chore(deps): update dependency cdr/code-server to v4.93.1

[renovate]

This PR contains the following updates:

Package	Update	Change
cdr/code-server	minor	v4.7.0 -> v4.93.1

---

Release Notes

cdr/code-server (cdr/code-server)

v4.93.1

Compare Source

Code v1.93.1

Changed

• Updated to Code 1.93.1.

Added

• Added --abs-proxy-base-path flag for when code-server is not at the root.

v4.92.2

Compare Source

Code v1.92.2

Breaking changes

• Dropped a patch that changed the compile target from es2022 to es2020 because
  it no longer works with the way VS Code uses static properties. This may break
  older browsers, so those browsers will either have to be updated or use an
  older version of code-server.

Changed

• Updated to Code 1.92.2.

v4.91.1

Compare Source

Code v1.91.1

Changed

• Updated to Code 1.91.1.

v4.91.0

Compare Source

Code v1.91.0

Changed

• Updated to Code 1.91.0.

v4.90.3

Compare Source

Changed

• Updated to Code 1.90.2.

Fixed

• When the log gets rotated it will no longer incorrectly be moved to a new
  directory created in the current working directory named with a date.
  Instead, the file itself is prepended with the date and kept in the same
  directory, as originally intended.

v4.90.2

Compare Source

Code v1.90.1

Changed

• Updated to Code 1.90.1.

v4.90.1

Compare Source

Code v1.90.0

Fixed

• Cache a call to get CPU information used in telemetry that could result in a
  lack responsiveness if it was particularly slow.

v4.90.0

Compare Source

Code v1.90.0

Changed

• Updated to Code 1.90.0.
• Updated Node to 20.11.1.

Added

• Send contents to the clipboard in the integrated terminal by piping to
  code-server --stdin-to-clipboard or code-server -c.

  You may want to make this an alias:

  alias xclip="code-server --stdin-to-clipboard"
  echo -n "hello world" | xclip
  

v4.89.1

Compare Source

Code v1.89.1

Changed

• Updated to Code 1.89.1.

v4.89.0

Compare Source

Code v1.89.0

Changed

• Updated to Code 1.89.0.

v4.23.1

Compare Source

Code v1.88.1

Changed

• Updated to Code 1.88.1.

v4.23.0

Compare Source

Code v1.88.0

Changed

• Updated to Code 1.88.0.
• Updated Node to 18.18.2.

Fixed

• Fix masking the exit code when failing to install extensions on the command
  line outside the integrated terminal. Installing extensions inside the
  integrated terminal still masks the exit code and is an upstream bug.

v4.22.1

Compare Source

Code v1.87.2

Changed

• Updated to Code 1.87.2.
• Enable keep-alive for proxy agent.

v4.22.0

Compare Source

Code v1.87.0

Changed

• Updated to Code 1.87.0.

v4.21.2

Compare Source

Code v1.86.2

Changed

• Updated to Code 1.86.2.

v4.21.1

Compare Source

Code v1.86.1

Changed

• Updated to Code 1.86.1.
• Updated to Node 18.17.1.

Added

• Docker images for Fedora and openSUSE.

v4.21.0

Compare Source

Code v1.86.0

Changed

• Updated to Code 1.86.0

v4.20.1

Compare Source

Code v1.85.2

Changed

• Updated to Code 1.85.2.

Fixed

• Query variables are no longer double-encoded when going over the path proxy.

v4.20.0

Compare Source

Code v1.85.1

Added

• New flag --disable-file-uploads to disable uploading files to the remote by
  drag and drop and to disable opening local files via the "show local" button
  in the file open prompt. Note that you can still open local files by drag and
  dropping the file onto the editor pane.
• Added wget to the release image.

Changed

• Updated to Code 1.85.1.
• The --disable-file-downloads flag will now disable the "show local" button
  in the file save prompt as well.
• Debian release image updated to use Bookworm.

v4.19.1

Compare Source

Code v1.84.2

Fixed

• Fixed an issue where parts of the editor would not load (like the file
  explorer, source control, etc) when using a workspace file.

v4.19.0

Compare Source

Code v1.84.2

Changed

• Updated to Code 1.84.2

v4.18.0

Compare Source

Code v1.83.1

Changed

• Updated to Code 1.83.1.

v4.17.1

Compare Source

Code v1.82.2

Fixed

• Make secret storage persistent. For example, logging in with GitHub should
  persist between browser refreshes and code-server restarts.
• Issues with argon2 on arm builds should be fixed now.

v4.17.0

Compare Source

Code v1.82.2

Added

• Japanese locale.
• CODE_SERVER_HOST environment variable.

Changed

• Update to Code 1.82.2. This includes an update to Node 18, which also means
  that the minimum glibc is now 2.28. If you need to maintain a lower glibc then
  you can take a version of Node 18 that is compiled with a lower glibc and use
  that to build code-server (or at a minimum rebuild the native modules).
• Display paths to config files in full rather than abbreviated. If you have
  trouble with the password not working please update and make sure the
  displayed config paths are what you expect.

