August 10th updates

@-mention suggestions in Deep Search conversations are now scoped to the active search context. Repositories outside the selected search context might still be part of the suggestions if they have been recently selected.

Exclude repositories matching specified patterns from Deep Search results using context filters.

Added a toggle in the Deep Search scope picker to control the deepSearch.useDefaultSearchContext setting, allowing users to configure whether to use the default search context without manually editing settings JSON.

The home page now greets first-time users with a prompt box and a "How it works" overview instead of an empty list.

Batch spec executions now emit structured audit events containing the raw spec, commands, coding-agent inputs, and normalized container image metadata.

Code Finder now uses GPT 5.6 Luna as its underlying model.

Sourcegraph OAuth clients can now have a maximum session duration, after which the user will have to reauthenticate completely to get a new access and refresh token pair.

Added support for GPT 5.6 model family to Cody.

Moved files are now indicated with a special icon and badge in the diff viewer and are auto-collapsed by default.

Normal user accounts (as opposed to service accounts) can now also be given unrestricted access to repositories via the GraphQL API.

Added cloud_instance_gcp_project_id column to Enterprise Portal subscriptions table to track GCP project IDs for Sourcegraph Cloud instances.

Enterprise Portal displays an environment badge ("Dev" or "Local") in the header when running in non-production environments to help distinguish them from production.

License issuers must now explicitly select user cap enforcement (hard-capped or soft-capped) when creating limited-user licenses.

Fixed excessive spacing between the Deep Search prompt editor and suggested searches.

Fixed repository and revision rows in search context detail pages rendering outside their table in Safari.

Fixed an issue related to batch changes where a merged PR would show up as failed.

Changeset sync jobs for changesets missing credentials are now deprioritized and backed off to prevent them from starving healthy sync work.

Agent conversations now remain pinned to the bottom while responses stream, even when Markdown rendering or tool steps cause layout changes.

• Repository selection in agent guidance settings now suggests repositories and validates selections before saving.
• Agent guidance settings pages are now labeled as Beta.
• Added link to personal guidance settings from Deep Search.
• Fixed Path field alignment in the guidance configuration form.
• Normalized section header icon sizing and centering.

Fixed timeline markers being unresponsive to hover when adjacent to open previews

Fixed timeline rail overlay blocking header controls in agent conversations

Access token curl examples now use double-quoted arguments with escaped quotes on Windows while preserving single-quote syntax on other platforms.

Fixed Cody Web chat failures when browsers advertise zstd compression support.

Fixed runtime database user provisioning to grant access to the active schema instead of only public, ensuring non-superuser deployments work correctly with custom PostgreSQL schemas.

Fixed jitter when quickly navigating between files in the diff list view.

• Executor installations now include the batch-exec helper binary from published artifacts, ensuring version compatibility
• Executor validation reports missing batch-exec binary and provides installation instructions

Support sending GitHub and GitLab auth tokens via HTTP headers instead of query parameters

The worker service waits up to 5 seconds for the Redis instance to become available before continuing without it. This minimizes occurrences where worker jobs are processed without enforcing the correct rate limits.

Upgraded @grpc/grpc-js to 1.14.4 to fix two high-severity remote denial-of-service vulnerabilities (CVE-2026-48068 and CVE-2026-48069) that could crash the docs server.

Added grant-scope picker to tool-approval UI, allowing users to grant agent access to a secret once (default), for the duration of the session, or permanently.