Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: coder/coder
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.8.3
Choose a base ref
...
head repository: coder/coder
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.8.4
Choose a head ref
  • 2 commits
  • 3 files changed
  • 1 contributor

Commits on Mar 4, 2024

  1. chore: add patch notes for v2.8.4

    @coadler
    coadler committed Mar 4, 2024
    Configuration menu
    Copy the full SHA
    e7033b3 View commit details
    Browse the repository at this point in the history

  2. Merge pull request from GHSA-7cc2-r658-7xpf 

    This fixes a vulnerability with the `CODER_OIDC_EMAIL_DOMAIN` option,
where users with a superset of the allowed email domain would be allowed
to login. For example, given `CODER_OIDC_EMAIL_DOMAIN=google.com`, a
user would be permitted entry if their email domain was
`colin-google.com`.

(cherry picked from commit 4439a92)
    @coadler
    coadler committed Mar 4, 2024
    Configuration menu
    Copy the full SHA
    2d37eb4 View commit details
    Browse the repository at this point in the history
Loading