Fixed

• Fix some dependency issues for the standalone arm64 and armv7l releases. If
  you had issues with missing or failing modules please try these new builds.

v4.16.1

Compare Source

Code v1.80.2

Changed

• Updated to Code 1.80.2.

v4.16.0

Compare Source

Code v1.80.1

Added

• --disable-proxy flag. This disables the domain and path proxies but it does not disable the ports panel in Code. That can be disabled by using remote.autoForwardPorts=false in your settings.

v4.15.0

Compare Source

Code v1.80.1

Changed

• Updated to Code 1.80.1.

Added

• --trusted-origin flag for specifying origins that you trust but do not control (for example a reverse proxy).

v4.14.1

Compare Source

Code v1.79.2

Security

• Remove extra write permissions on the Node binary bundled with the linux-amd64
  tarball. If you extract the tar without a umask this could mean the Node
  binary would be unexpectedly writable.

Fixed

• Inability to launch multiple instances of code-server for different users.

Added

• --session-socket CLI flag to configure the location of the session socket.
  By default it will be placed in <user data dir>/code-server-ipc.sock.

v4.14.0

Compare Source

Code v1.79.2

Added

• --domain-proxy now supports {{port}} and {{host}} template variables.

Changed

• Updated to Code 1.79.2
• Files opened from an external terminal will now open in the most closely related window rather than in the last opened window.

v4.13.0

Compare Source

Code v1.78.2

Changed

• Updated to Code 1.78.2.

Fixed

• Proxying files that contain non-ASCII characters.
• Origin check when X-Forwarded-Host contains comma-separated hosts.

v4.12.0

Compare Source

Code v1.77.3

Changed

• Updated to Code 1.77.3
• Ports panel will use domain-based proxy (instead of the default path-based
  proxy) when set via --proxy-domain.
• Apply --app-name to the PWA title.

Added

• Thai translation for login page.
• Debug logs around the origin security check. If you are getting forbidden
  errors on web sockets please run code-server with --log debug to see why the
  requests are being blocked.

v4.11.0

Compare Source

Code v1.76.1

Changed

Updated to Code 1.76.1

v4.10.1

Compare Source

Code v1.75.1

Security

Added an origin check to web sockets to prevent cross-site hijacking attacks on
users using older or niche browser that do not support SameSite cookies and
attacks across sub-domains that share the same root domain.

The check requires the host header to be set so if you use a reverse proxy
ensure it forwards that information otherwise web sockets will be blocked.

v4.10.0

Compare Source

Code v1.75.1

Changed

• Updated to Code 1.75.1

Removed

• Removed --link (was deprecated over thirteen months ago in 4.0.1).

v4.9.1

Compare Source

Code v1.73.1

Changed

• Updated a couple steps in the build and release process to ensure we're using
  npm and yarn consistently depending on the step.

Fixed

• Fixed an issue with code-server version not displaying in the Help > About window.
• Fixed terminal not loading on macOS clients.

v4.9.0

Compare Source

Code v1.73.1

Changed

• Upgraded to Code 1.73.1

Added

• /security.txt added as a route with info on our security policy information thanks to @​ghuntley

Fixed

• Installing on majaro images should now work thanks to @​MrPeacockNLB for
  adding the --noconfirm flag in install.sh

Known Issues

• --cert on Ubuntu 22.04: OpenSSL v3 is used which breaks pem meaning the
  --cert feature will not work. Reference

v4.8.3

Compare Source

Code v1.72.1

Added

• install script now supports arch-like (i.e. manjaro, endeavourous, etc.)
  architectures

Changed

• Updated text in the Getting Started page.

v4.8.2

Compare Source

Code v1.72.1

Added

• New text in the Getting Started page with info about
  coder/coder. This is enabled by default but can be disabled by passing the CLI
  flag --disable-getting-started-override or setting
  CS_DISABLE_GETTING_STARTED_OVERRIDE=1 or
  CS_DISABLE_GETTING_STARTED_OVERRIDE=true.

v4.8.1

Compare Source

Code v1.72.1

Fixed

• Fixed CSP error introduced in 4.8.0 that caused issues with webviews and most
  extensions.

v4.8.0

Compare Source

Code v1.72.1

Added

• Support for the Ports panel which leverages code-server's built-in proxy. It
  also uses VSCODE_PROXY_URI where {{port}} is replace when forwarding a port.
  Example: VSCODE_PROXY_URI=https://{{port}}.kyle.dev would forward an
  application running on localhost:3000 to https://3000.kyle.dev
• Support for --disable-workspace-trust CLI flag
• Support for opening a file from the command line at a specific line:column
• Added Ubuntu-based images for Docker releases. If you run into issues with
  PATH being overwritten in Docker please try the Ubuntu image as this is a
  problem in the Debian base image.

Changed

• Updated Code to 1.72.1

Fixed

• Enabled BROWSER environment variable
• Patched asExternalUri to work so now extensions run inside code-server can use it

v4.7.1

Compare Source

Code v1.71.2

Changed

• Updated Code to 1.71.2

Fixed

• Fixed install script not upgrading code-server when already installed on RPM-based machines
• Fixed install script failing to gain root permissions on FreeBSD

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.