[mortyops]

This PR contains the following updates:

Package	Update	Change	Pending
ghcr.io/coder/chart/coder (source)	patch	2.36.10 → 2.36.11	2.38.4 (+13)

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

coder/coder (ghcr.io/coder/chart/coder)

v2.36.11

Compare Source

Changelog

Bug fixes

• fix(scripts/release): promote stable on immutable releases (#​30745, 0e0b74b)
• Server: Bound push response body read and add client timeout (#​31129, d795232)
• fix(scripts/releaser): use the v-prefixed image tag in release notes (#​31032, ceee0f1)
• Keep new API keys within the caller's scopes and allow list (#​30256, aa2c6cf)
• Allow fixing stale parameters when the active version is required (#​30660, e11e44f)
• Bump coder/tailscale to bound DERP dup client sendHistory (#​31248, 6bdae13) (@​dylanhuff-at-coder)
• Require SSH permission to fetch external agent credentials (#​31388, 09771c9) (@​dylanhuff-at-coder)

Compare: v2.36.10...v2.36.11

Container image

• docker pull ghcr.io/coder/coder:v2.36.11

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

✅ Automated recommendation: APPROVE

Analysis engine: pr-review-local (openai) · pr-reviewer-action v3.7.0

Recommendation

Approve. This is a straightforward Renovate patch bump of the Coder Helm chart OCI image from 2.36.10 to 2.36.11. The diff is a single-line tag change in kubernetes/apps/base/coder/app/ocirepository.yaml — no structural, security, or configuration risk.

Change-by-Change Findings

kubernetes/apps/base/coder/app/ocirepository.yaml (line 13)

• Change: tag: 2.36.10 → tag: 2.36.11
• Assessment: Pure digest/patch bump. The release notes confirm this is a patch release with only bug fixes (no breaking changes, no API changes, no new features). The oci://ghcr.io/coder/chart/coder URL and operation: copy are unchanged.
• No risk flags triggered. No secrets, no networking changes, no Flux substitution variables, no postRenderer, no healthChecks targets, no CCNP policies, no Ceph CSI key rotation, no Talos config.

Standards Compliance

• No plaintext secrets — ✅ (no secrets in diff)
• No postRenderer — ✅ (not applicable to this file)
• No resources/ secret storage — ✅ (not applicable)
• No tofu apply/tofu destroy — ✅ (not applicable)
• No allow GitHub Actions to create and approve PRs — ✅ (not applicable)
• OCI repository schema — ✅ (file already has # yaml-language-server: $schema=... comment; the tag field is a valid OCIRepository ref.tag)
• Naming convention — ✅ (kebab-case ocirepository.yaml)

Tool Harness Findings

No tool harness findings are present in the corpus.

Unknowns / Needs Verification

• The PR body notes Pending: 2.38.4 (+13), meaning Renovate has 13 newer patch versions available. This is informational only — the PR correctly targets the next minor/patch (2.36.11) per the 2.x branch constraint. No action needed.
• No CI test coverage for this specific OCIRepository resource exists in the corpus, but this is a standard Renovate-managed bump and the image-pull.yaml workflow (which validates image pullability) would catch a bad digest if it existed. The absence of a specific test here is not a defect.

Required Checks

No must_check items were provided in the PR classification. No mandatory review questions to disposition.

Verdict

Approve. This is a safe, low-risk patch bump with no structural changes, no security implications, and no deviation from repository conventions.

[mortyops]

--- OCIRepository coder/coder
+++ OCIRepository coder/coder
@@ -13,6 +13,6 @@
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2.36.10
+    tag: 2.36.11
   url: oci://ghcr.io/coder/chart/coder
 

[mortyops]

--- Deployment coder/coder
+++ Deployment coder/coder
@@ -111,7 +111,7 @@
         envFrom:
         - secretRef:
             name: coder
-        image: ghcr.io/coder/coder:v2.36.10
+        image: ghcr.io/coder/coder:v2.36.11
         imagePullPolicy: IfNotPresent
         lifecycle: {}
         name: coder