v4.10.1

Code v1.75.1

Security

Added an origin check to web sockets to prevent cross-site hijacking attacks on
users using older or niche browser that do not support SameSite cookies and
attacks across sub-domains that share the same root domain.

The check requires the host header to be set so if you use a reverse proxy
ensure it forwards that information otherwise web sockets will be blocked.

v4.10.1-rc.1

Add origin checks to web sockets (#6048)

v4.10.0

Code v1.75.1

Changed

• Updated to Code 1.75.1

Removed

• Removed --link (was deprecated over thirteen months ago in 4.0.1).

v4.10.0-rc.2

Code v1.75.1

Changed

• Updated to Code 1.75.1

Removed

• Removed --link (was deprecated in 4.0.1).

v4.10.0-rc.1

Code v1.75.1

Changed

• Updated to Code 1.75.1

v4.10.0-rc.0

Code v1.75.0

Changed

• Updated to Code 1.75.0

v4.9.1

Code v1.73.1

Changed

• Updated a couple steps in the build and release process to ensure we're using
  npm and yarn consistently depending on the step.

Fixed

• Fixed an issue with code-server version not displaying in the Help > About window.
• Fixed terminal not loading on macOS clients.

v4.9.1-rc.1

Code v1.73.1

This is the first pre-release for v4.9.1.

To install via the install script, pass the --edge flag.

v4.9.0

Code v1.73.1

Changed

• Upgraded to Code 1.73.1

Added

• /security.txt added as a route with info on our security policy information thanks to @ghuntley

Fixed

• Installing on majaro images should now work thanks to @MrPeacockNLB for
  adding the --noconfirm flag in install.sh

Known Issues

• --cert on Ubuntu 22.04: OpenSSL v3 is used which breaks pem meaning the
  --cert feature will not work. Reference

v4.9.0-rc.4

Code v1.73.1

This is the fourth pre-release for v4.9.0.

To install via the install script, pass the --edge flag.