Changelog

BREAKING CHANGES

• Fix workspace apps response (#17700, 9fe5b71) (@BrunoQuaresma)

  Adds omitempty to multiple fields in a codersdk response type. API consumers that expect those fields to be always present may need to be updated.

• Omit name, avatar_url and last_seen_at from responses when empty (#18005, 94c129c) (@BrunoQuaresma)
• Update WorkspaceOwnerName to use user.name instead of user.username to reduce UI confusion (#18025, d63417b) (@BrunoQuaresma)

SECURITY CHANGES

• Both Coder v2.23 and Coder v2.24 now handle OIDC refresh tokens (#17878). If users are being logged out of OIDC after short intervals (e.g. 1 hour), ensure you have properly configured OIDC refresh tokens

Features

• Collect database metrics for exhaustion insights (#17635, c278662) (@dannykopping)
• Support GFM alerts for in-product markdown (#17662, 3be6487) (@BrunoQuaresma)
• Improve coder connect tunnel handling on reconnect (#17598, 5f516ed) (@ibetitsmike)
• Add inline actions into workspaces table (#17636, d9b00e4) (@BrunoQuaresma)
• Display builtin apps on workspaces table (#17695, 6ac1bd8) (@BrunoQuaresma)
• Display user apps in the workspaces table (#17744, 1adad41) (@BrunoQuaresma)
• Implement expiration policy logic for prebuilds (#17996, 6f6e73a) (@ssncferreira)
• Add hidden CODER_AGENT_IS_SUB_AGENT flag to coder agent (#17783, 7f056da) (@DanielleMaywood)
• Load terraform modules when using dynamic parameters (#17714, 60762d4) (@aslilac)
• Setup url autofill for dynamic parameters (#17739, d6cb9b4) (@jaaydenh)
• Add experimental workspace parameters page for dynamic parameters (#17841, cb7ce18) (@jaaydenh)
• Make dynamic parameters respect owner in form (#18013, b4531c4) (@Emyrk)
• Add extra workspace actions in the workspaces table (#17775, 67e4024) (@BrunoQuaresma)
• Hide hidden and non-healthy apps in the workspaces table (#17830, 9093dbc) (@brettkolodny)
• Add API key scope to restrict access to user data (#17692, 1bacd82) (@ThomasK33)
• Add elixir icon (#17848, bb6b96f) (@TomBeckett)
• Add copy button for workspace name in breadcrumb (#17822, 2c49fd9) (@matifali)
• Add one shot commands to the coder ssh command (#17779, 2cd3f99) (@brettkolodny)
• Show devcontainer dirty status and allow recreate (#17880, 98e2ec4) (@mafredri)
• Add provisioner daemon name to provisioner jobs responses (#17877, f044cc3) (@ssncferreira)
• Add Organization Provisioner Keys view (#17889, ac7961a) (@johnstcn)

  Adds a new view in the organization settings to manage provisioner keys.

• Cancel stuck pending jobs (#17803, 769c9ee) (@ibetitsmike)
• Display required badge instead of diagnostic text when extra code = required (#18006, 516fb44) (@jaaydenh)
• Add hard-limited presets metric (#18008, 2a15aa8) (@evgeniy-scherbina)
• Support ConvertUserLoginType for another user in codersdk(#17784, 71a647b) (@betterlmy)
• Persist app groups in the database (#17977, 9fc3329) (@aslilac)
• Agent: Send devcontainer CLI logs during recreate (#17845, 3de0003) (@mafredri)
• Agent: Add ParentId to agent manifest (#17888, 61f22a5) (@DanielleMaywood)
• Agent: Update containers periodically (#17972, d6c14f3) (@mafredri)
• Agent: Recreate devcontainers concurrently (#18042, 0731304) (@mafredri)
• CLI: Use coder connect in coder ssh --stdio, if available (#17572, 53ba361) (@ethanndickson)
• CLI: Make MCP server work without user authentication (#17688, 29bce8d) (@ThomasK33)
• Dashboard: Allow recreating devcontainers and showing dirty status (#18049, a18eb9d) (@mafredri)

