Alexander Freiherr von Buddenbrock
596dbf3416
Update files to reflect the new node.js v24 ( #7949 )
...
With the update to node.js v24 in vscode and package.json some files have not been updated and still referenced version 22.x.
2026-08-17 09:03:55 -08:00
赵鑫亿
51f90a376b
docs(helm): remove duplicated 'the' in persistence example ( #7936 )
2026-08-10 10:22:48 -08:00
cdrci
29785ddfba
Update Helm chart and changelog with 4.132.0 ( #7937 )
2026-08-10 10:20:19 -08:00
dependabot[bot]
313bf0359b
Bump ip-address from 10.2.0 to 10.4.0 ( #7931 )
2026-08-06 14:45:38 -08:00
cdrci
41cbd28c44
Update Code to 1.132.0 ( #7933 )
2026-08-06 22:13:49 +00:00
Asher
208c81a072
Fix mistakenly encoding cookies to proxy
...
We use the cookie parser to remove the code-server token but by default
it encodes using encodeURIComponent, which encodes more than is strictly
necessary and can break proxied applications.
Now we pass the cookies through unchanged (other than removing the
code-server token).
Fixes #7927 .
2026-08-06 13:06:00 -08:00
Asher
f836314954
Use const for unmutated let
2026-08-06 12:35:34 -08:00
Asher
1a370bb606
Update Node types to 24
2026-08-06 11:04:32 -08:00
dependabot[bot]
7ff34158a1
Bump body-parser from 2.2.2 to 2.3.0 ( #7902 )
2026-08-03 08:26:26 -08:00
dependabot[bot]
2a1c2637cd
Bump js-yaml from 4.2.0 to 4.3.0 ( #7900 )
2026-08-03 08:25:52 -08:00
Anupam Mediratta
4f73664880
Require auth for mint key endpoint ( #7923 )
...
The client combines the key from this endpoint to then encrypt secrets into browser storage.
2026-08-03 08:24:25 -08:00
cdrci
eb4ba56acb
Update Helm chart and changelog with 4.131.0 ( #7922 )
2026-07-30 14:37:01 -08:00
Vishal Doshi
924bfac9fd
Document opening a file at a line via the payload query parameter ( #7909 )
2026-07-30 14:14:17 -08:00
Asher
4cf9c11e3f
Update changelog with 1.131.0
2026-07-30 14:13:53 -08:00
cdrci
a3fc2899bd
Update Code to 1.131.0 ( #7912 )
2026-07-30 12:25:04 -08:00
Asher
b95360f302
Continue update even if csp patch is missing
...
This can happen if you run the update multiple times and it was already
deleted from another run but not regenerated yet due to an early
failure like from a conflict.
2026-07-30 11:22:20 -08:00
Asher
9edf867909
Remove dash partially completed update step
...
Not sure why I assumed this would render.
2026-07-30 11:22:20 -08:00
Anupam Mediratta
f3aca85d02
fix: add cooldown to dependabot config ( #7910 )
2026-07-30 11:18:50 -08:00
cdrci
14bdb36f92
Update Helm chart and changelog with 4.130.0 ( #7906 )
2026-07-23 16:18:12 -08:00
cdrci
197ef3e8da
Update Code to 1.130.0 ( #7904 )
2026-07-23 19:09:58 +00:00
dependabot[bot]
5cf68f6241
Bump prettier from 3.8.3 to 3.9.4 ( #7876 )
2026-07-21 11:45:28 -08:00
dependabot[bot]
1dabd152be
chore: bump actions/checkout from 6.0.3 to 7.0.1 ( #7874 )
2026-07-21 19:18:19 +00:00
dependabot[bot]
3ed5f97448
chore: bump ws from 7.5.10 to 7.5.13 in /test ( #7901 )
2026-07-21 11:14:19 -08:00
dependabot[bot]
b99ce9a992
chore: bump actions/cache from 5.0.5 to 6.1.0 ( #7875 )
2026-07-21 11:12:59 -08:00
dependabot[bot]
c2337fec2d
chore: bump azure/setup-helm from 5.0.0 to 5.0.1 ( #7873 )
2026-07-21 11:12:19 -08:00
dependabot[bot]
1e2b734be8
chore: bump awalsh128/cache-apt-pkgs-action from 1.6.1 to 1.6.3 ( #7877 )
2026-07-20 14:04:23 -08:00
dependabot[bot]
31e6279646
chore: bump softprops/action-gh-release from 3.0.0 to 3.0.1 ( #7878 )
2026-07-20 14:03:57 -08:00
cdrci
227d08660b
Update Code to 1.129.1 ( #7899 )
2026-07-20 11:00:27 -08:00
cdrci
22b0a3eeab
Update Helm chart and changelog with 4.129.0 ( #7898 )
2026-07-17 11:33:10 -08:00
cdrci
77baee7fe0
Update Code to 1.129.0 ( #7897 )
2026-07-17 07:05:13 +00:00
Asher
3e76a04b1b
Fix automatic CSP hash update
...
