Release notes from coder

v2.30.4

2026-03-16T17:55:31Z

Stable (since March 16, 2026)

Changelog

Bug fixes

Prevent ui error when last org member is removed (#23018, b49c4b3)
Networking: Retry after transport dial timeouts (cherry-pick/v2.30) (#22977, 26e3da1)
Bump aibridge to v1.0.9 to forward Anthropic-Beta header (#22936, 2970c54)

Compare: v2.30.3...v2.30.4

Container image

docker pull ghcr.io/coder/coder:2.30.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.31.5

2026-03-13T21:11:56Z

Changelog

Note

This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes

Prevent emitting build duration metric for devcontainer subagents (#22930, 2cd4e03)
Prevent ui error when last org member is removed (#23019, 581e956)
Networking: Retry after transport dial timeouts (#22977, 1a774ab)

Compare: v2.31.4...v2.31.5

Container image

docker pull ghcr.io/coder/coder:2.31.5

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.31.4

2026-03-10T20:15:13Z

Changelog

Note

Features

Add Prometheus collector for DERP server expvar metrics (#22583, a379215)

Bug fixes

Filter sub-agents from build duration metric (#22732, 757634c)
Bump aibridge to v1.0.9 to forward Anthropic-Beta header (#22842, 61b513e)

Compare: v2.31.3...v2.31.4

Container image

docker pull ghcr.io/coder/coder:2.31.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.31.3

2026-03-06T21:24:22Z

Changelog

Note

Chores

Bug Fixes

fix: early oidc refresh with fake idp tests (cherry 2.31) (#22716, deaacff) (@Emyrk)

Compare: v2.31.2...v2.31.3

Container image

docker pull ghcr.io/coder/coder:v2.31.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.31.2

2026-03-04T19:19:09Z

Changelog

Note

Chores

Prematurely refresh oidc token near expiry during workspace (cherry 2.31) (#22606, 2828d28) (@Emyrk)

Compare: v2.31.1...v2.31.2

Container image

docker pull ghcr.io/coder/coder:v2.31.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.31.1

2026-03-06T14:26:50Z

Changelog

Note

Normally, our monthly releases are 2.X.0. This mainline release is 2.X.1 due to an issue in the release process, but it should be considered a standard mainline release for customers.

BREAKING CHANGES

feat(cli)!: expire tokens by default (#21783, 4a3304f) (@johnstcn)

Calling this out as a breaking change in case existing consumers of the CLI depend on being able to see expired tokens OR being able to delete tokens immediately.
Updates the coder tokens rm command to immediately expire a token by ID, preserving the token record for audit trail purposes. Tokens can still be deleted by passing --delete.
feat(site)!: add consent prompt for auto-creation with prefilled parameters (#22011, 60e3ab7) (@kacpersaw)

Links using mode=auto (e.g., "Open in Coder" buttons) will no longer silently create workspaces. Users will now see a consent dialog and must explicitly confirm before the workspace is provisioned. Any existing integrations or automation relying on mode=auto for seamless workspace creation will now require manual user interaction.
fix!: remove deprecated prometheus metrics (#21788, 036ed56) (@mtojek)

Removes the following deprecated Prometheus metrics:
- coderd_api_workspace_latest_build_total → use coderd_api_workspace_latest_build instead
- coderd_oauth2_external_requests_rate_limit_total → use coderd_oauth2_external_requests_rate_limit instead

Features

AI Governance

Add client column to aibridge_interceptions table (#21839, 90c11f3) (@pawbana)
Dashboard: Infer model family icon from model name in AI Bridge logs (#22022, 8e9638c) (@ssncferreira)
Dashboard: Add Copilot as a provider option in AI Bridge logs filter (#22023, 5cf9795) (@ssncferreira)
Implement AI Bridge client table column (#22228, adcdbfd) (@jakehwll)
Add anthropic and gemini-monochrome icons (#22270, bf076fb) (@app/blinkagent)

