Changelog What's new

What's new

April 27, 2026

Highlights

Quantitative answers in Deep Search

Details

Improvements

  • Deep Search Make diff search accept array of authors

    Diff search can now filter by multiple authors.

  • Deep Search Add Deep Search scope keyboard shortcut

    Added keyboard shortcut (Cmd/Ctrl+Shift+,) to open the scope picker directly from the Deep Search composer.

  • Deep Search Evaluator tool for code execution

    Added a code execution 'evaluator' tool to Deep Search that allows sandboxed Lua scripts to call keyword, regex, commit or diff searches and process results programmatically.

  • Batch Changes Add commit signing toggle to OAuth credential flow

    Added commit signing toggle to OAuth credential configuration flow for batch changes. Users can now enable SSH commit signing when configuring credentials via OAuth (GitHub, GitLab), matching the functionality previously available only in the PAT flow.

  • Administration Show last event received date for webhooks
  • Administration SITE_CONFIG, EXTSVC_CONFIG json support

    As an alternative to SITE_CONFIG_FILE and EXTSVC_CONFIG_FILE, the entire contents of advanced configuration and external service configuration can now be provided using SITE_CONFIG and EXTSVC_CONFIG respectively.

  • GitHub Link webhooks to apps correctly and clean up when app deleted

    When creating a GitHub App from Sourcegraph, the corresponding webhook handler is now linked to the App, and deleting the App in Sourcegraph deletes the webhook handler as well.

  • RBAC Add user management admin permissions

    Non-site-admin users can now manage users, organizations, roles, and permissions when explicitly granted USER_MANAGEMENT#{READ,WRITE} RBAC permissions.

  • RBAC Add integration management admin permissions

    Added INTEGRATION_MANAGEMENT#{READ,WRITE} RBAC permission to allow non-site-admin users to manage Slack, incoming webhook, and outbound webhook integrations

  • RBAC Add entitlement admin permissions

    Non-site-admin users can now manage entitlements when explicitly granted ENTITLEMENT#{READ,WRITE} RBAC permissions.

Fixes

  • Deep Search Scope list_repos by search context id

    Scoped listRepos to the active search context when a repo-defined search context is selected.

  • Deep Search Recover from failed conversation creation
  • Code Search Select suggestions by position

    Fixed an issue where multiple suggestion rows could appear selected simultaneously during Query assist refreshes

  • Code Search Intersect identical rev:at.time revisions across repo patterns
  • Batch Changes Improve select all of changesets on batch changes preview page

    The Select all button now appears consistently and is more responsive while selecting all changesets on the preview page.

  • Batch Changes Improve select all of changesets on batch changes detail page

    Select All on the batch changes changeset details page will now lazy select all changesets.

  • Authentication Add sign out button to password reset page
  • GraphQL Restore repository createdAt field

    Restored the GraphQL field Repository.createdAt to return the persisted repository timestamp instead of synthetic time.Now() data.

  • Licensing Fix config watcher to write license state to correct Redis key

    Fixed license key changes taking up to an hour to take effect.

  • RBAC Improve RBAC permission error message formatting

    Improved RBAC permission error message formatting for better readability (e.g. "missing READ permission for REPO_MANAGEMENT" instead of "user is missing permission REPO_MANAGEMENT#READ").

  • Security Upgrade github.com/go-jose/go-jose

    Upgraded github.com/go-jose/go-jose to address CVE-2026-34986, a potential denial of service vulnerability in JSON Web Encryption decryption.

  • UI Polish web app UI components
    • Adjusted core navigation popover positioning
    • Fixed button shadows in icon variant
    • Fixed code insights creation UI layout
    • Removed pressed translation CSS rule to prevent layout shifts
    • Fixed resizable panel bug when conditionally rendering panels
    • Simplified search result UI by removing unnecessary headings
  • Frontend Handle /-/logout and guard middleware against nil next
  • Notifications Automatically clear repository sync failure notification

    Repository sync failure notifications are automatically cleared after a successful sync

  • Searcher Count content matches when both path and content match

    In non-indexed regex search, when both path and content matching are enabled, searcher now evaluates content even when paths match, ensuring content matches contribute to result counts and aligning counting semantics with indexed search.