The problem was that whenever the hashe needed an update, the current
patch would create a conflict which cannot be easily auto-resolved.
Instead, put the hashes in a separate patch that is deleted and
regenerated each time, avoiding the conflicts.
Also the web worker iframe hash was not being updated.
2026-07-16 12:41:14 -08:00
cdrci
421e7eb084
Update Helm chart and changelog with 4.128.0 ( #7891 )
2026-07-13 08:56:29 -08:00
cdrci
cb22f74650
Update Code to 1.128.0 ( #7889 )
2026-07-10 12:08:44 -08:00
Asher
d103d5057a
Fix update script using old Node version
...
It needs to parse the version *after* the VS Code update, otherwise it
is just pulling whatever the previous version was.
That means we cannot use it in the step title without some refactoring;
opted to just omit it for now.
2026-07-09 22:58:44 -08:00
Asher
aed61bf6ab
Remove @schemastore/package
...
Providing our own type is trivial.
2026-07-02 12:29:55 -08:00
cdrci
1e160477be
Update Helm chart and changelog with 4.127.0 ( #7882 )
2026-07-02 12:05:31 -08:00
cdrci
1e6ed874e3
Update Code to 1.127.0 ( #7880 )
...
There is a new use of parsedArgs so we have to pass that in since we
parse on demand instead of globally.
2026-07-01 13:01:48 -08:00
cdrci
dd48f7753b
Update Helm chart and changelog with 4.126.0 ( #7869 )
2026-06-24 14:08:03 -08:00
cdrci
2c06497ca9
Update Code to 1.126.0 ( #7868 )
2026-06-24 12:05:00 -08:00
Asher
9ccf763b02
Match update PRs titles with commits
2026-06-22 11:31:25 -08:00
cdrci
40b39293fa
Update Helm chart and changelog with 4.125.0 ( #7863 )
2026-06-22 11:29:01 -08:00
Asher
02e28cd254
Name VS Code package "code-oss"
...
The -dev seems a bit weird since it is not a dev version once it is
built, and also there is a false positive advisory with the code-oss-dev
name.
2026-06-18 10:50:51 -08:00
cdrci
fade53fcaf
Update Code to 1.125.0 ( #7861 )
2026-06-17 10:51:01 -08:00
dependabot[bot]
804ba5bfce
Bump codecov/codecov-action from 6.0.1 to 7.0.0 ( #7853 )
2026-06-16 12:02:46 -08:00
dependabot[bot]
9545b26036
Bump awalsh128/cache-apt-pkgs-action from 1.6.0 to 1.6.1 ( #7855 )
2026-06-16 12:01:52 -08:00
dependabot[bot]
2ef530ce11
Bump actions/cache from 4.3.0 to 5.0.5 ( #7856 )
2026-06-16 12:01:11 -08:00
dependabot[bot]
8009d3c360
Bump typescript-eslint from 8.56.1 to 8.61.1 ( #7857 )
2026-06-16 11:53:49 -08:00
dependabot[bot]
4ae1fc202e
Bump doctoc from 2.3.0 to 2.5.0 ( #7858 )
2026-06-16 11:52:36 -08:00
dependabot[bot]
a59c3ab990
Bump github/codeql-action from 4.35.4 to 4.36.2 ( #7860 )
2026-06-16 11:51:47 -08:00
dependabot[bot]
a7f457046f
Bump actions/checkout from 6.0.2 to 6.0.3 ( #7852 )
2026-06-16 11:51:19 -08:00
Asher
25e847dc94
Update Playwright
2026-06-16 11:33:33 -08:00
Asher
e1c839fb1d
Slightly improve heart tests
...
