Citrix Secure Developer Spaces™

Fixed issues

Citrix Secure Developer Spaces™ 2026.4 includes the following fixed issues

Release Date Version Category Description
May 12, 2026 2026.4.3 General Resolved a Kubernetes cluster cost issue caused by warm node pre-provisioning. The warm node replica calculation has been simplified to provision new nodes only when all existing workspace nodes are fully occupied, eliminating the cascading 1:1 workspace-to-node ratio.
    General Resolved an image pod caching issue. Workspace node anti-affinity has been re-aligned to kubernetes.io/hostname, so image cache pods are reliably scheduled across occupied workspace nodes and remain available for faster workspace startup.
    New features Added a platform setting to configure a custom upstream URL for the VS Code Extensions Gallery (Marketplace). Administrators can point workspaces at an internal or alternative extensions gallery to support air-gapped or policy-controlled environments.
    New features Increased the maximum workspace specification limits that administrators can configure in platform specification templates. CPU and GPU requests and limits raised from 100 to 1000, memory raised from 100 GiB to 10000 GiB, and disk minimum and maximum raised from 1024 GiB to 10000 GiB.

Citrix Secure Developer Spaces™ 2025.10 includes the following fixed issues

Release Date Version Category Description
April 30, 2026 2025.10.21 Security Resolved an issue where a rejected workspace SSH approval still authorized the presented public key, allowing a later connection with the same key to succeed. SSH keys are now authorized only when the approval request is accepted.
    Security Tightened file and directory permissions in the installer. Generated directories, Terraform variable files, and the CA certificate bundle are now created with owner-only access to address Mend SAST findings (CWE-732).
    Security Updated the MongoDB container image to address known vulnerabilities reported by Mend.
    Security Bumped the default workspace image to 2.3.6 to address known vulnerabilities.
    General Resolved slow query performance for ip_pod_assignment and workspaces_v5 collections that could lead to proxy OOMKilled events. Added a compound index on (ip, region_id) for ip_pod_assignment and a team_id index on workspaces_v5.
    General Resolved a delay when switching to the Workspaces tab in the user interface.
    General Resolved an issue where the table component did not show its loading state on initial data fetch.
    General Resolved an issue where the copy-to-clipboard tooltip did not appear on the first hover or copy action.
    General Resolved an issue where opening a terminal session from the dropdown launched a duplicate window instead of focusing the existing one.
April 23, 2026 2025.10.20 Security This release includes several vulnerability fixes across the platform’s core services.
    Security Updated the Go language runtime to version 1.25.9 and resolved frontend CVEs reported by Mend.
    General Resolved an issue where workspace setup scripts were lost when a workspace was created through the REST API. Setup scripts are now preserved on create.
    General Resolved a UI issue where the workspace access item icon appeared taller than expected.
April 14, 2026 2025.10.19 General Resolved an issue where 1-Click VM provisioning failed when targeting an existing Azure Resource Group.
April 13, 2026 2025.10.18 Security This release includes several vulnerability fixes across the platform’s core services.
    General Resolved an issue in the OAuth2 authentication flow where email addresses containing uppercase letters caused authentication failures or account mismatches.
April 1, 2026 2025.10.17 Security This release includes several vulnerability fixes across the platform’s core services.
March 30, 2026 2025.10.16 General Resolved a critical CosmosDB index error that caused backend upgrade failures. This fix ensures that database schema updates and indexing operations complete successfully during platform deployments, preventing service disruptions during the upgrade cycle.
    General Added GPU-accelerated workspaces with hardware acceleration for machine learning, data science, and graphics-intensive workloads.
March 17, 2026 2025.10.15 Security This release includes several vulnerability fixes across the platform’s core services.
March 9, 2026 2025.10.14 Networking Resolved an issue where cross-workspace HTTP access was broken.
February 19, 2026 2025.10.13 General Resolved an issue with Git Large File Storage (LFS) that affected GitLab repositories when using SSH for authentication.
February 11, 2026 2025.10.12 Security This release includes several vulnerability fixes across the platform’s core services.
February 11, 2026 2025.10.11 General Resolved an issue where a misleading error message was generated by the measurement cron job for workspaces with no active pods, such as those in a paused state.
January 30, 2026 2025.10.10 Security This release includes several vulnerability fixes across the platform’s core services.
January 28, 2026 2025.10.9 General Resolved an issue with the VS Code Extensions Gallery that prevented the discovery and installation of extensions.
    New features Upgraded the NetScaler Ingress Controller (NetScaler CPX) from version 3.2.22 to 3.3.2. This update provides improved stability and higher performance for ingress traffic management.
January 23, 2026 2025.10.8 Security This release includes several vulnerability fixes across the platform’s core services.
January 15, 2026 2025.10.7 Security Refactored the Helm Chart RBAC configuration to enhance the platform’s security posture through least-privilege principles. The previously unified ClusterRole has been split into two specific scopes: Namespace-scoped Role manages workload-specific resources, including pods, jobs, and secrets; Minimal ClusterRole is restricted to essential cluster-wide resources, such as nodes, storage classes, and metrics.
December 18, 2025 2025.10.6 General Fixed a bug in 1-click VM environments using OAuth integration that prevented local IDEs from successfully connecting via SSH extensions and plugins. This resolution ensures that developers can use local IDE tools, such as VS Code Desktop or JetBrains Gateway, within the authenticated workspace session.
December 15, 2025 2025.10.5 General Added support for F5 NGINX annotations. Platform administrators can enable dedicated controller support with platform.useF5NginxController: true.
    Security Updated the Go language runtime to version 1.25.5, which addresses known security vulnerabilities.
December 2, 2025 2025.10.4 General Fixed a permission issue that prevented users with the Security Officer role from disabling analytics features on the platform configuration settings page.
    General Resolved an issue causing the Workspace API component to enter a CrashLoopBackOff state when the system was managing a large number of active or decommissioned workspaces.
    New features Added a new configuration option to disable Amazon EKS auto-mode detection during cluster setup. Administrators can set region.clusterConfig.disableAutoModeCheck: true for more granular control in specific deployment environments.
    New features Introduced Terraform support for managing user groups, allowing administrators to provision, update, and manage workspace user groups using Infrastructure as Code practices.
November 26, 2025 2025.10.3 General Fixed an issue where some Visual Studio Code dependencies failed due to an underlying C standard library requirement. The minimum required glibc version is now 2.28 to ensure stability and compatibility with remote VS Code functionality on supported Linux distributions.
    Security Updated the Go language runtime to version 1.25.4, which addresses known security vulnerabilities.
November 21, 2025 2025.10.2 General Resolved slow database migration performance. An optimization to the database migration engine significantly reduces the time required to run database updates during product rollouts and version upgrades.
November 14, 2025 2025.10.1 General Removed the dependency on the C standard library (libc). The core workspace components no longer require libc at runtime.
Fixed issues