July 27, 2026

July 27th updates

Highlights

Context filters: control the repos and files Deep Search can access

Control which files and repos Deep Search can access with context filters.

Deep Search now honors an admin-defined exclusion list. Anything matched by a context filter is invisible to the agent. The excluded content never shows up in Deep Search's answers, and it can't be read, diffed, or resolved by any Deep Search tool.

A site admin can configure filters under Admin → Configuration → Advanced configuration, inside the experimentalFeatures block. Each rule can match repositories by name, file paths, or both

"experimentalFeatures": {
  "deepSearch.contextFilters": {
    "exclude": [
      // Hide an entire repository.
      { "repoNamePatterns": ["^github\\.com/acme/secrets$"] },
      // Hide secret-bearing files in every repository.
      { "filePathPatterns": ["\\.env$", "\\.pem$"] },
      // Hide deployment config in certain repositories only.
      {
        "repoNamePatterns": ["^github\\.com/acme/backend$"],
        "filePathPatterns": ["^deploy/", "^config/prod/"]
      }
    ]
  }
}

Config changes apply to the next Deep Search run, no restart is required.

Read more in our context filters docs, which cover the matching pattern syntax, how repoNamePatterns and filePathPatterns combine, and working examples of each rule shape.

Search Jobs in the Sourcegraph API

Run exhaustive, codebase-wide searches from your own integrations with Search Jobs in the Sourcegraph API.

Search Jobs have landed in the Sourcegraph API. A Search Job runs your query across every repository, branch, and revision in your codebase. Use it for audits, security reviews, and large scale migrations.

Getting started

Search Jobs are served from the versioned /api/ endpoints and authenticated with access tokens scoped to externalapi:read and externalapi:write. Jobs run asynchronously, and results are available as JSONL once a job completes. Each token only sees and manages its own jobs.

You can explore the available operations and download the OpenAPI schema from the searchjobs service section of the interactive API reference at /api-reference (e.g. https://sourcegraph.example.com/api-reference).

Migrating an existing integration

The Search Jobs operations in the Sourcegraph GraphQL API, now the debug API, remain available and unchanged. For long-term support and a stable integration experience, we recommend building on the new Sourcegraph API instead.

If you have any feedback, please reach out to support@sourcegraph.com.

Details

Improvements

Deep Search Add agent files access audit logs
Batch Changes Add Batch Changes Grafana dashboard

Added a Grafana dashboard for monitoring Batch Changes server-side background workers, queue stores, and stalled-job resetters.
Batch Changes Add indicator for recommended credential method

Added indicator highlighting suggested Batch Changes code host credential method
Agentic Batch Changes Inject inbox event when changeset CI passes

Agentic batch change agents now wake automatically when a changeset's CI passes, even when no onCIFailure hook fired. The resume is labelled "Resumed automatically: changeset CI passed" in the thread timeline.
Agentic Batch Changes Read generated Deep Search files

Read files generated from Deep Search in Agentic Batch Changes
Agentic Batch Changes Add common tools to coding agent base image

The managed coding-agent base image now includes Python 3, ripgrep, and jq by default, avoiding the need to install these tools at execution time.
Agentic Batch Changes Add placeholder for inaccessible Agentic Batch Changes

Agentic Batch Changes links that you can't access now show a placeholder indicating how to request access
Agentic Batch Changes Move workspace count from table footer to column header

Moved workspace count from table footer to column header in the batch change agent detail page, reclaiming vertical space.
Agentic Batch Changes Plan/resolve table and layout UI polish

Polished the batch change agent detail page UI: improved table layout consistency, redesigned workspace column display, updated status badges, added missing empty states, and unified toolbar patterns across plan and resolve views.
Agentic Batch Changes Cross-link and describe executor secrets pages

Batch Changes secrets pages now cross-link between per-user and global secrets. When Agentic Batch Changes is enabled, both pages explain how secret descriptions guide Agentic Batch Changes.
API Document proto client generation in api reference

Added a "Generating a ConnectRPC client" section to the API reference intro docs, showing how to download the proto schema (.binpb) — all services by default, or a comma-separated subset via ?service= — and generate typed stubs with buf. This renders as an always-visible section in the API reference page (built on the proto download added in #14309), so customers can self-serve ConnectRPC/protobuf client generation. The OpenAPI golden snapshot is regenerated to match.
API Add proto schema download to API reference

