opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-09-22 05:05:20 +08:00
Code Issues Packages Projects Releases Wiki Activity
11,924 Commits 479 Branches 387 Tags
ef45ce4dfbad1169208f56bee65cb2801a69fb1b
Commit Graph
11924 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Atif Ali ef45ce4dfb chore(docs): update example URL format in AI Bridge docs (#21435) 
We are using a mix of styles for the URL, so moving the example URLs to
be code blocks.
This is a cosmetic change.  

<table>
<tr>
 <td> Before
 <td> After
<tr>
<td> <img width="712" height="607" alt="image"
src="https://github.com/user-attachments/assets/05733e45-b83f-4801-9657-db72095a0300"
/>
<td> <img width="701" height="584" alt="image"
src="https://github.com/user-attachments/assets/61418ea6-0882-4fb5-81fd-ec1a67473579"
/>
</table>
 2026-01-06 21:14:13 +05:00
Zach 6a40fb0e2c chore: update dogfood boundary version (#21421) 
Update the dogfood boundary version to a more recent unreleased githash
from main. This change allows dogfooding boundary audit logs and all
other recent boundary changes.
 2026-01-06 08:26:39 -07:00
Yevhenii Shcherbina 2a7a33bb46 docs: update manifest in docs (#21434) 
Follow-up for https://github.com/coder/coder/pull/21420
 2026-01-06 09:58:30 -05:00
Spike Curtis ed6d41a5ef docs: simplify 1k scale architecture and change db recommendation (#21362) 
DRAFT: I'd like feedback on this approach for 1k before I give the others the same treatment and add a 10k document.



- Bumps database requirements to 8 vCPU, 30 GB memory. In our testing database was nearly always the bottleneck. (This could come back down again with improvements to how we use it.)

- Removes specific machine type recommendations.
    - This only applies to VM-based deployments and many of our customers use Kubernetes.
    - The major clouds upgrade their machine teirs, so our recommendations go out of date
    - In its place we just give CPU and memory requirements
- Removes API requests per second
    - It's not a metric that many operators will know until they are already operating
    - Our API requests vary wildly in cost depending on what they are
    - Replaces them with Users | Running Workspaces | Concurrent Builds - which represents our scale testing scenarios, and are easier for operators to reason about.
- Removes specific advice about workspace sizing, instead gives the minimum specs for the agent
- Gives Kubernetes resource request/limits in notes
- Adds advice about not needing high performance disks for Coderd, but that provisioners will benefit.
 2026-01-06 14:29:41 +04:00
Spike Curtis 41a966c284 fix: sort latest key by sequence correctly (#21425) 
Fixes an issue where we will not correctly return the latest key by sequence number if the fetch returns them in a order where the latest key is not last. The db query uses `ORDER BY sequence DESC` it is likely we have been operating incorrectly.

Adds a second key to one of the test cases which fails without this fix.

Also includes some debug logging statements I found helpful while chasing key rotation issues.
 2026-01-06 14:01:51 +04:00
Yevhenii Shcherbina f792f0b162 docs: introduce landjail for boundary (#21420) 2026-01-05 18:54:49 -05:00
Asher 4a97df3768 chore: rename flag to disable template insights (#21329) 
Because this affects more than just the template insights
page (specifically it also affects the deployment stats endpoint which
is shown on bottom bar and Prometheus), the group is being renamed
generically to just "stats collection".  In the future if we need to
affect the other stats we can put those options here.

Then, because this change only affects a portion of stats, specifically
usage stats like connection and application time, bytes sent, etc, add a
new sub-group called "usage stats".

Then finally add back the "enable" flag.  This also gives us a place to
one day place an "anonymize" flag if we need to go that route.
 2026-01-05 11:44:06 -09:00
ケイラ 5691d38db7 chore: migrate tar tests to vitest (#21406) 2026-01-05 13:18:04 -07:00
Cian Johnston 172cd13b24 fix: restore /tmp/.coder-startup-script.done in dogfood template (#21419) 2026-01-05 16:12:35 +00:00
George K e10fceb23c fix(coderd/database): allow same custom role name for different orgs (#21312) 
Previously the `idx_custom_roles_name_lower` index prevented that.

A check constraint was also added to ensure the `organization_id` column cannot be set to the all-zero UUID.
 2026-01-05 07:43:08 -08:00
Jakub Domeracki 55cc6b807c fix: adjust the TF version drift causing flakes (#21416) 
Fixes:
https://github.com/coder/internal/issues/1172#issuecomment-3687019525
 2026-01-05 15:06:35 +01:00
dependabot[bot] 13668d82d6 chore: bump rust from 0d8bf26 to 6cff8a3 in /dogfood/coder (#21415) 
Bumps rust from `0d8bf26` to `6cff8a3`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rust&package-manager=docker&previous-version=slim&new-version=slim)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-05 12:18:34 +00:00
dependabot[bot] 32f3481634 chore: bump github.com/gohugoio/hugo from 0.153.1 to 0.154.2 (#21413) 
Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from
0.153.1 to 0.154.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gohugoio/hugo/releases">github.com/gohugoio/hugo's
releases</a>.</em></p>
<blockquote>
<h2>v0.154.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix alpha/fuzzy border issue with new webp decoder for images with
with transparent background e9b9b36f <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14339">#14339</a></li>
</ul>
<h2>v0.154.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add WASM licensing information to README 8f3527f6 <a
href="https://github.com/bep"><code>@​bep</code></a></li>
<li>Fix partial decorator detection in partial with blocks with outer
range break or continue 09048aad <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14333">#14333</a></li>
</ul>
<h2>v0.154.0</h2>
<p>Hugo <code>v0.154.0</code> is the <strong>14th release</strong> this
year (not counting patch releases) and introduces <a
href="https://gohugo.io/quick-reference/glossary/#partial-decorator">partial
decorators</a>, or “partials with a twist.” This is a very powerful
construct that I, <a
href="https://github.com/bep"><code>@​bep</code></a>, have always wanted
to have in Hugo, but I could never wrap my head around an
implementation. Until now.</p>
<p>A small and not very useful example:</p>
<pre lang="handlebars"><code>{{ with partial &quot;b.html&quot;
&quot;World&quot; }}Hello {{ . }}{{ end }}
{{ define &quot;_partials/b.html&quot; }}&lt;b&gt;{{ inner .
}}&lt;/b&gt;{{ end }}
</code></pre>
<p>The above renders to:</p>
<pre lang="handlebars"><code>&lt;b&gt;Hello World&lt;/b&gt;
</code></pre>
<ul>
<li>The new <code>inner</code> keyword can be used zero or more times in
a partial template, typically with different data (e.g. pages in a
range), and its presence signals a reversal of the execution -- the
callee becomes the caller.</li>
<li>Decorators can be deeply nested, see <a
href="https://redirect.github.com/gohugoio/hugoDocs/pull/3330">this
PR</a> for an example.</li>
</ul>
<p>This release also brings some new utility funcs in the <a
href="https://gohugo.io/functions/reflect/">reflect</a> package to
identify the core types in Hugo. For example, to identify an <a
href="https://gohugo.io/quick-reference/glossary/#processable-image">processable
image</a> hasn't been trivial, now it is:</p>
<pre lang="handlebars"><code>{{ $obj := . }}
{{ if reflect.IsResource $obj }}
   {{ if reflect.IsImageResource $obj }}
        // It has width/height and we can process it.
   {{ else }}
       // Just link to it.
   {{ end }}
{{ end }}
</code></pre>
<h2>Bug fixes</h2>
<ul>
<li>tpl/collections: Fix apply to work with built-in funcs like len
5c7fad23 <a href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/13418">#13418</a></li>
<li>Revert &quot;resources/page: Fix slugorcontentbasename for section
pages&quot; bf1d20d7 <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14104">#14104</a>
<a
href="https://redirect.github.com/gohugoio/hugo/issues/14325">#14325</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gohugoio/hugo/commit/f66d0944461bf32c4e69588bc3e093f14e4e149d"><code>f66d094</code></a>
releaser: Bump versions for release of 0.154.2</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/e9b9b36f46ccc6250ffa72188c8a5c52f96b119e"><code>e9b9b36</code></a>
Fix alpha/fuzzy border issue with new webp decoder for images with with
trans...</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/b8a2c10d06d815cdaf61ef2f03fb37267612da2e"><code>b8a2c10</code></a>
snap: Limit build platforms to amd64, arm64, ppc64el, and s390x</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/601df3883484535a95979d3c0536220570498d4f"><code>601df38</code></a>
snap: Update to core 24</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/3bed212a2f1853bc80d58a287c8a2d51decba61c"><code>3bed212</code></a>
releaser: Prepare repository for 0.155.0-DEV</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/e2fd6764be86d0cde988a7de6334fda0f43de871"><code>e2fd676</code></a>
releaser: Bump versions for release of 0.154.1</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/8f3527f61c9a7d5ecd35ec35b0f4755ec7b93531"><code>8f3527f</code></a>
Add WASM licensing information to README</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/09048aad7655385e9a287448eed65408d0b850ab"><code>09048aa</code></a>
Fix partial decorator detection in partial with blocks with outer range
break...</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/f42c422a12987c9ccb1927fc17da37feedd0c7fb"><code>f42c422</code></a>
releaser: Prepare repository for 0.155.0-DEV</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/0b71db299a2bd89be876d7dc972ded03a222f560"><code>0b71db2</code></a>
releaser: Bump versions for release of 0.154.0</li>
<li>Additional commits viewable in <a
href="https://github.com/gohugoio/hugo/compare/v0.153.1...v0.154.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gohugoio/hugo&package-manager=go_modules&previous-version=0.153.1&new-version=0.154.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-05 12:12:11 +00:00
Jake Howell f524e00df7 feat: implement DEPRECATED_ICONS (#21346) 
Closes #21320

