v4.144.0

Code v1.144.0

Changed

• Update to Code 1.144.0

Fixed

• --socket-fd now works: the inherited socket is passed on to the process
  that listens, and the address is logged as fd:<n>. Previously code-server
  failed with listen EEXIST or Server has no address.
• The cookie domain was not being set against the shared root host of proxy
  domains when proxy domains contained template variables like {{port}},
  resulting in having to sign in multiple times per domain instead of only once
  as originally intended.
• When doing the web socket origin check, if the host does not already contain a
  port, fall back to X-Forwarded-Port.
• Fix default ports not matching in the web socket origin check (for example
  https://coder.com will now match https://coder.com:443).

v4.143.1

Code v1.143.1

Changed

• Update to Code 1.143.1

v4.141.1

Security

• Update bundled Node.js to 24.22.1 to fix a remote code execution bug in the
  Brotli decoder (CVE-2026-111497).
• Reject compressed request bodies (Content-Encoding: br, gzip, or
  deflate) instead of decompressing them.

Fixed

• Boolean flags in the --flag=false form and in the config file now respect
  being set to false.

Added

• Turkish locale.

Changed

• Expand values from path options in the config file that start with a tilde.

v4.141.0

Code v1.141.0

Added

• A new --enable-remote-storage flag can be used to make code-server persist
  workbench storage on the remote server instead of browser storage. Use this if
  you want to share storage between multiple devices.

Fixed

• The Typescript extension was trying to load as a browser extension even though
  we build the remote server version, causing it to fail to activate.

Changed

• Update to Code 1.141.0

v4.140.0

Code v1.140.0

Changed

• Update to Code 1.140.0

v4.139.1

Code v1.139.1

Changed

• Update to Code 1.139.1

Fixed

• --idle-timeout-seconds was only validated when passed as
  --idle-timeout-seconds=<value>; values of 60 or less passed as
  --idle-timeout-seconds <value> were silently accepted.

v4.138.0

Code v1.138.0

Changed

• Update to Code 1.138.0

Fixed

• Preserve the original path, query parameters, and fragment when rewriting
  localhost URLs through the port proxy. If VSCODE_PROXY_URI has any query
  parameters or fragments, those will be lost.

v4.137.0

Code v1.137.0

Changed

• Update to Code 1.137.0

Added

• Windows releases are now available.

v4.136.2

Code v1.136.1

Changed

• Update to Code 1.136.1

Fixed

• 4.136.2 replaces a removed 4.136.1 release that had the data path incorrectly
  being set to ~/.vscode-server-oss/data.

v4.135.0

Code v1.135.0

Changed

• Update to Code 1.135.0