Tasks

Server: Return 409 Conflict for non-active task states (#21887, 2549fc7) (@mafredri)
Implement ai governance consumption frontend (#21595, 62704eb) (@jakehwll)
CLI: Show snapshots in task logs (#21787, efcfee8) (@mafredri)
CLI: Add coder task pause command (#22012, 6d41d98) (@DanielleMaywood)
CLI: Add coder task resume command (#22066, d737f8c) (@DanielleMaywood)
Server: Return log snapshot for paused tasks (#21771, 21eabb1) (@mafredri)
Dashboard: Add pause/resume action buttons to tasks table (#21728, d5ae72d) (@EhabY)
Dashboard: Add pause/resume actions to task page (#21952, 8990a10) (@EhabY)
Dashboard: Add missing Tasks API client methods (#22079, ebd7ab1) (@EhabY)
Dashboard: Show task log preview in paused and failed states (#22063, 3fcd8c6) (@EhabY)
Add an endpoint to manually pause a coder task (#21889, e6fbf50) (@SasSwart)
Add an endpoint to manually resume a coder task (#21948, 47b8ca9) (@SasSwart)
Notify on task auto pause, manual pause and manual resume (#22050, 31c1279) (@DanielleMaywood)

CLI

Add organization delete command to cli (#21940, e3ce3c3) (@rowansmithau)
Add organizations list command to coder cli (#21960, 683a7c0) (@rowansmithau)
CLI: Add coder login token command to print session token (#21627, d09300e) (@kacpersaw)

Devontainers

Provisioner: Associate resources with coder_devcontainer (#21602, 1a94aa6) (@DanielleMaywood)
Agent: Add subagent ID fields to devcontainers in manifest (#21848, 2de8cdf) (@DanielleMaywood)
Agent: Populate subagent ID for terraform-defined devcontainers (#21942, 6ccd20d) (@DanielleMaywood)
Server: Support terraform-defined subagent ids (#21837, af0e171) (@DanielleMaywood)

Dashboard

Add healthy filter for workspace queries (#21743, 22ece10) (@sreya)
Add icon and description to preset dropdown (#21694, 7a8d8d2) (@jakehwll)
Replace Inter with Geist variable font (#22060, c990981) (@jaaydenh)

Shared Workspaces

Move Shared Workspaces from experiments to beta (#22206, 37a8e61) (@zenithwolf1000)

Misc

Server: Filter expired API tokens server-side (#22263, 1e27406) (@kacpersaw)
Server: Insert sub agent resource (#21699, 37aecda) (@DanielleMaywood)
Dashboard: Add query param support to OAuth2 app creation page (#21821, 6ac77f2) (@app/blinkagent)
VPN: Add Linux support for vpn-daemon and OS networking stack (#22051, adc7775) (@ibetitsmike)
Add Prometheus metrics for license warnings and errors (#21749, 04b0253) (@mtojek)
Add link for viewing raw build logs in workspace and template build jobs (#21727, 353ebd9) (@johnstcn)
Add cachecompress package to compress static files for HTTP (#21915, 8aa9e9a) (@spikecurtis)
Add standard encodings to binary cache (#21921, b84bb43) (@spikecurtis)
Add e2e workspace build duration metric (#21739, 6035e45) (@sreya)
Add provisioner job queue wait time histogram and jobs enqueued counter (#21869, 5f3be6b) (@cstyan)
Remove license gate from workspace and task bulk actions (#22090, 0071338) (@app/blinkagent)
Add support for agentsock on Windows (#22171, 1069ce6) (@spikecurtis)
Add template toggle to disable module caching (#21931, efd98bd) (@Emyrk)

