Changelog
Note
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.
Bug fixes
- Upgrade Go toolchain from 1.25.9 to 1.25.10 (#25230, e5a96f3)
- Cherry-pick go-git v5.19.0 (CVE-2026-45022) (#25229, 4e4e235)
- Dashboard: Show Organizations in admin dropdown for single-org OSS deployments (#25175, bbca430)
- fix(scripts/ironbank): update base image to UBI9 and remove urllib3 (CVE-2026-44431) (#25247, 818fc72)
- Server: Harden Azure identity certificate fetch (cherry-pick v2.33) (#25276, 844c1e0)
- Verify PKCS7 signature on Azure instance identity tokens (2.33 cherry-pick) (#25302, 2b778f2)
Compare: v2.33.2...v2.33.3
Container image
docker pull ghcr.io/coder/coder:2.33.3
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.