaky pagination test from WorkspacesPage (#24165, e7030b1)
• Server: Harden Azure identity certificate fetch (cherry-pick v2.31) (#25278, eb46116)
• Verify PKCS7 signature on Azure instance identity tokens (backport 2.31) (#25304, 6ff657f)
• fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.9 (#25260, dfe986b)

Chores

• Bump aws-sdk-go-v2/service/s3 to v1.97.3 (GHSA-xmrv-pmrh-hhx2) (#25212, f34f673)
• Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (release/2.31) (#25236, 441a9ab)
• Bump Go from 1.25.9 to 1.25.10 (#25220, bddd73d)

Compare: v2.31.11...v2.31.12

Container image

• docker pull ghcr.io/coder/coder:2.31.12

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

Changelog

Bug fixes

• Widen engines.node to include Node.js 24 LTS (#24419, 874f095)
• Bump hashicorp/hc-install to v0.9.4 (#24547, dba38c3) (@ethanndickson)
• Bump go-git/go-git/v5 from v5.18.0 to v5.19.0 (CVE-2026-45022) (#25234, 0ab6989)
• fix(go.mod): upgrade OTel SDK from v1.39.0 to v1.43.0 (CVE-2026-39883) (#25233, 371506f)
• fix(deps): upgrade gomarkdown/markdown to fix GHSA-77fj-vx54-gvh7 (v2.30.x) (#25235, b9a4948)
• Bump Go from 1.25.8 to 1.25.10 (#25232, 0bff6d2)
• Dashboard: Remove flaky pagination test from WorkspacesPage (#24165, 76402c0)
• fix(go.mod): bump goldmark to v1.7.17 to fix CVE-2026-5160 (#25257, ed8b0b3)
• Upgrade filippo.io/edwards25519 v1.1.0 to v1.1.1 (CVE-2026-26958) (#25261, b1c5b92)
• fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25231, 9a9080b)
• Server: Harden Azure identity certificate fetch (cherry-pick v2.30) (#25281, af737be)
• Verify PKCS7 signature on Azure instance identity tokens (backport 2.30) (#25305, 74eba1e)

Compare: v2.30.7...v2.30.8

Container image

• docker pull ghcr.io/coder/coder:2.30.8

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.