Changelog

BREAKING CHANGES

• Route connection logs to Connection log instead of Audit log (#18340, 08e17a0) (@ethanndickson)

  Connections to workspaces (via SSH, workspace apps, or browser port-forwarding) will no longer create entries in the audit log. Those events will now be included in the 'Connection Log'.
  Please see the 'Connection Log' page in the dashboard, and the Connection Log documentation for details. Those with permission to view the Audit Log will also be able to view the Connection Log. The new Connection Log has the same licensing restrictions as the Audit Log, and requires a Premium Coder deployment.

• Delete old connection events from audit log (#18735, f42de9f) (@ethanndickson)

  With new connection events appearing in the Connection Log, connection events older than 90 days will now be deleted from the Audit Log. If you require this legacy data, we recommend querying it from the REST API or making a backup of the database/these events before upgrading your Coder deployment. Please see the PR for details on what exactly will be deleted.
  Note: There are currently no plans to delete connection events from the Connection Log.

• Add ability to cancel pending workspace build (#18713, 8202514) (@kacpersaw)

  CancelWorkspaceBuild method in codersdk now accepts an optional request parameter.

• Use devcontainer ID when rebuilding a devcontainer (#18604, f2d229e) (@DanielleMaywood)

  Minor breaking change for workspaces enabled by our devcontainer integration.
  Allows rebuilding a devcontainer without a valid devcontainer ID.

• CLI: Add CLI support for creating workspace with presets (#18912, b975d6d) (@ssncferreira)

  This breaking change impacts the coder create CLI command only for templates which contain presets.

  It introduces a --preset flag to the create command, which modifies the behavior when no preset is explicitly provided:

  • If the template includes presets and a default preset, the default will be automatically applied. The user will be notified, but not prompted.
  • If the template includes presets without a default, the user will be prompted to choose a preset.

  This breaks existing workflows for templates with presets that:

  • Expect the create command to proceed without applying a preset
  • Rely on non-interactive scripts or automated workflows, which will now fail or hang due to unexpected prompts

Features

• Dynamic Parameters is now generally available:

  

  • Remove beta labels for dynamic parameters (#18976, d7b1253) (@jaaydenh)
  • Allow new immutable parameters for existing workspaces (#18579, e396b06) (@Emyrk)
  • Allow masking workspace parameter inputs (#18595, 0b82f41) (@aslilac)
  • Support dynamic parameters on create template request (#18636, 4072d22) (@Emyrk)
  • Display descriptions in multi-select component (#18730, 61b6562) (@jaaydenh)
  • Add search to parameter dropdowns (#18729, 52c4b61) (@aslilac)
  • Include template variables in dynamic parameter rendering (#18819, aedc019) (@Emyrk)
  • Improve workspace upgrade flow when template parameters change (#18917, 19afeda) (@aslilac)
  • Make dynamic parameters opt-in by default for new templates (#19006, 1320b8d) (@jaaydenh)
• Coder may now be used as an OAuth2 provider (experimental):
  • Add authorization server metadata endpoint, PKCE support (#18548, 6f2834f) (@ThomasK33)
  • Add RFC 8707 resource indicators, audience validation (#18575, f0c9c4d) (@ThomasK33)
  • Add protected resource metadata endpoint for RFC 9728 (#18643, 33bbf18) (@ThomasK33)
  • Implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645, 74e1d5c) (@ThomasK33)
  • Add experimental OAuth2 provider functionality (#18692, 1555154) (@ThomasK33)
  • Implement RFC 6750 Bearer token authentication (#18644, 09c5055) (@ThomasK33)
  • Add RFC 9728 OAuth2 resource metadata support (#18920, 071383b) (@ThomasK33)
• The external Coder MCP server is now available as an experiment:

  Use any agent to create coder workspaces.