- Get rid of the global isActive mock; in particular the way it shadows
local ones seemed sketchy.
- No need for requireActual from my testing.
- Reword the comment for why we need setImmediate.
- Add the setImmediate to another test that seemed to only pass because
of an await on the timer call which is not actually a promise but had
the side effect of yielding.
- Always set fake/real timers in the before/after handlers and never in
individual tests.
2026-06-16 11:27:53 -08:00
YONGJAE LEE (이용재)
7dfd68589a
fix: re-enable skipped Heart tests and make non-asserting checks assert ( #7845 )
2026-06-16 09:58:42 -08:00
Asher
72086edbdb
Remove Windows npm installation recommendation
...
We need to properly support Windows before we can recommend any method
of installation, including npm.
2026-06-16 09:45:30 -08:00
Asher
7617ab2b92
Update AUR commit message to match code-server's
2026-06-16 09:45:30 -08:00
Asher
d31d0347cf
Remove Dependabot commit prefix
...
The changelog is manually curated so the prefixes are noise.
2026-06-16 09:45:30 -08:00
dependabot[bot]
5dca609c2a
chore: bump i18next from 25.8.13 to 26.3.1 ( #7828 )
2026-06-16 09:38:09 -08:00
dependabot[bot]
87ac56bf8c
chore: bump softprops/action-gh-release from 1 to 3 ( #7774 )
2026-06-16 09:37:41 -08:00
dependabot[bot]
a056406eff
chore: bump form-data in /test ( #7848 )
2026-06-16 17:35:17 +00:00
dependabot[bot]
24811a6269
chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #7829 )
2026-06-16 17:16:41 +00:00
dependabot[bot]
53ed1e30d2
chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 ( #7830 )
2026-06-16 09:04:01 -08:00
dependabot[bot]
7393d50b09
chore: bump awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0 ( #7832 )
2026-06-16 09:03:28 -08:00
dependabot[bot]
f7663cc34c
chore: bump codecov/codecov-action from 5.5.4 to 6.0.1 ( #7833 )
2026-06-16 09:02:59 -08:00
dependabot[bot]
71ba0191f2
chore: bump globals from 16.5.0 to 17.6.0 ( #7831 )
2026-06-16 08:59:54 -08:00
cdrci
19be49ebe4
Update Helm chart and changelog with 4.124.2 ( #7851 )
...
Co-authored-by: cdrci <opensource@coder.com >
2026-06-16 07:57:28 -08:00
cdrci
9fe7eb79d5
Update Code to 1.124.2 ( #7846 )
2026-06-15 22:28:49 -08:00
Asher
1ccd4f04d2
Update brace-expansion, js-yaml, and ws
2026-06-15 16:42:17 -08:00
Asher
364cf99338
Strip token from cookies before proxying
...
Since this functionality requires information placed onto the request by
code-server (req.args) and Express (req.cookies), move the standalone
tests into the integration tests as the proxy can no longer run
correctly on its own without that context.
We could strip the header elsewhere or refactor in some way (pass in a
callback function for the stripping or something) but this seems like
the simplest and safest place at the moment to ensure we catch all uses
of the proxy.
In any case, I think it does lend more confidence to know we are testing
the proxy the way it will be used in practice. The downside is some
additional complexity when setting up tests, but at the moment I do not
think that exchange is overly burdensome.
2026-06-15 16:42:17 -08:00
ka-ishimoto
92a7dce46f
Fix false positive CVE alerts by setting package name to code-oss-dev ( #7839 )
...
The VS Code build process sets the bundled lib/vscode/package.json name to "code-server" (from product.json nameShort), causing vulnerability scanners to misidentify it and flag non-applicable CVEs. Override the name to "code-oss-dev" in build-release.sh after merging package.json.
Fixes #7071
Signed-off-by: ka-ishimoto <ka-ishimoto@kddi.com >
2026-06-10 11:59:45 -08:00
cdrci
d0d53d924e
Update Helm chart and changelog with 4.123.0 ( #7838 )
2026-06-04 10:50:04 -08:00
Asher
77d880d0c3
Drop armhf builds
2026-06-03 12:06:07 -08:00
Asher
559d73a636
Update Code to 1.123.0 ( #7837 )
2026-06-03 11:33:49 -08:00
Asher
6fd40c04c7
Fix Helm chart version bump script
...
