mirror of
https://github.com/coder/coder.git
synced 2026-09-22 05:05:20 +08:00
109e73bf977fb66b39fe841f0502ce0e7694df26
9486
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
+4
|
109e73bf97 |
docs: add details on external authentication priority (#17164)
## Issue Closes #16875 Clarify how Coder authentication works with Git providers, particularly the order of authentication methods used. ## Changes Made I've updated the External Authentication documentation to: 1. Clarify that Coder first attempts to use external auth provider tokens when available, and only defaults to SSH authentication if no tokens are available 2. Add more detailed explanations about both authentication methods 3. Improve the description of how the `coder gitssh` command works with existing and Coder-generated SSH keys ## Verification Claude verified that this accurately describes the behavior of the codebase by reviewing the `gitssh.go` implementation, which shows how Coder handles SSH authentication as a fallback when external auth is not available. [preview](https://coder.com/docs/@16875-git-workspace-auth/admin/external-auth) <sub>🤖 Generated with https://claude.ai/code</sub> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com> Co-authored-by: Ben Potter <me@bpmct.net> Co-authored-by: M Atif Ali <atif@coder.com> Co-authored-by: Bruno Quaresma <bruno@coder.com> Co-authored-by: Kyle Carberry <kyle@coder.com> Co-authored-by: Cian Johnston <cian@coder.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jon Ayers <jon@coder.com> Co-authored-by: Hugo Dutka <hugo@coder.com> Co-authored-by: Ethan <39577870+ethanndickson@users.noreply.github.com> Co-authored-by: Michael Smith <throwawayclover@gmail.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Sas Swart <sas.swart.cdk@gmail.com> |
||
|
Spike Curtis
|
3f3e2017bd |
fix: fix http cache dir creation order in coderdtest (#17303)
fixes coder/internal#565 Fixes the ordering of creating the HTTP cache temp dir with respect to starting the Coderd HTTP server, so that they are cleaned up in the correct (reverse) order. |
||
|
Cian Johnston
|
43b1a034b1 | chore(agent/agentscripts): disable TestTimeout on macOS (#17300) | ||
|
Cian Johnston
|
a8fbe71a22 |
chore(cli): increase healthcheck timeout in TestSupportbundle (#17291)
Fixes https://github.com/coder/internal/issues/272 * Increases healthcheck timeout in tests. This seems to be the most usual cause of test failures. * Adds a non-nilness check before caching a healthcheck report. * Modifies the HTTP response code to 503 (was 404) when no healthcheck report is available. 503 seems to be a better indicator of the server state in this case, whereas 404 could be misinterpreted as a typo in the healthcheck URL. |
||
|
Cian Johnston
|
8d122aa4ab |
chore(cli): avoid use of testutil.RandomPort() in prometheus test (#17297)
Should hopefully fix https://github.com/coder/internal/issues/282 Instead of picking a random port for the prometheus server, listen on `:0` and read the port from the CLI stdout. |
||
|
Utsavkumar Lal
|
0e658219b2 |
feat: support filtering users table by login type (#17238)
#15896 Mentions ability to add support for filtering by login type The issue mentions that backend API support exists but the backend did not seem to have the support for this filter. So I have added the ability to filter it. I also added a corresponding update to readme file to make sure the docs will correctly showcase this feature |
||
|
Steven Masley
|
f2d24bc3f4 |
chore: add custom samesite options to auth cookies (#16885)
Allows controlling `samesite` cookie settings from deployment values |
||
|
Steven Masley
|
52d555880c |
chore: add custom samesite options to auth cookies (#16885)
Allows controlling `samesite` cookie settings from the deployment config |
||
|
Cian Johnston
|
389e88ec82 |
chore(cli): refactor TestServer/Prometheus to use testutil.Eventually (#17295)
Updates https://github.com/coder/internal/issues/282 Refactors existing tests to use `testutil.Eventually` which plays nicer with `testutil.Context`. |
||
|
Cian Johnston
|
44ddc9f654 |
chore(agent/agentscripts): increase timeout in TestTimeout (#17293)
Fixes https://github.com/coder/internal/issues/329 This was due to a race between the process starting and the timeout of the agent startup script executor. I'm taking the 'lazy' route here and increasing the timeout to 100ms. This does technically mean that this makes the test 100 times longer to execute. However, if it takes more than 100ms to run a `sleep infinity` command on our test runner, I think we have other issues. |
||
|
Spike Curtis
|
b1f59aafc1 |
fix: stop checking gauges unrelated to TestAgent_Stats_Magic (#17290)
Fixes https://github.com/coder/internal/issues/564 The test is asserting too much, including stats guages that are not directly related to the thing we are trying to test: ConnectionCount, RxBytes, and TxBytes. I think the author assumed that these are counts that only go up, but they are guages and eventually zero back out, so there are race condtions where not all of them are non-zero at the same time. |
||
|
Marcin Tojek
|
88b7c9ef5d |
feat: install more terminal fonts (#17289)
Related: https://github.com/coder/coder/issues/15024 |
||
|
dependabot[bot]
|
3487f37f9a |
chore: bump github.com/go-chi/httprate from 0.14.1 to 0.15.0 (#17171)
Bumps [github.com/go-chi/httprate](https://github.com/go-chi/httprate) from 0.14.1 to 0.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-chi/httprate/releases">github.com/go-chi/httprate's releases</a>.</em></p> <blockquote> <h2>v0.15.0</h2> <ul> <li>upgrade to xxhash v3</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-chi/httprate/commit/c0b6272bcac673c105a4d29c98dd9be27a0d644d"><code>c0b6272</code></a> upgrade to xxh3 hashing pkg (<a href="https://redirect.github.com/go-chi/httprate/issues/54">#54</a>)</li> <li><a href="https://github.com/go-chi/httprate/commit/9d627fb3c8a009b20ae198abe84b3a1d10a22a94"><code>9d627fb</code></a> Update README.md: add missing 'time' import in code example (<a href="https://redirect.github.com/go-chi/httprate/issues/49">#49</a>)</li> <li><a href="https://github.com/go-chi/httprate/commit/24ebb38d02ea7de820e34f890c4206cf6b891955"><code>24ebb38</code></a> Try to fix Github action access issue (<a href="https://redirect.github.com/go-chi/httprate/issues/51">#51</a>)</li> <li>See full diff in <a href="https://github.com/go-chi/httprate/compare/v0.14.1...v0.15.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
f935e2a1d2 |
chore: bump github.com/go-playground/validator/v10 from 10.25.0 to 10.26.0 (#17173)
