v2.35.3

parruda/swarmv2.35.3Jul 27, 2026by github-actions[bot]

AI Summary

Coder v2.35.3 focuses on security hardening, specifically oauth2 redirect validation, and updates the dashboard log viewer and Go runtime.

Key Highlights

Harden oauth2 redirect validation
Updated Go version to 1.26.5
Dashboard log viewer improvements using ansi-to-html
Updated chi router to v5.3.1

New Features

OAuth2 security hardening
Dashboard log viewer updates
Dependency updates (Go, chi)

Full Release Notes

> ## Stable (since August 4, 2026)

## Changelog

### Bug fixes

- Bump github.com/go-chi/chi/v5 v5.2.4 to v5.3.1 (#27147, abe4d01bbd)
- Bump Go version from 1.26.4 to 1.26.5 (backport 2.35) (#27159, ae1d4ef8bc)
- fix(scripts/releaser): remove doubled "v" in release calendar latest release link (#27259, f2653d491b)
- Dashboard: Replace ansi-to-html in the log viewer (#27206, 17cbc269d2) (@aslilac)
- Server: Harden oauth2 redirect validation (#27274, 65e2bfbb46) (@aslilac)

Compare: [`v2.35.2...v2.35.3`](https://github.com/coder/coder/compare/v2.35.2...v2.35.3)

## Container image

- `docker pull ghcr.io/coder/coder:2.35.3`

## Install/upgrade

Refer to our docs to [install](https://coder.com/docs/install) or [upgrade](https://coder.com/docs/install/upgrade) Coder, or use a release asset below.