Bug fixes

CLI: Ignore space in custom input mode (#21752, bb7b49d) (@mtojek)
CLI: Allow site admins to use coder create --org for any organization (#21528, 4b3889e) (@ethanndickson)
CLI: Allow new immutable parameters via --parameter flag during update (#22221, 3c69d68) (@kacpersaw)
CLI: Proactively use active template version when require_active_version is set (#22033, 6c16794) (@f0ssel)
Server: Clean up task snapshots on task deletion (#21949, c60c373) (@mafredri)
Server: Use BuildReasonTaskAutoPause for task workspaces (#22126, f8eea54) (@johnstcn)
Server: Add role param to agent RPC to prevent false connectivity (#22052, f016d9e) (@kacpersaw)
Server: Harden OAuth2 provider security (#22194, b776a14) (@ThomasK33)
Database: Prevent AcquireProvisionerJob from grabbing canceled jobs (#21852, f75cbab) (@mafredri)
Database: Correct task pending status logic (#21886, 96695ed) (@mafredri)
Server: Support client_secret_basic client auth (#21793, dd6aec0) (@ThomasK33)
Server: Make workspace ACL disabled flag atomic (#21799, c60f802) (@geokat)
Server: Prefer app session cookie over Authorization (#22041, fcf431c) (@cryptoluks)
Helm: Allow overriding CODER_PPROF_ADDRESS and CODER_PROMETHEUS_ADDRESS (#21714, 892b226) (@app/blinkagent)
Dashboard: Use total_member_count for group subtitles when sharing (#21744, f5d4926) (@geokat)
Dashboard: Use native thin scrollbar style for admin bar (#21825, c3ea544) (@kylecarbs)
Dashboard: Filter build timeline events by agent ID (#21831, b612762) (@mafredri)
Dashboard: Remove overflow-hidden (#22032, 0ab54fd) (@DanielleMaywood)
Dashboard: Render username with content-primary, not white (#22172, 873e054) (@DanielleMaywood)
Dashboard: Show when secret deployment options are configured (#22151, de4ff78) (@jeremyruppel)
Dashboard: Respect meta user appearance preference as theme fallback (#22152, 0652664) (@jeremyruppel)
Propagate correct agent exit code (#21718, 4f1fd82) (@sreya)
Don't allow sharing admins to change own role (#21634, 4847920) (@jaaydenh)
Use existing transaction to claim prebuild (#21862, 3c1db17) (@sreya)
Use dynamic parameter resolution in the cli (#21734, b1e18f2) (@Emyrk)
Resolve heading sizing (#21914, 9d887f2) (@jakehwll)
Increase retry attempts for builtin postgres port conflicts (#21796, 953a615) (@f0ssel)
Set content-primary text color instead of hardcoding white text (#21908, 62fa0e8) (@aqandrew)
Always show View Task for Tasks workspaces (#21970, edcee32) (@jakehwll)
Enable strict mode for swagger generation & upgrade swag (#21975, 456c0bc) (@mtojek)
Limit doc-check comments by restricting to one sticky comment and updating logic (#21933, a5bc0eb) (@DevelopmentCats)
Make boundary usage telemetry collection atomic (#21907, a31e476) (@zedkipp)
Disable Activity bump when Default autostop is 0 (#22112, 5e7b3c3) (@jakehwll)
Avoid re-using AuthInstanceID for sub agents (#22196, 911d734) (@DanielleMaywood)
Allow users with workspace:create for any owner to list users (#21947, e8d6016) (@f0ssel)
Restore block to Managed Agents on Enterprise (#22210, d700f9e) (@jakehwll)
Ensure stopping a workspace before starting it when updating (#22201, e2cbf03) (@Emyrk)
Floor provisioner job queue wait metric (#22184, 6a783fc) (@zedkipp)
Exclude provisioner_state from workspace_build_with_user view (#22159, 0a7a3da) (@sreya)
Use "idle timeout" as task auto-pause reason (#22287, 974ca3e) (@DanielleMaywood)
Allow agent-reported final states, add SSE reconnection (#22286, 947b390) (@mafredri)
Allow sharing ports >9999 (#22273, 93e8239) (@Emyrk)
Avoid derp-related panic during wsproxy registration (backport release/2.31) (#22526, 107fd97) (@rowansmithau)
Register task pause/resume routes under /api/v2 (#22544) (#22550, 22c2da5) (@EhabY)

