From 554135adcab6e2db99388447df33b82ca3daebeb Mon Sep 17 00:00:00 2001 From: Ehab Younes Date: Tue, 13 Oct 2026 16:34:13 +0300 Subject: [PATCH] chore: release v1.17.0 Bump package.json to 1.17.0 and cut the changelog's Unreleased section as v1.17.0. Merge the two Fixed sections into one, group the OAuth entries, and add the missing entries for session app names (#1136), SSH tuning per provider (#1146), and Windows include escaping (#1131). --- CHANGELOG.md | 44 ++++++++++++++++++++++++++++---------------- package.json | 2 +- 2 files changed, 29 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 606d61f93e..a4f1edb4d8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,7 @@ from published versions since it shows up in the VS Code extension changelog tab and is confusing to users. Add it back between releases if needed. --> -## Unreleased +## [v1.17.0](https://github.com/coder/vscode-coder/releases/tag/v1.17.0) 2026-10-13 ### Added @@ -18,29 +18,33 @@ the socket never reaches a terminal failure. The extension keeps retrying until the server is reachable again. +### Changed + +- Report the editor you connect from, such as Cursor or Windsurf, to Coder + for workspace session tracking. Requires Coder 2.38.0 or later; older + versions keep reporting `vscode`. + ### Fixed -- OAuth sign-in now works on deployments that enforce token scopes. Sessions - missing required scopes stop refreshing and require sign-in when they expire. +- OAuth sign-in is offered only when the deployment enables Coder's OAuth2 + provider and allows dynamic client registration, which is off by default + from Coder 2.37; otherwise a notice says sign-in uses a session token. OAuth + becomes the default sign-in method in a future release, so ask your Coder + administrator to enable them. For instructions, see + [OAuth2 provider](https://coder.com/docs/admin/integrations/oauth2-provider). +- OAuth sign-in now works on deployments that enforce token scopes, and + requests the permissions needed to refresh workspace external-auth links. + Sessions missing required scopes stop refreshing and require sign-in when + they expire. +- Preserve OAuth refresh credentials when reusing a stored token. - Revoke OAuth tokens on logout and after successful session replacement, even when their scopes are outdated. Failed or canceled sign-ins do not revoke the stored session. -- Preserve OAuth refresh credentials when reusing a stored token, and request - the permissions needed to refresh workspace external-auth links. -- OAuth sign-in is offered only when the deployment allows dynamic client - registration, which is off by default from Coder 2.37; otherwise a notice - says sign-in uses a session token. OAuth becomes the default sign-in method - in a future release, so ask your Coder administrator to enable dynamic client - registration. For instructions, see - [OAuth2 provider](https://coder.com/docs/admin/integrations/oauth2-provider). - Keep session tokens, OAuth tokens, and client secrets out of the Coder output channel and its buffered logs, including from failed requests. - CLI commands and SSH connections that the extension starts ignore - `CODER_SESSION_TOKEN` from the environment, so they no longer fail or run as a - different user inside a Coder workspace. - -### Fixed - + `CODER_SESSION_TOKEN` from the environment and use your stored session, so + they no longer fail or run as a different user when that variable is set. - Run workspace app commands as arguments to `coder ssh` instead of typing them into a local terminal. This requires Coder CLI v2.23.0 or later. - Validate workspace, owner, and agent names from the deployment before using @@ -61,6 +65,14 @@ send them with `coder.headerCommand`. - Keep the stored URL of a deployment you are signed in to when a link names the same origin with a different path. +- Apply the SSH connection settings in Devin Desktop (formerly Windsurf), which + reads them from `remote.devinSSH.*`, or `remote.windsurfSSH.*` on Windsurf + 2.0 to 2.3, instead of `remote.SSH.*`. Each editor now gets only the + settings its Remote SSH extension reads, both on connect and in **Coder: + Apply Recommended SSH Settings**. +- Escape glob characters in the SSH config `Include` path in a way OpenSSH for + Windows understands, so a config directory whose path contains `*`, `?`, or + `[` is included correctly on Windows. ## [v1.16.4](https://github.com/coder/vscode-coder/releases/tag/v1.16.4) 2026-09-23 diff --git a/package.json b/package.json index 4eaf7ed8cf..bc49d8444f 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "coder-remote", "displayName": "Coder", - "version": "1.16.4", + "version": "1.17.0", "description": "Open any workspace with a single click.", "categories": [ "Other"