beclab · Terminus-Gitbot · Sep 30, 2026 · Sep 30, 2026
diff --git a/coder/Chart.yaml b/coder/Chart.yaml
@@ -15,9 +15,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.22
+version: 1.0.23
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "2.31.9"
+appVersion: "2.36.6"
diff --git a/coder/OlaresManifest.yaml b/coder/OlaresManifest.yaml
@@ -11,7 +11,7 @@ metadata:
   description: Self-Hosted Cloud Development Environments.
   icon: https://app.cdn.olares.com/appstore/coder/icon.png
   appid: coder
-  version: '1.0.22'
+  version: '1.0.23'
   title: Coder
   categories:
   - Developer Tools
@@ -26,7 +26,7 @@ permission:
   userData:
   - Home
 spec:
-  versionName: '2.31.9'
+  versionName: '2.36.6'
   featuredImage: https://app.cdn.olares.com/appstore/coder/1.webp
   promoteImage:
   - https://app.cdn.olares.com/appstore/coder/1.webp
@@ -44,26 +44,14 @@ spec:
     - Onboard developers in seconds instead of days
 
   upgradeDescription: |
+    Chart 1.0.23 upgrades Coder from v2.31.9 to v2.36.6.
+    Image: docker.io/beclab/coder-coder:v2.36.6.
 
-    Run the official OpenResty entrance as UID/GID 1000 with writable runtime paths.
-    Switch the reverse-proxy image from Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) to the official OpenResty image `openresty/openresty:1.29.2.5-bookworm-fat`.
+    The PostgreSQL connection, access URL, and optional Anthropic key stay as they are. Coder applies database migrations on startup. When public.schema_migrations already exists, an init container writes a PostgreSQL custom-format dump to appData/backups/chart-1.0.23/coder.dump first. Later starts and a database without that table skip the dump. The liveness probe waits longer so a migration is not killed mid-run.
 
-    Align nginx config mounts and log paths with the official image layout (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`), and drop Bitnami-specific `OPENRESTY_CONF_FILE` wiring.
-
-    v1.0.15: Move `CODER_PG_CONNECTION_URL` and optional `ANTHROPIC_API_KEY` into Kubernetes Secret (`secretKeyRef`).
-
-    Upgrade app version from 2.31.5 to 2.31.9
-
-    **Changelog**
-    Performance improvements
-    - Cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24129, 2f5d21d)
-
-    Chores
-    - Backport Go 1.25.8 bump to release/2.31 (#23941, 2587364)
-    - Backport high and critical Iron Bank dependency fixes (#24110, 960b8e7)
-
-    Full release notes: https://github.com/coder/coder/releases/tag/v2.31.9
+    v2.36 converts existing login_type=none accounts to password login, disables new OAuth2 dynamic client registration unless oauth2_dcr_enabled is turned on, and drops chat_model_configs.provider. This chart does not create login_type=none users.
 
+    Release notes: https://github.com/coder/coder/releases/tag/v2.36.6
   developer: Coder Technologies, Inc.
   website: https://coder.com/
   sourceCode: https://github.com/coder/coder

diff --git a/coder/i18n/de-DE/OlaresManifest.yaml b/coder/i18n/de-DE/OlaresManifest.yaml
@@ -3,20 +3,11 @@ metadata:
   description: Selbst gehostete Cloud-Entwicklungsumgebungen
 spec:
   upgradeDescription: |
-    Wechsel des Reverse-Proxy-Images von Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) zum offiziellen OpenResty-Image `openresty/openresty:1.29.2.5-bookworm-fat`.
-
-    Nginx-Konfigurations-Mounts und Log-Pfade an das Layout des offiziellen Images anpassen (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`) und Bitnami-spezifisches `OPENRESTY_CONF_FILE`-Wiring entfernen.
-
-    **Änderungsprotokoll**
-    Leistungsverbesserungen
-    - Count-Abfragen deckeln, native UUID-Operationen für Audit-/Conn-Logs verwenden (Backport #23835) (#24129, 2f5d21d)
-
-    Wartungsarbeiten
-    - Go 1.25.8: Bump auf release/2.31 backporten (#23941, 2587364)
-    - High- und Critical-Iron-Bank-Dependency-Fixes backporten (#24110, 960b8e7)
-
-    Vollständige Release Notes: https://github.com/coder/coder/releases/tag/v2.31.9
-
+    Chart 1.0.23 aktualisiert Coder von v2.31.9 auf v2.36.6.
+    Image: docker.io/beclab/coder-coder:v2.36.6.
+    PostgreSQL-Verbindung, Access-URL und optionaler Anthropic-Key bleiben unveraendert. Coder fuehrt Datenbankmigrationen beim Start aus. Existiert public.schema_migrations, schreibt ein Init-Container vorher ein pg_dump-Archiv nach appData/backups/chart-1.0.23/coder.dump. Spaetere Starts und eine Datenbank ohne diese Tabelle ueberspringen das. Der Liveness-Probe wartet laenger, damit eine Migration nicht abgebrochen wird.
+    v2.36 wandelt vorhandene login_type=none-Konten in Passwort-Login um, blockiert neue OAuth2-Dynamic-Client-Registrierungen ohne oauth2_dcr_enabled und entfernt chat_model_configs.provider.
+    Release Notes: https://github.com/coder/coder/releases/tag/v2.36.6
   fullDescription: |
     Coder ist eine selbst gehostete, Open-Source-Cloud-Entwicklungsumgebung, die mit jeder Cloud, IDE, jedem Betriebssystem, Git-Anbieter und IDP funktioniert.
 

