Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: coder/code-server
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.102.3
Choose a base ref
...
head repository: coder/code-server
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 11 commits
  • 13 files changed
  • 2 contributors

Commits on Aug 4, 2025

  1. chore: bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 (#7450) 

    Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.31.0 to 0.32.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@76071ef...dc5a429)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    1805dae View commit details
    Browse the repository at this point in the history

  2. chore: bump form-data in /test (#7430) 

    ---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    bc15fa4 View commit details
    Browse the repository at this point in the history

  3. Use error handler in session server (#7455)

    @code-asher
    code-asher authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    b5a2ce2 View commit details
    Browse the repository at this point in the history

  4. chore: bump on-headers and compression (#7427) 

    Bumps [on-headers](https://github.com/jshttp/on-headers) to 1.1.0 and updates ancestor dependency [compression](https://github.com/expressjs/compression). These dependencies need to be updated together.


Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Updates `compression` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
- dependency-name: compression
  dependency-version: 1.8.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    794def9 View commit details
    Browse the repository at this point in the history

  5. chore: bump dawidd6/action-download-artifact from 10 to 11 (#7409) 

    Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 10 to 11.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@v10...v11)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '11'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    a7e77ce View commit details
    Browse the repository at this point in the history

  6. chore: bump eslint-import-resolver-typescript from 3.8.3 to 4.4.4 (#7404 

    )
    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    8a378df View commit details
    Browse the repository at this point in the history

  7. Remove direct safe-buffer dependency 

    We do not use it directly.
    @code-asher
    code-asher committed Aug 4, 2025
    Configuration menu
    Copy the full SHA
    5c0ff50 View commit details
    Browse the repository at this point in the history

  8. Remove unused supertest dependency

    @code-asher
    code-asher committed Aug 4, 2025
    Configuration menu
    Copy the full SHA
    8f738d2 View commit details
    Browse the repository at this point in the history

  9. Run npm audit fix

    @code-asher
    code-asher committed Aug 4, 2025
    Configuration menu
    Copy the full SHA
    e54467f View commit details
    Browse the repository at this point in the history

  10. Remove import from express-serve-static-core 

    Mostly because express-serve-static-core is an implicit dependency.  We
could make it explicit, but the type we imported from it is just an
alias for qs.ParsedQs anyway.
    @code-asher
    code-asher committed Aug 4, 2025
    Configuration menu
    Copy the full SHA
    3f23840 View commit details
    Browse the repository at this point in the history

  11. chore: bump prettier from 3.4.2 to 3.6.2 (#7407)

    @dependabot
    dependabot[bot] authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    b27d982 View commit details
    Browse the repository at this point in the history
Loading