[pull] main from gitpod-io:main - #375

Open

pull[bot] wants to merge 4153 commits into

16CentAstrology:mainfrom

pull Bot commented Aug 19, 2025 •

edited

Loading

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.3)

Can you help keep this open source service alive? 💖 Please sponsor : )

Siddhant-K-code and others added 30 commits

March 28, 2025 12:08


          New Gitpod Classic notification (#20714)

570d5c0

* Add Gitpod Classic sunset notification

* copy text update


          [server, bridge] Bind metrics apps to "127.0.0.1" instead of "localho…

198dea4

…st" (#20719)

Tool: gitpod/catfood.gitpod.cloud


          update index (#20721)

cbc17ce

Co-authored-by: kylos101 <1272076+kylos101@users.noreply.github.com>


          Reapply "[image-builder-bob] bump up buildkit (#20690)" (#20693) (#20694

f0eafab

)

* Reapply "[image-builder-bob] bump up buildkit (#20690)" (#20693)

This reverts commit 7137833.

Tool: gitpod/catfood.gitpod.cloud

* update

Tool: gitpod/catfood.gitpod.cloud


          Fix trivy scan on main (#20723)

b134e9c


          Add line (#20724)

d38220d


          [installer] Avoid https://tldr.fail (#20726)

205ef5d

Tool: gitpod/catfood.gitpod.cloud


          [supervisor] Improve git status calls to disable optional locks (#20715)

ea188a5

Tool: gitpod/catfood.gitpod.cloud


          [db] Migrations image: explicitly add bash (#20732)

3b917d8


          [trivy] Drop superfluous trivyignore entries as follow up to #20694 (#…

2e8685b

…20733)


          Introduce .clinerules with memory bank embedded (#20737)

064619c

* Introduce .clinerules with memory bank

* Explicitly mention memory-bank/components in rules


          Patch build VSCode Browser 1.98 (#20747)

* Patch build VSCode Browser 1.98

* Update code commit


          [code] update code image layers (#20748)

253dac6


          [common-go] continue on hashConfig errors (#20752)

e5b9a3c

* Log the event name when hashConfig fails

* [common-go] backoff and retry watching files

* Revert "[common-go] backoff and retry watching files"

This reverts commit e43e0d8.

* Continue watching, after hashConfig error

This way, subsequent changes to the watched file may be honored


          [ops] add Slack alert for GitpodImageBuilderMk3InternalErrors (#20753)

217ba2d

* [ops] add Slack alert for GitpodImageBuilderMk3InternalErrors

* Fix


          feat(dashboard): Update header layout and start page branding (#20762)

d3348ed

* feat(dashboard): Refactor header layout and update start page UI

* addressing nit fixes


          [JetBrains] Upgrade IDEs to 2025.1 (#20763)

fbe6353

* [JetBrains] Update IDE images to new build version

* Make it build

* Update Platform Version of JetBrains Gateway Plugin (Stable) to

* Upgrade setup-java to v4

---------

Co-authored-by: Robo Quat <roboquat@gitpod.io>


          update github action runtime (#20768)

828784c


          [server] Fix custom CA (#20770)

561fde4

Configure NODE_EXTRA_CA_CERTS env var to point to the CA certificate bundle file


          update index (#20740)

1b1575b


          [registry-facade] add image spec to logs (#20772)

dbc0311


          [dashboard] try using skeletons for loading repo suggestions (#20766)

51254eb

* [dashboard] try using skeletons for loading repo suggestions

* Add "content missing" fallback

* Get rid of the custom `staleTime` for `useSuggestedRepositories`


          [server] Allow org env vars in repos that don't have projects (#20774)

a3db4f1

Enables the use case of collaborators allowing to use projects with a private default workspace image configured on the org-level. This is enabled by the optional `enableDockerdAuthentication` that was implemented in #20586 - shortly _after_ org-level-env vars was implemented in #20538.


