Cian Johnston 2cf819bfca feat: add break-glass user email update (#29256) ...

Adds an owner-only experimental API and hidden CLI command for
break-glass user email corrections.

The operation verifies the existing email, updates it transactionally,
clears outstanding password-reset state, revokes the target user's Coder
sessions and API tokens, and records successful and failed authenticated
attempts in the audit log. External-auth links remain unchanged.

Generated by Coder Agents.

2026-09-14 14:33:36 +01:00

..

agentapi

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

agentmetrics

…

aibridge

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

aibridged

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

aibridgedserver

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

aibridgedtest

fix: remove unbound Client() method from aibridged.Server (#27845)

2026-08-04 16:57:16 +02:00

aiseats

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

apidoc

feat: add break-glass user email update (#29256)

2026-09-14 14:33:36 +01:00

apikey

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

appearance

feat: add deployment setting to disable the Codernauts game (#27662)

2026-09-02 11:29:35 +02:00

audit

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

authlink

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

autobuild

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

awsidentity

…

azureidentity

test: fix azureidentity Verify test by replacing with recent token (#26720)

2026-06-26 07:24:21 -04:00

boundaryusage

refactor: use sync.WaitGroup.Go in tests (#26671)

2026-06-25 15:41:09 -06:00

cachecompress

…

coderdtest

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

connectionlog

…

cryptokeys

feat: extend agent chat MCP tools for remote UAT evidence loops (#28233)

2026-08-18 19:15:30 +02:00

database

feat: add break-glass user email update (#29256)

2026-09-14 14:33:36 +01:00

devtunnel

…

dynamicparameters

fix(coderd): keep parameter values when the render is incomplete (#29108)

2026-09-08 17:20:53 +00:00

entitlements

…

externalauth

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

files

…

gitsshkey

…

healthcheck

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

httpapi

fix: match OAuth2 redirect_uri against every registered redirect URI (#29014)

2026-09-09 11:25:17 -07:00

httpmw

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

idpsync

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

jobreaper

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

jwtutils

…

mcp

fix: return MCP server tool execution errors as tool results (#29051)

2026-09-08 17:28:46 +00:00

metricscache

feat: return per-app session counts from workspace agent stats queries (#29134)

2026-09-10 14:07:03 +02:00

notifications

feat!: remove the task notification templates (#29084)

2026-09-11 08:05:53 +00:00

oauth2provider

fix: make OAuth2 refresh token redemption single-use under concurrency (#28752)

2026-09-11 12:47:55 -07:00

oauthpki

…

portsharing

…

pproflabel

feat: add hourly hb_agent_runtime_v1 usage events for Coder Agent runtime (#27312)

2026-07-30 08:37:45 +01:00

prebuilds

…

prometheusmetrics

feat: return per-app session counts from workspace agent stats queries (#29134)

2026-09-10 14:07:03 +02:00

promoauth

feat: log rate-limited external auth token validation (#26754)

2026-08-10 14:43:16 -05:00

provisionerdserver

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

provisionerkey

…

proxyhealth

…

pubsub

feat: invalidate provisioner daemon sessions on key deletion (#26532)

2026-08-11 11:04:51 -05:00

rbac

feat: re-check the app allowlist at OAuth2 code redemption (#28740)

2026-09-03 18:29:11 -07:00

render

fix: prevent markdown injection in notifications (#28340)

2026-08-25 08:12:00 -07:00

runtimeconfig

…

schedule

feat: plumb time_til_autostop_notify template field (#26439)

2026-06-23 17:32:47 -05:00

searchquery

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

telemetry

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

templatebuilder

feat: report template builder build failure reasons in telemetry (#28586)

2026-09-10 08:21:29 -04:00

testdata

chore: remove coder_secret Terraform integration (#25512)

2026-05-21 09:19:29 -06:00

tracing

feat: correlate coder CLI workspace sessions with client_session_id (#28313)

2026-09-02 19:31:01 +00:00

updatecheck

…

usage

feat(coderd): bill completed local tool batches in agent runtime (#28360)

2026-08-25 16:40:41 +07:00

userpassword

fix: use a random value for a simulated hash for built-in users (#26205)

2026-06-10 02:18:44 -05:00

util

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

webpush

test: use httptest server.Client() to isolate transport (#26409)

2026-06-17 00:22:41 +10:00

workspaceapps

test: bind more server tests to loopback (#29042)

