Commits
Branch selector
User selector
Commit history
Commits on Jun 29, 2026
feat: add INSECURE oidc email fallback flag for IdP brokers (#26751) (#26819)
Show description for 0cfa936andauthoredfix(coderd): enforce required external auth on workspace create (#26314) (#26791)
Show description for 30f8b64andauthored
Commits on Jun 27, 2026
fix(site): keep TemplateVersionEditor file tree in sync (#25068) (#26769)
Show description for 59d5253authoredfix(enterprise/aibridgeproxyd): stop injecting default port into forwarded Host header (#26656) (#26662)
Show description for 34409d5andauthoredfix(aibridge): support Bedrock Opus 4.8 adaptive thinking (#26691) (#26707)
Show description for c5d9257andauthoredfix(coderd): only send prebuild claim reinit for the claim build (#26645)
Show description for e00791cauthoredfix(site): set external auth provider polling status individually (#2… (#26604)
Show description for 4da9e0candauthoredfix: pin workspace agent API client to intended agent (#26600) (#26613)
Show description for 2312b67andauthored
Commits on Jun 23, 2026
chore: skip failing azureidentity test while under investigation (#26545) (#26619)
Show description for 2c43c07andauthored
Commits on Jun 17, 2026
docs: document VS Code local telemetry (#26215) (#26497)
Show description for 355536eandauthoredfeat: deployment flag to auto handle changed oidc providers (#26419) (#26484)
Show description for 08cf114authoredfeat: implement package and cli tool for repairing oidc links (#26418) (#26482)
Show description for d18ee68authoredfix(scripts/check_emdash.sh): skip emdash check when no diff base is available (#26491)
Show description for 2e43114authoredchore(provisioner/terraform): preserve existing AWS_SDK_UA_APP_ID (#24606) (#26470)
Show description for 41ab770authoredfix(coderd/httpmw): honor fixed lifetime for CLI API tokens (#26376) (#26383)
Show description for e330564andauthored
Commits on Jun 11, 2026
fix: check user user is active in aibridge auth (#26173) (#26307)
Show description for f9486beandauthoredfix: add max bytes request limit to aibridge (#26164) (#26305)
Show description for 481857fandauthoredfix!: only trust x-forwarded-host from configured trusted proxies (#26204) (conflicts) (#26299)
Show description for fa46906authoredfix: prevent session token exfiltration via external app URLs (#26146) (#26301)
Show description for 91d1865andauthoredfix(coderd/workspaceapps): verify workspace owner matches app username (#26085) (#26254)
Show description for de92756andauthoredfix: use a random value for a simulated hash for built-in users (#26205) (#26250)
Show description for 53c2523andauthoredfix!: validate HostnameSuffix and SSHConfigOptions' (#26154) (#26224)
Show description for 6d0d4e0authoredfix: rename bundled rstudio.svg to rproject.svg, add real RStudio icon (#26216) (#26220)
Show description for d654d6dandauthoredfix: validate FileSize in NewDataBuilder to prevent OOM DoS (#25710) (#26185)
Show description for 15ff74aandauthoredfix: reject oversized and invalid zip uploads (#25877) (#26184)
Show description for 97f9e3dandauthoredfix(coderd): prevent user-admin from resetting owner password (#25709) (#26183)
Show description for fb9fe63andauthoredfix!: reject OIDC login when email_verified claim is non-bool or absent (#25713) (#26182)
Show description for 335df24andauthoredfix(coderd)!: restrict OIDC email fallback to first-time account linking (#25712) (#26181)
Show description for 36c011dauthored
fix: validate agent-supplied AllowedIPs in coordinator (#26144) (#26291)
Show description for fa9d7a3andauthoredfix(coderd): prevent cross-tenant workspace app rebinding (#26103) (#26284)
Show description for 071f067andauthoredfix(agent/agentcontainers): prevent command injection in shell execer (#26235) (#26288)
Show description for 049f5b1andauthoredfeat: cli: add support for supplying ephemeral parameters at workspac… (#26279)
Show description for 863eb7candauthoredfix: allow lifecycle code path to retry failed stop jobs (#26277)
Show description for 0847137andauthoredfix: always verify TLS on aibridgeproxyd upstream transport (#26131) (#26255)
Show description for d875dd1authoredfix: escape appearance values in HTML output (#25804) (#26253)
Show description for 345a88candauthored