Eclipse Che

Major Enhancements

Authenticate with Azure DevOps by using the OIDC flow

Azure DevOps is deprecating its standard OAuth2 authentication flow. Dev Spaces now supports the newer OIDC (OpenID Connect) authentication flow for Microsoft Azure DevOps, using Microsoft's authentication libraries in the che-server component. This change ensures continued compatibility with Azure DevOps for Git operations (clone, push, pull) and SCM authentication as Microsoft transitions away from the legacy OAuth2 flow.

Start a cloud development environment with a browser-based terminal

You can now start a cloud development environment with only a terminal in the browser:

The new editor definition uses ttyd (a command-line tool for sharing a terminal over the web) under the hood.

Use an external identity provider with OpenShift

Eclipse Che now supports running on OpenShift with an external OIDC provider enabled such as Keycloak. This feature was introduced in OpenShift Container Platform 4.20. For more details, see the official documentation.

Create Kubernetes namespaces instead of OpenShift projects

Before this release, Eclipse Che running on OpenShift created a project (project.openshift.io/v1) for each Che user. Starting from this release, the administrator can configure Che to create a Kubernetes namespace instead:

spec:
  devEnvironments:
    createNamespaceDirectly: true

Persistent user home directory is now enabled by default

With this release, persistent user home is enabled by default in the CheCluster CR:
spec.devEnvironments.persistUserHome.enabled

spec:
  devEnvironments:
    persistUserHome:
      enabled: true

With this feature, non-ephemeral workspaces automatically have a PVC mounted at /home/user.

For more details about persistent user home, see the official documentation.

Use a GitHub App for identity and authorization management

Eclipse Che now supports using a GitHub App (in addition to OAuth Apps) for managing identities and authorizations. GitHub App tokens use application permissions instead of token scopes, so token scope validation has been disabled accordingly.

Visual Studio Code - Open Source ("Code - OSS") updated to version 1.108.2

Visual Studio Code - Open Source ("Code - OSS") has been updated to the 1.108.2 upstream version. For more details, see the official release notes.

Restart workspaces from a local devfile in JetBrains IDEs

Users whose main editor is one of the JetBrains IDEs (over Gateway) can now edit their cluster devfile and apply the changes from the editor.

Bug Fixes

che-server metrics collection no longer fails after Micrometer upgrade

Reverted the Micrometer upgrade (1.11.5 to 1.16.1) that broke che-server metrics collection due to incompatible Prometheus integration package changes.

Bitbucket Server default branch browse URLs no longer cause a NullPointerException

Opening a workspace from a Bitbucket Server default branch browse URL (without the ?at= query parameter) no longer causes a NullPointerException in the URL parser.

Loader and status icon styles are now consistent on the User Dashboard

Loader and status icon colors now use PatternFly design tokens instead of hardcoded values. Dark theme status label colors are also corrected.

Multiple accessibility issues on the User Dashboard are now resolved

The following accessibility improvements are included in this release:

• Keyboard navigation for editor selection, appearance settings, and provider dropdowns
• Correct focus order and tab navigation on the User Preferences page
• Improved color contrast for code editor line numbers and fold icons
• Proper validation messages and required field indicators across Personal Access Token, SSH Keys, and Gitconfig forms
• Distinct context for "Upload" buttons in the Add SSH Keys window
• Private repository cloning now prompts for credentials instead of failing silently

Gateway plugin now connects to JetBrains 2026.1-based remote IDEs

Newer versions of JetBrains require a trusted path configuration to ensure a smooth project loading process.

Gateway plugin now connects to remote JetBrains IDEs without a project

The Gateway plugin can now connect to a developer workspace backed by a JetBrains editor with no project. The IDE welcome screen is displayed in such cases.

Major Enhancements

Create a mechanism for backup/restore of ${PROJECTS_ROOT} from one cluster to another

If backups are configured for Eclipse Che, workspace backups can now be viewed from the Dashboard within the Backups tab.
Backups for existing and deleted workspaces are available for viewing. Workspace backups are used to recover uncommitted code changes for workspaces that have been deleted from the cluster.

Once a backup is determined, users can restore the workspace from the Dashboard.

More details about the backup and restore configuration can be found in the official documentation.

SCC Mismatch Warning for DevWorkspaces

The Dashboard now detects and warns when a DevWorkspace's Security Context Constraint (SCC) configuration doesn't match the current server settings. This typically occurs when container run capabilities are enabled after workspaces have already been created. Affected workspaces display a warning icon with a tooltip explaining the mismatch. Workspace startup is not blocked - users can still start the workspace, but are informed that it may fail due to the SCC configuration change.

Dashboard re-design with PatternFly 6

The User Dashboard has been migrated from PatternFly 5 to PatternFly 6. This includes updated Layout, Card, and Form components, replaced CSS variables and class names.

Add IPv6 Support to the User Dashboard

The Dashboard now fully supports single-stack IPv6 environments, such as OpenShift 4.20+ clusters. Previously, some URLs and API calls failed due to incorrect handling of IPv6 addresses.

Update Fabric8 Kubernetes Client to 7.6.1

The Fabric8 Kubernetes client dependency in Che Server has been updated to version 7.6.1, bringing in the latest bug fixes and improvements.

Add CAP_CHOWN to Container Run capabilities

For this release, the CHOWN Linux capability is added to the default security context for workspace containers when container run mode is enabled (alongside the existing SETGID and SETUID capabilities). This allows containers to change file ownership, which is needed for nested container scenarios.

Add editor support for remote development using JetBrains Toolbox App

Create an editor definition, "JetBrains Toolbox App (desktop)" that allows connecting a locally running JetBrains Toolbox App to a remove development workspace, over SSH.

Bug Fixes

MS Azure token validation in personal access tokens

Previously, adding a Microsoft Azure DevOps personal access token with invalid data (e.g., malformed token or organization name) would still save the token despite displaying an error. After a page refresh, the invalid token caused an "Illegal characters" error that blocked access to Eclipse Che. The token is now properly validated before saving, and invalid entries are rejected without affecting application access.

Use dynamic delimiter for advanced authorization values

Previously, there was a bug where usernames or group names containing commas would break the advanced authorization configuration since commas were hardcoded as the delimiter. Now Eclipse Che automatically picks a safe delimiter (from ,, |, ;, :, #, \t) that doesn't conflict with the usernames or group names.