diff --git a/coder/i18n/en-US/OlaresManifest.yaml b/coder/i18n/en-US/OlaresManifest.yaml
@@ -13,16 +13,11 @@ spec:
     - Onboard developers in seconds instead of days
 
   upgradeDescription: |
-    Switch the reverse-proxy image from Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) to the official OpenResty image `openresty/openresty:1.29.2.5-bookworm-fat`.
+    Chart 1.0.23 upgrades Coder from v2.31.9 to v2.36.6.
+    Image: docker.io/beclab/coder-coder:v2.36.6.
 
-    Align nginx config mounts and log paths with the official image layout (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`), and drop Bitnami-specific `OPENRESTY_CONF_FILE` wiring.
+    The PostgreSQL connection, access URL, and optional Anthropic key stay as they are. Coder applies database migrations on startup. When public.schema_migrations already exists, an init container writes a PostgreSQL custom-format dump to appData/backups/chart-1.0.23/coder.dump first. Later starts and a database without that table skip the dump. The liveness probe waits longer so a migration is not killed mid-run.
 
-    **Changelog**
-    Performance improvements
-    - Cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24129, 2f5d21d)
+    v2.36 converts existing login_type=none accounts to password login, disables new OAuth2 dynamic client registration unless oauth2_dcr_enabled is turned on, and drops chat_model_configs.provider. This chart does not create login_type=none users.
 
-    Chores
-    - Backport Go 1.25.8 bump to release/2.31 (#23941, 2587364)
-    - Backport high and critical Iron Bank dependency fixes (#24110, 960b8e7)
-
-    Full release notes: https://github.com/coder/coder/releases/tag/v2.31.9
+    Release notes: https://github.com/coder/coder/releases/tag/v2.36.6
diff --git a/coder/i18n/es-ES/OlaresManifest.yaml b/coder/i18n/es-ES/OlaresManifest.yaml
@@ -3,20 +3,11 @@ metadata:
   description: Entornos de desarrollo en la nube autoalojados
 spec:
   upgradeDescription: |
-    Cambiar la imagen del proxy inverso de Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) a la imagen oficial de OpenResty `openresty/openresty:1.29.2.5-bookworm-fat`.
-
-    Alinear los montajes de configuración de nginx y las rutas de registro con el diseño de la imagen oficial (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`), y eliminar el cableado específico de Bitnami de `OPENRESTY_CONF_FILE`.
-
-    **Registro de cambios**
-    Mejoras de rendimiento
-    - Limitar consultas count, usar operaciones UUID nativas para logs de auditoría/conexión (backport #23835) (#24129, 2f5d21d)
-
-    Tareas de mantenimiento
-    - Backport del bump de Go 1.25.8 a release/2.31 (#23941, 2587364)
-    - Backport de correcciones high y critical de dependencias Iron Bank (#24110, 960b8e7)
-
-    Notas de la versión completas: https://github.com/coder/coder/releases/tag/v2.31.9
-
+    El chart 1.0.23 actualiza Coder de v2.31.9 a v2.36.6.
+    Imagen: docker.io/beclab/coder-coder:v2.36.6.
+    La conexion PostgreSQL, la URL de acceso y la clave Anthropic opcional no cambian. Coder aplica las migraciones al arrancar. Si ya existe public.schema_migrations, un init container escribe antes un volcado pg_dump en appData/backups/chart-1.0.23/coder.dump. Los arranques posteriores y una base sin esa tabla lo omiten. La sonda de liveness espera mas para no cortar una migracion.
+    v2.36 convierte las cuentas login_type=none existentes a inicio con contrasena, bloquea nuevos registros dinamicos OAuth2 salvo oauth2_dcr_enabled y elimina chat_model_configs.provider.
+    Notas: https://github.com/coder/coder/releases/tag/v2.36.6
   fullDescription: |
     Coder es un entorno de desarrollo en la nube autoalojado y de código abierto que funciona con cualquier nube, IDE, SO, proveedor Git e IDP.
 

