Changelog
Bug fixes
- Bump github.com/go-chi/chi/v5 from 5.2.4 to 5.3.1 (backport 2.34) (#27148, e77a5be)
- Bump Go version from 1.26.4 to 1.26.5 (backport 2.34) (#27158, e885cf3)
- fix(scripts/releaser): remove doubled "v" in release calendar latest release link (#27261, 744439f)
- Resolve client IP from the rightmost untrusted X-Forwarded-For entry (backport 2.34) (#27236, eda3747)
- Dashboard: Keep activity bump editable when allow_user_autostop is on (#27083, ee17a3b)
- Dashboard: Replace ansi-to-html in the log viewer (#27206, ffa50fb) (@aslilac)
- Server: Harden oauth2 redirect validation (#27274, 58e20ab) (@aslilac)
- Remove 403 from key failover and cooldown on 401 (#27419, b7d2742) (@ssncferreira)
Documentation
- Documentation: Fix bmcp_ described as suffix instead of prefix (#27392, 2b9e328) (@nickvigilante)
Compare: v2.34.6...v2.34.7
Container image
docker pull ghcr.io/coder/coder:2.34.7
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.