dependabot[bot]
6b77fe3666
Bump @eslint/compat from 1.4.1 to 2.1.1
...
Bumps [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat ) from 1.4.1 to 2.1.1.
- [Release notes](https://github.com/eslint/rewrite/releases )
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md )
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.1/packages/compat )
---
updated-dependencies:
- dependency-name: "@eslint/compat"
dependency-version: 2.1.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-28 22:28:26 +00:00
Harsh Bhanushali
70fc911358
Override basic-ftp to ^6.2.1 ( #8086 )
...
get-uri still depends on basic-ftp ^5.x, which has no patched release.
2026-10-28 14:25:45 -08:00
Raphael Fakhri
761b0d2a19
Fix cookie domain not being set against root host ( #8076 )
2026-10-27 13:05:56 -08:00
Vincent Coffey
09012065c9
Support load balancer service in Helm chart ( #8081 )
2026-10-27 11:58:13 -08:00
dependabot[bot]
e999549684
Bump follow-redirects from 1.16.0 to 1.16.2 ( #8065 )
2026-10-27 11:51:39 -08:00
dependabot[bot]
9d0eee156e
Bump ip-address from 10.7.2 to 10.7.5 ( #8080 )
2026-10-26 17:01:48 -08:00
dependabot[bot]
b87ae88bc6
Bump body-parser from 2.3.0 to 2.4.0 ( #8079 )
2026-10-26 17:01:24 -08:00
Harsh Bhanushali
89cba83cb4
Normalize default ports and use X-Forwarded-Port in the origin check ( #8059 )
...
The origin check compared the host header to the origin's host as plain
strings, so `example.com:443` did not match `https://example.com `, and a
proxy forwarding `$host` (no port) together with X-Forwarded-Port failed
on any non-default port.
Default ports (80 for http, 443 for https) are now treated as no port,
and when X-Forwarded-Host has no port the port from X-Forwarded-Port is
used. Everything else is still an exact match. getHost() is unchanged
for the domain proxy.
2026-10-26 16:42:24 -08:00
dependabot[bot]
b45f29491d
Bump js-yaml from 4.3.1 to 5.4.3 ( #8054 )
2026-10-26 15:47:26 -08:00
cdrci
4677c9d865
Update Helm chart and changelog with 4.143.1 ( #8072 )
2026-10-23 15:32:11 -08:00
cdrci
22ddf60dbc
Update Code to 1.143.1 ( #8069 )
...
* Remove Node patch
* Update patches
Just one conflict, they use user-data-dir now which is something we
already have been doing for a long time.
2026-10-23 22:15:00 +00:00
cdrci
e777c1f963
Update Helm chart and changelog with 4.141.1 ( #8071 )
2026-10-23 13:49:22 -08:00
Dean Sheather
279b5702aa
Merge pull request #8070 from coder/upgrade-node-checksums
...
Fix Node 24.22.1 checksums
2026-10-24 04:50:00 +11:00
Dean Sheather
27baccf843
Fix Node 24.22.1 checksums
2026-10-23 17:35:56 +00:00
Dean Sheather
8aab1b0d72
Merge pull request #8068 from coder/upgrade-node
...
Upgrade Node to 24.22.1
2026-10-24 02:35:35 +11:00
Dean Sheather
777c493a9b
Upgrade Node to 24.22.1
2026-10-23 15:06:41 +00:00
Harsh Bhanushali
f07405cba3
Expand ~ in path options from the config file ( #8055 )
...
The shell expands ~ in command-line arguments, but values read from
config.yaml were passed to path.resolve as-is, so
`user-data-dir: ~/.config/code-server-data` resolved to
`<cwd>/~/.config/code-server-data`.
2026-10-14 13:47:08 -08:00
dependabot[bot]
c5fee2d2f9
Bump brace-expansion from 1.1.18 to 1.1.21 ( #8044 )
2026-10-13 17:02:46 -08:00
Harsh Bhanushali
83670e50c6
Fix false booleans in config file being parsed as true ( #8053 )
...
Options like `enable-remote-storage: false` in config.yaml are converted to
`--enable-remote-storage=false`, but the parser set any boolean option to
true regardless of its value. Booleans set to false are now ignored, the
same way optional strings set to false already are.
2026-10-13 17:01:10 -08:00
KeuqS
41cf6f7eaf
Add Turkish locale ( #8050 )
2026-10-09 22:50:17 +00:00
cdrci
78aad47ce6
Update Helm chart and changelog with 4.141.0 ( #8045 )
2026-10-08 02:35:52 -08:00
cdrci
8b41915d25
Update Code to 1.141.0 ( #8040 )
...