Removed

  • Code Intel Remove squirrel callers from frontend

    Hover tooltips, highlights, and basic code navigation in search-based mode are now powered by Syntactic code navigation.


April 20, 2026

Highlights

Smart hover summaries now in Beta

Search contexts in Deep Search

Search your Git graph in Deep Search

Details

Improvements

  • Deep Search Add list_refs, check_ancestry tools for improved versioning searches

    Deep Search can now more efficiently answer questions about which versions and releases contain a specific commit or fix.

  • Deep Search Update sharing notice to clarify code visibility

    Clarified Deep Search sharing notice to explicitly indicate that code will be visible to anyone with the link.

  • Deep Search Convert history sidebar to inline layout

    Converted Deep Search history sidebar from fixed overlay to inline layout that persists state across reloads

  • Analytics Add service account field to user metadata export

    Include whether a user is a service account in opt-in user metadata exports.

  • Inference Add support for Opus 4.7

    Added support for Opus 4.7 model in Cody with adaptive thinking.

  • Inference Normalize stop reasons across LLM providers

    Normalized LLM provider stop reasons into a consistent enum, enabling provider-agnostic error handling for refusal and content filter cases in deep search and subagents.

  • Licensing Allow AI features for plans including Cody

    The Code Intelligence Platform and Cody Enterprise plans no longer require a separate license key to use AI features beyond Cody. Deep Search, AI query assist, and future AI features are now automatically enabled on these plans.

  • RBAC Implement Batch Changes read-only permission

    Implemented the BATCH_CHANGES#READ permission. This enables administrators to create a role where users can view, but not edit or create Batch Changes.

  • Notices Add adminOnly attribute to hide banners from non-admins

    Added adminOnly attribute to notices configuration, allowing site administrators to create banners visible only to other admins.

  • Objects Lsif-uploads, search-jobs fall back to unified sourcegraph bucket

    Self-hosted Sourcegraph no longer requires separate buckets for LSIF uploads and search jobs: a single SOURCEGRAPH_UPLOADS_ bucket can now be used for all features. Existing configurations for AWS S3 and GCS object storage will be respected for LSIF uploads and search jobs. To learn more, refer to https://sourcegraph.com/docs/self-hosted/external-services/object-storage

  • Objects Add check for soft-required new 'sourcegraph' bucket

    Added warning to administrators when the new sourcegraph bucket requirement is not fulfilled. Self-hosted customers using GCS or AWS S3 will soon need to manually prepare this bucket - see https://sourcegraph.com/docs/self-hosted/external-services/object-storage for more details.

Fixes

  • Deep Search Drop buggy NEW IS NOT NULL guard in search-queue trigger

    Fixes a bug where some deep search conversations were not indexed for conversation search. This change triggers a full rebuild of the search index for conversation search, which happens in the background.

  • Deep Search Fix conversation search after title changes

    Conversation search now correctly finds conversations after their titles have been changed.

  • Deep Search Surface tool call errors in UI

    Deep search now displays tool call errors instead of silently showing no results.

  • Code Search Fix inverted logic in commit date filter suggestions

    Fixed incorrect commit date filter suggestions for "Last week" and "Last month" options, which were using before: instead of after:.

  • Code Search Fix symbol and conversation search in command palette

    Fixed symbol search and conversation search not returning results in the command palette.

  • Code Intel Remove deprecated PRECISE_CODE_INTEL_UPLOAD_TTL environment variable

    Removed deprecated PRECISE_CODE_INTEL_UPLOAD_TTL environment variable. Configure CODEINTEL_UPLOADSTORE_EXPIRER_MAX_AGE on the worker container instead.

  • Authentication DCR ignores ports for loopback redirect URIs

    MCP clients using random ports in redirect URIs no longer require reauthentication when the port changes.

  • GitLab Update GitLab native integration for compatibility and dark mode
    • Fixed GraphQL API requests by adding required Content-Type header
    • Fixed code intelligence hover popovers by updating permalink selector for modern GitLab versions
    • Added dark mode support for code intelligence hover overlays
    • Updated Sourcegraph logo in hover overlay
  • MCP Accept Bearer token on API for MCP spec compliance

    MCP endpoints now accept Personal Access Tokens using the standard Authorization: Bearer <token> format for compliance with the MCP authorization specification (RFC 6750).