  • Implement MCP HTTP server endpoint with authentication (#18670, 494dccc) (@ThomasK33)
  • Add MCP HTTP server experiment and improve experiment middleware (#18712, 7fbb3ce) (@ThomasK33)
  • Add workspace SSH execution tool for AI SDK (#18924, 326c024) (@ThomasK33)
  • SDK: Add MCP workspace bash background parameter (#19034, b666d52) (@hugodutka)
• Added new connection logs as a separate entity from audit logs

  

  • Dashboard: Add connection log page (#18708, b5260d5) (@ethanndickson)
  • Add connectionlogs API (#18628, 7a339a1) (@ethanndickson)
• Improvements to Coder Tasks:

  

  • Add task link in the workspace page when it is running a task (#18591, 2d44add) (@BrunoQuaresma)
  • Redirect to the task page after creation (#18626, 29ef3a8) (@BrunoQuaresma)
  • Make task panels resizable (#18590, 8eebb4f) (@BrunoQuaresma)
  • Add preset selector in TasksPage (#19012, 9a05a8a) (@johnstcn)
• Improvements to our Devcontainers integration:
  • Agent: Automaticall detect dev containers (#18950, f41275e) (@DanielleMaywood)
  • Agent: Allow auto start for discovered containers (#19040, 66cf90c) (@DanielleMaywood)
  • CLI: Improve devcontainer support for coder show (#18793, 5f50dcc) (@mafredri)
  • CLI: Replace open vscode container with devcontainer subagent (#18765, 6c4db7a) (@mafredri)
  • Install dotfiles if present (#18606, 872aef3) (@mafredri)
• Administrators can now track usage of agentic AI workspaces:

  Premium licensed customers have a default of 800 agentic workspaces per user. This limit will likely never be hit.

  • Add managed_agent_limit licensing feature (#18876, 183a6eb) (@deansheather)
  • Add managed ai usage consumption to license view (#18934, 36d2e01) (@ibetitsmike)
• Allow users to pause prebuilt workspace reconciliation (#18700, 01163ea) (@SasSwart)
• Use parameter preview engine to compute workspace tags from terraform (#18720, a099a8a) (@Emyrk)
• Add publishing of helm charts to ghcr registry (#18316, 10c1e36) (@a1994sc)
• Automatically reconnect the terminal (#18796, 5a8a19b) (@BrunoQuaresma)
• Publish CLI binaries and detached signatures to releases.coder.com (#18874, e4d3453) (@jdomeracki-coder)
• Add managed agent license limit checks (#18937, 9a6dd73) (@deansheather)
• Extend workspace build reasons to track connection types (#18827, 482463c) (@kacpersaw)
• Add View Source button for template administrators in workspace creation (#18951, 28789d7) (@app/blink-so)
• Add timeout support to workspace bash tool (#19035, 398e80f) (@ThomasK33)
• Support icon and description in preset (#18977, 0672bf5) (@ssncferreira)
• Support shift+enter in terminal (#19021, 558e25d) (@code-asher)
• CLI: Add CLI support for listing presets (#18910, 931b97c) (@ssncferreira)
• CLI: Support description in create and presets list CLI commands (#19079, 4e7331a) (@ssncferreira)
• Helm: Add pod-level securityContext support for certificate mounting (#19041, faac753) (@ausbru87)
• Dashboard: Support icon and description in preset (#19063, 71738f6) (@ssncferreira)

