From ee77b86151f3cf84a1d8a3511f4d3833577c14fe Mon Sep 17 00:00:00 2001 From: cdrci Date: Wed, 28 Oct 2026 21:12:47 +0000 Subject: [PATCH 1/2] Update Code to 1.144.0 --- CHANGELOG.md | 14 ++++++++++++++ lib/vscode | 2 +- patches/base-path.diff | 2 +- patches/copilot.diff | 2 +- patches/csp-hashes.diff | 4 ++-- patches/getting-started.diff | 6 +++--- patches/integration.diff | 4 ++-- patches/marketplace.diff | 2 +- patches/proposed-api.diff | 2 +- patches/remote-storage.diff | 6 +++--- 10 files changed, 29 insertions(+), 15 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 90dd8ae840d0..302c7aeb011c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -22,11 +22,25 @@ Code v99.99.999 ## Unreleased +Code v1.144.0 + +### Changed + +- Update to Code 1.144.0 + ### Fixed - `--socket-fd` now works: the inherited socket is passed on to the process that listens, and the address is logged as `fd:`. Previously code-server failed with `listen EEXIST` or `Server has no address`. +- The cookie domain was not being set against the shared root host of proxy + domains when proxy domains contained template variables like `{{port}}`, + resulting in having to sign in multiple times per domain instead of only once + as originally intended. +- When doing the web socket origin check, if the host does not already contain a + port, fall back to `X-Forwarded-Port`. +- Fix default ports not matching in the web socket origin check (for example + `https://coder.com` will now match `https://coder.com:443`). ## [4.143.1](https://github.com/coder/code-server/releases/tag/v4.143.1) - 2026-10-23 diff --git a/lib/vscode b/lib/vscode index e646868227c3..2c33b50b16c4 160000 --- a/lib/vscode +++ b/lib/vscode @@ -1 +1 @@ -Subproject commit e646868227c3e3a9e3f24277c8c7220be42c0be7 +Subproject commit 2c33b50b16c472efe58357d1d2a8a5414bc23fbf diff --git a/patches/base-path.diff b/patches/base-path.diff index a300b5904ecb..59c6725ac482 100644 --- a/patches/base-path.diff +++ b/patches/base-path.diff @@ -10,7 +10,7 @@ Index: code-server/lib/vscode/src/vs/base/common/network.ts =================================================================== --- code-server.orig/lib/vscode/src/vs/base/common/network.ts +++ code-server/lib/vscode/src/vs/base/common/network.ts -@@ -256,7 +256,9 @@ class RemoteAuthoritiesImpl { +@@ -262,7 +262,9 @@ class RemoteAuthoritiesImpl { return URI.from({ scheme: platform.isWeb ? this._preferredWebSchema : Schemas.vscodeRemoteResource, authority: `${host}:${port}`, diff --git a/patches/copilot.diff b/patches/copilot.diff index 071d9dc729a6..888cffd27e57 100644 --- a/patches/copilot.diff +++ b/patches/copilot.diff @@ -2,7 +2,7 @@ Index: code-server/lib/vscode/build/gulpfile.extensions.ts =================================================================== --- code-server.orig/lib/vscode/build/gulpfile.extensions.ts +++ code-server/lib/vscode/build/gulpfile.extensions.ts -@@ -294,6 +294,29 @@ export const compileCopilotExtensionBuil +@@ -283,6 +283,29 @@ export const compileCopilotExtensionBuil task.task(compileCopilotExtensionBuildTask); /** diff --git a/patches/csp-hashes.diff b/patches/csp-hashes.diff index 6eac9f88aff6..7b8a61d75337 100644 --- a/patches/csp-hashes.diff +++ b/patches/csp-hashes.diff @@ -6,8 +6,8 @@ Index: code-server/lib/vscode/src/vs/workbench/contrib/webview/browser/pre/index -+ content="default-src 'none'; script-src 'sha256-FYdHnaDkSHwSK3TmWDrs/tT+X4bK+aaoa9yy432BONk=' 'self'; frame-src 'self'; style-src 'unsafe-inline';"> +- content="default-src 'none'; script-src 'sha256-Q3Tfcw0dGu/YD4dGBrRqBeOnmRMAH8HbKxArK4YSXBc=' 'self'; frame-src 'self'; style-src 'unsafe-inline';"> ++ content="default-src 'none'; script-src 'sha256-BmcTt6YZr75RujSQ3gF/UQL77e1RrOx62jNeikpwtxc=' 'self'; frame-src 'self'; style-src 'unsafe-inline';"> Date: Wed, 28 Oct 2026 15:37:39 -0800 Subject: [PATCH 2/2] Update server hash --- ci/build/update-vscode.sh | 8 ++++++++ patches/csp-hashes.diff | 13 +++++++++++++ 2 files changed, 21 insertions(+) diff --git a/ci/build/update-vscode.sh b/ci/build/update-vscode.sh index b3b4857d2eb4..76a1ad650c48 100755 --- a/ci/build/update-vscode.sh +++ b/ci/build/update-vscode.sh @@ -101,6 +101,14 @@ function update_csp() { echo "Calculated hash as $hash" # Use octothorpe as a delimiter since the hash may contain a slash. sed -i.bak "s#'sha256-[^']\+'#'sha256-$hash'#" "$file" + # For the web worker extension host iframe, there is a matching sha in the + # web server. + if [[ $file == */webWorkerExtensionHostIframe.html ]] ; then + quilt add ./lib/vscode/src/vs/server/node/webClientServer.ts + sed -i.bak \ + "s#webWorkerExtensionHostIframeScriptSHA = 'sha256-[^']\+'#webWorkerExtensionHostIframeScriptSHA = 'sha256-$hash'#" \ + ./lib/vscode/src/vs/server/node/webClientServer.ts + fi done quilt refresh diff --git a/patches/csp-hashes.diff b/patches/csp-hashes.diff index 7b8a61d75337..3e9f215c7f81 100644 --- a/patches/csp-hashes.diff +++ b/patches/csp-hashes.diff @@ -24,3 +24,16 @@ Index: code-server/lib/vscode/src/vs/workbench/services/extensions/worker/webWor connect-src 'self' https: wss: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*;"/> +Index: code-server/lib/vscode/src/vs/server/node/webClientServer.ts +=================================================================== +--- code-server.orig/lib/vscode/src/vs/server/node/webClientServer.ts ++++ code-server/lib/vscode/src/vs/server/node/webClientServer.ts +@@ -114,7 +114,7 @@ const APP_ROOT = dirname(FileAccess.asFi + const STATIC_PATH = `/static`; + const CALLBACK_PATH = `/callback`; + const WEB_EXTENSION_PATH = `/web-extension-resource`; +-const webWorkerExtensionHostIframeScriptSHA = 'sha256-daEgfo2VIXpx2Np71KqCCbkeQwv+68vPrx54XRcbdcs='; ++const webWorkerExtensionHostIframeScriptSHA = 'sha256-gfjiOVjAlxqrivZAfTq2d83mOaz0fnAxbGaFpj5IjD8='; + + /** + * Substitutes the `{{...}}` placeholders of a workbench template. Placeholders must only ever