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.25.0 to 10.26.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-playground/validator/releases">github.com/go-playground/validator/v10's releases</a>.</em></p> <blockquote> <h2>v10.26.0</h2> <h2>What's Changed</h2> <ul> <li>Use correct pointer in errors.As(). Fix "panic: errors: *target must be interface or implement error" in examples. by <a href="https://github.com/antonsoroko"><code>@antonsoroko</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1378">go-playground/validator#1378</a></li> <li>Create dependabot by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1373">go-playground/validator#1373</a></li> <li>Bump golangci/golangci-lint-action from 4 to 6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1381">go-playground/validator#1381</a></li> <li>Bump golang.org/x/text from 0.21.0 to 0.22.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1383">go-playground/validator#1383</a></li> <li>Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1382">go-playground/validator#1382</a></li> <li>feat(translations): improve Indonesian translations and add tests by <a href="https://github.com/fathiraz"><code>@fathiraz</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1376">go-playground/validator#1376</a></li> <li>Fix time.Duration translation error by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1154">go-playground/validator#1154</a></li> <li>Update Project Status button by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1380">go-playground/validator#1380</a></li> <li>Remove gitter.im link from README.md by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1366">go-playground/validator#1366</a></li> <li>Docs: fix <code>Base64RawURL</code> usage by <a href="https://github.com/196Ikuchil"><code>@196Ikuchil</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1336">go-playground/validator#1336</a></li> <li>Fix length check on dns_rfc1035_label tag by <a href="https://github.com/KimNorgaard"><code>@KimNorgaard</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1214">go-playground/validator#1214</a></li> <li>Add Korean by <a href="https://github.com/jkh0kr"><code>@jkh0kr</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1338">go-playground/validator#1338</a></li> <li>add german translations by <a href="https://github.com/max-weis"><code>@max-weis</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1322">go-playground/validator#1322</a></li> <li>Update workflow to support the last three Go versions by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1393">go-playground/validator#1393</a></li> <li>Fix: Nil pointer dereference in Arabic translations by <a href="https://github.com/BlackSud0"><code>@BlackSud0</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1391">go-playground/validator#1391</a></li> <li>Translate to thai by <a href="https://github.com/maetad"><code>@maetad</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1202">go-playground/validator#1202</a></li> <li>Feat: add EIN validation by <a href="https://github.com/henrriusdev"><code>@henrriusdev</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1384">go-playground/validator#1384</a></li> <li>Fix reference to parameter name in docs by <a href="https://github.com/yegvla"><code>@yegvla</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1400">go-playground/validator#1400</a></li> <li>use mail.ParseAddress to cover missing email validations by <a href="https://github.com/eladb2011"><code>@eladb2011</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1395">go-playground/validator#1395</a></li> <li>Update linter to v2.0.2 by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://redirect.github.com/go-playground/validator/pull/1405">go-playground/validator#1405</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/antonsoroko"><code>@antonsoroko</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1378">go-playground/validator#1378</a></li> <li><a href="https://github.com/dependabot"><code>@dependabot</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1381">go-playground/validator#1381</a></li> <li><a href="https://github.com/fathiraz"><code>@fathiraz</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1376">go-playground/validator#1376</a></li> <li><a href="https://github.com/196Ikuchil"><code>@196Ikuchil</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1336">go-playground/validator#1336</a></li> <li><a href="https://github.com/KimNorgaard"><code>@KimNorgaard</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1214">go-playground/validator#1214</a></li> <li><a href="https://github.com/jkh0kr"><code>@jkh0kr</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1338">go-playground/validator#1338</a></li> <li><a href="https://github.com/max-weis"><code>@max-weis</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1322">go-playground/validator#1322</a></li> <li><a href="https://github.com/BlackSud0"><code>@BlackSud0</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1391">go-playground/validator#1391</a></li> <li><a href="https://github.com/maetad"><code>@maetad</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1202">go-playground/validator#1202</a></li> <li><a href="https://github.com/henrriusdev"><code>@henrriusdev</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1384">go-playground/validator#1384</a></li> <li><a href="https://github.com/yegvla"><code>@yegvla</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1400">go-playground/validator#1400</a></li> <li><a href="https://github.com/eladb2011"><code>@eladb2011</code></a> made their first contribution in <a href="https://redirect.github.com/go-playground/validator/pull/1395">go-playground/validator#1395</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0">https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-playground/validator/commit/433b08283c14b1def28e8f05e36c2bed2f13b3f4"><code>433b082</code></a> Update linter to v2.0.2 (<a href="https://redirect.github.com/go-playground/validator/issues/1405">#1405</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/859202275556dac82d4460234867c5c5988d06fd"><code>8592022</code></a> use mail.ParseAddress to cover missing email validations (<a href="https://redirect.github.com/go-playground/validator/issues/1395">#1395</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/271abb312cd958fd1c61b58983ecab31026eb252"><code>271abb3</code></a> Fix reference to parameter name in docs (<a href="https://redirect.github.com/go-playground/validator/issues/1400">#1400</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/79c42ad73c1fdebee04c93ac6a0e132353662dc6"><code>79c42ad</code></a> Feat: add EIN validation (<a href="https://redirect.github.com/go-playground/validator/issues/1384">#1384</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/2cadaff20364eef00f8711e1b6a0dfcc2aceee14"><code>2cadaff</code></a> Translate to thai (<a href="https://redirect.github.com/go-playground/validator/issues/1202">#1202</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/bae7f6d3cb253fbd5dddcdf339f8460fa8d091c3"><code>bae7f6d</code></a> Fix: Nil pointer dereference in Arabic translations (<a href="https://redirect.github.com/go-playground/validator/issues/1391">#1391</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/909c504042f17c83dc76e8a2c11efd3dd41bd212"><code>909c504</code></a> Update workflow to support the last three Go versions (<a href="https://redirect.github.com/go-playground/validator/issues/1393">#1393</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/09c1323276ffada71562c1b8bf0554a0ed5ddd1d"><code>09c1323</code></a> add german translations (<a href="https://redirect.github.com/go-playground/validator/issues/1322">#1322</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/45dd6e3bd61a7659b16d9c624e3e0174223a5fd6"><code>45dd6e3</code></a> Add Korean (<a href="https://redirect.github.com/go-playground/validator/issues/1338">#1338</a>)</li> <li><a href="https://github.com/go-playground/validator/commit/97d2bf07aad31b97b64fcd8213f922f159e62361"><code>97d2bf0</code></a> Fix length check on dns_rfc1035_label tag (<a href="https://redirect.github.com/go-playground/validator/issues/1214">#1214</a>)</li> <li>Additional commits viewable in <a href="https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Michael Suchacz
