JUNE 25, 2025

Sourcegraph 6.5.0

A newer patch release is available: 6.5.2654. See all changes in Sourcegraph 6.5.

Highlights

OAuth 2.0 support for secure API access

Enterprise customers can now use OAuth 2.0 to securely connect apps and scripts to Sourcegraph APIs with support for OIDC, PKCE, device auth, and M2M tokens.

Enterprise customers can now use OAuth 2.0 to securely connect apps and scripts to Sourcegraph APIs, just like you would with GitHub or GitLab. This includes full support for OIDC, PKCE, device auth, and M2M tokens.

With short-lived access tokens, your tools can act on behalf of users, making it easier to build custom automations and workflows on top of Sourcegraph. If you’ve been blocked from integrating because auth was missing or hard to manage, this clears the path.

Admins can create OAuth clients under Site admin > OAuth clients and use them to integrate with Sourcegraph via standard OAuth procedures.

Service accounts for secure API integrations

Service accounts let admins create non-UI actors with API access - ideal for secure, controlled integrations.

We’ve introduced service sccounts, a new way for administrators to create Sourcegraph actors that are designed specifically for API access without UI access or user credentials.

Create user form with service account option

Service accounts are useful in a number of ways:

No email or password required
Managed by admins
Accessed via token
No UI login capability

This gives enterprise teams a more secure and standardized way to integrate with Sourcegraph, perfect for automated workflows or custom tooling that interacts with our API.

While adoption is optional, customers building API-driven integrations will benefit from stronger access control, better auditability, and alignment with a supported integration pattern.

Learn more about service accounts in our docs.

Expanded context windows for Cody Chat

We've increased input and output context limits across models to support more powerful, large-scale coding workflows.

Developers increasingly want to work with more context, whether it's reviewing all files in a pull request, generating a new Dockerfile based on all others in a repo, or reasoning across a large set of project resources. But context limits have traditionally capped how much they can reference in a single request, leading to fragmented workflows or lower quality responses.

To help with this, we're expanding both input and output context windows in Cody Chat for Cody Enterprise customers.

Input context window (via @mention):

Claude & Gemini: ~115k tokens
OpenAI o-series: ~43k tokens
OpenAI GPT-series: ~52k tokens

Output context window:

All models: 16k
Reasoning models: 100k

Learn more about context windows in our docs.

Details

Improvements

Authentication Service Accounts for secure API integrations
Batch Changes Changesets without merge requests in Batch Changes
Cody Expanded context windows for Cody Chat
Batch Changes Add experimental icon + code host limits to pushed-only changesets UI
- Add experimental icon + GitLab/GitHub only specification for pushed-only changesets in batch changes UI
Backport 04be437 from #6180
Code Search Add a new Code Insight for tracking inventory statistics over time
- Combines features of the Language usage and Detect and track patterns insights to track code inventory metrics over time:
  - lines of code
  - size of code
  - file counts
- Can group those metrics by repository, by language, or not at all
- Can collect the metrics for a list of repositories, or a repo search query
Code Search Add graphql endpoints for inventory stats insight
- New GraphQL endpoints
  - query:
    - inventoryStatsPreview
  - mutation:
    - createInventoryStatsInsight
    - updateInventoryStatsInsight
Release ConnectRPC endpoints for VerifyExecutorsRelease
- releaseplatform: add rpc endpoint for VerifyExecutorsWorkflow
Release Fix handler initialization and add testing
- Correct handler init for gcp and aws clients in releaseplatform, add testing
Release Add support for aws and gcp client initialization options
- releaseplatform: added secret injection to aws and gcp clients
Analytics Improve updateCheck to check for canonical version
- feat(telemetry): add canonical PG version check for detecting external db usage
Batch Changes Enable bulk ops for pushed-only-changesets (github only)
- Add 'push only' bulk operation for Github
Rel Add granular telemetry for external databases
[telemetry] add granular database telemetry.
Add a tooltip on the retry button
Adds a tooltip to the retry button on the batch changes preview page.
Release Add aws verification to temporal executors check workflow
- add aws verification to VerifyExecutorsRelease temporal workflow
Code Search Expose Inventory settings in site config
- The Inventory environment variables have been moved into site config settings (in the "inventory" section):
  - USE_ENHANCED_LANGUAGE_DETECTION: "disableEnhancedLanguageDetection" (defaults to false)
  - GET_INVENTORY_GIT_SERVER_CONCURRENCY: "gitServerConcurrency" (defaults to 4)
  - GET_INVENTORY_REDIS_CONCURRENCY: "redisConcurrency" (defaults to 20)
  - GET_INVENTORY_MAX_INV_IN_MEMORY: "maxInventoryInMemory" (defaults to 1000)
  - GET_INVENTORY_TIMEOUT: "timeoutInMinutes" (defaults to 5)
Rerun Changesets Warn when rerunning a changeset triggers more changesets to be rerun
- GIN index to efficiently search workspace by changesetSpec
- resolver endpoint to get workspace from changesetSpec
- UI warning in preview step

