May 25th updates
Details
Improvements
- Deep Search Show ownership avatar on all conversations
Ownership avatars are now shown on all Deep Search conversations.
- Code Search Improve search result header layout wrapping behavior
Search result headers now wrap more intelligently, allowing result details to flow below action buttons when space is constrained, improving readability and space utilization.
- Administration Migrate RBAC management to sveltekit
Improved notification visibility for RBAC management actions by displaying messages using toast notifications instead of at the top of the page.
- MCP Make find references limit configurable
Added a
limitparameter to thefind_referencesMCP tool to adjust the number of results returned. - Security Harden application against Cross-Site attacks
Prevent framing of authentication pages by default to protect against clickjacking attacks. Administrators can opt in to allow framing by setting
auth.allowEmbeddedAuth: "true"in site configuration. - Code Hosts Reset failure counters on credential update
Repositories no longer remain stuck in a backoff period (up to 8 hours) after updating code host credentials. The failure counter is now reset when an admin updates the code host configuration with valid credentials.
Fixes
- Deep Search Fix layout and alignment issues in citations panel
Fixed layout and alignment issues in the citations panel, including file preview headers and source cards. Repository information now wraps responsively when space is limited.
- Deep Search Fix check for HTML presence in AnswerCard
Fixed conversation rendering when viewing a DS conversation referencing repositories you don't have access to.
- Deep Search Polish markdown table styling in answer cards
Polished markdown table styling in answer cards with horizontal scrolling for wide tables, rounded borders, and header backgrounds.
- Deep Search Fix agentic prompt UI chips behavior
Fixed chips not being cleared from the prompt after message submission and Enter key not submitting messages when only a chip is present.
- Deep Search Harden cancellation persistence
Prevented cancelled Deep Search queries from reappearing after page refresh.
- Code Intel Drop unsupported --no-animation scip-go flag
- Administration Exclude deleted users from current user count
Fixed an issue where the current user count on the /admin/license page included deleted users.
- RBAC Tidy up role management page header
Improved consistency of the role management page header with other admin pages
- Slack Fix relative /r/github.com/foo/bar links and security issues
- Fixed an issue where relative repository links like
/r/github.com/foo/barwould not correctly link to Sourcegraph - Fixed potential security issues where malicious links generated by the LLM could be rendered unsafely
- Fixed an issue where relative repository links like