Bug fixes

• Hide the preset parameter visibility switch when it has no effect (#18574, 634144f) (@SasSwart)
• Pin Nix version to 2.28.4 to avoid JSON type error (#18612, 1b1d091) (@ThomasK33)
• Cap max X11 forwarding ports and evict old (#18561, 9e1cf16) (@spikecurtis)
• Use memmap file system for TestServer_X11 (#18562, 6bebfd0) (@spikecurtis)
• Use default preset when creating a workspace for task (#18623, 6d305df) (@BrunoQuaresma)
• Use only template version ID to create task workspace (#18642, 4095330) (@BrunoQuaresma)
• Display error message when delete workspace fails (#18654, ad67733) (@jaaydenh)
• Use client preferred URL for the default DERP (#18911, a1b87a6) (@deansheather)
• Prioritise human-initiated builds over prebuilds in provisioner queue (#18933, c4b69bb) (@johnstcn)
• Debounce parameter slider to avoid laggy behavior (#18980, dd2fb89) (@jaaydenh)
• Avoid duplicating logs on Coder Connect Windows (#19052, 2a430ab) (@deansheather)
• Sanitize app status summary to resolve confusing errors in coder tasks (#19075, 812d72c) (@johnstcn)
• Agent: Delay containerAPI init to ensure startup scripts run before (#18630, 7e99fb7) (@mafredri)
• Agent: Fix script filtering for devcontainers (#18635, 8ee2668) (@mafredri)
• Agent: Disable dev container integration inside sub agents (#18781, 0118e75) (@DanielleMaywood)
• Agent: Stop logging empty lines (#18605, 98c77fe) (@DanielleMaywood)
• Agent: Respect ignore files (#19016, 25d70ce) (@DanielleMaywood)
• CLI: Calculate coder ping max correctly (#18734, 7500aa4) (@ethanndickson)
• fix(.devcontainer): add home volume and fix code-server and filebrowser (#18648, d814fdf) (@mafredri)
• Dashboard: Update vscode.dev container button URLs (#18696, 8b6d70b) (@mafredri)
• Dashboard: Only attempt to watch containers when agent connected (#18873, 089f960) (@DanielleMaywood)
• Dashboard: Exclude workspace schedule settings for prebuilt workspaces (#18826, dad033e) (@ssncferreira)
• Dashboard: Only attempt to watch when dev containers enabled (#18892, bfb9aa4) (@DanielleMaywood)
• Dashboard: Speed up state syncs and validate input for debounce hook logic (#18877, f47efc6) (@Parkreiner)

Performance Optimization

• Optimize GetPrebuiltWorkspaces query (#18717, 0367dba) (@johnstcn)
• Database: Optimize AuditLogs queries (#18600, 695de6e) (@kacpersaw)
• Database: Optimize GetRunningPrebuiltWorkspaces (#18588, 258a839) (@johnstcn)
• Populate connectionlog count using a separate query (#18629, 7c077d3) (@ethanndickson)
• Replace original GetPrebuiltWorkspaces with optimized version (#18832, 198d50d) (@johnstcn)
• CLI: Increase reconciliation interval to 1 minute (#18690, dbfbef6) (@johnstcn)
• Dashboard: Reduce fetch interval on workspaces page (#18725, 1195f31) (@johnstcn)

Documentation

• Add Coder Desktop to remote desktop docs (#18326, fb0e7a2) (@matifali)
• Add warning about prebuilds incompatibility with certain features (#18689, 57a6d59) (@ssncferreira)
• Add section about how to disable path based apps to security best practices (#18419, ab254ad) (@EdwardAngert)
• Mention Windsurf module in Windsurf documentation (#18715, 91aa583) (@app/blink-so)
• Add comprehensive development documentation for claude (#18646, 4dcf0c3) (@ThomasK33)
• Simplify PostgreSQL K8s setup guide by using 'postgresql' as release name (#18754, 39ed0c3) (@app/blink-so)
• Add note about incompatible immutable parameters behavior to parameters doc (#18814, 78af5e0) (@EdwardAngert)
• Document known issue with MacOS coder desktop behind VPN (#18855, 7cf3263) (@EdwardAngert)
• Add connection logs page covering the new location (#18739, 6b17aee) (@ethanndickson)
• Improve audit logs documentation copy (#18807, de4a270) (@ethanndickson)
• Add cloud-specific database instance recommendations (#18862, 87e5365) (@app/blink-so)
• Update port forwarding docs to include Coder Desktop (#18870, ca6b5e3) (@matifali)
• Add documentation for contributing community modules and community templates (#18820, 6746e16) (@DevelopmentCats)
• Remove dbmem references from documentation files for claude context (#18861, 0d3b770) (@ThomasK33)
• Add suggestions to the tasks docs (#18766, 1e715e2) (@hugodutka)
• Update tasks docs (#18659, b26c9e2) (@bpmct)

Compare: v2.24.2...v2.25.0

Container image

• docker pull ghcr.io/coder/coder:v2.25.0

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.