2026-09-07 15:24:33 +02:00

workspaceconnwatcher

feat: promote MinimumImplicitMember experiment to GA (#27472)

2026-08-03 15:56:56 -05:00

workspacestats

feat: return per-app session counts from workspace agent stats queries (#29134)

2026-09-10 14:07:03 +02:00

wsbuilder

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

wsbuildorchestrator

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

wspubsub

feat: add workspace restart functionality to API (#25757)

2026-07-07 09:18:30 -07:00

wsrelated

feat(coderd): add include_related parser in its own package (#28639)

2026-09-11 13:05:58 +00:00

x

refactor: remove obsolete chatd code and tests (#29228)

2026-09-14 10:51:22 +02:00

activitybump_test.go

…

ai_providers_backfill_test.go

chore!: remove env-based AI provider configuration (#29053)

2026-09-09 10:16:24 +02:00

ai_providers_backfill.go

feat: add custom AI provider icons and instance-based model picker grouping (#27026)

2026-07-06 23:00:09 +01:00

ai_providers_bedrock_test.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

ai_providers_bedrock.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

ai_providers_internal_test.go

feat: generate STS external ID for Bedrock role assumption (#26869)

2026-07-01 20:44:15 +00:00

ai_providers_pubsub_test.go

feat: hot-reload aibridged and aibridgeproxyd providers on DB changes (#25673)

2026-05-27 11:58:43 +02:00

ai_providers_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

ai_providers.go

feat: resolve bedrock inference profiles when a provider is written (#29112)

2026-09-11 16:03:44 +00:00

aibridge_test.go

refactor: route TransportFor by provider name (#25650)

2026-05-25 18:04:12 +02:00

aibridged.go

fix: prevent coderd crashes from unsupported Tailnet RPCs (#28429)

2026-09-03 13:29:17 -07:00

apikey_scopes_validation_test.go

…

apikey_test.go

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

apikey.go

fix: canonicalize API key scope aliases at ingress (#28322)

2026-08-25 17:12:51 -07:00

apiroot.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

audit_internal_test.go

fix: improve chat audit log descriptions and diff rendering (#25728)

2026-05-28 18:37:57 +01:00

audit_test.go

feat: add organization picker to MCP server settings pages (#28150)

2026-08-19 19:46:23 +00:00

audit.go

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

authorize_anyorg_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize_test.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

authorize.go

perf(coderd): batch authcheck permissions via rbac.Filter (#27309)

2026-08-06 09:18:46 -04:00

boundary_logs_test.go

fix: create agent firewall sessions without requiring agent read access (#26990)

2026-07-07 10:42:01 +00:00

chat_routes_internal_test.go

feat: mount chat API routes under /api/v2 (#28496)

2026-08-26 16:17:06 +02:00

chat_routes_test.go

refactor!: remove default organization model routes (#28632)

2026-08-27 10:49:14 +01:00

chat_routes.go

feat: add /clear chat context command (#24745)

2026-08-27 13:48:08 +02:00

chat_testhooks.go

test(coderd): centralize chat test harness and stabilize flakes (#25171)

2026-05-12 22:13:55 +10:00

client_test.go

…

coderd_internal_test.go

refactor: deprecate AIGatewayRoutingEnabled, remove direct chat routing (#26862)

2026-07-01 20:15:03 +01:00

coderd_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

coderd.go

feat: add break-glass user email update (#29256)

2026-09-14 14:33:36 +01:00

csp_test.go

fix: enforce max body size on CSP violation report endpoint (#27243)

2026-07-14 12:29:38 -07:00

csp.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

debug_test.go

fix(coderd): deflake TestHealthSettings dismissal subtests (#28501)

2026-08-24 12:06:56 -07:00

debug.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

deployment_test.go

…

deployment.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

deprecated.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

exp_chats_acl_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

exp_chats_acl.go

feat: mount chat API routes under /api/v2 (#28496)

2026-08-26 16:17:06 +02:00

exp_chats_chatstate_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

exp_chats_hooks_test.go

refactor: clarify chat model resource names (#27958)

2026-08-24 09:43:45 +00:00

exp_chats_internal_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

exp_chats_model_acl_test.go

fix: make chat model sharing work for sharers without directory access (#28542)

2026-08-27 10:49:13 +01:00

exp_chats_model_acl.go

fix: make chat model sharing work for sharers without directory access (#28542)