This PR introduces a list of deprecated icons that should no longer be displayed in the UI. These icons are kept for backward compatibility but are now filtered out from:

1. The emoji picker component
2. The icons page listing

The deprecated icons include:
- Duplicate icons that have better alternatives (e.g., `apple-grey.svg` → `apple-black.svg`)
- PNG versions of icons that already have SVG versions (e.g., `aws.png` → `aws.svg`)
- Monochrome variants that are no longer needed (e.g., `docker-white.svg`)
 2026-01-05 11:20:23 +11:00
blinkagent[bot]andblink-so[bot] 874f3994b5 docs: update VS Code Web subpath comment to reflect current support (#21375) 
Co-authored-by: blink-so[bot] <211532188+blink-so[bot]@users.noreply.github.com>
 2026-01-02 17:16:27 +05:00
Zach 07924037e7 feat: add boundary log forwarding from agent to coderd (#21345) 
Add agent forwarding of boundary audit logs from workspaces to coderd
via agent API, and re-emission of boundary logs to coderd stderr. This
change adds a server to the workspace agent that always listens on a
unix socket for boundary to connect and send audit logs.

coderd log format example:
```
[API] 2025-12-23 18:31:46.755 [info] coderd.agentrpc: boundary_request owner=.. workspace_name=.. agent_name=.. decision=.. workspace_id=.. http_method=.. http_url=.. event_time=.. request_id=..
```

Corresponding boundary PR: https://github.com/coder/boundary/pull/124
RFC:
https://www.notion.so/coderhq/Agent-Boundary-Logs-2afd579be59280f29629fc9823ac41ba
https://github.com/coder/coder/issues/21280
 2025-12-31 16:38:19 -07:00
William Burton 21241abc4e chore: add airflow icon (#21401) 2025-12-31 14:00:31 +00:00
Susana Ferreira e5377fbd93 refactor: add aiproxy test helpers to reduce boilerplate (#21404) 
## Description

Adds test helper functions to reduce boilerplate in `aibridgeproxyd`
tests:
* `newTestProxy`: creates a proxy server with functional options, waits
for it to be ready
* `newProxyClient`: creates an HTTP client configured to use the proxy
* `newTargetServer`: creates a mock HTTPS server and returns its URL

Related to:
https://github.com/coder/coder/pull/21344#discussion_r2638930199
 2025-12-31 10:15:59 +00:00
dependabot[bot] 9ac865b72f chore: bump github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0 (#21366) 
Bumps
[github.com/zclconf/go-cty-yaml](https://github.com/zclconf/go-cty-yaml)
from 1.1.0 to 1.2.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/zclconf/go-cty-yaml/blob/master/CHANGELOG.md">github.com/zclconf/go-cty-yaml's
changelog</a>.</em></p>
<blockquote>
<h1>1.2.0 (December 17, 2025)</h1>
<ul>
<li>
<p>The YAML decoder now has more complete support for <a
href="https://yaml.org/type/merge.html"><code>tag:yaml.org,2002:merge</code></a>,
including support for merging a sequence of mappings rather than just a
single mapping.</p>
<p>Unfortunately the specification for this tag is terse and incomplete,
and other existing implementations disagree even with the few behaviors
that <em>are</em> described in the specification, so this library
implements behavior that matches existing implementations while
diverging slightly from the spec:</p>
<ul>
<li>The untagged scalar value <code>&lt;&lt;</code> is resolved as
<code>tag:yaml.org,2002:merge</code> only in the mapping key position.
In all other positions it's resolved as a normal string,
<code>&quot;&lt;&lt;&quot;</code>. Writing out the tag explicitly
instead of using the shorthand is allowed in mapping key position and
rejected as an error in all other positions.</li>
<li>Multiple merge keys can appear in the same mapping, and will each be
handled separately as if they had all been written as a single
merge.</li>
<li>Later mentions of a key override earlier mentions of a key in all
cases. This is the main deviation from the spec text: the spec requires
that the <em>earliest</em> mention of each key takes priority when
merging, but that is the opposite of the normal behavior for duplicate
keys in a mapping (without merging) and other implementations seem to
ignore that exception.</li>
</ul>
<p>There are a few other implementations that disagree with what this
library implements. That's unfortunate, but unavoidable because existing
implementations are in conflict with one another already. The choices in
this implementation were based on a survey of various other popular
implementatins and will not be changed in a breaking way after this
release.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zclconf/go-cty-yaml/commit/85d6bca569955bb5db10d31ce6ad8f669764fbb2"><code>85d6bca</code></a>
v1.2.0 release</li>
<li><a
href="https://github.com/zclconf/go-cty-yaml/commit/229f4819225d7e96c0ce1e7100823f726aece5e8"><code>229f481</code></a>
Allow a !!merge key to be used with a sequence of mappings</li>
<li><a
href="https://github.com/zclconf/go-cty-yaml/commit/5da71a8db19c2906c0813f89c3245b050d9193a2"><code>5da71a8</code></a>
Add GitHub funding metadata</li>
<li>See full diff in <a
href="https://github.com/zclconf/go-cty-yaml/compare/v1.1.0...v1.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/zclconf/go-cty-yaml&package-manager=go_modules&previous-version=1.1.0&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-30 13:28:42 +00:00
Danny Kopping 39bf9ed18a perf: increase bridge pool cache size limit (#21399) 
With this low upper bound, the cache thrashes under load (i.e. cache
entries are replaced too quickly), leading to audit records not
persisting in time before the context is canceled (see `OnEvict`
behaviour).

The TTL remains 15m because we need to keep MCP connections relatively
fresh, but this TTL is irrelevant if injected tools are not used.

This was an oversight; the limit should never have been set so low. 5000
is likely so large that the cache will never fill up; in future we
should make this configurable if customers run into issues. It's a bit
difficult right now to determine how much real memory each element
_actually_ uses, but even if it's a crazy number like 100KiB per
instance then it'll only use 500MiB.

Signed-off-by: Danny Kopping <danny@coder.com>
 2025-12-30 11:44:34 +00:00
Danny Kopping 733b6b7db9 feat: add API to serve proxy certificate (#21391) 
Closes https://github.com/coder/internal/issues/1184
 2025-12-29 18:00:06 +00:00
Danny Kopping a173c38715 chore: remove experimental endpoints (#21390) 
This should've been removed when we cut the Beta release, but we missed it. Adding as a drive-by.
 2025-12-29 16:17:46 +00:00
Susana Ferreira b522c9471a feat: add certificate caching for AI Bridge Proxy (#21344) 
## Description

Implements in-memory certificate caching for the AI Bridge MITM proxy. Certificate generation is expensive (RSA key generation + signing), so caching avoids repeated generation for the same hostname.

## Changes

* Add `certCache` struct implementing `goproxy.CertStorage` with thread-safe double-check locking
* Wire certificate cache into the proxy via `proxy.CertStore`
* Add unit tests for cache behavior (hit, miss, errors, concurrency)
* Add integration test to verify caching works end-to-end through the proxy

Closes https://github.com/coder/internal/issues/1183
 2025-12-29 16:16:31 +00:00
Susana Ferreira ed1b9a9897 feat: reroute AI provider requests to aibridged (#21343) 
## Description

Implements request routing for the AI Bridge Proxy. After MITM decryption, requests to known AI providers (Anthropic, OpenAI) are rewritten to the corresponding aibridged endpoint, while requests to unknown hosts are passed through to their original destination.

## Changes

* Add `CoderAccessURL` configuration option for specifying the Coder deployment URL
* Add `handleRequest` to route decrypted requests based on target host
* Route known AI providers (Anthropic and OpenAI) to AI Bridge specific endpoint.
* Passthrough requests to unknown hosts directly to their original destination
* Inject Coder session token (from https://github.com/coder/coder/pull/21342) as `Authorization: Bearer` header for aibridged
* Add tests for routing and passthrough behavior

Depends on: https://github.com/coder/coder/pull/21342
Closes: https://github.com/coder/internal/issues/1181
 2025-12-29 16:06:35 +00:00
Susana Ferreira 3517772e92 feat: add proxy authorization to aibridgeproxyd (#21342) 
## Description

This PR adds proxy authorization to the AI Bridge Proxy server. Clients provide their Coder session token via the proxy password field on the HTTP Proxy settings (`HTTPS_PROXY=http://ignored:<coder-session-token>@host:port`), which is then used for forwarding to aibridged to handle authorization.