Instead of relying on semver which is not installed, just parse it with
bash.
2026-06-02 11:29:19 -08:00
cdrci
63c071959f
Update Helm chart and changelog with 4.122.1 ( #7835 )
2026-06-02 10:42:18 -08:00
cdrci
7be257b252
Update Code to 1.122.1 ( #7825 )
2026-06-01 14:06:15 -08:00
Asher
923cb753b8
Fix automatic release major version
...
It was using the VS Code major version instead of code-server's.
2026-06-01 14:05:20 -08:00
dependabot[bot]
6cad75773e
chore: bump basic-ftp from 5.3.0 to 5.3.1 ( #7786 )
2026-06-01 13:56:12 -08:00
Asher
cb2548f989
Make Helm and changelog commit more specific
2026-05-29 10:20:19 -08:00
cdrci
f87e243225
Update to 4.122.0 ( #7823 )
2026-05-29 10:19:24 -08:00
Asher
d98fcd3598
Fix macos release tag
2026-05-28 13:22:08 -08:00
cdrci
93d3ee8ab1
Update Code to 1.122.0 ( #7822 )
2026-05-28 12:02:35 -08:00
Asher
030bdcf771
Still finish checklist if a step failed
...
The point is to get as far as we can.
2026-05-28 11:04:14 -08:00
dependabot[bot]
4a50b99b67
chore: bump ip-address from 10.1.0 to 10.2.0 ( #7785 )
2026-05-28 10:26:53 -08:00
dependabot[bot]
382aa3ba87
chore: bump dorny/paths-filter from 3.0.3 to 4.0.1 ( #7771 )
2026-05-28 10:25:20 -08:00
dependabot[bot]
2243efb2e6
chore: bump docker/login-action from 3.7.0 to 4.2.0 ( #7772 )
2026-05-28 10:24:40 -08:00
dependabot[bot]
477c0b11b8
chore: bump qs from 6.15.0 to 6.15.2 ( #7814 )
2026-05-28 10:23:44 -08:00
Micah Zoltu
2396092ae9
Make app-name configurable via environment variable ( #7818 )
2026-05-26 12:26:48 -08:00
dependabot[bot]
4f9c23893a
chore: bump robinraju/release-downloader from 1.12 to 1.13 ( #7770 )
2026-05-22 12:30:42 -08:00
dependabot[bot]
62e5c450f7
chore: bump prettier from 3.6.2 to 3.8.3 ( #7776 )
2026-05-22 12:29:05 -08:00
dependabot[bot]
265713561c
chore: bump ws from 8.19.0 to 8.20.1 ( #7804 )
2026-05-22 12:28:29 -08:00
dependabot[bot]
c9faf343ba
chore: bump aquasecurity/trivy-action ( #7769 )
2026-05-22 12:27:36 -08:00
Asher
99bfbd5931
Update e2e example commands
...
I think the syntax changed when we moved from yarn to npm.
2026-05-21 13:30:44 -08:00
Micah Zoltu
238769e535
Apply --app-name to web page titles ( #7794 )
2026-05-21 12:22:29 -08:00
cdrci
bf61384523
Update to 4.121.0 ( #7808 )
2026-05-20 15:41:27 -08:00
Asher
2114937ec6
Fix release draft trigger
...
The branches filter is the target, not the PR branch.
2026-05-20 14:21:59 -08:00
Asher
cd1586214e
Remove "VS" from updates
...
Technically it is Code (or Code OSS), not VS Code.
2026-05-20 14:09:10 -08:00
Asher
51bc3c0f09
Remove unpublished 4.119.0
...
For some reason, I never actually published the draft on this one.
Since 4.121.0 will be out shortly, opted to just skip it.
