Skip to content

feat(helm): update chart coder ( 2.27.0 ➔ 2.29.2 )#467

Merged
Aviator-Coding merged 1 commit intomainfrom
renovate/coder-2.x
Jan 26, 2026
Merged

feat(helm): update chart coder ( 2.27.0 ➔ 2.29.2 )#467
Aviator-Coding merged 1 commit intomainfrom
renovate/coder-2.x

Conversation

@mortyops
Copy link
Copy Markdown
Contributor

@mortyops mortyops bot commented Jan 25, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
coder (source) minor 2.27.0 → 2.29.2

Release Notes

coder/coder (coder)

v2.29.2

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Features
Bug fixes
Chores

Compare: v2.29.1...v2.29.2

Container image

  • docker pull ghcr.io/coder/coder:v2.29.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.29.1

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Security Update
  • Update react to apply patch for CVE-2025-55182 (#​21084) (#​21168, 59cdd7e)

    Coder is not affected. This vulnerability specifically targets implementations using React Server Components. As Coder does not utilize Server Components, there is no exploitable attack surface. We are applying this patch proactively to limit security tooling noise and avoid unnecessary concerns.

Compare: v2.29.0...v2.29.1

Container image

  • docker pull ghcr.io/coder/coder:v2.29.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.29.0

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

[!IMPORTANT]
This release is also the next Extended Support Release for Coder. For guidance on upgrading from the first ESR, Coder 2.24, see the detailed upgrade notes here.

BREAKING CHANGES

  • chore!: allow coder MCP tools to not be injected (#​20713, 04f809f) (@​dannykopping)

    Coder MCP tools were previously automatically injected; this will now need to be explicitly enabled with CODER_AIBRIDGE_INJECT_CODER_MCP_TOOLS=true

  • feat(cli)!: enable keyring usage by default (#​20851, 6238a99) (@​zedkipp)

    In order to move away from storing the CLI session token in plain text file, this change begins using the operating system keyring for CLI session token storage by default on Windows and macOS. This will be a breaking change for any users depending on the session token being stored to or read from disk. Users can opt-out and restore file usage via the --use-keyring=false flag.

  • refactor!: remove TaskAppID from codersdk.WorkspaceBuild (#​20583, d80b5fc) (@​DanielleMaywood)

    The task_app_id field has been removed from the codersdk.WorkspaceBuild struct and API responses. If your code or integrations rely on WorkspaceBuild.task_app_id to identify the task's associated app, you should migrate to using Task.WorkspaceAppID instead (available on the Task object directly). The deprecated ai_task_sidebar_app_id field remains temporarily but also points to the new location.

Features
Bridge
CLI
Dashboard
Experimental Features
MCP Server
Server
Tasks
Bug Fixes
Documentation
Performance improvements
Chores

Compare: v2.28.4...v2.29.0

Container image

  • docker pull ghcr.io/coder/coder:v2.29.0

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.7

Compare Source

Stable (since January 21, 2026)

Changelog

Features
Bug fixes

Compare: v2.28.6...v2.28.7

Container image

  • docker pull ghcr.io/coder/coder:v2.28.7

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.6

Compare Source

Stable (since December 09, 2025)

Changelog

Security Update
  • Update react to apply patch for CVE-2025-55182 (#​21084) (#​21175, df47153)

    Coder is not affected. This vulnerability specifically targets implementations using React Server Components. As Coder does not utilize Server Components, there is no exploitable attack surface. We are applying this patch proactively to limit security tooling noise and avoid unnecessary concerns.

Compare: v2.28.5...v2.28.6

Container image

  • docker pull ghcr.io/coder/coder:v2.28.6

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.5

Compare Source

Stable (since Dec 2, 2025)

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes
Performance improvements

Compare: v2.28.4...v2.28.5

Container image

  • docker pull ghcr.io/coder/coder:v2.28.5

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.4

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

SECURITY FIXES
Bug fixes

Compare: v2.28.3...v2.28.4

Container image

  • docker pull ghcr.io/coder/coder:v2.28.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.3

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes
  • Upgrade aibridge lib to fix cache issue (#​20730) (#​20734, 7beb95f)

    AI Bridge's injected MCP tools were not being set in a stable sort order. This lead to invalidation of the cache in upstream AI providers' APIs, resulting in more cache writes and therefore higher token spend. Deployments with AI Bridge enabled as well as the oauth2 and mcp-server-http experiments will be affected by this bug, and are highly encouraged to upgrade.