* Update Code to 1.141.0
* Allow pull_request_target
* Add e2e tests for remote storage
* Fix Typescript extension not loading
* Remove unused imports
2026-10-07 22:54:47 -08:00
dependabot[bot]
6d7b6f8a17
Bump prettier-plugin-sh from 0.18.0 to 0.20.2 ( #8028 )
2026-10-07 17:40:44 -08:00
dependabot[bot]
be95e9f163
Bump @babel/core from 7.25.7 to 7.29.7 in /test ( #8004 )
2026-10-07 17:39:45 -08:00
dependabot[bot]
317a591ed7
Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 ( #8027 )
2026-10-07 17:37:57 -08:00
dependabot[bot]
5244097e99
Bump limiter from 2.1.0 to 4.1.0 ( #8030 )
2026-10-07 17:36:34 -08:00
dependabot[bot]
8a1f2e3d55
Bump brace-expansion from 1.1.18 to 1.1.21 in /test ( #8041 )
2026-10-07 17:33:36 -08:00
dependabot[bot]
8b20b3e128
Bump github/codeql-action/analyze from 4.37.9 to 4.38.2 ( #8032 )
2026-10-07 16:40:21 -08:00
dependabot[bot]
b43e8a3dd1
Bump compression from 1.8.1 to 1.8.2 ( #8042 )
2026-10-07 16:39:41 -08:00
dependabot[bot]
48b45385f7
Bump github/codeql-action/init from 4.37.9 to 4.38.2 ( #8034 )
2026-10-07 16:38:41 -08:00
dependabot[bot]
74571ff255
Bump codecov/codecov-action from 7.0.0 to 7.1.1 ( #8035 )
2026-10-07 16:36:49 -08:00
dependabot[bot]
04ab55c4f2
Bump github/codeql-action/autobuild from 4.37.8 to 4.38.2 ( #8036 )
2026-10-07 16:36:15 -08:00
Daywin67
8be4df7ab0
Add flag to store state on remote instead of browser ( #7914 )
2026-10-07 16:35:44 -08:00
cdrci
067f1e35dd
Update Helm chart and changelog with 4.140.0 ( #8038 )
2026-10-01 16:18:01 -08:00
cdrci
ccc19adc2e
Update Code to 1.140.0 ( #8037 )
2026-10-01 12:42:33 -08:00
Steven
f871c1663b
Document that Cloudflare Rocket Loader must be disabled ( #8026 )
2026-09-30 14:55:09 -08:00
dependabot[bot]
fa7caee4dd
Bump ip-address from 10.4.0 to 10.7.2 ( #8023 )
2026-09-29 14:54:16 -08:00
Zain Qureshi
2bb012c17a
Sync Helm docs table and badges with the chart ( #8024 )
2026-09-29 14:53:43 -08:00
cdrci
96e468eaa6
Update Helm chart and changelog with 4.139.1 ( #8022 )
2026-09-28 14:45:26 -08:00
cdrci
53c2f3253b
Update Code to 1.139.1 ( #8021 )
...
* Update Code to 1.139.1
* Bump proxy-addr to 2.0.8
* Add preinstall setup to build
Already had this in the release build step, not sure why it is not in
the main build step. But we started getting errors building native
modules in ci, and this seems to be why.
* Fix quick input
It types too quickly, before the input is visible.
2026-09-25 15:12:50 -08:00
Leo Camus
8a7bf87a4d
Fix --idle-timeout-seconds validation being skipped ( #8009 )
...
The lower bound check ran before the parser had resolved the value, so it
only saw a value with the --idle-timeout-seconds=<value> form. With the
space-separated form the value was still undefined at that point,
Number(undefined) is NaN, and NaN <= 60 is false, so anything got through.
Move the check below the block that pulls the value from the next
argument so both forms are validated the same way.
2026-09-20 02:53:04 -08:00
cdrci
cd0f21dc72
Update Helm chart and changelog with 4.138.0 ( #8014 )
2026-09-20 02:51:41 -08:00
cdrci
59c988c744
Update Code to 1.138.0 ( #8011 )
2026-09-18 23:44:50 +00:00
Limbo
ef5eba4348
Preserve path, query, and fragment in proxy URL rewrite ( #8012 )
2026-09-17 12:41:01 -08:00
dependabot[bot]
20a260f748
Bump typescript-eslint from 8.61.1 to 8.69.0 ( #7998 )
2026-09-11 11:06:50 -08:00
dependabot[bot]
729815064f
Bump js-yaml from 3.14.2 to 3.15.2 in /test ( #8003 )
2026-09-11 11:06:08 -08:00
cdrci
771a637516
Update Helm chart and changelog with 4.137.0 ( #8007 )
2026-09-10 17:11:14 -08:00
cdrci
b11dabdaca
Update Code to 1.137.0 ( #8005 )
2026-09-10 12:38:15 -08:00
dependabot[bot]
7f25500e74
Bump aquasecurity/trivy-action to latest ( #7966 )
2026-09-08 13:24:21 -08:00
dependabot[bot]
ebc25530a2
Bump semver and @types/semver ( #7971 )
2026-09-08 13:20:41 -08:00
dependabot[bot]