Bug fixes

• Update devcontainer data every 10s (#17619, ff54ae3) (@BrunoQuaresma)
• Display validation error for workspace name (#17564, d104cd6) (@jaaydenh)
• Create directory before writing coder desktop connect network info file (#17628, c7fc7b9) (@ethanndickson)
• Fix for claiming and deleting prebuilt workspaces with immutable parameters (#17624, 98e5611) (@evgeniy-scherbina)
• Filter out deleted users when attempting to delete an organization (#17621, b7e08ba) (@brettkolodny)
• Fix deletion of prebuilt workspaces on outdated template versions (#17652, ef11d4f) (@evgeniy-scherbina)
• Improve WebSocket error handling in CreateWorkspacePageExperimental (#17647, e718c3a) (@jaaydenh)
• Update licensing info URL on sign up page (#17657, 64b9bc1) (@matifali)
• Move pubsub publishing out of database transactions to avoid conn exhaustion (#17648, a646478) (@dannykopping)
• Update default value handling for dynamic defaults (#17609, ec003b7) (@jaaydenh)
• Fill session token when app is external (#17708, a02ba66) (@BrunoQuaresma)
• Do not share token with http app urls (#17720, 857587b) (@BrunoQuaresma)
• Create ssh directory if it doesn't already exist when running coder config-ssh (#17711, c5c3a54) (@brettkolodny)
• Enrich the notLoggedInMessage error message with the full path to the coder (#17715, 578b9ff) (@cstyan)
• Reduce size of terraform modules archive (#17749, d0ab91c) (@aslilac)
• Don't open a window for external apps (#17813, c718392) (@BrunoQuaresma)
• Add missing clause for tracking replacements (#17849, f2edcf3) (@dannykopping)
• Exclude deleted templates from metrics collection (#17839, 2aa8cbe) (@evgeniy-scherbina)
• Avoid pulling containers when it is not enabled (#17855, ee2aeb4) (@BrunoQuaresma)
• Show no provisioners warning (#17835, ba6690f) (@BrunoQuaresma)
• Fix duplicated agent logs (#17806, 952c254) (@BrunoQuaresma)
• Add null check (#17896, ac8591e) (@jaaydenh)
• Stop extending API key access if OIDC refresh is available (#17878, 1a41608) (@spikecurtis)
• Disable submit button on diagnostics error (#17900, 766277c) (@jaaydenh)
• Sync websocket params with form params (#17895, 4412f19) (@jaaydenh)
• Show provisioner name instead of key name in expanded ProvisionerKeyRow (#17921, 433f0be) (@johnstcn)
• Fix devcontainer port button (#17924, cc53c4d) (@BrunoQuaresma)
• Get presets working correctly with dynamic params (#17923, dc21016) (@jaaydenh)
• Ensure reason present for workspace autoupdated notification (#17935, 1267c9c) (@DanielleMaywood)
• Remove unnecessary user lookup in agent API calls (#17934, 93f17bc) (@ThomasK33)
• Show diagnostics if there are no parameters (#17967, 36d938f) (@jaaydenh)
• Update textarea to fit content height and set a max height (#17946, 3a6d5f5) (@jaaydenh)
• Reduce cost of prebuild failure (#17697, 53e8e9c) (@evgeniy-scherbina)
• Prevent layout shift when Select component dropdown appears (#17990, ce4c8c7) (@jaaydenh)
• Fix metric for hard-limited presets (#18045, e8c75eb) (@evgeniy-scherbina)
• Handle invalid provisioning timings in ui (#18058, ce134bc) (@johnstcn)
• Agent: Fix unexpanded devcontainer paths for agentcontainers (#17736, 7af188b) (@mafredri)
• Agent: Always use /bin/sh for devcontainer autostart (#17847, 522c178) (@mafredri)
• Server: List templates returns non-deprecated templates by default (#17747, 599bb35) (@ssncferreira)
• Dashboard: Center /cli-auth on firefox (#17929, e5758a1) (@ethanndickson)

Documentation

• Add early access devcontainers documentation (#17613, a226a75) (@mafredri)
• Clarify parameter autofill documentation (#17728, 5c53277) (@EdwardAngert)
• Add section on how to retrieve user list (#17798, f9817af) (@EdwardAngert)
• Add file sync to coder desktop docs (#17463, 74934e1) (@EdwardAngert)

  Coder desktop now supports local RDP clients in Beta. Available today for Mac and Windows.

• Add provisioner job state transition diagram (#17882, 0cac6a8) (@ssncferreira)
• Add new dynamic parameters information to parameters doc (#17653, 1314dbd) (@EdwardAngert)
• Add jetbrains toolbox steps for new integration (#17661, eb8013a) (@EdwardAngert)
• Fix token create command (#17984, 4cb35c4) (@matifali)
• Add Bottlerocket section to rootless Podman docs (#17987, c777740) (@krispage)

Compare: v2.22.1...v2.23.0

Container image

• docker pull ghcr.io/coder/coder:v2.23.0

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.