2026-05-20 14:05:31 -08:00
Asher
3c3f87a3d2
Fix adding release notes to draft release
2026-05-20 14:01:37 -08:00
cdrci
174b7757a5
Update VS Code to 1.121.0 ( #7805 )
2026-05-20 10:20:27 -08:00
Asher
359b40d422
Ensure dir exists before writing update checklist
2026-05-19 10:13:01 -08:00
Olivier Benz
ef7ea3e515
Update Code to 1.120.0 ( #7796 )
2026-05-19 10:07:59 -08:00
Olivier Benz
190b09cc76
Update Code to 1.119.1 ( #7795 )
2026-05-19 09:54:22 -08:00
Asher
53d981a724
Automatically generate helm/changelog PR
2026-05-08 13:15:25 -08:00
Asher
89ca02c1f7
Add changelog notes to draft release
2026-05-08 13:15:25 -08:00
Asher
2fafe8771d
Set name and tag for release
2026-05-08 13:15:25 -08:00
Asher
41c9ed499b
Draft release when update branch is merged
...
Not completely sure this is correct, but will debug with the next
release.
2026-05-08 13:15:25 -08:00
Asher
1605d68709
Update contribution steps for updating
...
You can now more easily run the update script to finish out an update
and the documentation is updated to match.
2026-05-08 11:20:56 -08:00
Asher
93ce398e28
Make update cron run twice daily
...
Every hour seems aggressive, typically I will only check for PRs once a
day anyway.
2026-05-08 09:58:12 -08:00
Asher
62a552d896
Check for updates on a schedule
2026-05-07 15:20:49 -08:00
Asher
bd41dca064
Add 4.119.0 to the changelog
2026-05-07 12:10:55 -08:00
Asher
3dbddaaadf
Ignore .bak files from sed operations
2026-05-07 12:10:55 -08:00
Asher
58491f317f
Add workflow for updating VS Code
...
For now it is manually triggered.
2026-05-07 10:46:13 -08:00
Asher
9527b7879f
Pin GitHub actions
2026-05-07 10:30:37 -08:00
Asher
0059d37db5
Reset cdrci aur repo when publishing
...
I figure it is probably faster to keep it up to date than to merge
larger and larger changes each time?
2026-05-07 10:23:06 -08:00
Olivier Benz
58aedd0ebc
Update Code to 1.119.0 ( #7787 )
2026-05-07 10:22:50 -08:00
Asher
7056332f0b
Add update script
2026-05-07 09:21:20 -08:00
Asher
672b4edfbc
Add 4.117.0 and 4.118.0 to changelog
2026-05-07 09:21:20 -08:00
Olivier Benz
442db744d5
Update Code to 1.118.1 ( #7783 )
2026-05-06 14:18:46 -08:00
Asher
871f1d9048
Skip webkit in e2e tests for now
2026-05-06 12:12:54 -08:00
Asher
f6bd6aa1a4
Update Playwright to 1.59.1
2026-05-06 11:50:06 -08:00
Asher
2787a5ca5d
Set debug level for e2e tests
2026-05-06 11:38:07 -08:00
Olivier Benz
dbd25c945c
Update Code to 1.118.0 ( #7768 )
2026-05-05 13:13:54 -08:00
nom3ad
02f4d6ea0b
Add ubuntu:resolute 26.04 docker image ( #7764 )
2026-04-27 09:59:20 -08:00
nom3ad
80a642f511
Update ubuntu tag to noble 24.04 ( #7763 )
2026-04-27 09:35:06 -08:00
Asher
ddeb0a3de0
Update brace-expansion to 1.1.14
2026-04-22 14:20:28 -08:00
Asher
22ec1ea65b
Run formatter on build yaml
...
I guess it wants double quotes...
2026-04-22 14:18:44 -08:00
Olivier Benz
e0b100ee31
Update Code to 1.117.0 ( #7760 )
2026-04-22 14:15:18 -08:00
dependabot[bot]
5f7c23bd8e
chore: bump lodash from 4.17.23 to 4.18.1 in /test ( #7743 )
2026-04-17 11:14:54 -08:00
Asher
367dcda592
Update changelog and chart up to 4.116.0
2026-04-17 11:12:33 -08:00
Asher
6ecac88f4d
Pin Helm version for linting
2026-04-17 11:12:04 -08:00
egvimo
cc8ac4f40f
feat(charts): make replicaCount optional ( #7744 )
2026-04-17 11:03:44 -08:00
dependabot[bot]
a12c89658c
chore: bump follow-redirects from 1.15.11 to 1.16.0 ( #7755 )
2026-04-17 11:02:42 -08:00
dependabot[bot]
4b4903e809
chore: bump basic-ftp from 5.2.1 to 5.3.0 ( #7759 )
2026-04-17 11:02:13 -08:00