diff --git a/coder/i18n/fr-FR/OlaresManifest.yaml b/coder/i18n/fr-FR/OlaresManifest.yaml
@@ -3,20 +3,11 @@ metadata:
   description: Environnements de développement cloud auto-hébergés
 spec:
   upgradeDescription: |
-    Remplacement de l'image reverse-proxy Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) par l'image officielle OpenResty `openresty/openresty:1.29.2.5-bookworm-fat`.
-
-    Aligner les montages de configuration nginx et les chemins de journaux sur la disposition de l'image officielle (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`), et supprimer le câblage Bitnami spécifique de `OPENRESTY_CONF_FILE`.
-
-    **Journal des modifications**
-    Améliorations des performances
-    - Plafonner les requêtes count, utiliser des opérations UUID natives pour les journaux d'audit/conn (backport #23835) (#24129, 2f5d21d)
-
-    Maintenance
-    - Backport de la mise à niveau Go 1.25.8 vers release/2.31 (#23941, 2587364)
-    - Backport des correctifs high et critical des dépendances Iron Bank (#24110, 960b8e7)
-
-    Notes de version complètes : https://github.com/coder/coder/releases/tag/v2.31.9
-
+    Le chart 1.0.23 met a jour Coder de v2.31.9 vers v2.36.6.
+    Image : docker.io/beclab/coder-coder:v2.36.6.
+    La connexion PostgreSQL, l URL d acces et la cle Anthropic optionnelle restent identiques. Coder applique les migrations au demarrage. Si public.schema_migrations existe deja, un init container ecrit d abord une archive pg_dump dans appData/backups/chart-1.0.23/coder.dump. Les demarrages suivants et une base sans cette table ignorent cette copie. La sonde de liveness attend plus longtemps pour ne pas interrompre une migration.
+    v2.36 convertit les comptes login_type=none existants en connexion par mot de passe, bloque les nouvelles inscriptions dynamiques OAuth2 sans oauth2_dcr_enabled et retire chat_model_configs.provider.
+    Notes : https://github.com/coder/coder/releases/tag/v2.36.6
   fullDescription: |
     Coder est un environnement de développement cloud open source et auto-hébergé qui fonctionne avec n'importe quel cloud, IDE, OS, fournisseur Git et IDP.
 

