Other Major Callouts

This release includes the GA of Coder AI Bridge and Agent Boundaries through Coder's AI Governance Add-On. A future release of Coder will require the add-on license in order to continue using these features.

• Agent Boundaries goes GA:

  • Observability and monitoring — You can now analyze AI agent HTTP requests with centralized machine-parsable logs
  • New mode (landjail) - This form of Agent Boundaries requires no changes to permissions to be granted in order to use and supports a wider range of environments
  • Rules engine documentation — Admins can self-serve on writing granular network policies without guesswork

• AI Bridge goes GA:

  • Responses API: AI Bridge can now intercept requests to OpenAI's Responses API, supported by most popular tools
  • Proxy Mode: For tools which don't support Base URL overrides, we have now introduced a new AI Bridge Proxy which can intercept HTTP traffic and pass it through to AI Bridge transparently
  • Expanded client support: With the introduction of Proxy Mode, AI Bridge can now intercept GitHub Copilot requests from both the CLI and VS Code / JetBrains plugins
  • Structured Logging: AI Bridge's observability data can now be logged & exported to external SIEM services
  • Detailed Client Config Docs: We now publish detailed client config docs for AI Bridge

• Shared Workspaces is Early Access:

  • You can now allow a workspace owner to securely share access to an existing Coder workspace with another trusted user or group
  • Shared users authenticate with their existing Coder account
  • Access is role-based and auditable; ownership does not transfer
  • Shared workspaces with Coder Tasks is still being developed. Stay tuned for more updates

• Starting in v2.30, the PostgreSQL connection pool is now configurable; see the Connection pool tuning docs for additional guidance

Features

AI Bridge

• Add tracing to aibridge (#21106, e24cc5e6d) (@pawbana)
• Add core AI MITM proxy daemon (#21296, b97572285) (@ssncferreira)
• Add proxy authorization to aibridgeproxyd (#21342, 3517772e9) (@ssncferreira)
• Add certificate caching for AI Bridge Proxy (#21344, b522c9471) (@ssncferreira)
• Implement selective MITM with configurable domain allowlist in aibridgeproxyd (#21473, 74b6d12a8) (@ssncferreira)
• Add upstream proxy support to aiproxy for passthrough requests (#21512, a406ed7cc) (@ssncferreira)
• Validate aiproxy allowlisted domains have aibridge provider mappings at startup (#21577, 09f50046c) (@ssncferreira)
• Support custom bedrock base url (#21582, a14a22eb5) (@dannykopping)
• Use coder specific header for aibridge authentication from AI proxy (#21590, 47b3846bc) (@ssncferreira)
• SDK: Add circuit breaker configuration support for aibridge (#21546, ed679bb3d) (@kacpersaw)

Boundary

• Add boundary log forwarding from agent to coderd (#21345, 07924037e) (@zedkipp)
• Include template ID in re-emitted boundary logs (#21618, 6d8e6d483) (@zedkipp)
• Implement boundary usage tracker and telemetry collection (#21716, 2204731dd) (@zedkipp)

CLI

• Implement agent socket api, client and cli (#20758, ce627bf23) (@SasSwart)
• CLI: Add logs cmd (#21430, 0f446f99d) (@johnstcn)
• CLI: Enrich user-agent header for client requests (#21483, 2b448c717) (@johnstcn)
• Add --max-failures to coder exp scaletest create-workspaces (#21315, cac6d4ce9) (@spikecurtis)
• Add --use-parameter-defaults flag (#21119, 4d414a0df) (@code-asher)

Dashboard

• Show sharing info at bottom of AppLink's tooltip (#21197, a87a44412) (@aqandrew)
• Add workspace sharing page (#20931, b9f829584) (@jaaydenh)
• Add workspace share button and dialog (#21299, e4a06f842) (@jaaydenh)
• Add workspace filter for shared workspaces (#21310, 2de2cd551) (@jaaydenh)
• Add workspace sharing toggle on organization settings page (#21456, d25d95231) (@jaaydenh)
• Add flag to disable template insights (#20940, 27f041334) (@code-asher)
• Dashboard: Add bulk delete for tasks (#20905, ee58f40ca) (@mafredri)
• Dashboard: Add tab to invalidate prebuilds (#20864, a8862be54) (@mtojek)
• Dashboard: Add cmd+enter to submit tasks immediately (#21182, 8e460ca86) (@bpmct)
• Dashboard: Allow modifying task prompts for starting tasks (#20812, e7bbfe2ee) (@DanielleMaywood)