Added proto schema download to the API reference page. The Download button now offers both OpenAPI schema (.yaml) and proto schema (.binpb) options, enabling ConnectRPC/protobuf consumers to generate typed clients directly from the external API definition (e.g. via buf generate sourcegraph-api.binpb).
API Support managing entitlements via the API
- Added support for managing entitlements via the Sourcegraph API
- Added ability to filter users by account type
Authentication Recommend M2M OAuth credentials for service accounts

Service account access token creation page now displays an informational alert recommending M2M OAuth credentials as an alternative that eliminates manual token rotation.
Inference Add Claude Opus 5

Added support for Claude Opus 5
Own Don't show ownership tabs for repos that don't have a CODEOWNERS file

Hide Ownership tabs for repositories without a CODEOWNERS file.

Fixes

Deep Search Exclude usage limit rejections from question processing error metrics
Code Search Attribute MCP searches to MCP

MCP search tools are now correctly attributed to MCP rather than Deep Search in backend telemetry.
Code Search Update zoekt for ctags timeout fix

Files that time out during symbol computation no longer cause indexing to fail for the entire repository. This resolves a rare issue where large generated files could cause timeouts.
Code Intel Exclude canceled GraphQL requests from RED metrics

Fixed an issue where code navigation request cancellations would incorrectly be counted as errors in SLO statistics.
Code Intel Commit of UploadID is no longer lost

Fixed pagination of code intelligence data
Code Intel Tune janitor sub-jobs based on Stripe learnings

Janitor sub-jobs for cleaning up deleted commits (e.g. on force-pushes) have been tuned to reduce unnecessary DB pressure.
Batch Changes Improve personal credential fallback UI
Batch Changes Explain when SSH push keys are required

Clarified when SSH push key needs to be configured for Batch Changes
Batch Changes Surface credential OAuth errors in user settings

Surface OAuth errors when connecting code hosts for Batch Changes
Batch Changes Avoid transient pending check state before required-check sync

Batch Changes now correctly shows UNKNOWN CI status instead of transient pending/passed states when required check classification is supported but the initial sync has not yet completed.
Batch Changes Preserve review state after merge

Fixed review state for merged and closed changesets that could incorrectly show as pending approval
Agentic Batch Changes Fix bca id page data polling

Fixed an issue where workspaces would disappear from the UI when switching between batch specs until the page was refreshed.
Agentic Batch Changes Complete ask_user on cancel
Agentic Batch Changes Disable default collapsed persisted state for /new page

Fixed thread panel on the /new page to always start expanded instead of using the previous session's collapsed state.
Agentic Batch Changes Limit batch change agent message runtime

Batch Change Agent messages now stop after 24 hours if they do not finish, surfacing a recoverable failure instead of remaining active indefinitely.
Agentic Batch Changes Allow multiple freeform ask_user options

Agentic Batch Changes can now present multiple-choice questions, each allowing free-form input.
Agentic Batch Changes Suspend hidden thread watchers

Fixed an issue where hidden BCA tabs retained idle thread SSE watchers, unnecessarily consuming browser connection budget. Thread watchers now suspend while the page is hidden and reconnect when visible.
Agentic Batch Changes Fail closed on coding agent entitlement check errors
Agents Remove double bottom border on file attachment CSV preview
Code Insights Keep near-coincident chart points from crashing insights

Fixed Code Insights charts failing to load when data points render at nearly identical positions, preserving access to insight edit and delete controls.
Compare Reject markChangedFilesAsViewed files with no blob OID

The markChangedFilesAsViewed mutation now rejects requests that contain files with both srcOID and dstOID set to nil.
Diffs Fix preview comparison empty diff handling
Executors Add Install for batch-exec for single binary install method
- Executor installations now include the batch-exec helper binary from published artifacts, ensuring version compatibility.
- Executor validation reports missing batch-exec binary and provides installation instructions.
Smart hover summaries Eliminate duplicate hover request; improve timeouts

Fixed smart hover summary bugs that could result in additional codeintel resource consumption.
Cody Gateway Forward Anthropic beta headers
Searcher Decouple hybrid path limit

Hybrid search now has a separately configurable changed-path length limit via SEARCHER_HYBRID_MAX_TOTAL_PATHS_LENGTH, with a default of 300 KB.

Removed

Batch Changes Remove Amp batch spec templates

Other

Chore Add outcome metric to changeset sync handler