coder/coder v0.15.0

on GitHub

Changelog

BREAKING CHANGES

Path-based app sharing is disabled by default. Only the workspace's owner can access apps over paths. This does not affect subdomain-based apps. More details why and how to disable these security fixes (not recommended) can be found in the commit description: 0374af2. Additionally, a new flag --disable-path-apps has been added for security-conscious instances that have subdomain-based apps configured.

Prometheus metrics with millisecond units have been changed from milliseconds to float seconds, and their names have been updated to reflect this change:

• coderd_api_request_latencies_ms => coderd_api_request_latencies_seconds
• coderd_api_websocket_durations_ms => coderd_api_websocket_durations_seconds
• coderd_provisionerd_job_timings_ms => coderd_provisionerd_job_timings_seconds

Commits:

• f76ef98 chore!: Standardize prometheus time metrics to seconds (#5709)
• 0374af2 fix(security)!: path-based app sharing changes (#5772)
• 54cc587 fix!: Updated PreconditionFailed responses (#5513)

Features

• 592ce3b feat(cli): allow direct tar upload in template update/create (#5720)
• 4420985 feat(coderd): activity bump for full TTL instead of 1h (#5732)
• 8db87c6 feat(dogfood): run personalize script (#5723)
• 6ed4e21 feat(examples): add labels and antiAffinity to k8s example (#5763)
• b42e2ae feat(examples): add labels and antiAffinity to k8s example (#5774)
• dcab873 feat: add stackdriver and json log options to coder server (#5682)
• deebfcb feat: Validate swagger definitions (#5694)
• dad242a feat: Add more swagger checks (#5707)
• 0cf7138 feat: Manage tokens in dashboard (#5444)
• 6ebadab feat: Add basic support for rich parameters to coderd and provisionerd (#5710)
• 1b0560c feat: Expose workspace build parameters via API (#5743)
• 7f5dcc3 feat: remove server subcommand from slim binaries (#5747)
• b19d644 feat: add etag to slim binaries endpoint (#5750)
• 53c456a feat: PGP sign the checksum file in releases (#5757)
• a13614e feat: Pre-fill param inputs with query string values (#5758)
• 56b9965 feat: add --experiments flag to replace --experimental (#5767)
• 6b68fbb feat: Auditing group members as part of group resource (#5730)

Bug fixes

• cd7b36d fix(examples): use correct build args for Docker template (#5721)
• 45eb26d fix(scaletest): increase time range check causing flake on MacOS (#5776)
• 5f7cce7 fix(site): always use 95th percentile in progress bar (#5733)
• bbc1a9a fix: use UserInfo endpoint with OIDC (#5735)
• 70fd786 fix: remove old versions from docs manifest (#5736)
• c377cd0 fix: Move CLI auth screen outside of dashboard (#5755)
• 99f5f44 fix: Only fetch groups when it is enabled (#5753)
• 6252f78 fix: Setup redirect state (#5759)
• 41145a6 fix: improve error handling when posting workspace agent version (#5775)

Documentation

• 967d25f docs: HA is not experimental (fix) (#5686)
• e37bff6 docs: REST API docs are now complete (#5748)
• 47c3d72 docs: add support for the coder remote extension (#5764)
• a040bcc docs: clarify access URL in install flow (#5626)
• 1f3b7b6 docs: Add documentation for releases and commit style (#5675)
• 9e346b3 docs: scaling Coder (#5550)

Code refactoring

• 1229fda refactor: Clean up routes (#5702)
• de16e29 refactor: Refactor update check banner (#5708)
• 28b2bbd refactor: Make navbar and users tab href consistent (#5754)
• 501cfa9 refactor: deduplicate / type license feature code (#5734)
• 537b9df refactor: Form page loaders (#5762)
• bd8437b refactor: Refactor tokens layout a bit (#5771)

Tests

• db78770 test: Fix flaky TestServer/Logging/{Multiple,Stackdriver} (#5727)
• 77e71f3 test: Improve TestSSH/ForwardGPG stability on macOS via pty.ReadRune (#5739)
• 145d101 test: Refactor ptytest to use contexts and less duplication (#5740)
• c6fb469 test: Improve TestSSH/ForwardAgent stability on macOS (#5745)

Continuous integration

• e821b98 ci: Revert to local tag creation and push for releases (#5714)
• 8ae28a3 ci: Add release labels job to pr.yaml to sync labels/title (#5724)

Chores

• d6543c0 chore: skip e2e tests (#5711)
• f91a0d8 chore: mark apidoc files as linguist-generated (#5713)
• eb48341 chore: More complete tracing for RBAC functions (#5690)
• 1d777c4 chore: move winget publish into release pipeline (#5728)
• f3bbf62 chore: Update gotestsum to v1.9.0 and remove debugging (#5726)
• b55cb0c chore: add trivy vulnerability scanning (#5729)
• e558a25 chore: remove dead docs links from README.md (#5731)
• 985fac6 chore: combine dogfood regions, use tailscale (#5741)
• 63956ea chore: turn e2e tests back on with fixes (#5719)
• f0eddba chore: Support anonymously embedded fields for audit diffs (#5746)
• 35d4766 chore: Remove unused deps (#5756)
• ea1b03f chore: Remove FE dead code (#5760)
• 2117eb4 chore: Improve bundle size (#5761)

Compare: v0.14.3...0.15.0

Container image

• docker pull ghcr.io/coder/coder:v0.15.0