|
| 1 | +--- |
| 2 | +title: "1.38.0" |
| 3 | +description: "Released on 01/04/2023" |
| 4 | +--- |
| 5 | + |
| 6 | +### Breaking changes ❗ |
| 7 | + |
| 8 | +There are no breaking changes in 1.38.0. |
| 9 | + |
| 10 | +### Features ✨ |
| 11 | + |
| 12 | +- Individual image tags can now be decommissioned. Existing workspaces using a |
| 13 | + decommissioned tag will be migrated to use the default tag upon rebuild. Adds |
| 14 | + new organization-level roles: Organization Super Manager, Organization Image |
| 15 | + Manager, and Organization Importer. These roles allow finer-grained access |
| 16 | + control around image and registry management. For more information, see |
| 17 | + [Organization Roles](https://coder.com/docs/coder/latest/admin/access-control/organizations). |
| 18 | + > ℹ️ ️Migration: existing users with the Organization Manager role will be |
| 19 | + > migrated to Organization Super Manager, and users with the Organization |
| 20 | + > Member role will be migrated to Importer. Both of these changes will result |
| 21 | + > in no effective permission changes for existing users. |
| 22 | +- Improves web terminal reconnection by leveraging |
| 23 | + [GNU Screen](https://www.gnu.org/software/screen/) if available inside the |
| 24 | + workspace. Workspaces without screen installed will no longer support |
| 25 | + reconnection. |
| 26 | + |
| 27 | +### Bug fixes 🐛 |
| 28 | + |
| 29 | +- Fixed an issue where CVMs would fail to build when their home volume is |
| 30 | + completely full. |
| 31 | +- Fixed an issue where users accessing a DevURL could encounter a redirect loop |
| 32 | + under certain circumstances. |
| 33 | +- Fixed an issue where users accessing Coder through an HTTP proxy were unable |
| 34 | + to access workspaces or view build logs in some cases. |
| 35 | +- Fixed an issue where satellites would need to be manually restarted to pick up |
| 36 | + changes in certificates. |
| 37 | +- Fixed an issue where users were able to reduce the size of their home volume, |
| 38 | + which is not supported in Kubernetes. |
| 39 | +- Fixed some rendering issues with the web terminal and SSH, for example when |
| 40 | + using Emacs or GNU Screen. |
| 41 | + |
| 42 | +### Security updates 🔐 |
| 43 | + |
| 44 | +- Fixed an issue where an attacker could craft a malicious DevURL redirect link |
| 45 | + to exfiltrate a token that allows accessing that user's devURLs. |
| 46 | +- Fixed an issue where organization members could read information about other |
| 47 | + users' workspaces. |
| 48 | +- Fixed an issue where users could create DevURLs to ports reserved by the Coder |
| 49 | + agent. |
| 50 | +- Fixed an issue where Content Security Policy violations were reported from |
| 51 | + Coder's own UI. |
0 commit comments