Changelog
Bug fixes
- Widen engines.node to include Node.js 24 LTS (#24419, 874f095)
- Bump hashicorp/hc-install to v0.9.4 (#24547, dba38c3) (@ethanndickson)
- Bump go-git/go-git/v5 from v5.18.0 to v5.19.0 (CVE-2026-45022) (#25234, 0ab6989)
- fix(go.mod): upgrade OTel SDK from v1.39.0 to v1.43.0 (CVE-2026-39883) (#25233, 371506f)
- fix(deps): upgrade gomarkdown/markdown to fix GHSA-77fj-vx54-gvh7 (v2.30.x) (#25235, b9a4948)
- Bump Go from 1.25.8 to 1.25.10 (#25232, 0bff6d2)
- Dashboard: Remove flaky pagination test from WorkspacesPage (#24165, 76402c0)
- fix(go.mod): bump goldmark to v1.7.17 to fix CVE-2026-5160 (#25257, ed8b0b3)
- Upgrade filippo.io/edwards25519 v1.1.0 to v1.1.1 (CVE-2026-26958) (#25261, b1c5b92)
- fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25231, 9a9080b)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.30) (#25281, af737be)
- Verify PKCS7 signature on Azure instance identity tokens (backport 2.30) (#25305, 74eba1e)
Compare: v2.30.7...v2.30.8
Container image
docker pull ghcr.io/coder/coder:2.30.8
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.