chore(deps): bump coder/coder from v2.16.1 to v2.17.0 in /heroku

[dependabot]

Bumps coder/coder from v2.16.1 to v2.17.0.

Release notes

Sourced from coder/coder's releases.

v2.17.0

Changelog

[!NOTE] This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Features

• Allow Owners to create a token on behalf of another user in the cli (#14813, ba90bb0ab) (@​joobisb)

  Extends coder tokens create with the --user flag to describe the owner of the created token.

• Add CoderVPN protocol definition & implementation (#14855, f7ddbb744) (@​spikecurtis)

  This is a component of the ongoing implementation of CoderVPN, aka Coder Desktop. To learn about the project use cases, provide feedback, and track progress, see our public proposal in Github.

• Add cache abstraction for fetching signing keys (#14777, 21b92ef89) (@​sreya)
• Show user-auth grouped provisioners in the dashboard (#14883, 533d655ac) (@​f0ssel)

  

• Expose Markdown fields in webhook payload for notification parsing (#14931, 0aa84b18a) (@​mtojek)
• Remove dark blue theme (#14890, d0a842481) (@​zxt-tzx)

  Any users on this removed theme will automatically move to the latest default. We have no intentions to change the default theme or add new native themes in the near future.

• Add jwtutils JWT package for standardization (#14928, 68ec532ca) (@​sreya)
• Include Coder service prefix on agents to enable desktop-native VPN connections (#14944, 8785a51b0) (@​spikecurtis)
• Allow for different docker socket path in docker-based templates to resolve #15035 (#15049, 79d24d210) (@​phorcys420)
• Add wsproxy implementation for key fetching (#14917, 384873a11) (@​sreya)
• Notify users on template deprecation (#15195, 095c9797c) (@​DanielleMaywood)
• Enable automatic key rotation (#15066, cd890aa3a) (@​sreya)

  Implements a new key rotation system to improve our security posture on a few authentication payloads that previously leveraged pre-shared keys. Some users may encounter one-off errors when in the middle of an authentication flow only during the upgrade process. For more info, read our 2.17 release blog.

• Use hashicorp/cloud-init provider in AWS devcontainer template (#15050, 91c337a2f) (@​phorcys420)
• Use hashicorp/cloud-init provider for AWS-linux example (#15240, c8f68cbc4) (@​phorcys420)
• Expose premium trial form via CLI (#15054, 7982ad765) (@​joobisb)
• Add Prometheus metric for tracking user statuses (#15281, 3de98c25) (@​coadler)

  Allows admins to track total users on the deployment by status using the coderd_api_total_user_count metric.

• Add audit logs for dormancy events (#15298, 088f2196) (@​coadler)
• CLI: Extend duration to longer units (#15040, ccbb687ca) (@​defelmnq)
• CLI: Allow passing template version while creating workspaces in the CLI (#14880, 191449078) (@​joobisb)
• CLI: Allow promoting an existing template version to active from CLI (#15051, 5ebc748e9) (@​joobisb)
• Server: Return agent script timings (#14923, 9c8ecb82a) (@​BrunoQuaresma)
• Server: Add company logo when available for email notifications (#14935, 297089e94) (@​defelmnq)

  Allows SMTP notifications to be customized with your company logo and name from the deployment appearance settings.

• Server: Improve notification format consistency (#14967, 9d0226919) (@​SasSwart)
• Enterprise: Support bearer tokens in SCIM authentication (#15233, 487b37b22) (@​coadler)
• Helm: Add setting to disable service account creation (#14817, cd92220ab) (@​MaxTNielsen)
• Helm: Add topologySpreadConstraints value (#15168, b62f3e6af) (@​ericpaulsen)
• Helm: Add support for provisioner keys, add note re psk (#15122, 413928b57) (@​johnstcn)
• Implement api for "forgot password?" flow (#14915, 4369f2b4b) (@​DanielleMaywood)
• Log when attempted password resets fail (#15267, 78ff375fe) (@​DanielleMaywood)
• Dashboard: Add forgot password link (#15108, aaa122340) (@​BrunoQuaresma)

  Adds a new "Forgot Password" email flow for users with simple authentication to autonomously reset their passwords. Note that this feature requires SMTP notifcations to be configured on your deployment.

• Dashboard: Add workspace timings (#15068, d89ecebb4) (@​BrunoQuaresma)

  Adds a breakdown of startup timing (provisioning and agent startup) in the workpsace UI. Additionally available per workspace via the API endpoint.

... (truncated)

Commits

• 5a6d23a fix(site/static/icon): add filebrowser icon (#15367) (#15370)
• 9a444b3 chore: cherry pick PRs for 2.17 (#15339)
• d83f4eb fix: stop activity bump if no tracked sessions (#15237)
• ceb168b fix(flake.nix): remove preBuild to fix building on Linux (#15259)
• 097fdaf chore: add quota to source-controlled template (#15271)
• 3c7808c fix(site): update workspace timings to use theme colors (#15269)
• 7982ad7 feat: expose premium trial form via CLI (#15054)
• 78ff375 feat: log when attempted password resets fail (#15267)
• 4cad6f7 fix(site): fix workspace timings verbiage (#15268)
• 4e20eea chore: remove unused 'must_reset_password' column (#15265)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #188.