Database

• Database: Add schema for task pause/resume lifecycle (#21557, 2132c53f2) (@mafredri)
• Database: Add retention for connection logs (#21022, 9ebcca5b0) (@mafredri)
• Database: Add retention for audit logs (#21025, c85d79bcd) (@mafredri)
• Database: Make API keys retention configurable (#21037, 9ec90cf2e) (@mafredri)
• Add retention config for workspace_agent_logs (#21039, ff46917e6) (@mafredri)
• Make database connection pool size configurable (#21403, 49a42eff5) (@dannykopping)

Enterprise

• Add deployment-wide option to disable workspace sharing (#21172, 4379230a2) (@geokat)
• Add sharing info to /workspaces endpoint (#21049, 103967ed0) (@geokat)
• Enterprise: Implement organization "disable workspace sharing" option (#21376, 0712faef4) (@geokat)

Server

• Server: Add retention policy configuration (#21021, 56e785857) (@mafredri)
• Server: Add overload protection with rate limiting and concurrency control (#21161, 6f86f6775) (@kacpersaw)
• Server: Support deleting dev containers (#21248, 05529139b) (@DanielleMaywood)
• Server: Bump workspace deadline on AI agent activity (#21584, 4c7844ad3) (@mafredri)
• Server: Add task log snapshot storage endpoint (#21644, 25d7f27cd) (@mafredri)
• Server: Make organization-member a per-org system custom role (#21359, cc2efe9e1) (@geokat)
• Add prometheus observability metrics for dbpurge (#21074, 00793cc0b) (@jakehwll)
• Add rbac specificity for dbpurge (#21088, ea00e7206) (@jakehwll)
• Extend biome.jsonc with "useConsistentCurlyBraces": "error" (#21379, df6b31677) (@jakehwll)
• Add user_agent to loggermw (#21485, 64e7a7798) (@johnstcn)
• Support bundle updates to enable pprof and telemetry collection (#21486, b163b4c95) (@rowansmithau)

Tasks

• Agent: Support deleting dev containers (#21247, 44a46db48) (@DanielleMaywood)