## Changes

* Extract Coder session token from `Proxy-Authorization` header during CONNECT
* Reject requests without valid credentials
* Store token in `ctx.UserData` for downstream request handlers
* Add `Addr()` method to get the actual listening address (useful for tests with port 0)

Related to: https://github.com/coder/internal/issues/1181
 2025-12-29 15:56:58 +00:00
Susana Ferreira b97572285a feat: add core AI MITM proxy daemon (#21296) 
## Description

Adds the core AI Bridge MITM proxy daemon. This proxy intercepts HTTPS traffic, decrypts it using a configured CA certificate, and forwards requests to AIBridge for processing.

## Changes

* Added `aibridgeproxyd` package with the core proxy server implementation
* Added configuration options: `CODER_AIBRIDGE_PROXY_ENABLED`, `CODER_AIBRIDGE_PROXY_LISTEN_ADDR`, `CODER_AIBRIDGE_PROXY_CERT_FILE`, `CODER_AIBRIDGE_PROXY_KEY_FILE`
* Added tests for server initialization and MITM functionality

Closes https://github.com/coder/internal/issues/1180
 2025-12-29 15:31:51 +00:00
Danielle Maywood 5655760f1d test: use deterministic time to avoid time-based flake (#21396) 
Use deterministic time to avoid time-based flake test failure.
 2025-12-29 14:25:14 +00:00
dependabot[bot] 61c379dba6 ci: bump the github-actions group with 3 updates (#21394) 
Bumps the github-actions group with 3 updates:
[actions/attest](https://github.com/actions/attest),
[docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/attest` from 3.0.0 to 3.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/attest/releases">actions/attest's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/attest</code> from 1.6.0 to 2.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/attest/pull/299">actions/attest#299</a></li>
<li>Bump <code>@​actions/core</code> from 1.11.1 to 2.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/attest/pull/318">actions/attest#318</a></li>
<li>Create Artifact Metadata Storage Record on registry push by <a
href="https://github.com/malancas"><code>@​malancas</code></a> in <a
href="https://redirect.github.com/actions/attest/pull/313">actions/attest#313</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/malancas"><code>@​malancas</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/attest/pull/313">actions/attest#313</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/attest/compare/v3...v3.1.0">https://github.com/actions/attest/compare/v3...v3.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/attest/commit/7667f588f2f73a90cea6c7ac70e78266c4f76616"><code>7667f58</code></a>
Create Artifact Metadata Storage Record on registry push (<a
href="https://redirect.github.com/actions/attest/issues/313">#313</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/0512723b049f456232eb06b040bc579727752a6a"><code>0512723</code></a>
Bump <code>@​actions/core</code> from 1.11.1 to 2.0.1 (<a
href="https://redirect.github.com/actions/attest/issues/318">#318</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/c16e6655b77834c757beac502b8f2013705f92f4"><code>c16e665</code></a>
Bump the npm-development group with 5 updates (<a
href="https://redirect.github.com/actions/attest/issues/315">#315</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/3374a04c9f423bc0e4e5560f82ebe38956064fd0"><code>3374a04</code></a>
Bump <code>@​types/node</code> from 24.10.1 to 25.0.2 (<a
href="https://redirect.github.com/actions/attest/issues/317">#317</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/8ed7eda47c4480c843fdfd8850cbc514a728d335"><code>8ed7eda</code></a>
Bump actions/upload-artifact from 5 to 6 (<a
href="https://redirect.github.com/actions/attest/issues/314">#314</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/6440a037b10d2a829cc9882a533f3d9138424c0d"><code>6440a03</code></a>
Bump the npm-development group with 2 updates (<a
href="https://redirect.github.com/actions/attest/issues/312">#312</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/70b5d87a50d4136d848a73c7cf376b97b7a70223"><code>70b5d87</code></a>
Bump the actions-minor group with 2 updates (<a
href="https://redirect.github.com/actions/attest/issues/311">#311</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/9902fb2594e0b5bbab9995737abd2547cde67f22"><code>9902fb2</code></a>
Bump the npm-development group with 2 updates (<a
href="https://redirect.github.com/actions/attest/issues/310">#310</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/32938749009952fa9f8278fe546fd1f7ed2c5eeb"><code>3293874</code></a>
Bump actions/checkout from 5.0.1 to 6.0.0 (<a
href="https://redirect.github.com/actions/attest/issues/308">#308</a>)</li>
<li><a
href="https://github.com/actions/attest/commit/88adb8653690c030561da54074f99d467b74741b"><code>88adb86</code></a>
Bump the npm-development group with 2 updates (<a
href="https://redirect.github.com/actions/attest/issues/307">#307</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/attest/compare/daf44fb950173508f38bd2406030372c1d1162b1...7667f588f2f73a90cea6c7ac70e78266c4f76616">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.12.0</h2>
<ul>
<li>Deprecate <code>install</code> input by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/455">docker/setup-buildx-action#455</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.62.1 to 0.63.0 in
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/434">docker/setup-buildx-action#434</a></li>
<li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/436">docker/setup-buildx-action#436</a></li>
<li>Bump form-data from 2.5.1 to 2.5.5 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/432">docker/setup-buildx-action#432</a></li>
<li>Bump undici from 5.28.4 to 5.29.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/435">docker/setup-buildx-action#435</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-buildx-action/compare/v3.11.1...v3.12.0">https://github.com/docker/setup-buildx-action/compare/v3.11.1...v3.12.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"><code>8d2750c</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/455">#455</a>
from crazy-max/install-deprecated</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/e81846bcc4416a0bf18b8389e4f6fce279619ddc"><code>e81846b</code></a>
deprecate install input</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/65d18f8f8a05aab1b2d761032bec9cd5578caadb"><code>65d18f8</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/454">#454</a>
from docker/dependabot/github_actions/actions/checkout-6</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/000d75d273dec231f74115df50b6ee04c9b25e55"><code>000d75d</code></a>
build(deps): bump actions/checkout from 5 to 6</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/1583c0f09d26c58c59d25b0eef29792b7ce99d9a"><code>1583c0f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/443">#443</a>
from nicolasleger/patch-1</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/ed158e796328af702db08c75bebb92f2fb10be88"><code>ed158e7</code></a>
doc: bump actions/checkout from 4 to 5</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/4cc794f83e4b7488282e879f4469e86246e52ddd"><code>4cc794f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/441">#441</a>
from docker/dependabot/github_actions/actions/checkout-5</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/4dfc3d6c5d9e9534040f8d8b55bd4a98459b62b7"><code>4dfc3d6</code></a>
build(deps): bump actions/checkout from 4 to 5</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/af1b253b8dc984466d22633f04ef341c1520ed2f"><code>af1b253</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/440">#440</a>
from crazy-max/k3s-build</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/3c6ab92b04d9f3e63233e0e0168ba114c6b448bc"><code>3c6ab92</code></a>
ci: k3s test with latest buildx</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/setup-buildx-action/compare/e468171a9de216ec08956ac3ada2f0791b6bd435...8d2750c68a42422c14e847fe6c8ac0403b4cbd6f">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.31.6 to 4.31.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.31.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.9 - 16 Dec 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v4.31.9/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v4.31.8</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.8 - 11 Dec 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.8. <a
href="https://redirect.github.com/github/codeql-action/pull/3354">#3354</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v4.31.8/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
<h2>v4.31.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.7 - 05 Dec 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.7. <a
href="https://redirect.github.com/github/codeql-action/pull/3343">#3343</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v4.31.7/CHANGELOG.md">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.31.9 - 16 Dec 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.8 - 11 Dec 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.8. <a
href="https://redirect.github.com/github/codeql-action/pull/3354">#3354</a></li>
</ul>
<h2>4.31.7 - 05 Dec 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.7. <a
href="https://redirect.github.com/github/codeql-action/pull/3343">#3343</a></li>
</ul>
<h2>4.31.6 - 01 Dec 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.5 - 24 Nov 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.6. <a
href="https://redirect.github.com/github/codeql-action/pull/3321">#3321</a></li>
</ul>
<h2>4.31.4 - 18 Nov 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.3 - 13 Nov 2025</h2>
<ul>
<li>CodeQL Action v3 will be deprecated in December 2026. The Action now
logs a warning for customers who are running v3 but could be running v4.
For more information, see <a
href="https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/">Upcoming
deprecation of CodeQL Action v3</a>.</li>
<li>Update default CodeQL bundle version to 2.23.5. <a
href="https://redirect.github.com/github/codeql-action/pull/3288">#3288</a></li>
</ul>
<h2>4.31.2 - 30 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.1 - 30 Oct 2025</h2>
<ul>
<li>The <code>add-snippets</code> input has been removed from the
<code>analyze</code> action. This input has been deprecated since CodeQL
Action 3.26.4 in August 2024 when this removal was announced.</li>
</ul>
<h2>4.31.0 - 24 Oct 2025</h2>
<ul>
<li>Bump minimum CodeQL bundle version to 2.17.6. <a
href="https://redirect.github.com/github/codeql-action/pull/3223">#3223</a></li>
<li>When SARIF files are uploaded by the <code>analyze</code> or
<code>upload-sarif</code> actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