diff --git a/coder/i18n/it-IT/OlaresManifest.yaml b/coder/i18n/it-IT/OlaresManifest.yaml
@@ -3,20 +3,11 @@ metadata:
   description: Ambienti di sviluppo cloud self-hosted
 spec:
   upgradeDescription: |
-    Passaggio dell'immagine reverse-proxy da Bitnami OpenResty (`beclab/aboveos-bitnami-openresty:1.25.3-2`) all'immagine ufficiale OpenResty `openresty/openresty:1.29.2.5-bookworm-fat`.
-
-    Allineare i mount della config nginx e i percorsi dei log al layout dell'immagine ufficiale (`/etc/nginx/conf.d/default.conf`, `/usr/local/openresty/nginx/logs/...`) e rimuovere il wiring specifico Bitnami di `OPENRESTY_CONF_FILE`.
-
-    **Changelog**
-    Miglioramenti delle prestazioni
-    - Limitare le query count, usare operazioni UUID native per i log di audit/conn (backport #23835) (#24129, 2f5d21d)
-
-    Manutenzione
-    - Backport del bump di Go 1.25.8 su release/2.31 (#23941, 2587364)
-    - Backport delle correzioni high e critical delle dipendenze Iron Bank (#24110, 960b8e7)
-
-    Note di rilascio complete: https://github.com/coder/coder/releases/tag/v2.31.9
-
+    Il chart 1.0.23 aggiorna Coder da v2.31.9 a v2.36.6.
+    Immagine: docker.io/beclab/coder-coder:v2.36.6.
+    La connessione PostgreSQL, l URL di accesso e la chiave Anthropic opzionale restano invariati. Coder applica le migrazioni all avvio. Se public.schema_migrations esiste gia, un init container scrive prima un dump pg_dump in appData/backups/chart-1.0.23/coder.dump. Gli avvii successivi e un database senza quella tabella saltano la copia. La liveness probe attende piu a lungo per non interrompere una migrazione.
+    v2.36 converte gli account login_type=none esistenti in login con password, blocca le nuove registrazioni dinamiche OAuth2 senza oauth2_dcr_enabled e rimuove chat_model_configs.provider.
+    Note: https://github.com/coder/coder/releases/tag/v2.36.6
   fullDescription: |
     Coder è un ambiente di sviluppo cloud self-hosted e open source che funziona con qualsiasi cloud, IDE, SO, provider Git e IDP.
 

diff --git a/coder/i18n/ja-JP/OlaresManifest.yaml b/coder/i18n/ja-JP/OlaresManifest.yaml
@@ -3,20 +3,11 @@ metadata:
   description: セルフホスト型クラウド開発環境
 spec:
   upgradeDescription: |
-    リバースプロキシイメージを Bitnami OpenResty（`beclab/aboveos-bitnami-openresty:1.25.3-2`）から公式 OpenResty イメージ `openresty/openresty:1.29.2.5-bookworm-fat` へ切り替え。
-
-    nginx 設定のマウントとログパスを公式イメージのレイアウト（`/etc/nginx/conf.d/default.conf`、`/usr/local/openresty/nginx/logs/...`）に合わせ、Bitnami 固有の `OPENRESTY_CONF_FILE` 配線を削除。
-
-    **変更履歴**
-    パフォーマンス改善
-    - count クエリを上限制限し、監査/接続ログにネイティブ UUID 操作を使用（backport #23835）（#24129、2f5d21d）
-
-    メンテナンス
-    - Go 1.25.8 バンプを release/2.31 にバックポート（#23941、2587364）
-    - Iron Bank 依存関係の high / critical 修正をバックポート（#24110、960b8e7）
-
-    完全なリリースノート：https://github.com/coder/coder/releases/tag/v2.31.9
-
+    Chart 1.0.23 は Coder を v2.31.9 から v2.36.6 に更新します。
+    イメージは docker.io/beclab/coder-coder:v2.36.6 です。
+    PostgreSQL 接続、アクセス URL、任意の Anthropic key はそのままです。Coder は起動時にデータベースのマイグレーションを実行します。public.schema_migrations が既にある場合、init コンテナが先に pg_dump を appData/backups/chart-1.0.23/coder.dump へ書き出します。以降の起動と、そのテーブルがないデータベースでは省略します。マイグレーション中に停止しないよう、liveness probe の待ち時間を延ばしています。
+    v2.36 は既存の login_type=none アカウントをパスワードログインへ変換し、oauth2_dcr_enabled を有効にしない限り新しい OAuth2 動的クライアント登録を拒否し、chat_model_configs.provider を削除します。
+    リリースノート: https://github.com/coder/coder/releases/tag/v2.36.6
   fullDescription: |
     Coder は、あらゆるクラウド、IDE、OS、Git プロバイダー、IDP で動作するセルフホスト型オープンソースのクラウド開発環境です。
 

diff --git a/coder/i18n/zh-CN/OlaresManifest.yaml b/coder/i18n/zh-CN/OlaresManifest.yaml
@@ -12,18 +12,11 @@ spec:
     - 自动关闭闲置资源以节省成本
     - 在几秒钟内（而不是几天）即可让开发人员入职
   upgradeDescription: |
-    将反向代理镜像从 Bitnami OpenResty（`beclab/aboveos-bitnami-openresty:1.25.3-2`）切换为官方 OpenResty 镜像 `openresty/openresty:1.29.2.5-bookworm-fat`。
+    Chart 1.0.23 将 Coder 从 v2.31.9 升级到 v2.36.6。
+    镜像为 docker.io/beclab/coder-coder:v2.36.6。
 
