dependabot[bot]
e73622adaf
Bump actions/upload-artifact from 7.0.1 to 7.0.2 ( #8104 )
2026-11-02 13:33:09 -09:00
dependabot[bot]
734cdc9947
Bump aquasecurity/trivy-action ( #8102 )
2026-11-02 13:32:22 -09:00
dependabot[bot]
1c435fa2f5
Bump argon2 from 0.44.0 to 0.45.1 ( #8095 )
2026-11-02 13:28:23 -09:00
Asher
74d06e2e36
Update remaining codeql actions
...
Also add a group since they have to all be updated together.
2026-11-02 13:20:36 -09:00
dependabot[bot]
f65b229eab
Bump typescript-eslint from 8.69.0 to 8.72.1 ( #8092 )
2026-11-02 12:47:41 -09:00
dependabot[bot]
973937ecf2
Bump github/codeql-action/upload-sarif from 4.37.6 to 4.39.1 ( #8093 )
2026-11-02 12:46:59 -09:00
dependabot[bot]
739bda2970
Bump @types/node from 24.13.3 to 24.19.2 ( #8091 )
2026-11-02 12:34:55 -09:00
dependabot[bot]
c88b56cddc
Bump docker/setup-qemu-action from 4.3.0 to 4.4.0 ( #8090 )
2026-11-02 12:33:59 -09:00
dependabot[bot]
cad47a78f1
Bump github/codeql-action/analyze from 4.38.2 to 4.39.1 ( #8096 )
2026-11-02 12:33:20 -09:00
dependabot[bot]
b4725f8be9
Bump docker/login-action from 4.6.0 to 4.7.0 ( #8097 )
2026-11-02 12:32:39 -09:00
dependabot[bot]
68d5f022a5
Bump actions/download-artifact from 8.0.1 to 8.0.2 ( #8098 )
2026-11-02 12:32:06 -09:00
cdrci
68810a6bd6
Update Helm chart and changelog with 4.144.0 ( #8088 )
2026-10-29 13:35:10 -08:00
cdrci
ee31cdbe02
Update Code to 1.144.0 ( #8087 )
2026-10-28 17:38:07 -08:00
Andy Piper
27808460b1
Fix --socket-fd when code-server is socket-activated ( #8083 )
...
The --socket-fd flag never worked. The wrapper forks the process that
listens, but only the IPC channel was inherited as fd 3, so the socket
passed by the caller was not available to the child. Node then tried to
listen on the IPC pipe and failed with "listen EEXIST".
Pass the socket to the child as stdio entry 4 and tell the child to use
that fd in the handshake.
Node also reports no address for a Unix socket adopted by fd, which made
startup fail with "Server has no address". Log the listener as fd:<n>
in that case.
Add an integration test that starts the code-server binary with a Unix
or TCP socket as fd 3 and checks that /healthz answers over it.
2026-10-28 15:11:06 -08:00
Harsh Bhanushali
70fc911358
Override basic-ftp to ^6.2.1 ( #8086 )
...
get-uri still depends on basic-ftp ^5.x, which has no patched release.
2026-10-28 14:25:45 -08:00
Raphael Fakhri
761b0d2a19
Fix cookie domain not being set against root host ( #8076 )
2026-10-27 13:05:56 -08:00
Vincent Coffey
09012065c9
Support load balancer service in Helm chart ( #8081 )
2026-10-27 11:58:13 -08:00
dependabot[bot]
e999549684
Bump follow-redirects from 1.16.0 to 1.16.2 ( #8065 )
2026-10-27 11:51:39 -08:00
dependabot[bot]
9d0eee156e
Bump ip-address from 10.7.2 to 10.7.5 ( #8080 )
2026-10-26 17:01:48 -08:00
dependabot[bot]
b87ae88bc6
Bump body-parser from 2.3.0 to 2.4.0 ( #8079 )
2026-10-26 17:01:24 -08:00
Harsh Bhanushali
89cba83cb4
Normalize default ports and use X-Forwarded-Port in the origin check ( #8059 )
...
The origin check compared the host header to the origin's host as plain
strings, so `example.com:443` did not match `https://example.com `, and a
proxy forwarding `$host` (no port) together with X-Forwarded-Port failed
on any non-default port.
Default ports (80 for http, 443 for https) are now treated as no port,
and when X-Forwarded-Host has no port the port from X-Forwarded-Port is
used. Everything else is still an exact match. getHost() is unchanged
for the domain proxy.
2026-10-26 16:42:24 -08:00
dependabot[bot]
b45f29491d
Bump js-yaml from 4.3.1 to 5.4.3 ( #8054 )
2026-10-26 15:47:26 -08:00
cdrci
4677c9d865
Update Helm chart and changelog with 4.143.1 ( #8072 )
2026-10-23 15:32:11 -08:00
cdrci
22ddf60dbc
Update Code to 1.143.1 ( #8069 )
...
