Changelog March 9th updates
March 09, 2026

March 9th updates

Highlights

One-click MCP setup for VS Code and Cursor

View git notes

Details

Improvements

  • Deep Search Get repo name as context when opened on the repo's root page

    When Deep Search sidebar is opened from a repository's root page, the conversation now includes the repository name as context.

  • Deep Search Prioritize file suggestions from current repo

    Improved ranking of file suggestions in @-mention of the Deep Search sidebar in the blob view. Results from the repository the user is currently browsing are prioritized.

  • Deep Search Add shareable URL to Deep Search API responses

    Added shareable URL field to Deep Search API responses

  • Code Search Search redirects to the file view if only one result is returned
  • Code Intel Add error max age filter UI to code intelligence dashboards

    Code intelligence dashboards now allow filtering indexing errors by time range (last 7 days, 30 days, 90 days, last year, or all time).

  • Authentication Disable already registered DCR clients and tokens if DCR is disabled

    When the site configuration auth.idpDynamicClientRegistrationEnabled is set to false, existing DCR registered clients and tokens are disabled.

  • MCP Deep links for VS Code and Cursor

    Integrations page now includes "Add to Cursor" and "Add to VS Code" buttons for Sourcegraph MCP.

  • Repositories Fetch git notes refs from remotes
  • Repositories Show activity graph on repo landing page
  • Slack Add configurable toggle to allow/disallow Deep Search in Slack integration

    Site admins can now set up the Slack integration for link unfurling independently of Deep Search, and control whether Deep Search is allowed in Slack via a new "Allow Deep Search" toggle on the Slack integration admin page.

  • Slack Simplify truncated Deep Search response prompt

    Truncated deep search responses now show a rich preview card automatically via link unfurl, with a single "Send full response to thread" button replacing the previous prompt with two buttons.

  • Slack Add deepSearch.slackCta.disable user settings option

    Added a user setting to disable the Deep Search Slack integration CTA. This can be set globally for all users under Administration > Global Settings by adding "deepSearch.slackCta.disable": true,

  • UI Update resizable panel UI with accessibility and fixed-size support
    • Added support for fixed-size panels (px, rem, em)
    • Added keyboard navigation support
    • Added ARIA window splitter specification compliance
    • Migrated implementation to Svelte 5
  • Access Tokens Show last 5 characters of access tokens

    Access tokens now display their last 5 characters in the UI, making it easier to identify which token corresponds to credentials stored in configuration files or environment variables.

  • Access Tokens Expose expired access tokens in UI

    Expired access tokens are now visible in the UI and marked as expired, allowing users to identify and delete them for easier token management.

  • Changelog Add deep links and footer link to changelog modal

    The changelog modal now includes deep links: the header 'Changelog ↗' link navigates to the specific changelog post, and a new footer link 'View all changes in this update' directs users to the release page's details section.

  • Changelog Add date section headers to modal sidebar
  • Commits Display git notes on commit elements and pages

    Git notes are now displayed on commit pages and in commit elements throughout the UI. On commit pages, full notes are shown, while other views display a count of notes.

  • Enterprise Portal Clarify that instance site admin access does not grant portal access

    The Enterprise Portal access error page now explains that site admin access on a Sourcegraph instance does not automatically grant access to the Enterprise Portal, and directs users to contact their support engineer. The instance admin dashboard analytics card also clarifies that a separate account linked to the customer's subscription is needed.

Fixes

  • Deep Search Fix citation UI header styling in dark mode

    Fixed citation UI header styling in Deep Search to match search result page appearance in dark mode.

  • Deep Search Fix UI papercuts in citations, tooltips, and code preview
    • Fixed citation block overflow issues with file names and paths using right-to-left text layout
    • Added tooltips to display full file paths when truncated
    • Fixed line number background in code preview
    • Added dynamic border in code preview when scrolling horizontally
    • Fixed star and delete button styling on selected items
  • Deep Search Fix @-anchor detection causing incorrect suggestion insertion

    Fixed a bug in @-anchor detection that could cause the selected suggestion to be inserted at an incorrect position in the prompt, particularly when line breaks were involved.

  • Deep Search Fix recent conversations flashing on sidebar toggle

    Fixed recent conversations flashing when toggling the sidebar and ensured conversation deletes sync across components.

  • Deep Search Prevent image decompression bomb DoS in Deep Search image pipeline

    Prevented memory exhaustion from crafted images by limiting decompressed image size to 25MP.

  • Deep Search Fix scroll to answer in Deep Search sidebar

    Fixed Deep Search in the repository sidebar so follow-up responses now stay auto-scrolled as results stream in.

  • Deep Search Strip formatting from pasted text in prompt editor

    Fix pasted text formatting in the Deep Search input

  • Deep Search Force a summarization turn on StopReasonMaxTurns

    Deep Search subagents now consistently produce summaries for the main agent to consume.