-    同步调整 nginx 配置挂载与日志路径以匹配官方镜像布局（`/etc/nginx/conf.d/default.conf`、`/usr/local/openresty/nginx/logs/...`），并移除 Bitnami 专用的 `OPENRESTY_CONF_FILE` 配置。
+    PostgreSQL 连接、访问地址和可选的 Anthropic key 保持不变。Coder 会在启动时执行数据库迁移。若已存在 public.schema_migrations，init 容器会先把 PostgreSQL custom 格式备份写到 appData/backups/chart-1.0.23/coder.dump。之后再次启动，以及没有这张表的数据库，都会跳过备份。存活探针的等待时间加长，避免迁移过程中被杀掉。
 
-    将应用版本从 2.31.5 升级到 2.31.9
+    v2.36 会把已有的 login_type=none 账号转成密码登录；除非打开 oauth2_dcr_enabled，否则不再接受新的 OAuth2 动态客户端注册；并删除 chat_model_configs.provider。本 chart 不会创建 login_type=none 用户。
 
-    **更新日志**
-    性能改进
-    - 限制计数查询，审计/连接日志使用原生 UUID 操作（回溯 #23835）（#24129, 2f5d21d）
-
-    其他更新
-    - 回溯 Go 1.25.8 升级至 release/2.31（#23941, 2587364）
-    - 回溯重要和关键级别的 Iron Bank 依赖修复（#24110, 960b8e7）
-
-    完整发行说明：https://github.com/coder/coder/releases/tag/v2.31.9
+    发行说明：https://github.com/coder/coder/releases/tag/v2.36.6
diff --git a/coder/templates/coder.yaml b/coder/templates/coder.yaml
@@ -20,6 +20,45 @@ spec:
       labels:
         io.kompose.service: coder
     spec:
+      initContainers:
+        - name: backup-postgres-before-upgrade
+          image: docker.io/beclab/postgres:17.5-alpine
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            runAsUser: 0
+          command: ["sh", "-c"]
+          args:
+            - |
+              set -e
+              DEST=/backup/backups/chart-1.0.23
+              MARKER="${DEST}/.backup_complete"
+              mkdir -p "$DEST"
+              if [ -f "$MARKER" ]; then
+                echo "[backup] marker present, skip."
+                exit 0
+              fi
+              table=$(psql "$CODER_PG_CONNECTION_URL" -tAc "SELECT to_regclass('public.schema_migrations')")
+              if [ -z "$table" ]; then
+                echo "[backup] no schema_migrations, skip."
+                exit 0
+              fi
+              pg_dump --dbname="$CODER_PG_CONNECTION_URL" --format=custom --file="${DEST}/coder.dump"
+              if [ ! -s "${DEST}/coder.dump" ]; then
+                echo "[backup] dump missing or empty, stop."
+                exit 1
+              fi
+              pg_restore --list "${DEST}/coder.dump" >/dev/null
+              echo "backed up" > "$MARKER"
+              echo "[backup] wrote ${DEST}/coder.dump"
+          env:
+            - name: CODER_PG_CONNECTION_URL
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Release.Name }}-secrets
+                  key: CODER_PG_CONNECTION_URL
+          volumeMounts:
+            - name: coder-data
+              mountPath: /backup
       containers:
         - name: docker-dind
           image: "docker.io/beclab/docker:29.3.0-dind"
@@ -48,7 +87,7 @@ spec:
               cpu: 1000m
               memory: 1Gi
         - name: coder
-          image: "docker.io/beclab/coder-coder:v2.31.9"
+          image: "docker.io/beclab/coder-coder:v2.36.6"
           env:
             - name: DOCKER_HOST
               value: "tcp://localhost:2375"
@@ -87,10 +126,10 @@ spec:
             httpGet:
               path: /
               port: 7080
-            initialDelaySeconds: 10
+            initialDelaySeconds: 60
             periodSeconds: 20
             timeoutSeconds: 5
-            failureThreshold: 3
+            failureThreshold: 15
           readinessProbe:
             httpGet:
               path: /

diff --git a/coder/values.yaml b/coder/values.yaml
@@ -1,5 +1,5 @@
 image:
-  version: '2.31.5'
+  version: '2.36.6'
 
 userspace:
   appdata: ""