|
ce22de8d15 |
feat: log long-lived connections acceptance (#17219)
Closes #16904 |
||
|
Thomas Kosiewski
|
abe3ad68f5 |
fix: add continue-on-error to SBOM generation and force flag to cosign clean (#17288)
This PR makes the SBOM generation and attestation process more resilient by: 1. Adding `continue-on-error: true` to the SBOM generation steps in both CI and release workflows 2. Adding `--force=true` flag to all `cosign clean` commands to ensure they don't fail if in a non-interactive shell (which is the case for CI) Change-Id: Ide303c059b1a3d0e3fd77863310e99668325bc69 Signed-off-by: Thomas Kosiewski <tk@coder.com> Signed-off-by: Thomas Kosiewski <tk@coder.com> |
||
|
|
0e878a8e98 |
docs: rename codervpn to coder connect (#16833)
part of: https://github.com/coder/internal/issues/459 - [x] Text - [x] Screenshots - [x] MacOS - [x] Windows [preview](https://coder.com/docs/@459-coder-connect/user-guides/desktop) --------- Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com> Co-authored-by: M Atif Ali <atif@coder.com> |
||
|
corybandSpike Curtis
|
12e5718b99 |
feat(provisioner): propagate trace info (#17166)
If tracing is enabled, propagate the trace information to the terraform provisioner via environment variables. This sets the `TRACEPARENT` environment variable using the default W3C trace propagators. Users can choose to continue the trace by adding new spans in the provisioner by reading from the environment like: ctx := env.ContextWithRemoteSpanContext(context.Background(), os.Environ()) --------- Co-authored-by: Spike Curtis <spike@spikecurtis.com> |
||
|
Spike Curtis
|
9eeb506ae5 |
feat: modify config-ssh to set the host suffix (#17280)
Wires up `config-ssh` command to use a hostname suffix if configured. part of: #16828 e.g. `coder config-ssh --hostname-suffix spiketest` gives: ``` # ------------START-CODER----------- # This section is managed by coder. DO NOT EDIT. # # You should not hand-edit this section unless you are removing it, all # changes will be lost when running "coder config-ssh". # # Last config-ssh options: # :hostname-suffix=spiketest # Host coder.* *.spiketest ConnectTimeout=0 StrictHostKeyChecking=no UserKnownHostsFile=/dev/null LogLevel ERROR ProxyCommand /home/coder/repos/coder/build/coder_config_ssh --global-config /home/coder/.config/coderv2 ssh --stdio --ssh-host-prefix coder. --hostname-suffix spiketest %h # ------------END-CODER------------ ``` |
||
|
ケイラ
|
114ba4593b | chore: fix swagger type of AuditLog AdditionalFields (#17286) | ||
|
Edward AngertandEdwardAngert
|
d0aff04aef |
docs: remove blank inbox doc (#17285)
[preview](https://coder.com/docs/@hotfix-inbox-doc) Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com> |
||
|
|
2f6682a46f |
docs: add zed code_app to extending-templates doc (#17281)
continuation of #17236 (thanks @sharkymark ) adds zed as a coder_app to <https://coder.com/docs/admin/templates/extending-templates> [preview](https://coder.com/docs/@17236-zed-app/admin/templates/extending-templates#coder-app-examples) --------- Co-authored-by: sharkymark <mtm20176@gmail.com> Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com> |
||
|
Spike Curtis
|
d312e82a51 |
feat: support --hostname-suffix flag on coder ssh (#17279)
Adds `hostname-suffix` flag to `coder ssh` command for use in SSH Config ProxyCommands. Also enforces that Coder server doesn't start the suffix with a dot. part of: #16828 |
||
|
Aaron Lehmann
|
aa0a63a295 | fix(agent): log correct error variable in createTailnet (#17283) | ||
|
Thomas Kosiewski
|
f48a24c18e |
feat: add SBOM generation and attestation to GitHub workflow (#17277)
Move SBOM generation and attestation to GitHub workflow This PR moves the SBOM generation and attestation process from the `build_docker.sh` script to the GitHub workflow. The change: 1. Removes SBOM generation and attestation from the `build_docker.sh` script 2. Adds a new "SBOM Generation and Attestation" step in the GitHub workflow 3. Generates and attests SBOMs for both multi-arch images and latest tags when applicable This approach ensures SBOM generation happens once for the final multi-architecture image rather than for each architecture separately. Change-Id: I2e15d7322ddec933bbc9bd7880abba9b0842719f Signed-off-by: Thomas Kosiewski <tk@coder.com> |
||
|
Garrett Delfosse
|
fc471eb384 |
fix: handle vscodessh style workspace names in coder ssh (#17154)
Fixes an issue where old ssh configs that use the `owner--workspace--agent` format will fail to properly use the `coder ssh` command since we migrated off the `coder vscodessh` command. |
||
|
Marcin Tojek
|
743d308eb3 |
feat: support multiple terminal fonts (#17257)
Fixes: https://github.com/coder/coder/issues/15024 |
||
|
dependabot[bot]
|
30f41cdd42 |
chore: bump github.com/valyala/fasthttp from 1.59.0 to 1.60.0 (#17274)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.59.0 to 1.60.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's releases</a>.</em></p> <blockquote> <h2>v1.60.0</h2> <h2>What's Changed</h2> <ul> <li>perf: split delAllArgs into delAllArgs and delAllArgsStable by <a href="https://github.com/ksw2000"><code>@ksw2000</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1945">valyala/fasthttp#1945</a></li> <li>fix: accept invalid headers with a space by <a href="https://github.com/ksw2000"><code>@ksw2000</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1953">valyala/fasthttp#1953</a></li> <li>Drop support for Go 1.21, add support for 1.24 by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1959">valyala/fasthttp#1959</a></li> <li>chore(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1958">valyala/fasthttp#1958</a></li> <li>add related project for opentelemetry-go-auto-instrumentation by <a href="https://github.com/123liuziming"><code>@123liuziming</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1962">valyala/fasthttp#1962</a></li> <li>Fix normalizeHeaderValue by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1963">valyala/fasthttp#1963</a></li> <li>chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1968">valyala/fasthttp#1968</a></li> <li>chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1972">valyala/fasthttp#1972</a></li> <li>chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1971">valyala/fasthttp#1971</a></li> <li>Update golangci-lint to v2 by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1980">valyala/fasthttp#1980</a></li> <li>chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1983">valyala/fasthttp#1983</a></li> <li>Remove idleConns mutex for every request