chore(deps): update dependency coder/coder to v2.18.2

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
coder/coder	patch	2.18.1 -> 2.18.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

coder/coder (coder/coder)

v2.18.2

Compare Source

Changelog

Stable (Since Jan 7, 2024)

Bugfixes

• Server: Correctly evaluate dynamic workspace tag values (#​15897, dcf5153) (@​johnstcn)
• CLI: Allow entering non-default values in multi-select (#​15935, 638247c) (@​joobisb)
• Terraform Parser: Skip evaluation of unrelated parameters (#​16023, 1ab10cf) (@​johnstcn)

Compare: v2.18.1...v2.18.2

Container image

• docker pull ghcr.io/coder/coder:v2.18.2

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/coder:2.18.2

📦 Image Reference ghcr.io/uniget-org/tools/coder:2.18.2

digest	sha256:a327dd54777b1997996518880dc7878d604519c34703b9d0a63e2884fa561419
vulnerabilities
platform	linux/amd64
size	95 MB
packages	294

github.com/u-root/u-root 0.14.0 (golang) pkg:golang/github.com/u-root/u-root@0.14.0 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Affected range <=v7.0.0 Fixed version Not Fixed CVSS Score 7.5 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Description This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction. OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Affected range <=7.0.0 Fixed version Not Fixed CVSS Score 7.5 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Description This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.

golang.org/x/net 0.31.0 (golang) pkg:golang/golang.org/x/net@0.31.0 Allocation of Resources Without Limits or Throttling Affected range <0.33.0 Fixed version 0.33.0 CVSS Score 8.7 CVSS Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Description An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/12662646025.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/12662646025.