2026-08-27 10:49:13 +01:00

exp_chats_model_audit_test.go

feat: audit chat model config changes (#28439)

2026-08-24 11:20:26 +01:00

exp_chats_model_config_list_test.go

feat: enable Coder Agents for organization members (#28186)

2026-08-26 13:33:13 +02:00

exp_chats_test.go

feat: evict the oldest attachments at the chat file cap (#29063)

2026-09-10 13:40:16 +10:00

exp_chats.go

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

experiments_test.go

…

experiments.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

export_test.go

refactor: remove legacy live-read and injected-history chat context paths (#26585)

2026-06-22 19:26:34 -06:00

externalauth_test.go

fix: prevent concurrent token refreshes (#26530)

2026-07-15 12:16:25 -08:00

externalauth.go

fix: add distributed protection for external auth refresh (#27479)

2026-08-19 13:00:31 -08:00

files_test.go

fix: reject oversized and invalid zip uploads (#25877)

2026-06-02 10:11:49 -07:00

files.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

gitsshkey_test.go

…

gitsshkey.go

feat: encrypt gitsshkeys.private_key at rest via dbcrypt (#25872)

2026-06-02 08:36:01 -06:00

inboxnotifications_internal_test.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

inboxnotifications_test.go

…

inboxnotifications.go

feat: notify users when chats are shared (#26914)

2026-07-06 13:15:58 +01:00

initscript_test.go

…

initscript.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

insights_internal_test.go

…

insights_test.go

…

insights.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

latencycheck.go

…

mcp_acl_available_test.go

feat: allow sharing MCP servers with users and groups (#28593)

2026-08-26 19:49:43 +02:00

mcp_acl.go

feat: allow sharing MCP servers with users and groups (#28593)

2026-08-26 19:49:43 +02:00

mcp_http.go

feat: add Coder Agents chat tools to the MCP toolsdk (#28025)

2026-08-13 18:32:47 +02:00

mcp_internal_test.go

fix(coderd): accept RFC 9728 resource metadata with array-valued resource (#28592)

2026-08-26 12:27:17 -04:00

mcp_test.go

feat: enforce SSRF protection for MCP config-directed traffic (#28242)

2026-08-30 13:09:17 +02:00

mcp.go

feat: enforce SSRF protection for MCP config-directed traffic (#28242)

2026-08-30 13:09:17 +02:00

members_test.go

refactor(coderd): restore agents-access cleanup migration (#28587)

2026-08-26 15:29:26 +02:00

members.go

refactor(coderd): restore agents-access cleanup migration (#28587)

2026-08-26 15:29:26 +02:00

notifications_test.go

…

notifications.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

oauth2_error_compliance_test.go

feat!: add admin-controlled dynamic client registration toggle (#27316)

2026-07-28 16:59:33 -07:00

oauth2_metadata_test.go

…

oauth2_metadata_validation_test.go

feat: negotiate and persist authorization scope (#28178)

2026-08-31 09:29:27 -07:00

oauth2_provider_settings_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

oauth2_security_test.go

fix: reject PKCE code_verifier below RFC 7636 length floor (#28003)

2026-08-12 13:36:52 -07:00

oauth2_test.go

fix: remove CORS from the OAuth2 authorization endpoint (#29143)

2026-09-10 10:49:28 -07:00

oauth2.go

feat: re-check the app allowlist at OAuth2 code redemption (#28740)

2026-09-03 18:29:11 -07:00

organizations_test.go

…

organizations.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

pagination_test.go

…

pagination.go

…

parameters_test.go

fix(coderd): keep parameter values when the render is incomplete (#29108)

2026-09-08 17:20:53 +00:00

parameters.go

feat: add coderd_api_websocket_probes_total metric (#25012)

2026-06-03 10:46:07 +01:00

premiumfunnel_test.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

premiumfunnel.go

feat: add premium paywall conversion telemetry (#28425)

2026-08-21 10:31:01 -04:00

presets_test.go

…

presets.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

provisionerdaemons_test.go

…

provisionerdaemons.go

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

provisionerjobs_internal_test.go

feat: add coderd_api_websocket_probes_total metric (#25012)

2026-06-03 10:46:07 +01:00

provisionerjobs_test.go

…

provisionerjobs.go

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

roles_test.go

…

roles.go

feat: enable Coder Agents for organization members (#28186)