by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1986">valyala/fasthttp#1986</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/123liuziming"><code>@123liuziming</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/1962">valyala/fasthttp#1962</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0">https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/valyala/fasthttp/commit/752b0e70040eee46b291b9dedd70266d8aa3e2e7"><code>752b0e7</code></a> Remove idleConns mutex for every request (<a href="https://redirect.github.com/valyala/fasthttp/issues/1986">#1986</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/bf3f552c8e564472d6e7aae08804bcf0813f1f73"><code>bf3f552</code></a> chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1983">#1983</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/4891fc5304e3ab9e23e9258a39736a3726b626c2"><code>4891fc5</code></a> Update golangci-lint to v2 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1980">#1980</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/30b09beff11be4282c37ef6b7d8854589d565447"><code>30b09be</code></a> Fix untyped int constant 4294967295</li> <li><a href="https://github.com/valyala/fasthttp/commit/4269e2d68c33f2242e61f67ad4e104ba26fc4c1c"><code>4269e2d</code></a> chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1971">#1971</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/1353ca59f2044a74111d80087a5e762a71a3e1a2"><code>1353ca5</code></a> chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1972">#1972</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/6c07c2f523de17c866ac4cf86d08386e7bad55e4"><code>6c07c2f</code></a> chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1968">#1968</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/69dc7b1280e58dac05ab46c423b5b7f14cc88fab"><code>69dc7b1</code></a> Update the supported version to the same as Go itself (<a href="https://redirect.github.com/valyala/fasthttp/issues/1967">#1967</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/b8969ed8dcb5cba0b037f3fe091a0933fc786a28"><code>b8969ed</code></a> Fix normalizeHeaderValue (<a href="https://redirect.github.com/valyala/fasthttp/issues/1963">#1963</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/31e34c5fe0c3dd3090b0c9d662b74bab1dc87f6d"><code>31e34c5</code></a> add related project for opentelemetry-go-auto-instrumentation (<a href="https://redirect.github.com/valyala/fasthttp/issues/1962">#1962</a>)</li> <li>Additional commits viewable in <a href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
37ef4d8cb9 |
chore: bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#17276)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.13.0 to 3.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/coreos/go-oidc/releases">github.com/coreos/go-oidc/v3's releases</a>.</em></p> <blockquote> <h2>v3.14.1</h2> <h2>What's Changed</h2> <ul> <li>oidctest: fix import by <a href="https://github.com/ericchiang"><code>@ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/457">coreos/go-oidc#457</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1">https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1</a></p> <h2>v3.14.0</h2> <h2>What's Changed</h2> <ul> <li>oidc/oidctest: add new package by <a href="https://github.com/ericchiang"><code>@ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/400">coreos/go-oidc#400</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0">https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/coreos/go-oidc/commit/a7c457eacb849c163a496b29274242474a8f44ab"><code>a7c457e</code></a> oidctest: fix import</li> <li><a href="https://github.com/coreos/go-oidc/commit/aba1ce200a9dd76b14bbb455d4e5aea55e97cbb3"><code>aba1ce2</code></a> oidc/oidctest: add new package</li> <li>See full diff in <a href="https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
e6dc6fb8c1 |
chore: bump github.com/open-policy-agent/opa from 1.1.0 to 1.3.0 (#17170)
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.1.0 to 1.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-policy-agent/opa/releases">github.com/open-policy-agent/opa's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p>This release contains a mix of features, bugfixes, and dependency updates.</p> <h3>New Buffer Option for Decision Logs (<a href="https://redirect.github.com/open-policy-agent/opa/issues/5724">#5724</a>)</h3> <p>A new, optional, buffering mechanism has been added to decision logging. The default buffer is designed around making precise memory footprint guarantees, which can produce lock contention at high loads, negatively impacting query performance. The new event-based buffer is designed to reduce lock contention and improve performance at high loads, but sacrifices the memory footprint guarantees of the default buffer.</p> <p>The new event-based buffer is enabled by setting the <code>decision_logs.reporting.buffer_type</code> <a href="https://www.openpolicyagent.org/docs/latest/configuration/#decision-logs">configuration option</a> to <code>event</code>.</p> <p>For more details, see the decision log plugin <a href="https://github.com/open-policy-agent/opa/blob/main/v1/plugins/logs/README.md">README</a>.</p> <p>Reported by <a href="https://github.com/mjungsbluth"><code>@mjungsbluth</code></a>, authored by <a href="https://github.com/sspaink"><code>@sspaink</code></a></p> <h3>OpenTelemetry: HTTP Support and Expanded Batch Span Configuration (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7412">#7412</a>)</h3> <p>Distributed tracing through OpenTelemetry has been extended to support HTTP collectors (enabled by setting the <code>distributed_tracing.type</code> configuration option to <code>http</code>). Additionally, configuration has been expanded with fine-grained batch span processor <a href="https://www.openpolicyagent.org/docs/latest/configuration/#distributed-tracing">options</a>.</p> <p>Authored and reported by <a href="https://github.com/sqyang94"><code>@sqyang94</code></a></p> <h3>Runtime, Tooling, SDK</h3> <ul> <li>compile: Require multi-term entrypoint paths for optimized bundle building (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7321">#7321</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a> reported by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a></li> <li>fmt: Allow one liner rule grouping (<a href="https://redirect.github.com/open-policy-agent/opa/issues/6760">#6760</a>) authored by <a href="https://github.com/anderseknert"><code>@anderseknert</code></a></li> <li>fmt: Fix v0-compatible fmt with stdin (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7409">#7409</a>) authored and reported by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>ir: Fix nil pointer deref in Unmarshal() when handling IsSetStmt (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7415">#7415</a>) authored and reported by <a href="https://github.com/KrisKennawayDD"><code>@KrisKennawayDD</code></a></li> <li>planner: Fix Wasm vs non-Wasm evaluation difference bug related to the overeager optimization of ref head rules (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7439">#7439</a>) authored by <a href="https://github.com/srenatus"><code>@srenatus</code></a></li> <li>sdk: