chore(deps): bump github.com/coder/coder/v2 from 2.31.9 to 2.32.1

[dependabot]

Bumps github.com/coder/coder/v2 from 2.31.9 to 2.32.1.

Release notes

Sourced from github.com/coder/coder/v2's releases.

v2.32.1

Changelog

[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

BREAKING CHANGES

• fix!: terminal command confirmation dialog (cherry-pick to 2.32) (#24767)

When a ?command= parameter is present, a confirmation dialog is shown before the command executes. The user must click Run command to proceed or Cancel to close the terminal window. This prevents external links from silently executing arbitrary commands in a workspace.

Template-configured apps that use the command attribute in coder_app are trusted and bypass the confirmation dialog. These apps use the ?app= parameter internally, which resolves the command from the agent's app list. See docs.

Bug Fixes

• fix: bump hashicorp/hc-install to v0.9.4 (#24547) (#24576)
• fix(coderd/externalauth): save refreshed token before validation (#24332) (#24579)
• fix(site): implement agent logs improvements (#24455) (#24733)
• fix: restore kebab menu flex (#24359) (#24734)
• fix: widen engines.node to include Node.js 24 LTS (#24419) (#24468)
• fix(coderd/x/chatd): hoist system prompt fetch out of chat creation transaction (#24369) (#24415)
• fix: prevent 'See all templates' from overlapping template list in New Workspace dropdown (#24356) (#24386)

Compare: v2.32.0...v2.32.1

Container image

• docker pull ghcr.io/coder/coder:2.32.1

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.32.0

Changelog

[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

BREAKING CHANGES

• chore!: remove members' ability to read their own AI Bridge interceptions (#23320)

  Regular users (non-owners, non-auditors) can no longer read AI Bridge interception data, including their own. Only owners and auditors retain read access. This tightens the RBAC surface to prevent insiders from observing what data is tracked.

• fix(cli)!: coder groups list -o json output structure changed (#22923)

  The JSON output is now a flat structure matching other coder list -o json commands. Previously this command returned empty zero-value structs due to a bug, so no working consumer of the old format could exist.

... (truncated)

Commits

• 2466f0c fix: bump hashicorp/hc-install to v0.9.4 (#24547) (#24576)
• c9b5f12 fix!: terminal command confirmation dialog (cherry-pick to 2.32) (#24767)
• 4d00bc6 fix(coderd/externalauth): save refreshed token before validation (#24332) (#2...
• 26373e5 fix(site): implement agent logs improvements (#24455) (#24733)
• 06f6b79 fix: restore kebab menu flex (#24359) (#24734)
• b40faa7 fix: widen engines.node to include Node.js 24 LTS (#24419) (#24468)
• 6219191 fix(coderd/x/chatd): hoist system prompt fetch out of chat creation transacti...
• 8d740ff fix: prevent 'See all templates' from overlapping template list in New Worksp...
• 34584e9 fix: update to our fork of charm.land/fantasy with appendCompact perf improve...
• 2625056 fix: backport Go 1.25.9 and dependency fixes (#24330)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
github.com/coder/coder/v2	[>= 2.15.0.a, < 2.15.1]
github.com/coder/coder/v2	[>= 2.18.0.a, < 2.18.1]