          [JetBrains] Attach tasks with exec to properly handle terminal resi…

…ze (#20778)


          [dashboard] fix workspaces list rendering (#20779)

902e5e3

Tool: gitpod/catfood.gitpod.cloud


          Bump leeway to 0.10.2 (#20764)

189cafb


          Upgrade Dev Env with Leeway 0.10.2 (#20780)

89f0bc5

* Update dev env image with Leeway 10.0.2

* Fix supervisor openssh build with new Leeway version


          [dev] update leeway version for dev image (#20785)

d0a9650


          Upgrade Dev Env with Leeway 0.10.3 (#20787)

83a98be


          [server] Fix permission issue for collaborators in listenForPrebuildU…

b34a9fd

…pdates (#20782)

geropl and others added 30 commits

June 12, 2026 14:37


          Pin Docker version in devcontainer (#21482)

3bda275

Co-authored-by: Codex <noreply@openai.com>


          Use system prettier pre-commit hook (#21483)

61df71c

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21487)

828e0b0

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21495)

c561888

Co-authored-by: Ona <no-reply@ona.com>


          Address phase 1 critical CVE findings (#21496)

820e083

Co-authored-by: Codex <noreply@openai.com>


          Rebuild docker-up runtime artifacts for CVE fixes (#21497)

c88514b

Co-authored-by: Codex <noreply@openai.com>


          Rebuild ws-daemon runtime tools for CVE fixes (#21498)

d3d7ab0

Co-authored-by: Codex <noreply@openai.com>


          Improve critical vulnerability scan summaries (#21499)

f1810e7

Co-authored-by: Codex <noreply@openai.com>


          Reject invalid workspace timeout units (#21502)

bd1e39b

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21508)

4c4ea8b

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21517)

7e6d1c2

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21527)

11bb55e

Co-authored-by: Codex <noreply@openai.com>


          Bump Leeway to v0.10.9 for vulnerability scans (#21535)

af692fd

Co-authored-by: Codex <noreply@openai.com>


          Add agent guidance for dev image updates (#21537)

76f6b36

Co-authored-by: Codex <noreply@openai.com>


          Update dev environment image to main-gha.34488 (#21536)

4abe295

Co-authored-by: Codex <noreply@openai.com>


          Fix critical vulnerabilities from daily scan (#21540)

5ca7667

Co-authored-by: Codex <noreply@openai.com>


          Fix critical vulnerabilities from daily scan (#21542)

be10a0a

Co-authored-by: Codex <noreply@openai.com>


          Remove unused curl from Caddy images (#21544)

4f45d02

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21549)

c603856

Co-authored-by: Ona <no-reply@ona.com>


          Update images digests (#21551)

6696bca

Co-authored-by: Ona <no-reply@ona.com>


          Update images digests (#21560)

ea540de

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21569)

c799283

* Update images digests

Co-authored-by: Codex <noreply@openai.com>

* Fix Caddy image digest

Co-authored-by: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21586)

ab06f2f

* Update images digests

Co-authored-by: Codex <noreply@openai.com>

* Fix Caddy image digest

Co-authored-by: Codex <noreply@openai.com>

* Retry CI

Co-authored-by: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>


          Fix critical OpenSSL CVE in runtime images (#21597)

2b58ee0

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21603)

95fd9de

Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21611)

ba41338

* Update images digests

Co-authored-by: Codex <noreply@openai.com>

* fix: restore fetchable Caddy runtime image digest

Co-authored-by: Codex <noreply@openai.com>

* fix: restore fetchable dashboard Caddy image digest

Co-authored-by: Codex <noreply@openai.com>

* fix: patch dependencies in custom Caddy builds

Co-authored-by: Codex <noreply@openai.com>

* docs: identify Grype findings fixed by Caddy overrides

Co-authored-by: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>


          Fix critical libcurl CVEs in image-builder-bob (#21616)

0af98d3

Co-authored-by: root <root@ip-172-31-6-146.eu-central-1.compute.internal>
Co-authored-by: Codex <noreply@openai.com>


          Update images digests (#21620)

3c29393

* Update images digests

Co-authored-by: Codex <noreply@openai.com>

* fix: retain resolvable Caddy image digest

Co-authored-by: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: kbrennan-oai <kbrennan@openai.com>


          Update images digests (#21628)

531a3a8

Co-authored-by: Codex <noreply@openai.com>


          Remove vulnerable PyJWT from ws-daemon image (#21630)

9b1fad0

Co-authored-by: Codex <noreply@openai.com>

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⤵️ pull do-not-merge