<code>upload-sarif</code> action. For <code>analyze</code>, this may
affect Advanced Setup for CodeQL users who specify a value other than
<code>always</code> for the <code>upload</code> input. <a
href="https://redirect.github.com/github/codeql-action/pull/3222">#3222</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/5d4e8d1aca955e8d8589aabd499c5cae939e33c7"><code>5d4e8d1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3371">#3371</a>
from github/update-v4.31.9-998798e34</li>
<li><a
href="https://github.com/github/codeql-action/commit/1dc115f17a8c6966e94a6477313dd3df6319bc83"><code>1dc115f</code></a>
Update changelog for v4.31.9</li>
<li><a
href="https://github.com/github/codeql-action/commit/998798e34d79baddb1566c60bbb8f68a901c04e6"><code>998798e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3352">#3352</a>
from github/nickrolfe/jar-min-ff-cleanup</li>
<li><a
href="https://github.com/github/codeql-action/commit/5eb751966fe18977cdefa4e41e0f90e92801ce90"><code>5eb7519</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3358">#3358</a>
from github/henrymercer/database-upload-telemetry</li>
<li><a
href="https://github.com/github/codeql-action/commit/d29eddb39b7c33171bb0250114b1c9e3ff8fe2bc"><code>d29eddb</code></a>
Extract version number to constant</li>
<li><a
href="https://github.com/github/codeql-action/commit/e9626872ef3347a9c18091d60da647084c2451a6"><code>e962687</code></a>
Merge branch 'main' into henrymercer/database-upload-telemetry</li>
<li><a
href="https://github.com/github/codeql-action/commit/19c7f96922a6269458f2cadcc23faf0ebaa1368b"><code>19c7f96</code></a>
Rename <code>isOverlayBase</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/ae5de9a20d0468cc3818a0dc5c99e456f996d9cf"><code>ae5de9a</code></a>
Use <code>getErrorMessage</code> in log too</li>
<li><a
href="https://github.com/github/codeql-action/commit/0cb86337c5111af4ff3dc7e8f9b98c479c9ea954"><code>0cb8633</code></a>
Prefer <code>performance.now()</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/c07cc0d3a95a282fc5a54477464931c776d124ec"><code>c07cc0d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3351">#3351</a>
from github/henrymercer/ghec-dr-determine-tools-vers...</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/fe4161a26a8629af62121b670040955b330f9af2...5d4e8d1aca955e8d8589aabd499c5cae939e33c7">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-29 12:21:08 +00:00
dependabot[bot] 4f40b78185 chore: bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#21393) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.77.0 to 1.78.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.78.0</h2>
<h1>Behavior Changes</h1>
<ul>
<li>client: Reject target URLs containing unbracketed colons in the
hostname in Go version 1.26+. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8716">#8716</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/neild"><code>@​neild</code></a></li>
</ul>
</li>
</ul>
<h1>New Features</h1>
<ul>
<li>stats/otel: Add backend service label to wrr metrics as part of A89.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8737">#8737</a>)</li>
<li>stats/otel: Add subchannel metrics (without the disconnection
reason) to eventually replace the pickfirst metrics. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8738">#8738</a>)</li>
<li>client: Wait for all pending goroutines to complete when closing a
graceful switch balancer. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8746">#8746</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/twz123"><code>@​twz123</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>transport/client : Return status code <code>Unknown</code> on
malformed grpc-status. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8735">#8735</a>)</li>
<li>client: Add <code>experimental.AcceptCompressors</code> so callers
can restrict the <code>grpc-accept-encoding</code> header advertised for
a call. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8718">#8718</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/iblancasa"><code>@​iblancasa</code></a></li>
</ul>
</li>
<li>xds: Fix a bug in <code>StringMatcher</code> where regexes would
match incorrectly when ignore_case is set to true. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8723">#8723</a>)</li>
<li>xds/resolver:
<ul>
<li>Drop previous route resources and report an error when no matching
virtual host is found.</li>
<li>Only log LDS/RDS configuration errors following a successful update
and retain the last valid resource to prevent transient failures. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8711">#8711</a>)</li>
</ul>
</li>
<li>client:
<ul>
<li>Change connectivity state to CONNECTING when creating the name
resolver (as part of exiting IDLE).</li>
<li>Change connectivity state to TRANSIENT_FAILURE if name resolver
creation fails (as part of exiting IDLE).</li>
<li>Change connectivity state to IDLE after idle timeout expires even
when current state is TRANSIENT_FAILURE.</li>
<li>Fix a bug that resulted in <code>OnFinish</code> call option not
being invoked for RPCs where stream creation failed. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8710">#8710</a>)</li>
</ul>
</li>
<li>xdsclient: Fix a race in the xdsClient that could lead to
resource-not-found errors. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8627">#8627</a>)</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>mem: Round up to nearest 4KiB for pool allocations larger than 1MiB.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8705">#8705</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/cjc25"><code>@​cjc25</code></a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/9df039ef2c921978514b600c9d5c6bf25cce54f6"><code>9df039e</code></a>
Change version to 1.78.0 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8761">#8761</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/9b990b6355c443ecf9e71f118f7097b62bc3299a"><code>9b990b6</code></a>
gracefulswitch: Wait for all goroutines on close (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8746">#8746</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/6677d9a9cf1dd8227673253015027de0addeeafb"><code>6677d9a</code></a>
xds: Fixing a typo (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8760">#8760</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/d35cedde1ee806f3c578aba8c59bec7117ae0bc3"><code>d35cedd</code></a>
xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8740">#8740</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/d931fdc379623f36d2050487887f5465a18b7912"><code>d931fdc</code></a>
client: allow overriding grpc-accept-encoding header (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8718">#8718</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/0800ec75223cd0995d599002581eafe2151c6df3"><code>0800ec7</code></a>
xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use
custom lb ...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/6553ea1a1d99ff4e3a516499330bf47607e7708f"><code>6553ea1</code></a>
stats/otel: Add subchannel metrics (A94) (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8738">#8738</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/81a00cecc0abe8a7d7140967f96d9cc0729a3aa4"><code>81a00ce</code></a>
grpc: Fixing spelling typo (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8756">#8756</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/e413838c3b7b8b3e94754cb3704751e49f917358"><code>e413838</code></a>
client: Change connectivity state to CONNECTING when creating the name
resolv...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/f9d2bdb34edcd95f0ca9e2cfaba692722cb85ee2"><code>f9d2bdb</code></a>
stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8737">#8737</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.77.0&new-version=1.78.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-29 12:13:49 +00:00
dependabot[bot] 2ab17b1634 chore: bump github.com/brianvoe/gofakeit/v7 from 7.12.1 to 7.14.0 (#21392) 
Bumps
[github.com/brianvoe/gofakeit/v7](https://github.com/brianvoe/gofakeit)
from 7.12.1 to 7.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/brianvoe/gofakeit/commit/2c610bcf794186e0725471ebb1cf994f63dc0872"><code>2c610bc</code></a>
tests - updated test to reflect job and person data changes</li>
<li><a
href="https://github.com/brianvoe/gofakeit/commit/86f0b761a7e4d0c22b165203dc8d1857e5dd9f90"><code>86f0b76</code></a>
person - update data for person info</li>
<li><a
href="https://github.com/brianvoe/gofakeit/commit/cd759a2396551e3f25a71e5e4d875be11eb3983d"><code>cd759a2</code></a>
job - update jobs data</li>
<li><a
href="https://github.com/brianvoe/gofakeit/commit/d8d5cd4cc47d5fd63d15111d62c9f9286025b9ce"><code>d8d5cd4</code></a>
tests - updated product tests to reflect changes</li>
<li><a
href="https://github.com/brianvoe/gofakeit/commit/fb8fcb0c527b8df6daf7f27f58ab50cce57e4ae3"><code>fb8fcb0</code></a>
products - updated to expand values for products</li>
<li>See full diff in <a
href="https://github.com/brianvoe/gofakeit/compare/v7.12.1...v7.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/brianvoe/gofakeit/v7&package-manager=go_modules&previous-version=7.12.1&new-version=7.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-29 12:12:36 +00:00
Cian Johnston 7a259ffd39 feat(dogfood): use coder exp sync to synchronize scripts (#21384) 
Updates the `coder` template to use `coder exp sync` to synchronize `coder_script` startup dependencies.
 2025-12-29 11:00:36 +00:00
dependabot[bot] d9e155113b chore: bump the coder-modules group across 3 directories with 4 updates (#21388) 
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-29 00:41:21 +00:00
Ben Potter 1d530a3ab2 chore: add playwright MCP in proper place 2025-12-28 12:03:20 -07:00
Danielle Maywood 05529139bc feat(coderd): support deleting dev containers (#21248) 
Add an endpoint to coderd to support deleting dev containers
 2025-12-24 12:34:39 +00:00
Jake Howell df6b316772 feat: extend biome.jsonc with "useConsistentCurlyBraces": "error" (#21379) 2025-12-24 12:08:13 +11:00
Steven Masley 35f1c44455 test: fix path seperator on windows for unit test (#21382) 
Test TestWorkspaceTemplateParamsChange writes a file to disk

Closes https://github.com/coder/internal/issues/1213
 2025-12-23 15:13:16 +00:00
Marcin Tojek 923c04e3e3 fix(site): add defensive access to entitlement features (#21381) 
Fixes #14784
 2025-12-23 16:00:36 +01:00
Danny Kopping 11275330a6 chore: revert runner sizes & parallelism from #21091 (#21380) 
The juice wasn't worth the squeeze. We reduced our median run times by
33% but also increased the failure rate. Even if the latter is a
misattribution to this change, doubling costs for only a 33% speedup is
not worth it.