Documentation

Update AI Governance Add-On licensing information (#21899, 2add69a) (@mattvollmer)
Clarify Tasks limit and AI Governance relationship (#21774, 5da28ff) (@app/blinkagent)
Clarify that only Coder tokens work with AI Bridge authentication (#21791, b035843) (@app/blinkagent)
Reorganize AI Bridge client documentation (#21794, b91622e) (@matifali)
Add CLI method for retrieving session token (#21875, 72e89d3) (@app/blinkagent)
Add AI Bridge Proxy documentation (#21801, 28b4e64) (@ssncferreira)
Add Mux client configuration (#21888, b955e10) (@ibetitsmike)
Clarify Tasks availability in Community and Premium deployments (#21943, 90faf51) (@app/blinkagent)
Add AI Bridge Proxy client configuration (#21904, e3f7850) (@ssncferreira)
Clarify Agent Workspace Build limits for Community deployments (#21961, a4296cb) (@app/blinkagent)
Add upgrade best practices guide (#21656, e5c3d15) (@app/blinkagent)
Add registry mirroring guide for Artifactory (#22025, 63563e5) (@matifali)
Add Antigravity IDE integration documentation (#22177, fb027da) (@app/blinkagent)
Document new terraform-managed devcontainers (#21978, 02a80ea) (@DanielleMaywood)

Performance improvements

Improve memory use and cpu usage for OpenAI requests handled by bridge (#21838, b9d237b) (@SasSwart)

Chores

Database: Add support for provisioner job timestamp control (#21944, 25a0c80) (@johnstcn)
Enterprise: Ensure TestManagedAgentLimit differentiates between tasks and workspaces (#21731, c2c2250) (@johnstcn)
Helm: Disable liveness probes by default, allow all probe settings (#21789, d0c67cc) (@dannykopping)
Dashboard: Clarify Use permission in workspace sharing dropdown (#21861, 788fdca) (@app/blinkagent)
Update paywall to mention AI governance-add on (#21659, 57ab991) (@bpmct)
Log the OS signal prior to exiting in agent (#21941, 11e17b3) (@sreya)
Integrate metrics scanner into Makefile (#21465, a613ffa) (@ssncferreira)
Return 404, not 400 if missing or authz deny (#22069, 01f0667) (@Emyrk)
Add id to template version output columns (#22163, 1c4dd78) (@rowansmithau)
Add active field to template versions json output (#22165, c664e4f) (@rowansmithau)
Helm - tolerations - change format from object to array (#22185, d9ec892) (@rowansmithau)
Optionally prefix authentication related cookies (#22148, e5f64eb) (@Emyrk)
Add oidc redirect url to override access url (#21521, efdaaa2) (@Emyrk)
Use header auth over cookies for agents (#22226) (cherry-pick/v2.31) (#22313, c339aa9) (@Emyrk)

Compare: v2.30.3...v2.31.1

Container image

docker pull ghcr.io/coder/coder:v2.31.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.30.3

2026-03-04T14:47:59Z

Stable (since March 03, 2026)

Changelog

Bug fixes

Avoid derp-related panic during wsproxy registration (backport release/2.30) (#22343, 55da992)
fix(stringutil): operate on runes instead of bytes in Truncate (#22388) (#22467, 7e0cf53) (@johnstcn)

Chores

Update Go from 1.25.6 to 1.25.7 (#22465, 613029c)

Compare: v2.30.2...v2.30.3

Container image

docker pull ghcr.io/coder/coder:v2.30.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.29.8

2026-03-03T19:08:06Z

Stable (since March 03, 2026)

Changelog

Bug fixes

Avoid derp-related panic during wsproxy registration (backport release/2.29) (#22342, 50c4832)
fix(stringutil): operate on runes instead of bytes in Truncate (#22388) (#22468, 72d05f3) (@johnstcn)

Security Update

Update Go from 1.24.10 to 1.24.13 (#22473, 5c99fed)

Updated the Go runtime from 1.24.10 to 1.24.13, resolving 9 security vulnerabilities addressed across the 1.24.11, 1.24.12, and 1.24.13 patch releases. No user-facing behavior changes.

Compare: v2.29.7...v2.29.8

Container image

docker pull ghcr.io/coder/coder:v2.29.8

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

list

2026-03-03T18:39:15Z

fix: avoid derp-related panic during wsproxy registration (backport r…

describe

2026-03-03T19:09:47Z

Release v2.30.3