Fixes

Batch Changes GitLab webhooks for merge requests not associated with batch changes now return HTTP 204 instead of HTTP 500 errors
fix(batches): GitLab webhooks for merge requests not associated with batch changes now return HTTP 204 instead of HTTP 500 errors
Backport b5e926187d14784ea9a51fefca626379a25bda3e from #6052
Batch Changes Don't sync changesets from soft-deleted namespaces
fix(batches): fixed an issue where Batch Changes would attempt to sync changesets from deleted namespaces resulting in delays and timeouts for active changesets
Batch Changes Fix label unmarshalling for gitlab events
fix(batches): fixed an issue where GitLab merge request events would fail to handle labels
Cody Gateway Update Claude 4 sonnet model tiers
green ci
Pre Commit Don't flag service account configuration as a credential
- make google cred pre commit hook more precise
Source Retry watching executor pods
Fixed an issue where Sourcegraph would mark executor jobs as failed when briefly losing connection to a pod, even though the pod was still running.

Other

Completions: add special cody_debug:::{} prompt syntax site admins can use to measure latency
test: added special debug syntax usable by site admins to measure completions latency.
Bedrock: do not discard IAM machine-credential authentication cache; add support for latency optimized inference
- bedrock: added support for AWS Bedrock Latency Optimized Inference which can reduce autocomplete latency with e.g. Haiku 3.5 models by as much as 40%.
- bedrock: fixed an issue where Cody's AWS Bedrock implementation would incorrectly discard the IAM machine-credential cache, making static access tokens potentially faster in older versions.
Batch Changes Build out metadata enrichment process for gitlab pushed-only changesets, COPY
For some reason, PR 5995 got rebased in a weird way via git-spice, causing it to not get merged to main when its base PR (5974) got merged. This is just us re-issuing PR https://github.com/sourcegraph/sourcegraph/pull/5995.
Feat(deep search): Config for enabling/disabling thread sharing globally on the instance [SPLF-1115]
Deepsearch thread sharing can be enabled or disabled globally on an instance
Feat(deep search): server based routing for deepsearch [SPLF-1110][SPLF-1109]
Adds server based routes for deep search
Feat(deep search): disabled repo permission checks by default [SPLF-1149]
Defaults repo permission checks for sharing deep searches off.
Feat(deep search): Repo permissioning in deepsearch [SPLF-1108]
Adds repo and sub-repo permissioning for deep search threads to enable sharing
Feat(deep search): backend persistence for thread sharing
Deep search threads are persisted in the database allowing for thread sharing
Batch Changes Remove feature flag for pushed-only changesets
remove feature flag for pushed-only changesets
Frontend Update gitignore to include `*.d.ts` files in the `client/ui/` dir
- update gitignore to include *.d.ts files in the client/ui/ dir
To focus ES on code search, skip the editor install step during onboarding - for 6.5 release
- During onboarding, skip the "install Cody in your IDE" step
Deep search: return JSON error from completions/stream
With this change we return JSON errors from the completions/stream endpoint. Before we returned plain text errors.
Rel Src-cli 6.3.0 update
release: src-cli release docs