The refactorings from #21091 are worthwhile keeping, so I've just
reverted the runner sizes & parallelism to [previous
levels](https://github.com/coder/coder/blob/8ed1c1d3720b40a5dcc41c8a17debf93b36d3537/.github/workflows/ci.yaml).

---

Before:

<img width="2028" height="373" alt="image"
src="https://github.com/user-attachments/assets/be527e63-d14d-4bab-ac35-214e7a73c675"
/>

After:

<img width="2040" height="403" alt="image"
src="https://github.com/user-attachments/assets/fd834ae6-f310-492a-90c4-814545cda7f5"
/>

Signed-off-by: Danny Kopping <danny@coder.com>
 2025-12-23 11:42:04 +02:00
Steven Masley 61d7d2983f fix: remove state information from apply (#21373) 
Delete builds were not deleting resources as the tf state being sent in the apply request was empty.
State removed from apply request and read from the session instead.
 2025-12-22 16:18:53 +00:00
Marcin Tojek 0af038bddd docs: group enumerated values by property in API docs (#21372) 
Fixes #13840
 2025-12-22 16:19:25 +01:00
dependabot[bot] 5b89da016e chore: bump github.com/gohugoio/hugo from 0.152.2 to 0.153.1 (#21368) 
Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from
0.152.2 to 0.153.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gohugoio/hugo/releases">github.com/gohugoio/hugo's
releases</a>.</em></p>
<blockquote>
<h2>v0.153.1</h2>
<blockquote>
<p>[!note]
This is a bug fix release. See the <a
href="https://github.com/gohugoio/hugo/releases/tag/v0.153.0">main
release</a> for a list of new features.</p>
</blockquote>
<ul>
<li>Handle PNG named *.webp 4085ee93 <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14288">#14288</a></li>
<li>Revert deprecation logging for contentDir per language 168bf17e <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14287">#14287</a></li>
<li>Fix panic when 404 is backed by a content file f740d7cf <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14283">#14283</a></li>
<li>internal/warpc: Increase WebP memory limit to 256 MiB 5f46da6e <a
href="https://github.com/jmooring"><code>@​jmooring</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14282">#14282</a></li>
</ul>
<h2>v0.153.0</h2>
<blockquote>
<p>[!note]
There is a newer bug fix release available <a
href="https://github.com/gohugoio/hugo/releases/tag/v0.153.1">here</a>.</p>
</blockquote>
<p>This is a good one! Hugo <code>v0.153.0</code> comes with a powerful
new multidimensional content model (languages, versions and roles) and
completely overhauls WebP image support, and much more:</p>
<ul>
<li>For the new multidimensional content model, start reading <a
href="https://gohugo.io/quick-reference/glossary/#sites-matrix">sites
matrix</a> and <a
href="https://gohugo.io/quick-reference/glossary/#sites-complements">sites
complements</a>. The matrix is what gets written to disk,
<code>complements</code> allows e.g. a site in Swedish to fill in
missing gaps in the site in Norwegian's page and resource collections.
Also see the new <a
href="https://gohugo.io/methods/page/rotate/">Rotate</a> method, that
allows you to rotate the content tree in a given dimension.</li>
<li>For WebP we now build a WASM version of <a
href="https://github.com/webmproject/libwebp/">libwebp</a>
(<code>v1.6.0</code>) and run it in the <a
href="https://wazero.io/">Wazero</a> runtime. We use this for both
encoding and decoding. This solves an old and annoying issue with Go's
stdlib's decoder, with <a
href="https://redirect.github.com/gohugoio/hugo/issues/8879">loss of
contrast and muted colors</a> in some photos, but it also means that you
don't need the extended version of Hugo to handle WebP images. And, drum
roll, we now also support animated WebP, including converting to and
from animated GIFs.</li>
<li>For MacOS, we now build signed and notarised <code>pkg</code>
installers.</li>
</ul>
<p>Also:</p>
<ul>
<li>The Asciidoctor integration is greatly improved.</li>
<li>New template funcs <a
href="https://gohugo.io/functions/urls/pathunescape/">urls.PathUnescape</a>
and <a
href="https://gohugo.io/functions/urls/pathescape/">urls.PathEscape</a>.</li>
<li><a
href="https://gohugo.io/functions/openapi3/unmarshal/">openapi3.Unmarshal</a>
now support external refs (including remote refs).</li>
</ul>
<h2>Notes</h2>
<ul>
<li>tpl/css: Deprecate libsass in favor of dartsass (note) 9937a5dc <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14261">#14261</a></li>
<li>Build Order: Hugo builds sites based on the sorted dimensions (see
below). In earlier versions, we built the sites starting with the
default content language. This change is also reflected in the sort
order of <code>.Site.Sites</code> to make it consistent with
<code>.Site.Languages</code>.</li>
<li>Sort Order: The dimensions are sorted as follows, which affects
build order and complement selection:
<ul>
<li>languages: By weight, then by name.</li>
<li>versions: By weight, then by semantic versioning (descending).</li>
<li>roles: By weight, then by name.</li>
</ul>
</li>
<li>Deprecations:
<ul>
<li>The lang option on mounts (<a
href="https://gohugo.io/configuration/module/#mounts">https://gohugo.io/configuration/module/#mounts</a>)
and segments
(<a
href="https://gohugo.io/configuration/segments/#segment-definition">https://gohugo.io/configuration/segments/#segment-definition</a>)
is deprecated in favor of the more powerful <code>sites.matrix</code>
option.</li>
<li>File mount <code>includeFiles</code> and <code>excludeFiles</code>
are deprecated in favour of the new files filter, which supports
negation.</li>
</ul>
</li>
<li>Logging: We no longer log warnings about potential duplicate content
paths, as this becomes impractical to reason about with a
complex sites matrix.</li>
</ul>
<h2>Bug fixes</h2>
<ul>
<li>Fix some outdated front matter b82e496c <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14271">#14271</a></li>
<li>Fix server rebuilds on editing content with Chinese terms e2e64aee
<a href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14240">#14240</a></li>
<li>Fix slow server startup of very big content trees 7a43b928 <a
href="https://github.com/bep"><code>@​bep</code></a> <a
href="https://redirect.github.com/gohugoio/hugo/issues/14211">#14211</a></li>
<li>github: Fix &quot;no space left on device&quot; issue in CI b037b930
<a href="https://github.com/bep"><code>@​bep</code></a></li>
<li>docs: Fix link to CGO wiki page 5af31128 <a
href="https://github.com/jordelver"><code>@​jordelver</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gohugoio/hugo/commit/8e6cac8462d210f611154068eaa24c4461357653"><code>8e6cac8</code></a>
releaser: Bump versions for release of 0.153.1</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/4085ee9340373b806a74654ff46586cc6d99d096"><code>4085ee9</code></a>
Handle PNG named *.webp</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/168bf17e7042a4df98742d21354205b8a48641a5"><code>168bf17</code></a>
Revert deprecation logging for contentDir per language</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/80ea90c880e805814d6689769c4a1969f592f539"><code>80ea90c</code></a>
images: Add some more PNG tests</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/f740d7cfe0ebaec7056a8fc2b770e46b86c13ee7"><code>f740d7c</code></a>
Fix panic when 404 is backed by a content file</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/5f46da6e2a3f838b40176775c0b46855f4f8f529"><code>5f46da6</code></a>
internal/warpc: Increase WebP memory limit to 256 MiB</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/fe64a682254e32391a6d0c78f277b1133e1f4583"><code>fe64a68</code></a>
releaser: Prepare repository for 0.154.0-DEV</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/b4128babb839feaa962c00e777f0d2fe8d811f7d"><code>b4128ba</code></a>
releaser: Bump versions for release of 0.153.0</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/790a5b70142a07a8046763359a16a553474a1928"><code>790a5b7</code></a>
hugoreleaser: Updage macospkgremote to increase notarization
timeout</li>
<li><a
href="https://github.com/gohugoio/hugo/commit/70ce2446b593a67f8871ce78cf250a95062af9e0"><code>70ce244</code></a>
Merge commit '08e1ea5c709d3d49bdc3ce3c21e8fa05a33150d0'</li>
<li>Additional commits viewable in <a
href="https://github.com/gohugoio/hugo/compare/v0.152.2...v0.153.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gohugoio/hugo&package-manager=go_modules&previous-version=0.152.2&new-version=0.153.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-22 12:38:05 +00:00
dependabot[bot] 3f13859ade ci: bump the github-actions group with 4 updates (#21370) 
Bumps the github-actions group with 4 updates:
[step-security/harden-runner](https://github.com/step-security/harden-runner),
[actions/cache](https://github.com/actions/cache),
[actions/upload-artifact](https://github.com/actions/upload-artifact)
and
[actions/download-artifact](https://github.com/actions/download-artifact).

