v2026.08.20.0

Image: ghcr.io/emboldagency/docker-ruby:<ruby>-ubuntu24.04-2026.08.20.0

Added

• A 1Password session for every workspace via the onepassword module.

Fixed

• The "Refresh Dotfiles" webapp, which never worked, is disabled instead of shown broken.
• DOTFILES_URL is omitted from the agent environment entirely (rather than set empty) when there's no override.
• Home Volume Size, Database Disk Usage, and Memory Usage metadata now show a consistent 2-decimal value with a unit. Database Size (Postgres) switched from pg_size_pretty's auto-scaled units to a fixed GB value, matching the other size metrics.

CI

• kreuzwerker/docker provider bumped to 4.5 (from 3.6); coder/coder provider and the coder-login module bumped to latest.
• Module refs point at coder-registry v2026.08.20.0 (dotfiles/mailpit/adminer renames, DOTFILES_URI Coder-secret support).

Full changelog: v2026.07.08.0...v2026.08.20.0

v2026.07.08.0

Image: ghcr.io/emboldagency/docker-ruby:<ruby>-ubuntu<24.04|26.04>-2026.07.08.0 (Ruby 3.0.7, 3.3.1, 3.3.11, 3.4.9, 4.0.5)

Fixed

• Dotfiles-from-Vault works again for workspaces created with an empty dotfiles URL, same as the PHP template. The lookup now derives the user namespace from the token's own identity entity metadata (vault_user) instead of the retired per-user user-* policies, which had it resolving secret/users/self/... and skipping. Pairs with the user-self policy update already live in Vault, and keeps the old policy parse as a fallback for pre-migration tokens.
• Registry module icons render again. Modules are pinned at coder-registry v2026.07.08.0, which carries the path-style api.embold.net icon URLs and the renamed ssh.svg for ssh-setup.

Removed

• The vault_login_retry backstop script. It duplicated the vault-github module's login, raced it on start, and was a no-op on nearly every boot. Login retry belongs upstream in the module.

Full changelog: v2026.07.06.0...v2026.07.08.0

v2026.07.06.0

Image: ghcr.io/emboldagency/docker-ruby:<ruby>-ubuntu<24.04|26.04>-2026.07.06.0 (Ruby 3.0.7, 3.3.1, 3.3.11, 3.4.9, 4.0.5)

Added

• Shared Playwright browser, same as the PHP image: workspaces reach the shared browserless service over coder-shared via PLAYWRIGHT_MCP_CDP_ENDPOINT, no Chromium in the workspace. Nothing to configure; the MCP reads the endpoint automatically.
• Database Disk Usage metadata on the dashboard: the on-disk size of the Postgres volume, alongside the logical Database Size.
• Tooling baked into the base image: the Vault CLI plus the network/dev CLIs listed for PHP (dnsutils, lsof, iproute2, netcat-openbsd, traceroute, sqlite3, pv, grc, mtr, parallel, shellcheck, git-delta, moreutils, datamash, miller, httpie, direnv, git-lfs, file, nano, yq, shfmt, gron). bat and fd resolve by those names.

Fixed

• service restarts succeed on the first try. The workspace container runs with a real init (init = true) that reaps zombies.
• The dotfiles Vault lookup no longer loses a startup race; the Vault CLI is baked into the base image.
• Coder template pushes point at coder.embold.dev (the server moved off the apex).
• Icon URLs use the path-style api.embold.net form.

CI

• The template push supplies the shared browserless token (playwright_token) from a BROWSERLESS_TOKEN org secret.

Full changelog: v2026.06.22.0...v2026.07.06.0

v2026.06.22.0

Images: ghcr.io/emboldagency/docker-ruby:<ruby>-ubuntu<24.04|26.04>-v2026.06.22.0
latest → 4.0.5-ubuntu26.04

Changed

• Ruby version list refreshed to latest patches: 4.0.5, 3.4.9, 3.3.11, plus pinned 3.3.1 and legacy 3.0.7.
• New template defaults: Ruby 3.4.9 (was 3.3.1) and Ubuntu 26.04 LTS (was 24.04). Existing workspaces keep their stored values; 3.3.1 stays selectable for the pinned Rails workspaces.
• 3.0.x remains excluded from 26.04 (predates its GCC 15 / OpenSSL 3.5 toolchain).

Fixed

• No longer inject a static GITHUB_TOKEN into the workspace container.
• Disabled the agent devcontainers probe (workspaces have no Docker daemon).
• latest is now tagged only on the newest default image, instead of every matrix job racing to claim it.

Dependencies

• Bumped coder-registry modules to v2026.06.22.0.
• Bumped Vault CLI to 2.0.2.

Removed

• Removed the antigravity module.

CI

• Build cache moved from GitHub Actions cache to GHCR registry-backed cache (persistent, no 10 GB GHA eviction).

Full changelog: v2026.05.19.0...v2026.06.22.0

v2026.05.19.0

• Pin vault-github module's vault_cli_version to 2.0.0. Upstream's "latest" detection picked the empty
  vault/2.0.1/ placeholder dir on releases.hashicorp.com, 404'd on the binary download, and broke workspace
  start.

  Full Changelog: v2026.05.13.1...v2026.05.19.0

v2026.05.13.1

• Hide Ubuntu 26.04 option when incompatible Ruby 3.0.x is selected

Full Changelog: v2026.05.13.0...v2026.05.13.1

v2026.05.13.0

• Add Ubuntu 26.04 as a workspace option. Ruby 3.0.x can't compile on 26.04's newer toolchain (GCC 15, OpenSSL 3.5), so picking a 3.0.x version in the Ruby dropdown dynamically hides 26.04.
• Trim Ruby matrix to actively-used versions: 4.0.1, 3.4.9, 3.3.10, 3.3.1, 3.0.7. Dropped 2.7.8, 3.1.7, 3.2.10 (EOL upstream, no production use).
• Add Vault module wired to the existing GitHub external auth (coder_external_auth.github); exposes the vault CLI in workspaces against
  https://vault.embold.dev.
• Remove the experimental opencode module (preserved on the feature/opencode branch if you want to revisit).
• Upgrade terraform modules.

Full Changelog: v2026.04.21.0...v2026.05.13.0

v2026.04.21.0

• Add `opencode` module mirroring docker-php — wired to Embold-hosted Ollama (`https://ollama.embold.dev\`) with `qwen3-coder:30b` (MoE) as default.
• Use VERSION file as single source of truth for template version.
• Remove rails master key experiment that exposed credentials in the Coder UI.
• Add ruby 3.3.1 back and set as default.
• Add AGENTS.md (with CLAUDE.md symlink) documenting conventions and release flow.
• Gitignore `.claude`; track `build_image.sh` as executable.

Full Changelog: v2026.03.12.0...v2026.04.21.0

v2026.03.16.1

Re-release of v2026.03.16.0. Updates template version for image references. No other code changes.

v2026.03.16.0 - Restore Ruby 3.3.1

• Add ruby 3.3.1 back and set as default
• Remove rails master key coder param to prevent exposing sensitive keys

Full Changelog: v2026.03.12.1...v2026.03.16.0