Removing repeat args from sub-func call (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7443">#7443</a>) authored by <a href="https://github.com/alingse"><code>@alingse</code></a></li> <li>tester: Including parameterized test cases in test report counter (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7407">#7407</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a></li> <li>tester: Only including failed sub-test cases in report summary when non-verbose (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7426">#7426</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a></li> </ul> <h3>Docs, Website, Ecosystem</h3> <ul> <li>docs: Add some notes about AI assisted patches (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7436">#7436</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Add query_parameters_to_set (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7405">#7405</a>) authored by <a href="https://github.com/sedovmik"><code>@sedovmik</code></a></li> <li>docs: Delete reference to license key in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7466">#7466</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> <li>docs: Fix typo in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7464">#7464</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> <li>docs: Update slack inviter link (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7450">#7450</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Update terraform examples (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7429">#7429</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Simplify <code>kind</code> usage instruction in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7465">#7465</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> </ul> <h3>Miscellaneous</h3> <ul> <li>Enable unused-receiver linter (revive) (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7448">#7448</a>) authored by <a href="https://github.com/anderseknert"><code>@anderseknert</code></a></li> <li>Dependency updates; notably: <ul> <li>build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27</li> <li>build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to 4.6.0</li> <li>build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md">github.com/open-policy-agent/opa's changelog</a>.</em></p> <blockquote> <h2>1.3.0</h2> <p>This release contains a mix of features, bugfixes, and dependency updates.</p> <h3>New Buffer Option for Decision Logs (<a href="https://redirect.github.com/open-policy-agent/opa/issues/5724">#5724</a>)</h3> <p>A new, optional, buffering mechanism has been added to decision logging. The default buffer is designed around making precise memory footprint guarantees, which can produce lock contention at high loads, negatively impacting query performance. The new event-based buffer is designed to reduce lock contention and improve performance at high loads, but sacrifices the memory footprint guarantees of the default buffer.</p> <p>The new event-based buffer is enabled by setting the <code>decision_logs.reporting.buffer_type</code> <a href="https://www.openpolicyagent.org/docs/latest/configuration/#decision-logs">configuration option</a> to <code>event</code>.</p> <p>For more details, see the decision log plugin <a href="https://github.com/open-policy-agent/opa/blob/main/v1/plugins/logs/README.md">README</a>.</p> <p>Reported by <a href="https://github.com/mjungsbluth"><code>@mjungsbluth</code></a>, authored by <a href="https://github.com/sspaink"><code>@sspaink</code></a></p> <h3>OpenTelemetry: HTTP Support and Expanded Batch Span Configuration (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7412">#7412</a>)</h3> <p>Distributed tracing through OpenTelemetry has been extended to support HTTP collectors (enabled by setting the <code>distributed_tracing.type</code> configuration option to <code>http</code>). Additionally, configuration has been expanded with fine-grained batch span processor <a href="https://www.openpolicyagent.org/docs/latest/configuration/#distributed-tracing">options</a>.</p> <p>Authored and reported by <a href="https://github.com/sqyang94"><code>@sqyang94</code></a></p> <h3>Runtime, Tooling, SDK</h3> <ul> <li>compile: Require multi-term entrypoint paths for optimized bundle building (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7321">#7321</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a> reported by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a></li> <li>fmt: Allow one liner rule grouping (<a href="https://redirect.github.com/open-policy-agent/opa/issues/6760">#6760</a>) authored by <a href="https://github.com/anderseknert"><code>@anderseknert</code></a></li> <li>fmt: Fix v0-compatible fmt with stdin (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7409">#7409</a>) authored and reported by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>ir: Fix nil pointer deref in Unmarshal() when handling IsSetStmt (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7415">#7415</a>) authored and reported by <a href="https://github.com/KrisKennawayDD"><code>@KrisKennawayDD</code></a></li> <li>planner: Fix Wasm vs non-Wasm evaluation difference bug related to the overeager optimization of ref head rules (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7439">#7439</a>) authored by <a href="https://github.com/srenatus"><code>@srenatus</code></a></li> <li>sdk: Removing repeat args from sub-func call (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7443">#7443</a>) authored by <a href="https://github.com/alingse"><code>@alingse</code></a></li> <li>tester: Including parameterized test cases in test report counter (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7407">#7407</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a></li> <li>tester: Only including failed sub-test cases in report summary when non-verbose (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7426">#7426</a>) authored by <a href="https://github.com/johanfylling"><code>@johanfylling</code></a></li> </ul> <h3>Docs, Website, Ecosystem</h3> <ul> <li>docs: Add some notes about AI assisted patches (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7436">#7436</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Add query_parameters_to_set (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7405">#7405</a>) authored by <a href="https://github.com/sedovmik"><code>@sedovmik</code></a></li> <li>docs: Delete reference to license key in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7466">#7466</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> <li>docs: Fix typo in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7464">#7464</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> <li>docs: Update slack inviter link (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7450">#7450</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Update terraform examples (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7429">#7429</a>) authored by <a href="https://github.com/charlieegan3"><code>@charlieegan3</code></a></li> <li>docs: Simplify <code>kind</code> usage instruction in Envoy tutorial (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7465">#7465</a>) authored by <a href="https://github.com/joostholslag"><code>@joostholslag</code></a></li> </ul> <h3>Miscellaneous</h3> <ul> <li>Enable unused-receiver linter (revive) (<a href="https://redirect.github.com/open-policy-agent/opa/pull/7448">#7448</a>) authored by <a href="https://github.com/anderseknert"><code>@anderseknert</code></a></li> <li>Dependency updates; notably: <ul> <li>build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27</li> <li>build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to 4.6.0</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-policy-agent/opa/commit/89f48353959c9b08608b6d7160c1f1c5ae2763ee"><code>89f4835</code></a> Prepare v1.3.0 release (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7467">#7467</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/ee38d8345f4950c6429d4d117e3509c578e36f5f"><code>ee38d83</code></a> docs/envoy-tutorial-standalone: simplify 'kind' usage instruction (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7465">#7465</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/3d3b45f7522a9e7de3334231d76fbe75d346a677"><code>3d3b45f</code></a> Delete reference to license key in envoy-tutorial-standalone-envoy.md (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7466">#7466</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/004af4c64454eab7b0c2e48aa4aea8dc6fb17eb7"><code>004af4c</code></a> docs/envoy-tutorial-standalone: fix typo (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7464">#7464</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/cd66fa36e2b6e8ad396dbb7a0f3adc600118c607"><code>cd66fa3</code></a> feat: new event-based decisions log buffer implementation (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7446">#7446</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/c8febc8625a626b52195c511a37868c85f9f4b9b"><code>c8febc8</code></a> feat: add more distributed tracing options (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7421">#7421</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/b3b87ffd830b5b1309ffd95ef0f42e9a4e0c071b"><code>b3b87ff</code></a> fmt: allow one liner rule grouping (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7453">#7453</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/92ae9a014f984ba39bca1ed19c832ddbf259e88f"><code>92ae9a0</code></a> build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27 (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7451">#7451</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/f3de1006f9b59f310d32b9433dc6d76d0a4acde5"><code>f3de100</code></a> docs: Update slack inviter link (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7450">#7450</a>)</li> <li><a href="https://github.com/open-policy-agent/opa/commit/bd5ceb514234f2d0a625dff532abe2167f9d824e"><code>bd5ceb5</code></a> Enable unused-receiver linter (revive) (<a href="https://redirect.github.com/open-policy-agent/opa/issues/7448">#7448</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
a2314ad53c |
chore: bump github.com/ory/dockertest/v3 from 3.11.0 to 3.12.0 (#17275)
Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) from 3.11.0 to 3.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ory/dockertest/releases">github.com/ory/dockertest/v3's releases</a>.</em></p> <blockquote> <h2>v3.12.0</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump github.com/docker/cli from 26.1.4+incompatible to 27.1.2+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/524">ory/dockertest#524</a></li> <li>chore(deps): bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/514">ory/dockertest#514</a></li> <li>chore(deps): bump actions/stale from 4 to 9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/526">ory/dockertest#526</a></li> <li>chore(deps): bump github.com/opencontainers/runc from 1.1.13 to 1.1.15 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/538">ory/dockertest#538</a></li> <li>chore(deps): bump actions/checkout from 2 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/527">ory/dockertest#527</a></li> <li>feat: use creds helper by <a href="https://github.com/GuillaumeSmaha"><code>@GuillaumeSmaha</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/520">ory/dockertest#520</a></li> <li>added AuthConfigs to BuildOptions and pass that to BuildImage by <a href="https://github.com/DGollings"><code>@DGollings</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/488">ory/dockertest#488</a></li> <li>add multiple test container example by <a href="https://github.com/akoserwal"><code>@akoserwal</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/515">ory/dockertest#515</a></li> <li>fix: trying to bind to an outbound ip returns an empty list of port bindings by <a href="https://github.com/atzoum"><code>@atzoum</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/533">ory/dockertest#533</a></li> <li>chore(deps): bump golang.org/x/sys from 0.21.0 to 0.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/548">ory/dockertest#548</a></li> <li>chore(deps): bump actions/stale from 4 to 9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/550">ory/dockertest#550</a></li> <li>chore(deps): bump actions/checkout from 2 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/549">ory/dockertest#549</a></li> <li>chore(deps): bump actions/checkout from 2 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/555">ory/dockertest#555</a></li> <li>chore(deps): bump github.com/docker/cli from 27.1.2+incompatible to 27.4.1+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/553">ory/dockertest#553</a></li> <li>chore(deps): bump github.com/opencontainers/runc from 1.1.15 to 1.2.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/551">ory/dockertest#551</a></li> <li>chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/547">ory/dockertest#547</a></li> <li>feat: add support for BuildKit when building images by <a href="https://github.com/tmc"><code>@tmc</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/416">ory/dockertest#416</a></li> <li>chore(deps): bump actions/setup-node from 2.pre.beta to 4.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/539">ory/dockertest#539</a></li> <li>chore(deps): bump actions/stale from 4 to 9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ory/dockertest/pull/554">ory/dockertest#554</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/GuillaumeSmaha"><code>@GuillaumeSmaha</code></a> made their first contribution in <a href="https://redirect.github.com/ory/dockertest/pull/520">ory/dockertest#520</a></li> <li><a href="https://github.com/DGollings"><code>@DGollings</code></a> made their first contribution in <a href="https://redirect.github.com/ory/dockertest/pull/488">ory/dockertest#488</a></li> <li><a href="https://github.com/akoserwal"><code>@akoserwal</code></a> made their first contribution in <a href="https://redirect.github.com/ory/dockertest/pull/515">ory/dockertest#515</a></li> <li><a href="https://github.com/atzoum"><code>@atzoum</code></a> made their first contribution in <a href="https://redirect.github.com/ory/dockertest/pull/533">ory/dockertest#533</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ory/dockertest/compare/v3.11.0...v3.12.0">https://github.com/ory/dockertest/compare/v3.11.0...v3.