Updates `step-security/harden-runner` from 2.13.2 to 2.14.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's
releases</a>.</em></p>
<blockquote>
<h2>v2.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Selective installation: Harden-Runner now skips installation on
GitHub-hosted runners when the repository has a custom property
skip_harden_runner, allowing organizations to opt out specific
repos.</li>
<li>Avoid double install: The action no longer installs Harden-Runner if
it’s already present on a GitHub-hosted runner, which could happen when
a composite action also installs it.</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2.13.3...v2.14.0">https://github.com/step-security/harden-runner/compare/v2.13.3...v2.14.0</a></p>
<h2>v2.13.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed an issue where process events were not uploaded in certain
edge cases.</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3">https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/step-security/harden-runner/commit/20cf305ff2072d973412fa9b1e3a4f227bda3c76"><code>20cf305</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/622">#622</a>
from step-security/feature/custom-property-skip</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/c51e8eeb6c4fdcd08f65e43a051dacdbfaa69702"><code>c51e8ee</code></a>
feat: skip agent install and post step on subsequent runs for
GitHub-hosted r...</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/e152b90204c3d85cefa1441b701a47a13ed28bd7"><code>e152b90</code></a>
feat: skip harden-runner based on repository custom property</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/ee1faec052d1000061fa79a13e030db11b3f86bd"><code>ee1faec</code></a>
feat: replace skip-harden-runner with skip-on-custom-property input</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/1dc7c1764659d537dab2a854b8e165a801103eb1"><code>1dc7c17</code></a>
feat: add skip-harden-runner input to conditionally skip execution</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/df199fb7be9f65074067a9eb93f12bb4c5547cf2"><code>df199fb</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/620">#620</a>
from step-security/rc-29</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/03d096a772368b1f0222005a6899d3e35a7f62df"><code>03d096a</code></a>
update agent</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/40901073af04afd40408833437092a7467798f33"><code>4090107</code></a>
fix: update agent</li>
<li>See full diff in <a
href="https://github.com/step-security/harden-runner/compare/95d9a5deda9de15063e7595e9719c11c38c90ae2...20cf305ff2072d973412fa9b1e3a4f227bda3c76">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/cache` from 4.3.0 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<blockquote>
<p>[!IMPORTANT]
<strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of
<code>2.327.1</code>.</strong></p>
<p>If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<hr />
<h1>v5.0.1</h1>
<h2>What's Changed</h2>
<ul>
<li>fix: update <code>@​actions/cache</code> for Node.js 24 punycode
deprecation by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1685">actions/cache#1685</a></li>
<li>prepare release v5.0.1 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1686">actions/cache#1686</a></li>
</ul>
<h1>v5.0.0</h1>
<h2>What's Changed</h2>
<ul>
<li>Upgrade to use node24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1630">actions/cache#1630</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1684">actions/cache#1684</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.1">https://github.com/actions/cache/compare/v5...v5.0.1</a></p>
<h2>v5.0.0</h2>
<blockquote>
<p>[!IMPORTANT]
<strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of
<code>2.327.1</code>.</strong></p>
<p>If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<hr />
<h2>What's Changed</h2>
<ul>
<li>Upgrade to use node24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1630">actions/cache#1630</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1684">actions/cache#1684</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v4.3.0...v5.0.0">https://github.com/actions/cache/compare/v4.3.0...v5.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>Changelog</h2>
<h3>5.0.1</h3>
<ul>
<li>Update <code>@azure/storage-blob</code> to <code>^12.29.1</code> via
<code>@actions/cache@5.0.1</code> <a
href="https://redirect.github.com/actions/cache/pull/1685">#1685</a></li>
</ul>
<h3>5.0.0</h3>
<blockquote>
<p>[!IMPORTANT]
<code>actions/cache@v5</code> runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of <code>2.327.1</code>.
If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<h3>4.3.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to <a
href="https://redirect.github.com/actions/toolkit/pull/2132">v4.1.0</a></li>
</ul>
<h3>4.2.4</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.5</li>
</ul>
<h3>4.2.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token in
debug logs for cache entries)</li>
</ul>
<h3>4.2.2</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.2</li>
</ul>
<h3>4.2.1</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.1</li>
</ul>
<h3>4.2.0</h3>
<p>TLDR; The cache backend service has been rewritten from the ground up
for improved performance and reliability. <a
href="https://github.com/actions/cache">actions/cache</a> now integrates
with the new cache service (v2) APIs.</p>
<p>The new service will gradually roll out as of <strong>February 1st,
2025</strong>. The legacy service will also be sunset on the same date.
Changes in these release are <strong>fully backward
compatible</strong>.</p>
<p><strong>We are deprecating some versions of this action</strong>. We
recommend upgrading to version <code>v4</code> or <code>v3</code> as
soon as possible before <strong>February 1st, 2025.</strong> (Upgrade
instructions below).</p>
<p>If you are using pinned SHAs, please use the SHAs of versions
<code>v4.2.0</code> or <code>v3.4.0</code></p>
<p>If you do not upgrade, all workflow runs using any of the deprecated
<a href="https://github.com/actions/cache">actions/cache</a> will
fail.</p>
<p>Upgrading to the recommended versions will not break your
workflows.</p>
<h3>4.1.2</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/9255dc7a253b0ccc959486e2bca901246202afeb"><code>9255dc7</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1686">#1686</a>
from actions/cache-v5.0.1-release</li>
<li><a
href="https://github.com/actions/cache/commit/8ff5423e8b66eacab4e638ee52abbd2cb831366a"><code>8ff5423</code></a>
chore: release v5.0.1</li>
<li><a
href="https://github.com/actions/cache/commit/9233019a152bc768059ac1768b8e4403b5da16c1"><code>9233019</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1685">#1685</a>
from salmanmkc/node24-storage-blob-fix</li>
<li><a
href="https://github.com/actions/cache/commit/b975f2bb844529e1063ad882c609b224bcd66eb6"><code>b975f2b</code></a>
fix: add peer property to package-lock.json for dependencies</li>
<li><a
href="https://github.com/actions/cache/commit/d0a0e1813491d01d574c95f8d189f62622bbb2ae"><code>d0a0e18</code></a>
fix: update license files for <code>@​actions/cache</code>,
fast-xml-parser, and strnum</li>
<li><a
href="https://github.com/actions/cache/commit/74de208dcfcbe85c0e7154e7b17e4105fe2554ff"><code>74de208</code></a>
fix: update <code>@​actions/cache</code> to ^5.0.1 for Node.js 24
punycode fix</li>
<li><a
href="https://github.com/actions/cache/commit/ac7f1152ead02e89c14b5456d14ab17591e74cfb"><code>ac7f115</code></a>
peer</li>
<li><a
href="https://github.com/actions/cache/commit/b0f846b50b6061d7a2ca6f1a2fea61d4a65d1a16"><code>b0f846b</code></a>
fix: update <code>@​actions/cache</code> with storage-blob fix for
Node.js 24 punycode depr...</li>
<li><a
href="https://github.com/actions/cache/commit/a7833574556fa59680c1b7cb190c1735db73ebf0"><code>a783357</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1684">#1684</a>
from actions/prepare-cache-v5-release</li>
<li><a
href="https://github.com/actions/cache/commit/3bb0d78750a39cefce0c2b5a0a9801052b4359ad"><code>3bb0d78</code></a>
docs: highlight v5 runner requirement in releases</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...9255dc7a253b0ccc959486e2bca901246202afeb">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 5.0.0 to 6.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>v6 - What's new</h2>
<blockquote>
<p>[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using:
node24</code>) and requires a minimum Actions Runner version of 2.327.1.
If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<h3>Node.js 24</h3>
<p>This release updates the runtime to Node.js 24. v5 had preliminary
support for Node.js 24, however this action was by default still running
on Node.js 20. Now this action by default will run on Node.js 24.</p>
<h2>What's Changed</h2>
<ul>
<li>Upload Artifact Node 24 support by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/719">actions/upload-artifact#719</a></li>
<li>fix: update <code>@​actions/artifact</code> for Node.js 24 punycode
deprecation by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/744">actions/upload-artifact#744</a></li>
<li>prepare release v6.0.0 for Node.js 24 support by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/745">actions/upload-artifact#745</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0">https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/b7c566a772e6b6bfb58ed0dc250532a479d7789f"><code>b7c566a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/745">#745</a>
from actions/upload-artifact-v6-release</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/e516bc8500aaf3d07d591fcd4ae6ab5f9c391d5b"><code>e516bc8</code></a>
docs: correct description of Node.js 24 support in README</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/ddc45ed9bca9b38dbd643978d88e3981cdc91415"><code>ddc45ed</code></a>
docs: update README to correct action name for Node.js 24 support</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/615b319bd27bb32c3d64dca6b6ed6974d5fbe653"><code>615b319</code></a>
chore: release v6.0.0 for Node.js 24 support</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/017748b48f8610ca8e6af1222f4a618e84a9c703"><code>017748b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/744">#744</a>
from actions/fix-storage-blob</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/38d4c7997f5510fcc41fc4aae2a6b97becdbe7fc"><code>38d4c79</code></a>
chore: rebuild dist</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/7d27270e0cfd253e666c44abac0711308d2d042f"><code>7d27270</code></a>
chore: add missing license cache files for <code>@​actions/core</code>,
<code>@​actions/io</code>, and mi...</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/5f643d3c9475505ccaf26d686ffbfb71a8387261"><code>5f643d3</code></a>
chore: update license files for <code>@​actions/artifact</code><a
href="https://github.com/5"><code>@​5</code></a>.0.1 dependencies</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/1df1684032c88614064493e1a0478fcb3583e1d0"><code>1df1684</code></a>
chore: update package-lock.json with <code>@​actions/artifact</code><a
href="https://github.com/5"><code>@​5</code></a>.0.1</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/b5b1a918401ee270935b6b1d857ae66c85f3be6f"><code>b5b1a91</code></a>
fix: update <code>@​actions/artifact</code> to ^5.0.0 for Node.js 24
punycode fix</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/download-artifact` from 6.0.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/download-artifact/releases">actions/download-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>v7 - What's new</h2>
<blockquote>
<p>[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using:
node24</code>) and requires a minimum Actions Runner version of 2.327.1.
If you are using self-hosted runners, ensure they are updated before
upgrading.</p>
</blockquote>
<h3>Node.js 24</h3>
<p>This release updates the runtime to Node.js 24. v6 had preliminary
support for Node 24, however this action was by default still running on
Node.js 20. Now this action by default will run on Node.js 24.</p>
<h2>What's Changed</h2>
<ul>
<li>Update GHES guidance to include reference to Node 20 version by <a
href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>
in <a
href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li>
<li>Download Artifact Node24 support by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li>
<li>fix: update <code>@​actions/artifact</code> to fix Node.js 24
punycode deprecation by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/451">actions/download-artifact#451</a></li>
<li>prepare release v7.0.0 for Node.js 24 support by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/452">actions/download-artifact#452</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0">https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/download-artifact/commit/37930b1c2abaa49bbe596cd826c3c89aef350131"><code>37930b1</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/452">#452</a>
from actions/download-artifact-v7-release</li>
<li><a
href="https://github.com/actions/download-artifact/commit/72582b9e0acd370909e83fa4a1fd0fca3ad452d8"><code>72582b9</code></a>
doc: update readme</li>
<li><a
href="https://github.com/actions/download-artifact/commit/0d2ec9d4cbcefe257d822f108de2a1f15f8da9f6"><code>0d2ec9d</code></a>
chore: release v7.0.0 for Node.js 24 support</li>
<li><a
href="https://github.com/actions/download-artifact/commit/fd7ae8fda6dc16277a9ffbc91cdb0eedf156e912"><code>fd7ae8f</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/451">#451</a>
