dependabot[bot]
a7f457046f
Bump actions/checkout from 6.0.2 to 6.0.3 ( #7852 )
2026-06-16 11:51:19 -08:00
Asher
25e847dc94
Update Playwright
2026-06-16 11:33:33 -08:00
Asher
e1c839fb1d
Slightly improve heart tests
...
- Get rid of the global isActive mock; in particular the way it shadows
local ones seemed sketchy.
- No need for requireActual from my testing.
- Reword the comment for why we need setImmediate.
- Add the setImmediate to another test that seemed to only pass because
of an await on the timer call which is not actually a promise but had
the side effect of yielding.
- Always set fake/real timers in the before/after handlers and never in
individual tests.
2026-06-16 11:27:53 -08:00
YONGJAE LEE (이용재)
7dfd68589a
fix: re-enable skipped Heart tests and make non-asserting checks assert ( #7845 )
2026-06-16 09:58:42 -08:00
Asher
72086edbdb
Remove Windows npm installation recommendation
...
We need to properly support Windows before we can recommend any method
of installation, including npm.
2026-06-16 09:45:30 -08:00
Asher
7617ab2b92
Update AUR commit message to match code-server's
2026-06-16 09:45:30 -08:00
Asher
d31d0347cf
Remove Dependabot commit prefix
...
The changelog is manually curated so the prefixes are noise.
2026-06-16 09:45:30 -08:00
dependabot[bot]
5dca609c2a
chore: bump i18next from 25.8.13 to 26.3.1 ( #7828 )
2026-06-16 09:38:09 -08:00
dependabot[bot]
87ac56bf8c
chore: bump softprops/action-gh-release from 1 to 3 ( #7774 )
2026-06-16 09:37:41 -08:00
dependabot[bot]
a056406eff
chore: bump form-data in /test ( #7848 )
2026-06-16 17:35:17 +00:00
dependabot[bot]
24811a6269
chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #7829 )
2026-06-16 17:16:41 +00:00
dependabot[bot]
53ed1e30d2
chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 ( #7830 )
2026-06-16 09:04:01 -08:00
dependabot[bot]
7393d50b09
chore: bump awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0 ( #7832 )
2026-06-16 09:03:28 -08:00
dependabot[bot]
f7663cc34c
chore: bump codecov/codecov-action from 5.5.4 to 6.0.1 ( #7833 )
2026-06-16 09:02:59 -08:00
dependabot[bot]
71ba0191f2
chore: bump globals from 16.5.0 to 17.6.0 ( #7831 )
2026-06-16 08:59:54 -08:00
cdrci
19be49ebe4
Update Helm chart and changelog with 4.124.2 ( #7851 )
...
Co-authored-by: cdrci <opensource@coder.com >
2026-06-16 07:57:28 -08:00
cdrci
9fe7eb79d5
Update Code to 1.124.2 ( #7846 )
2026-06-15 22:28:49 -08:00
Asher
1ccd4f04d2
Update brace-expansion, js-yaml, and ws
2026-06-15 16:42:17 -08:00
Asher
364cf99338
Strip token from cookies before proxying
...
Since this functionality requires information placed onto the request by
code-server (req.args) and Express (req.cookies), move the standalone
tests into the integration tests as the proxy can no longer run
correctly on its own without that context.
We could strip the header elsewhere or refactor in some way (pass in a
callback function for the stripping or something) but this seems like
the simplest and safest place at the moment to ensure we catch all uses
of the proxy.
In any case, I think it does lend more confidence to know we are testing
the proxy the way it will be used in practice. The downside is some
additional complexity when setting up tests, but at the moment I do not
think that exchange is overly burdensome.
2026-06-15 16:42:17 -08:00
ka-ishimoto
92a7dce46f
Fix false positive CVE alerts by setting package name to code-oss-dev ( #7839 )
...
The VS Code build process sets the bundled lib/vscode/package.json name to "code-server" (from product.json nameShort), causing vulnerability scanners to misidentify it and flag non-applicable CVEs. Override the name to "code-oss-dev" in build-release.sh after merging package.json.
