Skip to content

coder

v2.33.11 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 27d Developer Productivity
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents dev-tools development-environment go ide jetbrains
+3 more
remote-development terraform vscode

Affected surfaces

auth

Summary

AI summary

Updates Container image, Bug fixes, and Server across a mixed release.

Full changelog

Stable (since June 30, 2026)

Changelog

Features

  • Add INSECURE oidc email fallback flag for IdP brokers (#26751, 0cfa936944)

Bug fixes

  • Server: Enforce required external auth on workspace create (#26314, 30f8b646a2)

Compare: v2.33.10...v2.33.11

Container image

  • docker pull ghcr.io/coder/coder:2.33.11

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track coder

Get notified when new releases ship.

Sign up free

About coder

Secure environments for developers and their agents

All releases →

Related context

Earlier breaking changes

  • v2.29.17 Validate HostnameSuffix and SSHConfigOptions
  • v2.29.17 Reject OIDC login when email_verified claim is non-bool or absent
  • v2.29.17 Restrict OIDC email fallback to first-time account linking
  • v2.29.17 Only trust x-forwarded-host from configured trusted proxies

Beta — feedback welcome: [email protected]