from actions/fix-storage-blob</li>
<li><a
href="https://github.com/actions/download-artifact/commit/d484700543354b15886d6a52910cf61b7f1d2b27"><code>d484700</code></a>
chore: restore minimatch.dep.yml license file</li>
<li><a
href="https://github.com/actions/download-artifact/commit/03a808050efe42bb6ad85281890afd4e4546672c"><code>03a8080</code></a>
chore: remove obsolete dependency license files</li>
<li><a
href="https://github.com/actions/download-artifact/commit/56fe6d904b0968950f8b68ea17774c54973ed5e2"><code>56fe6d9</code></a>
chore: update <code>@​actions/artifact</code> license file to 5.0.1</li>
<li><a
href="https://github.com/actions/download-artifact/commit/8e3ebc4ab4d2e095e5eb44ba1a4a53b6b03976ad"><code>8e3ebc4</code></a>
chore: update package-lock.json with <code>@​actions/artifact</code><a
href="https://github.com/5"><code>@​5</code></a>.0.1</li>
<li><a
href="https://github.com/actions/download-artifact/commit/1e3c4b4d4906c98ab57453c24efefdf16c078044"><code>1e3c4b4</code></a>
fix: update <code>@​actions/artifact</code> to ^5.0.0 for Node.js 24
punycode fix</li>
<li><a
href="https://github.com/actions/download-artifact/commit/458627d354794c71bc386c8d5839d20b5885fe2a"><code>458627d</code></a>
chore: use local <code>@​actions/artifact</code> package for Node.js 24
testing</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-22 12:32:48 +00:00
dependabot[bot] 77c41a0ade chore: bump google.golang.org/api from 0.257.0 to 0.258.0 (#21364) 
Bumps
[google.golang.org/api](https://github.com/googleapis/google-api-go-client)
from 0.257.0 to 0.258.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-api-go-client/releases">google.golang.org/api's
releases</a>.</em></p>
<blockquote>
<h2>v0.258.0</h2>
<h2><a
href="https://github.com/googleapis/google-api-go-client/compare/v0.257.0...v0.258.0">0.258.0</a>
(2025-12-18)</h2>
<h3>Features</h3>
<ul>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3392">#3392</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/db6e6530eaa7bfa2bb7c5a190822422a410fdbee">db6e653</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3394">#3394</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/7a9ae9465365e4f8dafe94fe66472347089f9d2b">7a9ae94</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3395">#3395</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/dd93f673e7e190062bd70ea6349846babd9d5a18">dd93f67</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3396">#3396</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/302ad5fe6f2083ecb1ae931a65ead0db05f31041">302ad5f</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3398">#3398</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/5dfcd09b444ac707e0a4bf8faaa3005d7446c246">5dfcd09</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3401">#3401</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/cd3e656aba7e5a7dfc99d26edda519bea9927294">cd3e656</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3402">#3402</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/9e6446a027f032b942e6cf107d85c9bafbeceed1">9e6446a</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3404">#3404</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/453c04a2253514c5674147b8301897955da7bdee">453c04a</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3406">#3406</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/af035092fea5561e35b88f60b53f2d13c3d31918">af03509</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3407">#3407</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/41e2f8f21da1fe333321dae2e29d2c9b34e2c170">41e2f8f</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3408">#3408</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/ba647419702c7484983a89f4133efb00a97dfb6c">ba64741</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3409">#3409</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/5d17056dd3806211b5505206a08dcc204048c367">5d17056</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3410">#3410</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/90b301bf2f6dac8edbbf072ee06e9aa09aa0b12a">90b301b</a>)</li>
<li><strong>option:</strong> Deprecate unsafe credentials JSON loading
options (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3356">#3356</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/a5426fa66cb1b38be2b24a3ebf8147b2f17b799f">a5426fa</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md">google.golang.org/api's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-api-go-client/compare/v0.257.0...v0.258.0">0.258.0</a>
(2025-12-18)</h2>
<h3>Features</h3>
<ul>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3392">#3392</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/db6e6530eaa7bfa2bb7c5a190822422a410fdbee">db6e653</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3394">#3394</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/7a9ae9465365e4f8dafe94fe66472347089f9d2b">7a9ae94</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3395">#3395</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/dd93f673e7e190062bd70ea6349846babd9d5a18">dd93f67</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3396">#3396</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/302ad5fe6f2083ecb1ae931a65ead0db05f31041">302ad5f</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3398">#3398</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/5dfcd09b444ac707e0a4bf8faaa3005d7446c246">5dfcd09</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3401">#3401</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/cd3e656aba7e5a7dfc99d26edda519bea9927294">cd3e656</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3402">#3402</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/9e6446a027f032b942e6cf107d85c9bafbeceed1">9e6446a</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3404">#3404</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/453c04a2253514c5674147b8301897955da7bdee">453c04a</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3406">#3406</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/af035092fea5561e35b88f60b53f2d13c3d31918">af03509</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3407">#3407</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/41e2f8f21da1fe333321dae2e29d2c9b34e2c170">41e2f8f</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3408">#3408</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/ba647419702c7484983a89f4133efb00a97dfb6c">ba64741</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3409">#3409</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/5d17056dd3806211b5505206a08dcc204048c367">5d17056</a>)</li>
<li><strong>all:</strong> Auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3410">#3410</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/90b301bf2f6dac8edbbf072ee06e9aa09aa0b12a">90b301b</a>)</li>
<li><strong>option:</strong> Deprecate unsafe credentials JSON loading
options (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3356">#3356</a>)
(<a
href="https://github.com/googleapis/google-api-go-client/commit/a5426fa66cb1b38be2b24a3ebf8147b2f17b799f">a5426fa</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/8fbb157241ba8949d2072c101538aad33e56a596"><code>8fbb157</code></a>
chore(main): release 0.258.0 (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3393">#3393</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/90b301bf2f6dac8edbbf072ee06e9aa09aa0b12a"><code>90b301b</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3410">#3410</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/046fc2c59a898d6012622d3a5e21918853f2914e"><code>046fc2c</code></a>
chore(all): update all (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3397">#3397</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/5d17056dd3806211b5505206a08dcc204048c367"><code>5d17056</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3409">#3409</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/ba647419702c7484983a89f4133efb00a97dfb6c"><code>ba64741</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3408">#3408</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/41e2f8f21da1fe333321dae2e29d2c9b34e2c170"><code>41e2f8f</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3407">#3407</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/af035092fea5561e35b88f60b53f2d13c3d31918"><code>af03509</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3406">#3406</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/a5426fa66cb1b38be2b24a3ebf8147b2f17b799f"><code>a5426fa</code></a>
feat(option): Deprecate unsafe credentials JSON loading options (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3356">#3356</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/453c04a2253514c5674147b8301897955da7bdee"><code>453c04a</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3404">#3404</a>)</li>
<li><a
href="https://github.com/googleapis/google-api-go-client/commit/9e6446a027f032b942e6cf107d85c9bafbeceed1"><code>9e6446a</code></a>
feat(all): auto-regenerate discovery clients (<a
href="https://redirect.github.com/googleapis/google-api-go-client/issues/3402">#3402</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-api-go-client/compare/v0.257.0...v0.258.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/api&package-manager=go_modules&previous-version=0.257.0&new-version=0.258.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-22 12:32:22 +00:00
dependabot[bot] 8985bcf747 chore: bump github.com/go-playground/validator/v10 from 10.29.0 to 10.30.0 (#21367) 
Bumps
[github.com/go-playground/validator/v10](https://github.com/go-playground/validator)
from 10.29.0 to 10.30.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-playground/validator/releases">github.com/go-playground/validator/v10's
releases</a>.</em></p>
<blockquote>
<h2>Release 10.30.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump golang.org/x/crypto from 0.45.0 to 0.46.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/go-playground/validator/pull/1504">go-playground/validator#1504</a></li>
<li>Bump github.com/gabriel-vasile/mimetype from 1.4.11 to 1.4.12 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/go-playground/validator/pull/1505">go-playground/validator#1505</a></li>
<li>docs: document omitzero by <a
href="https://github.com/minoritea"><code>@​minoritea</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1509">go-playground/validator#1509</a></li>
<li>fix: add missing translations for alpha validators by <a
href="https://github.com/shindonghwi"><code>@​shindonghwi</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1510">go-playground/validator#1510</a></li>
<li>fix: resolve panic when using aliases with OR operator by <a
href="https://github.com/shindonghwi"><code>@​shindonghwi</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1507">go-playground/validator#1507</a></li>
<li>fix: resolve panic when using cross-field validators with
ValidateMap by <a
href="https://github.com/shindonghwi"><code>@​shindonghwi</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1508">go-playground/validator#1508</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/minoritea"><code>@​minoritea</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1509">go-playground/validator#1509</a></li>
<li><a
href="https://github.com/shindonghwi"><code>@​shindonghwi</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1510">go-playground/validator#1510</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-playground/validator/compare/v10.29.0...v10.30.0">https://github.com/go-playground/validator/compare/v10.29.0...v10.30.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-playground/validator/commit/e9b900c8d62465f85de0713979d929d770f5ce49"><code>e9b900c</code></a>
fix: resolve panic when using cross-field validators with ValidateMap
(<a
href="https://redirect.github.com/go-playground/validator/issues/1508">#1508</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/7aba81cf8ee5359d19ac8a199f71e6183fb8b180"><code>7aba81c</code></a>
fix: resolve panic when using aliases with OR operator (<a
href="https://redirect.github.com/go-playground/validator/issues/1507">#1507</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/4d600befdd2c5ff437025b3d022fbc0ca7e90f17"><code>4d600be</code></a>
fix: add missing translations for alpha validators (<a
href="https://redirect.github.com/go-playground/validator/issues/1510">#1510</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/b0e4ba2e690d26c3f0866c34ca49b4b9776c87f4"><code>b0e4ba2</code></a>
docs: document omitzero (<a
href="https://redirect.github.com/go-playground/validator/issues/1509">#1509</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/79fba72b00b11aa90ede835b66afcb74ee182488"><code>79fba72</code></a>
Bump github.com/gabriel-vasile/mimetype from 1.4.11 to 1.4.12 (<a
href="https://redirect.github.com/go-playground/validator/issues/1505">#1505</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/c3c9084f6fef2685d7bbf6482a38f1345cd1771b"><code>c3c9084</code></a>
Bump golang.org/x/crypto from 0.45.0 to 0.46.0 (<a
href="https://redirect.github.com/go-playground/validator/issues/1504">#1504</a>)</li>
<li>See full diff in <a
href="https://github.com/go-playground/validator/compare/v10.29.0...v10.30.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-playground/validator/v10&package-manager=go_modules&previous-version=10.29.0&new-version=10.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-22 12:23:22 +00:00
Danny Kopping 8991a5966e fix: wait for initial update before marking API as ready (#21363) 
_Disclaimer: investigation done by Claude Opus 4.5_