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ory/dockertest/commit/8a76ff064a81dda59a3839f908b85e4df79d755a"><code>8a76ff0</code></a> chore: update repository templates to <a href="https://github.com/ory/meta/commit/bc60">https://github.com/ory/meta/commit/bc60</a>...</li> <li><a href="https://github.com/ory/dockertest/commit/207b20aded3b6876a3acb2a6cdc4447eb8f49bfc"><code>207b20a</code></a> chore: update repository templates to <a href="https://github.com/ory/meta/commit/83e7">https://github.com/ory/meta/commit/83e7</a>...</li> <li><a href="https://github.com/ory/dockertest/commit/fabf5638cd38b571da9f174f777709da3699e419"><code>fabf563</code></a> autogen: update license overview</li> <li><a href="https://github.com/ory/dockertest/commit/4b1e539f23198fc2718bdc3122af50cb123bd621"><code>4b1e539</code></a> chore: update repository templates to <a href="https://github.com/ory/meta/commit/44ef">https://github.com/ory/meta/commit/44ef</a>...</li> <li><a href="https://github.com/ory/dockertest/commit/46d1a7b148e4ffbef44b5688c3f814a687d0cc84"><code>46d1a7b</code></a> chore: update repository templates to <a href="https://github.com/ory/meta/commit/c091">https://github.com/ory/meta/commit/c091</a>...</li> <li><a href="https://github.com/ory/dockertest/commit/13e6e33fbdb15fdc137d671a8109cdafee61a9d3"><code>13e6e33</code></a> chore(deps): bump actions/stale from 4 to 9 (<a href="https://redirect.github.com/ory/dockertest/issues/554">#554</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/91b7d0b413252b891483b989ddc2ecda394b14cf"><code>91b7d0b</code></a> chore(deps): bump actions/setup-node from 2.pre.beta to 4.1.0 (<a href="https://redirect.github.com/ory/dockertest/issues/539">#539</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/28c8c5b6ab911beb07fc08922fd42fb74ea82b19"><code>28c8c5b</code></a> chore(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.5 (<a href="https://redirect.github.com/ory/dockertest/issues/545">#545</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/eec3a4f420353447100008b96eb33c3b5509577b"><code>eec3a4f</code></a> feat: add support for BuildKit when building images (<a href="https://redirect.github.com/ory/dockertest/issues/416">#416</a>)</li> <li><a href="https://github.com/ory/dockertest/commit/f6e65ba5e18bbca77c5d27d768d67268c01c7178"><code>f6e65ba</code></a> chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (<a href="https://redirect.github.com/ory/dockertest/issues/547">#547</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ory/dockertest/compare/v3.11.0...v3.12.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
4615d29698 |
chore: bump the x group across 1 directory with 6 updates (#17272)
Bumps the x group with 3 updates in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [golang.org/x/oauth2](https://github.com/golang/oauth2). Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/959f8f3db0fb8c3fb1f9507101058dda21e1fdcf"><code>959f8f3</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/769bcd6997ac6f3154e27b73b3587295f7720e66"><code>769bcd6</code></a> ssh: use the configured rand in kex init</li> <li><a href="https://github.com/golang/crypto/commit/d0a798f774735c176ed0d3500ac986957a02660f"><code>d0a798f</code></a> cryptobyte: fix typo 'octects' into 'octets' for asn1.go</li> <li><a href="https://github.com/golang/crypto/commit/acbcbef23f9b1b3b7c64673f0ed8baa83475edbe"><code>acbcbef</code></a> acme: remove unnecessary []byte conversion</li> <li><a href="https://github.com/golang/crypto/commit/376eb1400636d0d687bee5520daadb5fdeac3311"><code>376eb14</code></a> x509roots: support constrained roots</li> <li><a href="https://github.com/golang/crypto/commit/b369b723c8ad46b179f3a49d57bfc7d6a2740cdf"><code>b369b72</code></a> crypto/internal/poly1305: implement function update in assembly on loong64</li> <li><a href="https://github.com/golang/crypto/commit/6b853fbea37a941d918ac0760a5492802df42b9b"><code>6b853fb</code></a> ssh/knownhosts: check more than one key</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.36.0...v0.37.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/net` from 0.37.0 to 0.38.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9"><code>e1fcd82</code></a> html: properly handle trailing solidus in unquoted attribute value in foreign...</li> <li><a href="https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd"><code>ebed060</code></a> internal/http3: fix build of tests with GOEXPERIMENT=nosynctest</li> <li><a href="https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9"><code>1f1fa29</code></a> publicsuffix: regenerate table</li> <li><a href="https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a"><code>1215081</code></a> http2: improve error when server sends HTTP/1</li> <li><a href="https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad"><code>312450e</code></a> html: ensure <search> tag closes <p> and update tests</li> <li><a href="https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90"><code>09731f9</code></a> http2: improve handling of lost PING in Server</li> <li><a href="https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1"><code>55989e2</code></a> http2/h2c: use ResponseController for hijacking connections</li> <li><a href="https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801"><code>2914f46</code></a> websocket: re-recommend gorilla/websocket</li> <li>See full diff in <a href="https://github.com/golang/net/compare/v0.37.0...v0.38.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/oauth2` from 0.28.0 to 0.29.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/65c15a35147ccc5127e9f8cdf2e07837596e56b4"><code>65c15a3</code></a> oauth2: remove extra period</li> <li><a href="https://github.com/golang/oauth2/commit/ce56909505b351a755ad0bc294c5ee01ed0ea050"><code>ce56909</code></a> jws: improve fix for CVE-2025-22868</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.28.0...v0.29.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/sync` from 0.12.0 to 0.13.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/sync/commit/396f3a06ea2a49eb410f12e244c0dd77095d0de9"><code>396f3a0</code></a> errgroup: document calling Go before Wait</li> <li>See full diff in <a href="https://github.com/golang/sync/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/sys` from 0.31.0 to 0.32.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/sys/commit/01aaa8342f9d6e36356d05d0baff28e64ee6367e"><code>01aaa83</code></a> all: simplify code by using modern Go constructs</li> <li><a href="https://github.com/golang/sys/commit/1b2bd6bb49091efddfc5ca87435bcea9e2090720"><code>1b2bd6b</code></a> windows: replace all StringToUTF16 calls with UTF16FromString</li> <li><a href="https://github.com/golang/sys/commit/1c3b72f1c1fa7f3a3a355c7a963cd1c958135d01"><code>1c3b72f</code></a> unix: update Linux kernel to 6.14</li> <li><a href="https://github.com/golang/sys/commit/c175b6ba6781614eadf22a0727389d97e25f72ee"><code>c175b6b</code></a> windows: add cmsghdr and pktinfo structures</li> <li><a href="https://github.com/golang/sys/commit/3330b5e756f9a4ffd9510bc98b4c8b5b6d05b9c7"><code>3330b5e</code></a> unix: support Readv, Preadv, Writev and Pwritev for darwin</li> <li><a href="https://github.com/golang/sys/commit/7401cce31392295f531e1d0fcc2f01d782353300"><code>7401cce</code></a> cpu: replace specific instructions with WORD in the function get_cpucfg on lo...