JULY 09, 2025

Sourcegraph 6.5

A newer version of Sourcegraph is available: Sourcegraph 6.12.

Highlights

OAuth 2.0 support for secure API access

Enterprise customers can now use OAuth 2.0 to securely connect apps and scripts to Sourcegraph APIs with support for OIDC, PKCE, device auth, and M2M tokens.

Enterprise customers can now use OAuth 2.0 to securely connect apps and scripts to Sourcegraph APIs, just like you would with GitHub or GitLab. This includes full support for OIDC, PKCE, device auth, and M2M tokens.

With short-lived access tokens, your tools can act on behalf of users, making it easier to build custom automations and workflows on top of Sourcegraph. If you’ve been blocked from integrating because auth was missing or hard to manage, this clears the path.

Admins can create OAuth clients under Site admin > OAuth clients and use them to integrate with Sourcegraph via standard OAuth procedures.

Service accounts for secure API integrations

Service accounts let admins create non-UI actors with API access - ideal for secure, controlled integrations.

We’ve introduced service sccounts, a new way for administrators to create Sourcegraph actors that are designed specifically for API access without UI access or user credentials.

Create user form with service account option

Service accounts are useful in a number of ways:

No email or password required
Managed by admins
Accessed via token
No UI login capability

This gives enterprise teams a more secure and standardized way to integrate with Sourcegraph, perfect for automated workflows or custom tooling that interacts with our API.

While adoption is optional, customers building API-driven integrations will benefit from stronger access control, better auditability, and alignment with a supported integration pattern.

Learn more about service accounts in our docs.

Expanded context windows for Cody Chat

We've increased input and output context limits across models to support more powerful, large-scale coding workflows.

Developers increasingly want to work with more context, whether it's reviewing all files in a pull request, generating a new Dockerfile based on all others in a repo, or reasoning across a large set of project resources. But context limits have traditionally capped how much they can reference in a single request, leading to fragmented workflows or lower quality responses.

To help with this, we're expanding both input and output context windows in Cody Chat for Cody Enterprise customers.

Input context window (via @mention):

Claude & Gemini: ~115k tokens
OpenAI o-series: ~43k tokens
OpenAI GPT-series: ~52k tokens

Output context window:

All models: 16k
Reasoning models: 100k

Learn more about context windows in our docs.

Details

Improvements

Code Search Add a new Code Insight for tracking inventory statistics over time
- Combines features of the Language usage and Detect and track patterns insights to track code inventory metrics over time:
  - lines of code
  - size of code
  - file counts
- Can group those metrics by repository, by language, or not at all
- Can collect the metrics for a list of repositories, or a repo search query
Code Search Add graphql endpoints for inventory stats insight
- New GraphQL endpoints
  - query:
    - inventoryStatsPreview
  - mutation:
    - createInventoryStatsInsight
    - updateInventoryStatsInsight
Code Search Expose Inventory settings in site config
- The Inventory environment variables have been moved into site config settings (in the "inventory" section):
  - USE_ENHANCED_LANGUAGE_DETECTION: "disableEnhancedLanguageDetection" (defaults to false)
  - GET_INVENTORY_GIT_SERVER_CONCURRENCY: "gitServerConcurrency" (defaults to 4)
  - GET_INVENTORY_REDIS_CONCURRENCY: "redisConcurrency" (defaults to 20)
  - GET_INVENTORY_MAX_INV_IN_MEMORY: "maxInventoryInMemory" (defaults to 1000)
  - GET_INVENTORY_TIMEOUT: "timeoutInMinutes" (defaults to 5)
Batch Changes Changesets without merge requests in Batch Changes
Batch Changes Add experimental icon + code host limits to pushed-only changesets UI
- Add experimental icon + GitLab/GitHub only specification for pushed-only changesets in batch changes UI
Backport 04be437 from #6180
Batch Changes Enable bulk ops for pushed-only-changesets (github only)
- Add 'push only' bulk operation for Github
Analytics Improve updateCheck to check for canonical version
- feat(telemetry): add canonical PG version check for detecting external db usage
Authentication Service Accounts for secure API integrations
Cody Expanded context windows for Cody Chat
Rel Add granular telemetry for external databases
[telemetry] add granular database telemetry.
Release ConnectRPC endpoints for VerifyExecutorsRelease
- releaseplatform: add rpc endpoint for VerifyExecutorsWorkflow
Release Fix handler initialization and add testing
- Correct handler init for gcp and aws clients in releaseplatform, add testing
Release Add support for aws and gcp client initialization options
- releaseplatform: added secret injection to aws and gcp clients
Release Add aws verification to temporal executors check workflow
- add aws verification to VerifyExecutorsRelease temporal workflow
Rerun Changesets Warn when rerunning a changeset triggers more changesets to be rerun
- GIN index to efficiently search workspace by changesetSpec
- resolver endpoint to get workspace from changesetSpec
- UI warning in preview step
Uncategorized Add a tooltip on the retry button
Adds a tooltip to the retry button on the batch changes preview page.

Fixes

Batch Changes GitLab webhooks for merge requests not associated with batch changes now return HTTP 204 instead of HTTP 500 errors
fix(batches): GitLab webhooks for merge requests not associated with batch changes now return HTTP 204 instead of HTTP 500 errors
Backport b5e926187d14784ea9a51fefca626379a25bda3e from #6052
Batch Changes Don't sync changesets from soft-deleted namespaces
fix(batches): fixed an issue where Batch Changes would attempt to sync changesets from deleted namespaces resulting in delays and timeouts for active changesets
Batch Changes Fix label unmarshalling for gitlab events
fix(batches): fixed an issue where GitLab merge request events would fail to handle labels
Code Insights Skip empty repos for inventory insights
fix(insights): skip empty repos for inventory insights
Backport beee9d2241a4d3e854ac06ef8b5d8d000bd84a69 from #6250
Cody Gateway Update Claude 4 sonnet model tiers
green ci
Migrator Remove links to sourcegraph/sourcegraph repo in drift summary
- fix(migrator): remove private repo links in migrator drift output
Backport 4ae3c3a6b6d60bb99421293df830a9e63a53ae01 from #6463
Pre Commit Don't flag service account configuration as a credential
- make google cred pre commit hook more precise
Source Retry watching executor pods
Fixed an issue where Sourcegraph would mark executor jobs as failed when briefly losing connection to a pod, even though the pod was still running.