Closes https://github.com/coder/internal/issues/1173
Closes https://github.com/coder/internal/issues/1174

The agent containers API is only marked "ready" under this condition in
`agent/agentcontainers/api.go`:

```go
	// For now, all endpoints require the initial update to be done.
	// If we want to allow some endpoints to be available before
	// the initial update, we can enable this per-route.
```

However, what was actually being checked for was that the _init_ was
done, not the _initial update_.

In agent/agentcontainers/api.go, the `Start()` method:
  1. Called `Init()` which closed `initDone` <--- API marked ready here
  2. Then launched `go api.updaterLoop()` asynchronously
3. `updaterLoop()` performs the initial container update <--- should
have marked it ready after this

This PR fixes these semantics to avoid the race which was causing the
above two flakes.

Signed-off-by: Danny Kopping <danny@coder.com>
 2025-12-22 14:18:01 +02:00
dependabot[bot] 72e478e461 chore: bump alpine from 3.23.0 to 3.23.2 in /scripts (#21369) 
Bumps alpine from 3.23.0 to 3.23.2.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alpine&package-manager=docker&previous-version=3.23.0&new-version=3.23.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-22 12:14:38 +00:00
blink-so[bot]jaaydenhJaayden Halko
 		5448a2645d feat: migrate Alert component from MUI to shadcn and update to new Alert designs (#18412) 
--- Although originally created with Blink most of the PR has been
re-written since then

## Summary

This PR migrates the Alert component from MUI to shadcn implementation
while maintaining full backward compatibility with the existing API.
Updates Alerts to new design in Figma.

Figma design:
https://www.figma.com/design/WfqIgsTFXN2BscBSSyXWF8/Coder-kit?node-id=3522-3005&m=dev

<img width="1008" height="623" alt="Screenshot 2025-12-18 at 20 37 32"
src="https://github.com/user-attachments/assets/8b2077f1-f746-4a9a-8b58-3ec3477c247b"
/>

---------

Co-authored-by: blink-so[bot] <211532188+blink-so[bot]@users.noreply.github.com>
Co-authored-by: jaaydenh <1858163+jaaydenh@users.noreply.github.com>
Co-authored-by: Jaayden Halko <jaayden@coder.com>
 2025-12-22 11:52:40 +00:00
Danielle Maywood 44a46db487 feat(agent): support deleting dev containers (#21247) 
Add logic to the agent, and an endpoint, to allow requesting and then deleting a Dev Container and its related agent.
 2025-12-22 11:28:31 +00:00
Jaayden Halko 59959e0add fix: use correct error color (#21355) 
fix styling to use destructive instead of danger
 2025-12-22 09:58:58 +00:00
Spike Curtis 6238065185 test: use not before in TestAgentConnectionMonitor_* (#21332) 
fixes https://github.com/coder/internal/issues/1203

The matcher I wrote for TestAgentConnectionMonitor tested that `last_disconnected_at` was strictly _after_ the start of the test to ensure it was updated.

This is too strict of a test because Windows in particular doesn't have high-resolution timers, so it's entirely possible to get the exact same timestamp from subsequent calls to `time.Now()`. This PR switches the test to _not before_ to cover this case. The results are just as valid because we always initialize the `last_disconnected_at` to something well before the test starts.
 2025-12-22 10:21:39 +04:00