Releases: coder/coder
v2.33.4
Changelog
Note
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
Features
Bug fixes
- Server: Add Azure IMDS G2 chain certificates (#25243, abe1c85) (@geokat)
- CLI: Show sync wait dependencies (#25089, 0f6e1c3) (@maschwenk)
- Server: Skip stale agents from prior builds in instance-identity auth (#25443, 7fc8a08)
- fix(aibridge/intercept/messages): convert enabled thinking to adaptive for Bedrock Opus 4.7+ (#25335, 7b55456) (@dannykopping)
- Server: Parse task name JSON with trailing text (#25005, ec03b1b)
- fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.10 (#25250, 868fa09)
Documentation
- Update screenshot to point to generic URL (#25314, 1c95911) (@nickvigilante)
- Fix the display of the tab block in External Workspaces (#25341, 3b38e1b) (@nickvigilante)
Compare: v2.33.3...v2.33.4
Container image
docker pull ghcr.io/coder/coder:2.33.4
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.32.3
Stable (since May 18, 2026)
Changelog
Bug fixes
- Server: Add Azure IMDS G2 chain certificates (#25243, f7596ad) (@geokat)
- CLI: Show sync wait dependencies (#25369, 882689a)
- Server: Parse task name JSON with trailing text (#25005, f6beb9d)
- fix(scripts/ironbank): build Terraform from source with Go 1.25.9+ (#25259, fcd45a9)
Documentation
- Update screenshot to point to generic URL (#25314, a1c976b) (@nickvigilante)
- Fix the display of the tab block in External Workspaces (#25341, f56e3a8) (@nickvigilante)
Compare: v2.32.2...v2.32.3
Container image
docker pull ghcr.io/coder/coder:2.32.3
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.31.13
Changelog
Bug fixes
Documentation
- Update screenshot to point to generic URL (#25314, b5496f2) (@nickvigilante)
- Fix the display of the tab block in External Workspaces (#25341, 45ab522) (@nickvigilante)
Compare: v2.31.12...v2.31.13
Container image
docker pull ghcr.io/coder/coder:2.31.13
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.30.9
Changelog
Bug fixes
- Server: Add Azure IMDS G2 chain certificates (#25243, 9376bbf)
- fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.10 (#25268, 4ded055)
Compare: v2.30.8...v2.30.9
Container image
docker pull ghcr.io/coder/coder:2.30.9
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.29.14
Changelog
Bug fixes
- Server: Add Azure IMDS G2 chain certificates (#25243, 78e6568)
- fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.9+ (#25267, c61867b)
Compare: v2.29.13...v2.29.14
Container image
docker pull ghcr.io/coder/coder:2.29.14
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.24.6
v2.33.3
Changelog
Note
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
Bug fixes
- Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25230, e5a96f3)
- Cherry-pick go-git v5.19.0 (CVE-2026-45022) (#25229, 4e4e235)
- Dashboard: Show Organizations in admin dropdown for single-org OSS deployments (#25175, bbca430)
- fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25247, 818fc72)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.33) (#25276, 844c1e0)
- Verify PKCS7 signature on Azure instance identity tokens (2.33 cherry-pick) (#25302, 2b778f2)
Compare: v2.33.2...v2.33.3
Container image
docker pull ghcr.io/coder/coder:2.33.3
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.32.2
Stable (since May 13, 2026)
Changelog
Bug fixes
- Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25224, 561e42d)
- fix(go.mod): bump gomarkdown to fix GHSA-77fj-vx54-gvh7 (v2.32) (#25225, a7e6c6e)
- Cherry-pick OTel SDK v1.43.0 for CVE-2026-39883 (v2.32.x) (#25227, be2cd7a)
- Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#25240, bbe0286)
- Dashboard: Move pagination test from vitest to storybook story (#24165, da939aa)
- Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25228, 315e800)
- fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25249, d944b92)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.32) (#25277, 25219f3)
- Verify PKCS7 signature on Azure instance identity tokens (backport 2.32) (#25303, d6e9344)
- Server: Backport frame-ancestors CSP fixes to 2.32 (#24474, #24529) (#24806, 5f343bc)
Compare: v2.32.1...v2.32.2
Container image
docker pull ghcr.io/coder/coder:2.32.2
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.31.12
Changelog
Bug fixes
- Bump golang.org/x/net to v0.53.0 (CVE-2026-33814) (#25213, 836ff8f)
- Bump otel SDK from v1.42.0 to v1.43.0 (CVE-2026-39883) (#25214, 59248df)
- fix(security): bump gomarkdown/markdown to fix OOB read (GHSA-77fj-vx54-gvh7) (#25218, 17b857e)
- Bump goldmark to v1.7.17 to fix XSS (CVE-2026-5160) (#25216, cd6eb46)
- Dashboard: Remove flaky pagination test from WorkspacesPage (#24165, e7030b1)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.31) (#25278, eb46116)
- Verify PKCS7 signature on Azure instance identity tokens (backport 2.31) (#25304, 6ff657f)
- fix(scripts/ironbank): rebuild bundled Terraform from source with Go 1.25.9 (#25260, dfe986b)
Chores
- Bump aws-sdk-go-v2/service/s3 to v1.97.3 (GHSA-xmrv-pmrh-hhx2) (#25212, f34f673)
- Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (release/2.31) (#25236, 441a9ab)
- Bump Go from 1.25.9 to 1.25.10 (#25220, bddd73d)
Compare: v2.31.11...v2.31.12
Container image
docker pull ghcr.io/coder/coder:2.31.12
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
v2.30.8
Changelog
Bug fixes
- Widen engines.node to include Node.js 24 LTS (#24419, 874f095)
- Bump hashicorp/hc-install to v0.9.4 (#24547, dba38c3) (@ethanndickson)
- Bump go-git/go-git/v5 from v5.18.0 to v5.19.0 (CVE-2026-45022) (#25234, 0ab6989)
- fix(go.mod): upgrade OTel SDK from v1.39.0 to v1.43.0 (CVE-2026-39883) (#25233, 371506f)
- fix(deps): upgrade gomarkdown/markdown to fix GHSA-77fj-vx54-gvh7 (v2.30.x) (#25235, b9a4948)
- Bump Go from 1.25.8 to 1.25.10 (#25232, 0bff6d2)
- Dashboard: Remove flaky pagination test from WorkspacesPage (#24165, 76402c0)
- fix(go.mod): bump goldmark to v1.7.17 to fix CVE-2026-5160 (#25257, ed8b0b3)
- Upgrade filippo.io/edwards25519 v1.1.0 to v1.1.1 (CVE-2026-26958) (#25261, b1c5b92)
- fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25231, 9a9080b)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.30) (#25281, af737be)
- Verify PKCS7 signature on Azure instance identity tokens (backport 2.30) (#25305, 74eba1e)
Compare: v2.30.7...v2.30.8
Container image
docker pull ghcr.io/coder/coder:2.30.8
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.