  • Code Search Adjust CodeMirror selection color mixes

    Improved selection visibility in CodeMirror for pre-selected and cursor-selected lines

  • Code Search Fix code mirror search panel UI
  • Code Search Copy full commit SHA instead of abbreviated SHA

    On the commit page, the copy button next to the abbreviated commit SHA now copies the full SHA instead of the abbreviated SHA to the clipboard

  • Batch Changes Fix "updated by a deleted user" on newly created batch changes

    Fixed newly created batch changes incorrectly showing "Updated by a deleted user" in the header byline.

  • Administration Purge external URL cache on site config save

    Fixed a bug where password reset links generated immediately after updating the external URL in site config could use the previous (or default unconfigured.sourcegraph.com) URL due to a stale cache. The external URL cache is now invalidated whenever site config is saved.

  • Administration Exclude service accounts on admin dashboard
  • API Improve ListUsers filter error response and example

    /api/users.v1.Service/ListUsers now returns a better error for invalid active period filters. The API reference also no longer shows an example with ACTIVE_PERIOD_UNSPECIFIED.

  • API Make parent optional on ListConversationSummaries

    Made parent field optional on ListConversationSummaries RPC, defaulting to the authenticated user when omitted.

  • Authentication Unescape HTML entities in M2M credentials

    Fixed M2M credential names and descriptions containing apostrophes or other special characters being displayed with raw HTML entities (e.g., ' instead of ').

  • Authentication Handle empty publicAccountData

    Fixed account security page to correctly show SAML connection status when the SAML provider does not provide standard attribute statements.

  • Azure DevOps Skip cloning disabled repositories

    Azure DevOps repositories marked as disabled are no longer cloned or surfaced as synced repositories in Sourcegraph.

  • Database Include frontend schema context for drift version checks

    Fixed migrator drift check failing for codeintel/codeinsights schemas in IAM-authenticated environments by ensuring the frontend schema connection is included when version checking is enabled.

  • Executors Set git's safe.directory in an executor's job pod.

    Set git's safe.directory configuration to allow git operations when the mounted volume owner differs from the process UID (which occurs when KUBERNETES_RUN_AS_USER or KUBERNETES_RUN_AS_GROUP is set on the executor pod).

  • Executors Set HOME on the executor pod spec to avoid defaulting to /

    Set the HOME environment variable in executor job pods to ensure processes running in the pod containers use the mounted volume instead of falling back to /.

  • Executors Propagate FSGroup from the executor's environment to the job's security context

    Propagated KUBERNETES_FS_GROUP environment variable to the executor job pod's security context.

  • GitLab Fix GitLab allowGroups membership check rate limiting

    Fixed GitLab OAuth login failures caused by API rate limiting when allowGroups is configured and the user belongs to a large number of groups. Group membership is now verified with a single targeted API call per allowed group instead of paginating through all user groups.

  • Permissions Remove stale jobs

    Removed redundant permission sync jobs to prevent queue growth

  • Permissions Internal rate limiter: mark WaitTimeExceedsDeadlineError as temporary

    Fixed repository permissions being dropped when permission syncs failed due to configured internal rate limits.

  • Permissions Github: mark internal rate limit errors as temporary
  • Repositories Exclude soft deleted when calculating queue rank

    Fixed queue position calculation for repository optimization to exclude soft-deleted repositories

  • Repositories Make URL parsing more resilient

    Fixed URL parsing to handle legacy format URLs correctly, preventing unintentional truncation of repository names.

  • Repositories Treat git auth failures as external errors for SLO purpose
  • Slack Always display app manifest on admin setup page

    Slack app manifest now always displayed on the Administration > Slack integration page for reference, irrespective of integration status.

  • Slack Improve 'Deep Search timed out.' behavior

    Improved Slack integration behavior when a Deep Search takes longer than a few minutes to complete, showing a helpful link preview instead of Deep Search timed out.

  • UI Increase background contrast in dark mode

    Improved contrast for raised and muted backgrounds in dark mode. Fixed code insight centered legend button styling.

  • Blame Fix URLs for blame commits
  • Migrations Enable BestEffortTerminateBlockingTransactions by default

    Schema migrations now terminate blocking transactions by default to prevent upgrades from stalling on long-running queries.

Removed

  • Inference Remove Gemini 2.0 Flash and Flash Lite models

    Removed Gemini 2.0 Flash and Flash Lite models, redirecting usage to Gemini 2.5 Flash

  • Inference Remove deprecated Claude models
  • Observability Remove 'observability.tracing.type: jaeger' option

    The deprecated native Jaeger export option has been removed. To set up a tracing backend, refer to our documentation.

Other

  • Batch Changes Replace native-ssbc-execution FF with site config

    The site config batchChanges.nativeServerSideExecution replaces the feature flag native-ssbc-execution. Support for native-ssbc-execution will be removed in a future release.

  • Administration Move 'OAuth clients' under 'Integrations' category