v2.29.16

coder/coderv2.29.16May 30, 2026by github-actions[bot]

AI Summary

A maintenance release for the 2.29 branch containing security patches and bug fixes, including CVE updates and dynamic parameter fixes.

Key Highlights

Upgraded golang.org/x/crypto to v0.52.0 (release/2.29)
Upgraded golang.org/x/net to v0.55.0 (release/2.29)
Updated go-git to v5.19.1 to fix CVEs
Fixed dynamic parameters not being clobbered

Full Release Notes

## Changelog

### Bug fixes

- Upgrade golang.org/x/crypto to v0.52.0 (release/2.29) (#25779, 09409551a9)
- Upgrade go-git to v5.19.1 (CVE-2026-45570, CVE-2026-45571) (#25777, 9292a3ae3d)
- Do not clobber dynamic parameters (backport #24645 to 2.29) (#25828, de9568384e)
- Upgrade golang.org/x/net to v0.55.0 (release/2.29) (#25778, 3868714803)

Compare: [`v2.29.15...v2.29.16`](https://github.com/coder/coder/compare/v2.29.15...v2.29.16)

## Container image

- `docker pull ghcr.io/coder/coder:2.29.16`

## Install/upgrade

Refer to our docs to [install](https://coder.com/docs/install) or [upgrade](https://coder.com/docs/install/upgrade) Coder, or use a release asset below.