Commit Graph

4191 Commits

Author SHA1 Message Date
dependabot[bot]
a15cbe85a4 chore: bump actions/cache from 4.3.0 to 5.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](0057852bfa...27d5ce7f10)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 17:46:57 +00:00
Asher
72086edbdb Remove Windows npm installation recommendation
We need to properly support Windows before we can recommend any method
of installation, including npm.
2026-06-16 09:45:30 -08:00
Asher
7617ab2b92 Update AUR commit message to match code-server's 2026-06-16 09:45:30 -08:00
Asher
d31d0347cf Remove Dependabot commit prefix
The changelog is manually curated so the prefixes are noise.
2026-06-16 09:45:30 -08:00
dependabot[bot]
5dca609c2a chore: bump i18next from 25.8.13 to 26.3.1 (#7828) 2026-06-16 09:38:09 -08:00
dependabot[bot]
87ac56bf8c chore: bump softprops/action-gh-release from 1 to 3 (#7774) 2026-06-16 09:37:41 -08:00
dependabot[bot]
a056406eff chore: bump form-data in /test (#7848) 2026-06-16 17:35:17 +00:00
dependabot[bot]
24811a6269 chore: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#7829) 2026-06-16 17:16:41 +00:00
dependabot[bot]
53ed1e30d2 chore: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (#7830) 2026-06-16 09:04:01 -08:00
dependabot[bot]
7393d50b09 chore: bump awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0 (#7832) 2026-06-16 09:03:28 -08:00
dependabot[bot]
f7663cc34c chore: bump codecov/codecov-action from 5.5.4 to 6.0.1 (#7833) 2026-06-16 09:02:59 -08:00
dependabot[bot]
71ba0191f2 chore: bump globals from 16.5.0 to 17.6.0 (#7831) 2026-06-16 08:59:54 -08:00
cdrci
19be49ebe4 Update Helm chart and changelog with 4.124.2 (#7851)
Co-authored-by: cdrci <opensource@coder.com>
2026-06-16 07:57:28 -08:00
cdrci
9fe7eb79d5 Update Code to 1.124.2 (#7846) v4.124.2 2026-06-15 22:28:49 -08:00
Asher
1ccd4f04d2 Update brace-expansion, js-yaml, and ws 2026-06-15 16:42:17 -08:00
Asher
364cf99338 Strip token from cookies before proxying
Since this functionality requires information placed onto the request by
code-server (req.args) and Express (req.cookies), move the standalone
tests into the integration tests as the proxy can no longer run
correctly on its own without that context.

We could strip the header elsewhere or refactor in some way (pass in a
callback function for the stripping or something) but this seems like
the simplest and safest place at the moment to ensure we catch all uses
of the proxy.

In any case, I think it does lend more confidence to know we are testing
the proxy the way it will be used in practice.  The downside is some
additional complexity when setting up tests, but at the moment I do not
think that exchange is overly burdensome.
2026-06-15 16:42:17 -08:00
ka-ishimoto
92a7dce46f Fix false positive CVE alerts by setting package name to code-oss-dev (#7839)
The VS Code build process sets the bundled lib/vscode/package.json name to "code-server" (from product.json nameShort), causing vulnerability scanners to misidentify it and flag non-applicable CVEs. Override the name to "code-oss-dev" in build-release.sh after merging package.json.
Fixes #7071