Bug fixes

• Pass context with authorization to agentapi (#20959, d22d34e45) (@cstyan)
• Ensure we check if the user can actually see ai bridge (#20942, caf711d70) (@jakehwll)
• Do not log CSRF error in Electron environments (#21054, 52243557a) (@EhabY)
• Export site public API to be used in the VS Code extension (#21165, ac1d51aec) (@EhabY)
• Allow stops and deletes after breaching AI limit (#21186, b199eb1c3) (@deansheather)
• Improve task naming prompt to avoid URL content guessing (#21151, 4844c978d) (@app/blinkagent)
• Use task display_name in browser tab title (#21147, 67024b80f) (@bpmct)
• Handle scenario where provisionerdserver deletes task before coderd (#21220, c3224b793) (@DanielleMaywood)
• Add id-token permission to classify-issue-severity workflow (#21234, 614e72a42) (@david-fraley)
• Stop disconnecting from coderd early and record disconnect correctly (#21250, 71c6dc404) (@spikecurtis)
• Isolate keyring usage by parallel test processes (#21256, 7ecfd1aa0) (@zedkipp)
• Mark users seen when activating on login (#21305, bd753d9cb) (@spikecurtis)
• Report correct request paths from workspace proxy metrics (#21302, c5fc6defb) (@spikecurtis)
• Show exclamation mark on negated permissions in org custom roles page (#21314, b187d33a7) (@deansheather)
• Improve AI Bridge request logs UI/UX (#21252, ca971dda2) (@jakehwll)
• Increase workspace <Avatar /> size props (#21321, 7fb9d517a) (@jakehwll)
• Use separate HTTP clients in scale test load generators (#21288, 73253df6b) (@spikecurtis)
• Remove state information from apply (#21373, 61d7d2983) (@Emyrk)
• Sort latest key by sequence correctly (#21425, 41a966c28) (@spikecurtis)
• Prevent notification for dormant delete on dormant-removal (#21427, 467c8bbd6) (@DanielleMaywood)
• Reuse reconciliation lock transaction for read operations in prebuilds (#21408, 000bc334c) (@ssncferreira)
• Fix navigation when clicking on share workspace from the task overview page (#21523, 3db555860) (@jaaydenh)
• Remove unreachable exit after error call in check_pg_schema.sh (#21530, 3b07f7b9c) (@app/blinkagent)
• Support open_in for external apps with HTTP URLs (#21558, 12a6a9b5f) (@app/blinkagent)
• Limit concurrent database connections in prebuild reconciliation (#20908, 6ef967038) (@ssncferreira)
• Unregister metrics on reconciler stop to prevent panic on restart (#21647, f5858c8a1) (@ssncferreira)
• Resolve organization member visibility issue during owned work sharing (#21657, f2e998848) (@zenithwolf1000)
• Return proxy auth challenge on missing/invalid credentials (#21677, c3f41ce08) (@ssncferreira)
• Do not enforce managed agent limit for non-task workspaces (#21689, 799b190de) (@Emyrk)
• Agent: Ignore EOF errors during shutdown (#21187, ce9e7ad90) (@spikecurtis)
• Agent: Allow lifecycle script error on devcontainer up (#21020, 74d0c39cb) (@mafredri)
• Agent: Broadcast devcontainer dirty status over websocket (#21100, d9159103c) (@mafredri)
• CLI: Close prebuild runner prometheus server last (#21053, bf40d678e) (@ethanndickson)
• CLI: Allow coder ssh --stdio to exit when parent process dies (#21583, f799cba39) (@johnstcn)
• Server: Exclude sub-agents from workspace health calculation (#21098, 532a1f305) (@mafredri)
• Server: Wake dormant workspace when attempting to start it (#21306, 8248fa3b8) (@johnstcn)
• Server: Allow agent auth during workspace shutdown (#21538, 97e8a5b09) (@mafredri)
• Server: Handle rbac.NotAuthorizedError when deleting template (#21645, fa7baebdd) (@johnstcn)
• Server: Authorize workspace start/stop/delete by transition action (#21691, c352a51b2) (@geokat)
• Database: Allow same custom role name for different orgs (#21312, e10fceb23) (@geokat)
• Database: Remove hardcoded public schema from migration 000401 (#21493, b3a81be1a) (@app/blinkagent)
• Database: Fix incorrect query label in GetWorkspaceAgentAndWorkspaceByID (#21576, 9776dc16b) (@johnstcn)
• Database: Allow disabling AI Bridge retention with 0 (#21062, ad93262d0) (@mafredri)
• Server: Correct managed agent tracking (#21696, 7b4497661) (@johnstcn)
• Server: Reinstate deployment-wide workspace.share permission for owner role (#21620, d29a16878) (@geokat)
• Dashboard: Only show active tasks in waiting for input tab (#20933, b7d8918d6) (@mafredri)
• Dashboard: Simplify bulk task delete confirmation UI (#20979, 2f829286f) (@mafredri)
• Dashboard: Show command apps in Tasks view (#21185, f6b025ec7) (@bpmct)
• Dashboard: Allow updating workspace in TaskPage (#21316, 1de952b55) (@johnstcn)
• Dashboard: Show apps with disabled health status on workspaces list (#21428, a581431bc) (@EhabY)
• Fix reaper process to propagate child exit codes correctly (#21864, 017f67612) (@sreya)
• Support authentication for upstream proxy (#21849, 5e2f84527) (@ssncferreira)
• Allow overriding CODER_PPROF_ADDRESS and CODER_PROMETHEUS_ADDRESS (#21871, 6e1fe14d6) (@rowansmithau)
• Use existing transaction to claim prebuild (#21868, c0b939f7e) (@sreya)