  • Security Fix cross-site scripting via unescaped repository file paths

    Fixed cross-site scripting vulnerability where repository file paths containing HTML metacharacters could execute arbitrary scripts when viewing file diffs.

  • Webhooks Fix GitHub icon visibility in dark mode

April 15, 2026

No major updates this time.


April 13, 2026

Highlights

Rename Deep Search conversations

Bulk sync changesets available in Batch Changes

Details

Improvements

  • Deep Search Add state transition to fork divider

    Improved visual feedback when forking conversations

  • Deep Search Add fork identity indicators to sidebar and thread header

    Forked conversations display a fork indicator in the sidebar and thread header, with a "View parent conversation" option in the menu

  • Deep Search Add copy button for citation file paths

    Added a copy button next to file paths in the Deep Search citations panel for easier copying to clipboard.

  • Deep Search Rename conversation titles

    Conversation titles can now be renamed by clicking the title or using the rename button in the options menu.

  • Code Search Pass date filters to git log for commit search

    Commit searches with date filters (after: / before:) are now significantly faster on large repositories.

  • Code Nav Add Alt+B keyboard shortcut to toggle git blame

    Added Alt+B keyboard shortcut to toggle git blame view in file viewer

  • Batch Changes Add sync changesets bulk action to batch change detail page

    Batch change admins can now select changesets and trigger a high-priority status sync from the code host using the "Sync changesets" bulk action on the batch change detail page.

  • Administration Add user metadata to usage export

    Usage export now includes user metadata, eliminating the need for additional lookups based on user_id.

  • Azure DevOps Add repos field to Azure DevOps external service

    Add repos field to Azure DevOps external service for explicit repository selection

  • Executors Add retries for git operations

    Retry git operations on executors to improve reliability during gitserver pod shutdowns.

  • Executors Update docker-client package
  • RBAC Add site config admin permission

    Added granular SITE_CONFIG#{READ,WRITE} RBAC permissions for site administration endpoints, allowing non-admin users with the appropriate role to view or modify site configuration options.

  • Prometheus Update node-exporter package

Fixes

  • Deep Search Cancel question when creation is still in-flight

    Fixed an issue where clicking "Cancel" while a Deep Search conversation or follow-up question was being created would be silently ignored. The cancel now executes once the server responds with the conversation/question ID.

  • Deep Search Don't suggest forking when first question hits token limit

    Fixed token limit error incorrectly suggesting to fork on the first question when there's no prior context.

  • Deep Search Treat end of stream as unexpected error
  • Deep Search Fix unequal padding around copy button

    Adjusted copy button positioning in deep search code blocks for more balanced spacing.

  • Deep Search Resolve proper modelRef for summarization

    Fixed summarization failures in Deep Search when token limits are exceeded.

  • Code Search Hoist timeout and count fields

    count and timeout fields now apply consistently across OR expressions in search queries.

  • Code Search Clarify search context tooltip vs @ references
  • Code Search Make all citations and sources always visible

    All citations and sources are now always visible for Deep Search conversations, with consistent counts between the conversation header and the right sidebar.

  • Code Intel Fix hover and go-to-definition for local import definitions
  • Administration Allow deleting all GitHub App kinds

    All GitHub Apps, including ones used for Batch Changes, can now be deleted from the /admin/github-apps page.

  • Administration Provide a value for the oauth scopes checkboxes

    Fixed OAuth client scope selection for admin-created clients

  • Bitbucket Remove broken user profile link
  • Documentation Use correct URL for add Github App docs
  • RBAC Grandfather MCP#ACCESS to service account roles

    Grandfathered in the MCP#ACCESS RBAC role to all existing service account roles to avoid restricting access if your system role previously used MCP.

  • Repositories Skip scheduling repo updates for repos with only suspended external services
  • Repositories Handle edge-case when zero repos are currently on the primary

    Fixed edge-case in gitserver where zero repos on the primary shard caused database errors when syncing repo status

  • Security Update vulnerable dependencies