* Remove Node patch
* Update patches
Just one conflict, they use user-data-dir now which is something we
already have been doing for a long time.
2026-10-23 22:15:00 +00:00
cdrci
e777c1f963
Update Helm chart and changelog with 4.141.1 ( #8071 )
2026-10-23 13:49:22 -08:00
Dean Sheather
279b5702aa
Merge pull request #8070 from coder/upgrade-node-checksums
...
Fix Node 24.22.1 checksums
2026-10-24 04:50:00 +11:00
Dean Sheather
27baccf843
Fix Node 24.22.1 checksums
2026-10-23 17:35:56 +00:00
Dean Sheather
8aab1b0d72
Merge pull request #8068 from coder/upgrade-node
...
Upgrade Node to 24.22.1
2026-10-24 02:35:35 +11:00
Dean Sheather
777c493a9b
Upgrade Node to 24.22.1
2026-10-23 15:06:41 +00:00
Harsh Bhanushali
f07405cba3
Expand ~ in path options from the config file ( #8055 )
...
The shell expands ~ in command-line arguments, but values read from
config.yaml were passed to path.resolve as-is, so
`user-data-dir: ~/.config/code-server-data` resolved to
`<cwd>/~/.config/code-server-data`.
2026-10-14 13:47:08 -08:00
dependabot[bot]
c5fee2d2f9
Bump brace-expansion from 1.1.18 to 1.1.21 ( #8044 )
2026-10-13 17:02:46 -08:00
Harsh Bhanushali
83670e50c6
Fix false booleans in config file being parsed as true ( #8053 )
...
Options like `enable-remote-storage: false` in config.yaml are converted to
`--enable-remote-storage=false`, but the parser set any boolean option to
true regardless of its value. Booleans set to false are now ignored, the
same way optional strings set to false already are.
2026-10-13 17:01:10 -08:00
KeuqS
41cf6f7eaf
Add Turkish locale ( #8050 )
2026-10-09 22:50:17 +00:00
cdrci
78aad47ce6
Update Helm chart and changelog with 4.141.0 ( #8045 )
2026-10-08 02:35:52 -08:00
cdrci
8b41915d25
Update Code to 1.141.0 ( #8040 )
...
* Update Code to 1.141.0
* Allow pull_request_target
* Add e2e tests for remote storage
* Fix Typescript extension not loading
* Remove unused imports
2026-10-07 22:54:47 -08:00
dependabot[bot]
6d7b6f8a17
Bump prettier-plugin-sh from 0.18.0 to 0.20.2 ( #8028 )
2026-10-07 17:40:44 -08:00
dependabot[bot]
be95e9f163
Bump @babel/core from 7.25.7 to 7.29.7 in /test ( #8004 )
2026-10-07 17:39:45 -08:00
dependabot[bot]
317a591ed7
Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 ( #8027 )
2026-10-07 17:37:57 -08:00
dependabot[bot]
5244097e99
Bump limiter from 2.1.0 to 4.1.0 ( #8030 )
2026-10-07 17:36:34 -08:00
dependabot[bot]
8a1f2e3d55
Bump brace-expansion from 1.1.18 to 1.1.21 in /test ( #8041 )
2026-10-07 17:33:36 -08:00
dependabot[bot]
8b20b3e128
Bump github/codeql-action/analyze from 4.37.9 to 4.38.2 ( #8032 )
2026-10-07 16:40:21 -08:00
dependabot[bot]
b43e8a3dd1
Bump compression from 1.8.1 to 1.8.2 ( #8042 )
2026-10-07 16:39:41 -08:00
dependabot[bot]
48b45385f7
Bump github/codeql-action/init from 4.37.9 to 4.38.2 ( #8034 )
2026-10-07 16:38:41 -08:00
dependabot[bot]
74571ff255
Bump codecov/codecov-action from 7.0.0 to 7.1.1 ( #8035 )
2026-10-07 16:36:49 -08:00
dependabot[bot]
04ab55c4f2
Bump github/codeql-action/autobuild from 4.37.8 to 4.38.2 ( #8036 )
2026-10-07 16:36:15 -08:00
Daywin67
8be4df7ab0
Add flag to store state on remote instead of browser ( #7914 )
2026-10-07 16:35:44 -08:00
cdrci
067f1e35dd
Update Helm chart and changelog with 4.140.0 ( #8038 )
2026-10-01 16:18:01 -08:00
cdrci
ccc19adc2e
Update Code to 1.140.0 ( #8037 )
2026-10-01 12:42:33 -08:00
Steven
f871c1663b
Document that Cloudflare Rocket Loader must be disabled ( #8026 )
2026-09-30 14:55:09 -08:00
dependabot[bot]
fa7caee4dd
Bump ip-address from 10.4.0 to 10.7.2 ( #8023 )
2026-09-29 14:54:16 -08:00
dependabot[bot]