Documentation

• Add data retention and export documentation for AI Bridge (#21055, f1b271555) (@mafredri)
• Update AI Bridge description for H2 2025 (#21126, 82bb83309) (@aqandrew)
• Update Codex CLI compatibility in AI Bridge docs (#21292, 55f4efd01) (@app/blinkagent)
• Update boundary docs (#20958, a6a8a060e) (@evgeniy-scherbina)
• Introduce landjail for boundary (#21420, f792f0b16) (@evgeniy-scherbina)
• Fix boundary log proto docs (#21451, 1081d4276) (@zedkipp)
• Update boundary docs (#21458, 1e8c29285) (@evgeniy-scherbina)
• Add docs for boundary rules engine (#21471, 1bfd776cb) (@evgeniy-scherbina)
• Update boundary docs (#21524, 61961db41) (@evgeniy-scherbina)
• Add documentation for boundary audit logs (#21529, ea465d4ea) (@zedkipp)
• Clarify boundary logs are independent from app logs (#21578, d2e54819b) (@zedkipp)
• Add GitHub to Coder Task Workflow Guide (#20928, afbe9ea15) (@david-fraley)
• Mention AI Governance add-on (#21592, 6346eb7af) (@bpmct)
• Update AI Governance nav label to AI Governance Add-On (#21616, e78d89620) (@mattvollmer)
• Add data retention documentation (#21038, d9888ced1) (@mafredri)
• Regenerate feature-stages experiments table (#21024, 0873d9af6) (@app/blinkagent)
• Add documentation for preset invalidation (#21018, 65ef6df1d) (@mtojek)
• Delete references to adding database replicas (#21077, d5bb1361e) (@spikecurtis)
• Add ESR to Release Channels (#21060, c4bf5a2d8) (@david-fraley)
• Document coder_script resource (#21409, 989def7a9) (@matifali)
• Add documentation for coder script ordering (#21090, ffa83a4eb) (@SasSwart)
• Clarify max_connections implications (#21596, 1dd0519a3) (@dannykopping)
• Update metrics docs to include metadata batcher metrics (#21665, 806d7e4c1) (@cstyan)
• Rewrite dev containers documentation for GA (#21080, 61beb7bfa) (@mafredri)
• Restructure dev container documentation (#21157, 97bc7eb9e) (@mafredri)
• Add guidance on when to use Project Discovery for Dev Containers (#21190, f3e26ca55) (@mafredri)
• Clarify dev containers entry point and reduce callouts (#21188, ea9f003cd) (@mafredri)
• Add dev container screenshots (#21191, 8f15caad2) (@mafredri)
• Simplify 1k scale architecture and change db recommendation (#21362, ed6d41a5e) (@spikecurtis)
• Update scale architecture and add 10k user doc (#21454, 4bc49ed6e) (@spikecurtis)
• Fix 10k docs to include 600 provisioners (#21597, f0152e291) (@spikecurtis)
• Add link to new ROS2 community template (#20902, 9d7509aeb) (@brtmax)
• Add deprecation warning to gateway docs and direct to toolbox (#21210, 05b02cf88) (@jcjiang)
• Document multiple agents for port-forwarding (#21221, 5b3c24c02) (@bjornrobertsson)
• Provide guidance on shared workspaces (#21214, a09d85cc2) (@jcjiang)
• Add administrator configuration for disabling Coder Desktop auto-updates (#21641, 1375fd9ea) (@app/blinkagent)
• Group enumerated values by property in API docs (#21372, 0af038bdd) (@mtojek)
• Update VS Code Web subpath comment to reflect current support (#21375, 874f3994b) (@app/blinkagent)
• Document 200 OK response for upload file API when file exists (#21071, 50d42ab0b) (@app/blinkagent)
• Mention usage data reporting in AI Gov docs (#21664, ece531ab4) (@bpmct)
• Update example URL format in AI Bridge docs (#21435, ef45ce4df) (@matifali)