Signed-off-by: ka-ishimoto <ka-ishimoto@kddi.com>
2026-06-10 11:59:45 -08:00
cdrci
d0d53d924e Update Helm chart and changelog with 4.123.0 (#7838) 2026-06-04 10:50:04 -08:00
Asher
77d880d0c3 Drop armhf builds v4.123.0 2026-06-03 12:06:07 -08:00
Asher
559d73a636 Update Code to 1.123.0 (#7837) 2026-06-03 11:33:49 -08:00
Asher
6fd40c04c7 Fix Helm chart version bump script
Instead of relying on semver which is not installed, just parse it with
bash.
2026-06-02 11:29:19 -08:00
cdrci
63c071959f Update Helm chart and changelog with 4.122.1 (#7835) 2026-06-02 10:42:18 -08:00
cdrci
7be257b252 Update Code to 1.122.1 (#7825) v4.122.1 2026-06-01 14:06:15 -08:00
Asher
923cb753b8 Fix automatic release major version
It was using the VS Code major version instead of code-server's.
2026-06-01 14:05:20 -08:00
dependabot[bot]
6cad75773e chore: bump basic-ftp from 5.3.0 to 5.3.1 (#7786) 2026-06-01 13:56:12 -08:00
Asher
cb2548f989 Make Helm and changelog commit more specific 2026-05-29 10:20:19 -08:00
cdrci
f87e243225 Update to 4.122.0 (#7823) 2026-05-29 10:19:24 -08:00
Asher
d98fcd3598 Fix macos release tag v4.122.0 2026-05-28 13:22:08 -08:00
cdrci
93d3ee8ab1 Update Code to 1.122.0 (#7822) 2026-05-28 12:02:35 -08:00
Asher
030bdcf771 Still finish checklist if a step failed
The point is to get as far as we can.
2026-05-28 11:04:14 -08:00
dependabot[bot]
4a50b99b67 chore: bump ip-address from 10.1.0 to 10.2.0 (#7785) 2026-05-28 10:26:53 -08:00
dependabot[bot]
382aa3ba87 chore: bump dorny/paths-filter from 3.0.3 to 4.0.1 (#7771) 2026-05-28 10:25:20 -08:00
dependabot[bot]
2243efb2e6 chore: bump docker/login-action from 3.7.0 to 4.2.0 (#7772) 2026-05-28 10:24:40 -08:00
dependabot[bot]
477c0b11b8 chore: bump qs from 6.15.0 to 6.15.2 (#7814) 2026-05-28 10:23:44 -08:00
Micah Zoltu
2396092ae9 Make app-name configurable via environment variable (#7818) 2026-05-26 12:26:48 -08:00
dependabot[bot]
4f9c23893a chore: bump robinraju/release-downloader from 1.12 to 1.13 (#7770) 2026-05-22 12:30:42 -08:00
dependabot[bot]
62e5c450f7 chore: bump prettier from 3.6.2 to 3.8.3 (#7776) 2026-05-22 12:29:05 -08:00
dependabot[bot]
265713561c chore: bump ws from 8.19.0 to 8.20.1 (#7804) 2026-05-22 12:28:29 -08:00
dependabot[bot]
c9faf343ba chore: bump aquasecurity/trivy-action (#7769) 2026-05-22 12:27:36 -08:00
Asher
99bfbd5931 Update e2e example commands
I think the syntax changed when we moved from yarn to npm.
2026-05-21 13:30:44 -08:00
Micah Zoltu
238769e535 Apply --app-name to web page titles (#7794) 2026-05-21 12:22:29 -08:00
cdrci
bf61384523 Update to 4.121.0 (#7808) 2026-05-20 15:41:27 -08:00
Asher
2114937ec6 Fix release draft trigger
The branches filter is the target, not the PR branch.
v4.121.0
2026-05-20 14:21:59 -08:00
Asher
cd1586214e Remove "VS" from updates
Technically it is Code (or Code OSS), not VS Code.
2026-05-20 14:09:10 -08:00
Asher
51bc3c0f09 Remove unpublished 4.119.0
For some reason, I never actually published the draft on this one.
Since 4.121.0 will be out shortly, opted to just skip it.
2026-05-20 14:05:31 -08:00
Asher
3c3f87a3d2 Fix adding release notes to draft release 2026-05-20 14:01:37 -08:00
cdrci
174b7757a5 Update VS Code to 1.121.0 (#7805) 2026-05-20 10:20:27 -08:00
Asher
359b40d422 Ensure dir exists before writing update checklist 2026-05-19 10:13:01 -08:00
Olivier Benz
ef7ea3e515 Update Code to 1.120.0 (#7796) 2026-05-19 10:07:59 -08:00
Olivier Benz
190b09cc76 Update Code to 1.119.1 (#7795) 2026-05-19 09:54:22 -08:00