Changelog June 15th updates
June 15, 2026

June 15th updates

Highlights

Longer Deep Search conversations with automatic compaction

Deep Search will automatically compact long conversations when a follow-up question is close to the context window limit.

Details

Improvements

  • Deep Search Enable compaction by default

    Deep Search now keeps long running conversations moving with automatic context compaction.

  • Deep Search Enable Finder in Deep Search by default

    Deep Search now uses a fast subagent to find relevant files, reducing its context usage.

  • Deep Search Add better sub-agent timeout logging

    Added detailed logging for Deep Search sub-agent timeouts, including context errors, duration, token counts, and tool call information to aid in debugging timeout issues.

  • Deep Search Export topic keywords in search.categorized telemetry event

    Export topic keywords in search.categorized telemetry event for Deep Search queries

  • Deep Search Mark MCP-created conversations

    Deep Search conversations triggered from MCP now display a "Triggered from MCP" badge.

  • Deep Search Support follow-up questions in MCP tool

    Deep Search tool now supports follow-up questions, enabling agents to ask additional questions within an existing Deep Search conversation.

  • Batch Changes Add code hosts page for user settings

    The user-specific Batch Changes settings have been updated to make managing Batch Changes credentials and secrets easier.

  • Batch Changes Configurable changeset-sync concurrency

    Now configurable via CHANGESET_SYNC_WORKER_NUM_HANDLERS

  • Batch Changes Rework admin UI for code host credentials

    Reworked admin UI for configuring code host credentials in Batch Changes, with improved PAT creation links that pre-select necessary scopes.

  • Executors Add events endpoint

    Added a per-queue events endpoint for executors to publish events to

  • GraphQL Expose zoekt last index status and failure message

    The "textSearchIndex" field on the debug API now includes two new fields: "lastIndexStatus" and "lastIndexFailureMessage". "lastIndexStatus" represents the last status Zoekt reported to Sourcegraph. "lastIndexFailureMessage" contains the error message and is nullable. The error message is truncated to 12KiB and set to null on the next successful index.

  • Observability Update go.opentelemetry.io/collector to v1.60.0/v0.154.0

    Upgrade open telemetry collector v1.57.0/v0.151.0 -> v1.60.0/v0.154.0

  • RBAC Alphabetically sort permissions and roles

    RBAC permissions and roles are now sorted alphabetically.

  • Github App Show kind and commit signing installation guidance

    GitHub App admin detail page now displays the app kind. For commit-signing batch changes apps, a warning banner appears when there are no installations, and guidance clarifies that commits will not be signed for organizations or repositories where the app is not installed.

  • Github App Show the creator on the GitHub App admin page

    The GitHub App admin detail page now displays who created the app, making it easier for site admins to audit and manage code host connections.

Fixes

  • Deep Search Make turn errors copy-able

    Error badges in Deep Search tool results are now clickable to copy the full error message.

  • Deep Search Show finder agent responses below internal tool calls

    Fixed Deep Search subagent cards so agent responses appear below their tool calls

  • Deep Search Hide partial steps for errored messages
  • Code Search Restrict zoekt options override to users with OBSERVABILITY#READ

    Restricted usage of zoekt-search-opts override to users with OBSERVABILITY#READ permission

  • Batch Changes Add links to the settings that were moved
  • Batch Changes Show commit signing badge on admin code host cards
    • Site admin Batch Changes code hosts page: host cards now show a "Commit signing" badge next to "Configured" when commit signing is set up for the site credential — either via a commit-signing GitHub App or an SSH signing key generated with the credential.
    • The manage view's "Commit signing" metric previously showed "Off" when the credential had an SSH signing key; it now reports "Configured" using the same shared helper.
    • The SiteAdminBatchChanges_CodeHost fragment now selects credential.commitSigningPublicKey, and the Playwright spec mocks/snapshots were updated to pin the new fields.
  • Batch Changes Enforce authorization on workspace file endpoints

    Batch Changes workspace file HTTP endpoints (/files/batch-changes/...) now require the BATCH_CHANGES RBAC permission: READ for retrieving/checking files and WRITE for uploads. File retrieval and existence checks are additionally restricted to the batch spec's creator or a site admin, and the file lookup is bound to the batch spec in the URL so a caller cannot pair a spec they own with another user's file ID. Internal actors (the executor route, authorized via job tokens) are exempt from these checks and behave as before.

  • Batch Changes Skip corrupted cache entries
  • Authentication Avoid revoking fresh tokens after refresh races

    Fixed an issue where concurrent OAuth token refresh requests could incorrectly revoke valid access tokens due to race conditions in refresh token rotation.

  • Executors Update nodejs in bundled-executor

    Updated Node.js to v24 LTS in bundled executor

  • Security Cap recordEvents batch size to prevent DoS

    Limited the telemetry recordEvents GraphQL mutation to 1,000 events per request to prevent application-level DoS via oversized input arrays.

  • Security Improve consent-screen warnings regarding untrusted redirect uris and mcp scope

    Added consent-screen warnings for unrecognized OAuth redirect destinations and clarified the MCP scope grants read access to private code, helping users spot phishing during authorization.

  • Security Shell-escape attacker-controlled filenames in batch change templates

    Batch change templates now shell-escape filenames in repository.search_result_paths, steps.*_files, previous_step.*_files, and step.*_files to prevent shell injection attacks from maliciously named files in target repositories.

  • UI Fix threads messages layout in agentic UI

    Fixed layout issues in agentic UI threads messages display

  • Scim Support case-only email PATCH requests

    Fixed handling of SCIM PATCH requests that update a user's email with only a casing change (example: [email protected] → [email protected]).

Removed

  • Code Intel Remove feature flag for using legacy codeintel API