Performance improvements

• Optimize GetDeploymentWorkspaceAgentStats by eliminating 2nd select (#21112, 6abb889fa) (@cstyan)
• Optimize GetTemplateAppInsightsByTemplate by pre-filtering on start/end times (#20669, a59a84b2a) (@cstyan)
• Support fastpath in dbauthz GetLatestWorkspaceBuildByWorkspaceID (#21047, 27c3ec072) (@cstyan)
• Reduce calls to GetWorkspaceByAgentID in GetWorkspaceAgentByID (#21046, 8ed1c1d37) (@cstyan)
• Increase bridge pool cache size limit (#21399, 39bf9ed18) (@dannykopping)
• Reduce number of queries made by /api/v2/workspaceagents/{id} (#21522, 08343a7a9) (@johnstcn)
• Reduce pg_notify call volume by batching together agent metadata updates (#21330, e195856c4) (@cstyan)
• Use the more efficient dannykopping/anthropic-sdk-go for AI Bridge (#21695, 59b2afaa8) (@SasSwart)
• Database: Add index on workspace_app_statuses.app_id (#21099, cfdd4a9b8) (@mafredri)
• Update AIBridge for improved memory use at scale (#21896, 43e67d12e) (@SasSwart)

Chores

• Document bedrock setup process for aibridge (#20956, ebbdfa03b) (@dannykopping)
• Enforce cooldown period (#21079, 0f054096e) (@jdomeracki-coder)
• Update react to apply patch for CVE-2025-55182 (#21084, 770fdb377) (@jdomeracki-coder)
• Add support for antigravity external app protocol (#20873, 8e0516a19) (@DevelopmentCats)
• Display the starting date when the license becomes active (#21162, 731683ab4) (@jaaydenh)
• Update slog to pull in entry human perf. improvements (#21128, aba0e3696) (@cstyan)
• Fix race condition on aggregating terraform logs (#21067, b07335741) (@Emyrk)
• Distinct operations for provisioner's 'parse', 'init', 'plan', 'apply', 'graph' (#21064, 3194bcfc9) (@Emyrk)
• Create Workspace sharing form component using workspace sharing hook (#21276, 9f34a1dba) (@jaaydenh)
• Update organizations.md for Terraform provider support (#21300, 0ba3f7e9f) (@rowansmithau)
• Add tracing to prebuilds (#21443, 9a0024c45) (@SasSwart)
• Update protobuf to reuse file request (#21447, d2044c2ee) (@Emyrk)
• Clean up coder build directory on shutdown (#21490, 8dd7d8b88) (@johnstcn)
• Add scaletesting tools for aibridge (#21279, 0ebe8e57a) (@SasSwart)
• Add script to calculate workspace 'on' hours in a given time window (#21505, 1b03202e9) (@Emyrk)
• Reword unhealthy agents on workspace page depending on the failure (#21622, e1282b690) (@Emyrk)
• Fix failing agent tests with non-default shell (#21671, 0d2136582) (@johnstcn)
• Remove unused tailnet v1 tables and queries (#21646, f47f89d99) (@spikecurtis)
• Replace httpapi.Heartbeat with httpapi.HeartbeatClose (#21676, 612aae252) (@johnstcn)
• Convert tailnet tables to UNLOGGED for improved write performance (#21607, f358a6db1) (@spikecurtis)
• Renumber duplicate migration 000411 (#21720, 7090a1e20) (@spikecurtis)
• Server: Extract HTTPRoute middleware (#21498, 32354261d) (@johnstcn)
• Dashboard: Mark MUI components and Stack as deprecated (#20973, a6285dde5) (@jaaydenh)
• Dashboard: Align AI Bridge Request logs page wording with docs (#21203, 3641404e9) (@matifali)

Compare: v2.29.4...v2.30.0

Container image

• docker pull ghcr.io/coder/coder:v2.30.0

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.