</li> <li><a href="https://github.com/golang/sys/commit/b8f7da6c5a244c4015da1e739f7f40b21f4c40c8"><code>b8f7da6</code></a> cpu: add support for detecting cpu features on loong64</li> <li><a href="https://github.com/golang/sys/commit/f2ce62c21a0ddb543d412be19f3168b09d76d1b8"><code>f2ce62c</code></a> windows: add constants for PMTUD socket options</li> <li>See full diff in <a href="https://github.com/golang/sys/compare/v0.31.0...v0.32.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/term` from 0.30.0 to 0.31.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/term/commit/5d2308b09df8e012ed012f73c878253d901b7f56"><code>5d2308b</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/e770dddbf5e3084c939760c50ca84c1adee9c4c4"><code>e770ddd</code></a> x/term: disabling auto-completion around GetPassword()</li> <li>See full diff in <a href="https://github.com/golang/term/compare/v0.30.0...v0.31.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
|
0b2b643ce2 |
feat: persist prebuild definitions on template import (#16951)
This PR allows provisioners to recognise and report prebuild definitions to the coder control plane. It also allows the coder control plane to then persist these to its store. closes https://github.com/coder/internal/issues/507 --------- Signed-off-by: Danny Kopping <dannykopping@gmail.com> Co-authored-by: Danny Kopping <dannykopping@gmail.com> Co-authored-by: evgeniy-scherbina <evgeniy.shcherbina.es@gmail.com> |
||
|
Mathias Fredriksson
|
074ec2887d |
test(agent/agentssh): fix test race and improve Windows compat (#17271)
Fixes coder/internal#558 |
||
|
Spike Curtis
|
59c5bc9bd2 |
feat: add hostname-suffix option to config-ssh (#17270)
Adds `hostname-suffix` as a Config SSH option that we get from Coderd, and also accept via a CLI flag. It doesn't actually do anything with this value --- that's for PRs up the stack, since we need the `coder ssh` command to be updated to understand the suffix first. |
||
|
Spike Curtis
|
24248736ac |
feat: add host suffix to /api/v2/deployment/ssh (#17269)
Adds `HostnameSuffix` to ssh config API and deprecates `HostnamePrefix`. We will still support setting and using the prefix for some time. |
||
|
Spike Curtis
|
87d9ff0973 |
feat: add CODER_WORKSPACE_HOSTNAME_SUFFIX (#17268)
Adds deployment option `CODER_WORKSPACE_HOSTNAME_SUFFIX`. This will eventually replace `CODER_SSH_HOSTNAME_PREFIX`, but we will do this slowly and support both for `coder ssh` for some time. Note that the name is changed to "workspace" hostname, since this suffix will also be used for Coder Connect on Coder Desktop, which is not limited to SSH. |
||
|
Vincent Vielle
|
8f665e364a |
chore: remove notifications beta label (#17263)
Some notifications `beta` label were remaining after the previous PR - removing it. |
||
|
|
f475555d06 |
docs: document that default GitHub app requires device flow (#17162)
## Issue Closes #16824 Document that the default GitHub authentication app provided by Coder requires device flow, and that this behavior cannot be overridden. ## Changes Made Claude updated the GitHub authentication documentation to: 1. Add a prominent warning in the Default Configuration section explaining that the default GitHub app requires device flow and ignores the `CODER_OAUTH2_GITHUB_DEVICE_FLOW` setting 2. Clarify the Device Flow section to indicate that: - Device flow is always enabled for the default GitHub app - Device flow is optional for custom GitHub OAuth apps - The `CODER_OAUTH2_GITHUB_DEVICE_FLOW` setting is ignored when using the default app [preview](https://coder.com/docs/@16824-github-device-flow/admin/users/github-auth) <sub>🤖 Generated with [Claude Code](https://claude.ai/code)</sub> --------- Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com> Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: M Atif Ali <atif@coder.com> |
||
|
Aaron Lehmann
|
e9863aba81 | fix: log correct error on drpc connection close error (#17265) | ||
|
dependabot[bot]
|
cfb6d56f62 |
chore: bump vite from 5.4.16 to 5.4.17 in /site (#17266)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.16 to 5.4.17. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v5.4.17</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.17/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v5.4.17/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->5.4.17 (2025-04-03)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>) (<a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c">84b2b46</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19782">#19782</a> <a href="https://redirect.github.com/vitejs/vite/issues/19784">#19784</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/0a2518a98d2354c61ee8ef51f7d00fa92aebb511"><code>0a2518a</code></a> release: v5.4.17</li> <li><a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c"><code>84b2b46</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite/commits/v5.4.17/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/coder/coder/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
brettkolodny
|
ae7afd1aa0 |
feat: split cli roles edit command into create and update commands (#17121)
Closes #14239 |
||
|
Jaayden Halko
|
53af7e1b90 |
feat: add shadcn radio-group component (#17264)
Based on the Figma designs: https://www.figma.com/design/WfqIgsTFXN2BscBSSyXWF8/Coder-kit?node-id=1786-4794&t=EAs4E89RAJLhivNj-1 <img width="127" alt="Screenshot 2025-04-04 at 16 38 14" src="https://github.com/user-attachments/assets/e4c72fa9-0491-4674-aeb8-ed0ca4a58649" /> |
||
|
Charlie Voiselle
|
b000a7a093 | docs: update markdown list in scale-coder.md (#17262) | ||
|
Bruno Quaresma
|
17664f481e |
refactor: update provisioners page to match the new design (#17232)
**Demo** https://github.com/user-attachments/assets/b880326c-7e94-4778-8166-91af7699901e Closes https://github.com/coder/coder/issues/17221 |
||
|
Jon Ayers
|
900eb251eb |
chore: update Terraform to 1.11.3 (#17256)
- Generated with Claude Code |
||
|
Vincent Vielle
|
6a624e7476 |
chore: remove beta tag from notifications (#17251)
Related to [this issue](https://github.com/coder/internal/issues/557) |
||
|
Jaayden Halko
|
8a24372e4d |
feat: add shadcn checkbox component (#17248)
contributes to coder/preview#55 Add shadcn checkbox component matching Figma styles from Coder Kit: https://www.figma.com/design/WfqIgsTFXN2BscBSSyXWF8/Coder-kit?node-id=489-4187&t=Zx137ETWsQZtaCku-1 <img width="52" alt="Screenshot 2025-04-03 at 21 15 52" src="https://github.com/user-attachments/assets/ff2de95c-cb12-46ed-af31-a6d230e52a31" /> |
||
|
Jaayden Halko
|
ae67e33c66 | fix: set permissions for experimental Createworkspace page (#17254) | ||
|
Bruno Quaresma
|
510bc37cbc |
refactor: update avatar sizes in groups, users and members (#17230)
We updated the template and workspace avatars to be "lg" so to keep it consistent we have to do the same for the other avatars too. |