v2.35.3

1b5d/llm-apiv2.35.3Jul 27, 2026by github-actions[bot]

AI Summary

A maintenance release containing security updates and bug fixes, including backports from previous versions.

Key Highlights

Hardened OAuth2 redirect validation
Updated Go to 1.26.5 and chi/v5 to 5.3.1
Replaced ansi-to-html in the log viewer
Fixed dashboard activity bump editability

Full Release Notes

> ## Stable (since August 4, 2026)

## Changelog

### Bug fixes

- Bump github.com/go-chi/chi/v5 v5.2.4 to v5.3.1 (#27147, abe4d01bbd)
- Bump Go version from 1.26.4 to 1.26.5 (backport 2.35) (#27159, ae1d4ef8bc)
- fix(scripts/releaser): remove doubled "v" in release calendar latest release link (#27259, f2653d491b)
- Dashboard: Replace ansi-to-html in the log viewer (#27206, 17cbc269d2) (@aslilac)
- Server: Harden oauth2 redirect validation (#27274, 65e2bfbb46) (@aslilac)

Compare: [`v2.35.2...v2.35.3`](https://github.com/coder/coder/compare/v2.35.2...v2.35.3)

## Container image

- `docker pull ghcr.io/coder/coder:2.35.3`

## Install/upgrade

Refer to our docs to [install](https://coder.com/docs/install) or [upgrade](https://coder.com/docs/install/upgrade) Coder, or use a release asset below.