Compare: v2.28.2...v2.28.3

Container image

  • docker pull ghcr.io/coder/coder:v2.28.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.2

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes

Compare: v2.28.1...v2.28.2

Container image

  • docker pull ghcr.io/coder/coder:v2.28.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.1

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Chores

Compare: v2.28.0...v2.28.1

Container image

  • docker pull ghcr.io/coder/coder:v2.28.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.28.0

Compare Source

Changelog

[!WARNING]
2.27 includes a migration that modifies all rows in the api_keys table. Since this table can have a substantial amount of rows upgrading to 2.27 or later versions may take longer than usual and could cause failures for K8s deployment that specify a liveness/readiness probe. To mitigate, we recommend either manually deleting all expired API keys or remaining on v2.26.6 for a few days while a background operation removes expired keys

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

BREAKING CHANGES
  • Ensure consistent secret token generation and hashing (#​20388, 13ca9ea) (@​Emyrk)

    This change standardizes how Coder hashes secret tokens by switching OAuth2 tokens from salted userpassword. Hash to the same SHA256 hashing method used for API keys, improving consistency across all secret token types.
    This is a breaking change because existing OAuth2 tokens will no longer validate correctly after the update, but the impact is limited to OAuth2 functionality which is only available in dev builds and experimental features.

  • Removed TaskAppID field from WorkspaceBuild API response in favor of new task data model (#​20583, 7a97ebe) (@​DanielleMaywood)

    This change removes the task_app_id field from the WorkspaceBuild API response, which was a temporary field that stored the task's workspace app ID directly in the workspace build object. Clients that were consuming this field from the API will need to instead fetch this information from the new dedicated Task data model via the Task API endpoints.

  • AI Bridge is now stable - removed experimental flag and moved from /api/experimental/aibridge/* to /api/v2/aibridge/* (#​20544, a119fe2) (@​dannykopping)

    Removes the experimental flag for AI Bridge and promotes it to Stable. Update URL routes to /api/v2/aibridge/* for continued use of AI Bridge.

Features
Bridge
CLI
Dashboard
Experimental Features
MCP Server
Server
Tasks
Templates
Bug fixes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@mortyops
Copy link
Copy Markdown
Contributor Author

mortyops bot commented Jan 25, 2026 

--- HelmRelease: coder/coder Deployment: coder/coder

+++ HelmRelease: coder/coder Deployment: coder/coder

@@ -102,13 +102,13 @@

           value: '*.coder...PLACEHOLDER_SECRET_DOMAIN..'
         - name: CODER_UPDATE_CHECK
           value: 'false'
         envFrom:
         - secretRef:
             name: coder
-        image: ghcr.io/coder/coder:v2.27.0
+        image: ghcr.io/coder/coder:v2.29.2
         imagePullPolicy: IfNotPresent
         lifecycle: {}
         livenessProbe:
           httpGet:
             path: /healthz
             port: http

@mortyops
Copy link
Copy Markdown
Contributor Author

mortyops bot commented Jan 25, 2026 

--- kubernetes/apps/coder/app Kustomization: coder/coder HelmRelease: coder/coder

+++ kubernetes/apps/coder/app Kustomization: coder/coder HelmRelease: coder/coder

@@ -13,13 +13,13 @@

     spec:
       chart: coder
       sourceRef:
         kind: HelmRepository
         name: coder
         namespace: flux-system
-      version: 2.27.0
+      version: 2.29.2
   install:
     crds: CreateReplace
     remediation:
       retries: 3
     strategy:
       name: RetryOnFailure

@mortyops
feat(helm): update chart coder ( 2.27.0 ➔ 2.29.2 )
fd4117a 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| helm       | coder   | 2.27.0 | 2.29.2 |
@mortyops mortyops bot force-pushed the renovate/coder-2.x branch from 5fdef95 to fd4117a Compare January 26, 2026 13:29
@Aviator-Coding Aviator-Coding merged commit aaeb814 into main Jan 26, 2026
14 checks passed
@Aviator-Coding Aviator-Coding deleted the renovate/coder-2.x branch January 26, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/kubernetes renovate/helm type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Aviator-Coding