v2.36.4

Stable (since September 1, 2026)

Changelog

Note

This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes

• Prevent markdown injection in notifications (#28340, 7bb00a1)
• Server: HTML-escape the email template values (#28397, 36654e6)
• Server: Reject agent requests from suspended owners (#28513, c257214)
• Enable Copilot HTTP transport fallback (#28494, 3076b0c) (@ssncferreira)
• Add cache write accounting to OpenAI interceptors (#28716, ca8ef6c)

Chores

• Purge identified terraform modules via dbpurge (#28802, 10fd510) (@Emyrk)

Compare: v2.36.3...v2.36.4

Container image

• docker pull ghcr.io/coder/coder:2.36.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.