Fixes #7071
Signed-off-by: ka-ishimoto <ka-ishimoto@kddi.com >
2026-06-10 11:59:45 -08:00
cdrci
d0d53d924e
Update Helm chart and changelog with 4.123.0 ( #7838 )
2026-06-04 10:50:04 -08:00
Asher
77d880d0c3
Drop armhf builds
2026-06-03 12:06:07 -08:00
Asher
559d73a636
Update Code to 1.123.0 ( #7837 )
2026-06-03 11:33:49 -08:00
Asher
6fd40c04c7
Fix Helm chart version bump script
...
Instead of relying on semver which is not installed, just parse it with
bash.
2026-06-02 11:29:19 -08:00
cdrci
63c071959f
Update Helm chart and changelog with 4.122.1 ( #7835 )
2026-06-02 10:42:18 -08:00
cdrci
7be257b252
Update Code to 1.122.1 ( #7825 )
2026-06-01 14:06:15 -08:00
Asher
923cb753b8
Fix automatic release major version
...
It was using the VS Code major version instead of code-server's.
2026-06-01 14:05:20 -08:00
dependabot[bot]
6cad75773e
chore: bump basic-ftp from 5.3.0 to 5.3.1 ( #7786 )
2026-06-01 13:56:12 -08:00
Asher
cb2548f989
Make Helm and changelog commit more specific
2026-05-29 10:20:19 -08:00
cdrci
f87e243225
Update to 4.122.0 ( #7823 )
2026-05-29 10:19:24 -08:00
Asher
d98fcd3598
Fix macos release tag
2026-05-28 13:22:08 -08:00
cdrci
93d3ee8ab1
Update Code to 1.122.0 ( #7822 )
2026-05-28 12:02:35 -08:00
Asher
030bdcf771
Still finish checklist if a step failed
...
The point is to get as far as we can.
2026-05-28 11:04:14 -08:00
dependabot[bot]
4a50b99b67
chore: bump ip-address from 10.1.0 to 10.2.0 ( #7785 )
2026-05-28 10:26:53 -08:00
dependabot[bot]
382aa3ba87
chore: bump dorny/paths-filter from 3.0.3 to 4.0.1 ( #7771 )
2026-05-28 10:25:20 -08:00
dependabot[bot]
2243efb2e6
chore: bump docker/login-action from 3.7.0 to 4.2.0 ( #7772 )
2026-05-28 10:24:40 -08:00
dependabot[bot]
477c0b11b8
chore: bump qs from 6.15.0 to 6.15.2 ( #7814 )
2026-05-28 10:23:44 -08:00
Micah Zoltu
2396092ae9
Make app-name configurable via environment variable ( #7818 )
2026-05-26 12:26:48 -08:00
dependabot[bot]
4f9c23893a
chore: bump robinraju/release-downloader from 1.12 to 1.13 ( #7770 )
2026-05-22 12:30:42 -08:00
dependabot[bot]
62e5c450f7
chore: bump prettier from 3.6.2 to 3.8.3 ( #7776 )
2026-05-22 12:29:05 -08:00
dependabot[bot]
265713561c
chore: bump ws from 8.19.0 to 8.20.1 ( #7804 )
2026-05-22 12:28:29 -08:00
dependabot[bot]
c9faf343ba
chore: bump aquasecurity/trivy-action ( #7769 )
2026-05-22 12:27:36 -08:00
Asher
99bfbd5931
Update e2e example commands
...
I think the syntax changed when we moved from yarn to npm.
2026-05-21 13:30:44 -08:00
Micah Zoltu
238769e535
Apply --app-name to web page titles ( #7794 )
2026-05-21 12:22:29 -08:00
cdrci
bf61384523
Update to 4.121.0 ( #7808 )
2026-05-20 15:41:27 -08:00
Asher
2114937ec6
Fix release draft trigger
...
The branches filter is the target, not the PR branch.
2026-05-20 14:21:59 -08:00
Asher
cd1586214e
Remove "VS" from updates
...
Technically it is Code (or Code OSS), not VS Code.
2026-05-20 14:09:10 -08:00
Asher
51bc3c0f09
Remove unpublished 4.119.0
...
For some reason, I never actually published the draft on this one.
Since 4.121.0 will be out shortly, opted to just skip it.
2026-05-20 14:05:31 -08:00
Asher
3c3f87a3d2
Fix adding release notes to draft release
2026-05-20 14:01:37 -08:00
cdrci
174b7757a5
Update VS Code to 1.121.0 ( #7805 )
2026-05-20 10:20:27 -08:00