2026-08-26 13:33:13 +02:00

scopes_catalog_api_test.go

…

scopes_catalog.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

swagger_request_interceptor.js

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

tailnet_test.go

test: use typed atomics in test files (#25071)

2026-05-11 08:41:17 -06:00

tailnet.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

templatebuilder_compose_test.go

feat: expose template builder agents and per-module agent (#28905)

2026-09-02 12:51:33 -04:00

templatebuilder_handler_test.go

feat: report template builder build failure reasons in telemetry (#28586)

2026-09-10 08:21:29 -04:00

templatebuilder_handler.go

feat: report template builder build failure reasons in telemetry (#28586)

2026-09-10 08:21:29 -04:00

templates_meta_update_internal_test.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templates_meta_update.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templates_test.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templates.go

feat: add deployment-level option to disable Terraform module caching (#29187)

2026-09-11 18:13:16 -05:00

templateversions_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

templateversions.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

updatecheck_test.go

…

updatecheck.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

userauth_internal_test.go

fix!: reject OIDC login when email_verified claim is non-bool or absent (#25713)

2026-06-04 14:37:19 -04:00

userauth_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

userauth.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

users_test.go

feat: add break-glass user email update (#29256)

2026-09-14 14:33:36 +01:00

users.go

feat: add break-glass user email update (#29256)

2026-09-14 14:33:36 +01:00

usersecrets_audit_test.go

feat: add enable/disable support for user secrets (#27537)

2026-07-28 09:58:33 -06:00

usersecrets_concurrency_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_filepath_policy_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_internal_test.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecrets_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

usersecrets.go

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

usersecretsimport_test.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

userskills_test.go

feat: support personal skills in chats (#25366)

2026-05-20 19:50:50 +02:00

userskills.go

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

webpush_internal_test.go

…

webpush_test.go

…

webpush.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagentportshare_test.go

…

workspaceagentportshare.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceagents_active_chat_internal_test.go

refactor: drop chat_model_configs provider column (#26877)

2026-07-01 15:59:55 +03:00

workspaceagents_internal_test.go

fix: use backend-selected chat agent for desktop, git, terminal (#26959)

2026-07-14 13:50:25 +01:00

workspaceagents_test.go

feat: correlate coder CLI workspace sessions with client_session_id (#28313)

2026-09-02 19:31:01 +00:00

workspaceagents.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspaceagentsrpc_internal_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

workspaceagentsrpc_test.go

fix: prevent coderd crashes from unsupported Tailnet RPCs (#28429)

2026-09-03 13:29:17 -07:00

workspaceagentsrpc.go

feat: filter blocked user secret file targets (#28519)

2026-09-02 14:06:46 -07:00

workspaceapps_test.go

fix(coderd): reject workspace proxy hostname prefixes (#27544)

2026-07-28 13:20:59 -07:00

workspaceapps.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspacebuilds_internal_test.go

perf(coderd): build the workspace build fan-out maps once per batch (#28074)

2026-08-18 11:33:01 -05:00

workspacebuilds_on_success_test.go

refactor: upgrade golangci-lint to v2.0.2 (#28416)

2026-08-21 23:46:27 -06:00

workspacebuilds_test.go

fix: only create workspace agents for start builds (#28276)

2026-08-19 16:16:51 -06:00

workspacebuilds.go

feat(coderd): add include_related parser in its own package (#28639)

2026-09-11 13:05:58 +00:00

workspaceproxies_test.go

…

workspaceproxies.go

fix: correct SCIM Swagger try it out URLs (#24779)

2026-05-05 02:54:03 +05:00

workspaceresourceauth_test.go

fix: soft-delete stale workspace agents on new build (#25207)

2026-05-18 08:33:29 -04:00

workspaceresourceauth.go

fix: verify PKCS7 signature on Azure instance identity tokens (#25286)

2026-05-13 14:14:07 +00:00

workspaces_scoped_test.go

refactor: replace most usage of ptr.Ref with new (#28282)

2026-08-26 11:57:56 -06:00

workspaces_test.go

feat!: remove the Tasks API from coderd and codersdk (#28789)

2026-09-11 01:48:56 +00:00

workspaces.go

feat(coderd): add include_related parser in its own package (#28639)

2026-09-11 13:05:58 +00:00

workspaceupdates_test.go

…

workspaceupdates.go

…

wsrelateddata_internal_test.go

feat(coderd): add include_related parser in its own package (#28639)

2026-09-11 13:05:58 +00:00