coder/code-server v4.141.1

on GitHub

Security

• Update bundled Node.js to 24.22.1 to fix a remote code execution bug in the
  Brotli decoder (CVE-2026-111497).
• Reject compressed request bodies (Content-Encoding: br, gzip, or
  deflate) instead of decompressing them.

Fixed

• Boolean flags in the --flag=false form and in the config file now respect
  being set to false.

Added

• Turkish locale.

Changed

• Expand values from path options in the config file that start with a tilde.