Sourcegraph self-hosted 7.4.0

Deep Search cancellation now requires double-tapping Esc, preventing accidental cancellations.

Deep Search now makes shared conversations easier to find with a dedicated “Shared with me” tab.

Ownership avatars are now shown on all Deep Search conversations.

Allow typing in the prompt editor while Deep Search is processing a query.

Zoekt can now report index failures to Sourcegraph.

Search result headers now wrap more intelligently, allowing result details to flow below action buttons when space is constrained, improving readability and space utilization.

Site admins can now set and clear default search contexts for organizations. Regular users can see their effective default search context and override it for themselves.

After installing a GitHub App, Batch Changes actively polls for credentials for up to 30 seconds and automatically refreshes them if needed, ensuring immediate access without manual intervention.

Batch Changes GitHub App installation now works on instances without external webhook reachability.

Capture response body sizes of chunked responses in the outbound request log

Improved notification visibility for RBAC management actions by displaying messages using toast notifications instead of at the top of the page.

Sourcegraph API now supports manipulating explicit repository permissions, allowing users to be given access to repositories via the API, as opposed to regular permissions syncing from code hosts.

Added telemetry to clarify the executors mode running in a Sourcegraph instance.

Added a reconnect option for user-level GitHub App credentials in Batch Changes settings, allowing users to recover orphaned credentials

The site-admin Batch Changes settings page now displays a banner for each Batch Change GitHub App whose installations exist but whose credential does not. A one-click 'Reconnect' button fires the refreshGitHubApp mutation to repair orphaned installations. The banner is suppressed during the post-install polling window to avoid racing with credentials that are about to land.

Added support for Claude Opus 4.8 to Cody.

Added a limit parameter to the find_references MCP tool to adjust the number of results returned.

Repository administration GraphQL endpoints now use the REPO_MANAGEMENT RBAC permission instead of requiring full site-admin access.

Add per-repo git CLI CPU pprof endpoint to track repository activity

Prevent framing of authentication pages by default to protect against clickjacking attacks. Administrators can opt in to allow framing by setting auth.allowEmbeddedAuth: "true" in site configuration.

Smart hover summaries can now be copied in Markdown format.

Repositories no longer remain stuck in a backoff period (up to 8 hours) after updating code host credentials. The failure counter is now reset when an admin updates the code host configuration with valid credentials.

Added a new user:create outgoing webhook event that triggers when users are created, enabling customers to automate workflows such as assigning explicit permissions.

Optimized Deep Search conversation retrieval to use direct by-id queries instead of full list operations, reducing database load and improving response times.

Fixed resize panel behavior in Deep Search where the source panel would grow uncontrollably and cover other UI elements when using CSS media queries for collapse/expand.

Fixed layout and alignment issues in the citations panel, including file preview headers and source cards. Repository information now wraps responsively when space is limited.

Fixed conversation rendering when viewing a DS conversation referencing repositories you don't have access to.

Fixed Deep Search sidebar not opening on small screens by adding a modal UI for the conversations list.

Polished markdown table styling in answer cards with horizontal scrolling for wide tables, rounded borders, and header backgrounds.

Fixed chips not being cleared from the prompt after message submission and Enter key not submitting messages when only a chip is present.

Prevented cancelled Deep Search queries from reappearing after page refresh.

Fixed stale hover highlight in the Deep Search conversation history panel

When sharing is disabled, the markdown export endpoint and the deepsearch_read tool no longer resolve shared conversations via share tokens. This brings them in line with the web UI, which already honored the setting.

Improved Deep Search prompt to reduce excessive commit searches and provide better context to the finder tool.

Added a retry button for cancelled Deep Search prompts that preserves all content blocks and filters superseded retry attempts from view.

Fixed blame toggle label from wrapping when the symbols sidebar is open in the blob view.

Fixed a race condition in the search "reindex button" where it often did not force a reindex.

Fixed a panic that could occur when processing certain regular expression patterns during search result hydration.

Fixed the Reindex now button to force a full reindex, rather than forcing a potentially noop incremental index.

SCIP upload audit log entries now populate the reason column with the context provided by the backend (e.g. "soft-deleting expired uploads", "upload overlapping with a newer upload") instead of always being empty.

Batch Changes reconciler no longer holds database connections open during code host API calls, reducing connection pool contention.

Fixed an issue where changesets were not rebased when the base revision changed during batch spec re-application.

Fixed an issue where the /admin/permission-syncs page could fail to load if a repository was hard deleted from the database.

Fixed an error when navigating away from the admin roles page

Granting an RBAC role the repo permissions read permission now allows users belonging to that role to access the /admin/permissions-syncs page.

Fixed an issue where the current user count on the /admin/license page included deleted users.

External API user identifier validation now returns CodeInvalidArgument instead of treating invalid formats as internal errors.

The Prompt Library UX will no longer be available when Cody is disabled.

Fixed executors running in Kubernetes using Docker-in-Docker (dind).

GraphQL max settings (graphQLMaxDuplicateFieldCount and graphQLMaxUniqueFieldCount) are now properly respected when configured in site-config.

Fixed permissions sync jobs failing when users are deleted while sync is pending

Fixed an issue where permissions configuration changes were not applied until restart

Improved consistency of the role management page header with other admin pages

• Fixed an issue where clicking Send full response to thread could sometimes time out
• Fixed an issue where it was not always clear to onlookers that someone else had requested to Send full response to thread

• Fixed an issue where relative repository links like /r/github.com/foo/bar would not correctly link to Sourcegraph
• Fixed potential security issues where malicious links generated by the LLM could be rendered unsafely

Increased timeouts for diff and commit search in Deep Search and MCP from 60s to 115s.

Removed batch spec admin page and its backing Query.batchSpecs API.

Added beta warnings for Kubernetes native executor deployment options.