October 30th updates
See what changed in Sourcegraph.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
Sourcegraph services and executors no longer trust certificates issued through the compromised eMudhra intermediate CAs (CVE-2026-111943).
The private keys of eight eMudhra intermediate CA certificates were generated incorrectly and can be recovered from the certificates themselves. Sourcegraph services and executors could have trusted TLS certificates issued through these intermediates on outbound connections, such as connections to code hosts.
Sourcegraph Cloud services already include the fix, but Cloud customers using Sourcegraph Connect must also upgrade the agent deployed in their own network. Self-hosted customers should upgrade Sourcegraph and their executors to 8.1.1335 or later. Auto-indexing indexer images are not yet updated on Cloud or in 8.1.1335, and customers who set indexer images in their configuration must update them now.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
Keep excluded repositories and files out of reach of Agentic Batch Changes with context filters.
Agentic Batch Changes now honors an administrator-defined exclusion list. A repository or file matched by a context filter is invisible to its agents.
The filters apply at every point where the agent touches code. The coordination agent cannot search or read excluded content, workspaces in excluded repositories are neither resolved nor executed, and publishing from an excluded repository is refused. The configuration validator reports invalid rules that do not compile, and if an invalid rule reaches the agent through file-based configuration, every repository is blocked until the rule is fixed.
agents.contextFiltersThe deepSearch.contextFilters site configuration key is deprecated in favor of agents.contextFilters.
Read moreThe Sourcegraph Model Provider automatically routes requests for Claude models around provider failures and restores normal routing when the provider recovers.
When a model provider has an outage or runs out of capacity, you shouldn't have to wait for a manual routing change. Sourcegraph Model Provider, the service that connects Sourcegraph to different upstream providers, now automatically routes Claude model requests away from a failing provider to an available alternative serving the same model.
This failover is enabled for all enterprise customers through the Sourcegraph Model Provider, on both Sourcegraph Cloud and self-hosted instances. There is nothing to configure or upgrade on your instance.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
Easily access code navigation and documentation from diffs.
Our Compare page now supports code intelligence while viewing diffs. Access documentation, look at definitions, or navigate to references across your entire codebase, right from the diff without friction. This of course uses our leading in class, compiler accurate precise code intelligence.
Agentic Batch Changes now explains why a changeset failed to publish and what to do about it.
When a changeset fails to publish in Agentic Batch Changes, the Resolve view now tells you why and how to fix it. Before, every failure looked the same: a generic Failed badge and a raw error from the code host.

Queue workspaces in Agentic Batch Changes instantly, even while the agent is busy.
Clicking Execute in Agentic Batch Changes now queues the selected workspaces right away, even while the agent is in the middle of a turn. A toast shows what was queued, what was skipped, and why.
Before, the button sent the agent a chat message asking it to run them. You waited on a model turn for something the server can do on its own, and the request showed up in the conversation as if you had typed it. A button should do what it says, and the agent should be told, not asked.
Guided wizards help administrators connect code hosts without writing JSON.
Administrators can now connect code hosts through guided wizards instead of editing JSON. Each wizard walks through connection details and authentication, helps you find repositories with search and query previews, and offers optional advanced settings.
Unblock Batch Change PRs with commit signing keys for your existing GitHub or GitLab credentials.
Signed-commit rules blocked the merge of pull requests that Batch Changes opened for you. You can now generate an SSH commit signing key for your existing GitHub or GitLab credential in Sourcegraph, without help from an administrator.
Go to Settings, Batch Changes, and Code Hosts. Click Generate signing key, and add the public key to your code host. Commits that Sourcegraph pushes for you from then on carry a Verified badge and pass the rule. Existing commits are not updated.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
Take control of your codebase with Agentic Batch Changes.
Codebases are growing and changing faster than ever, but the problem of maintaining systems - old and new - is not going away for codebase owners. More of the code is written by agents now, and fewer people can hold the whole codebase in their head. The changes that touch everything (migrations, upgrades, security fixes) are the ones that keep getting deferred.
See what changed in Sourcegraph.
See what changed in Sourcegraph.
Code Finder now supports searching a specified branch, tag, or commit.
Code Finder can now search a specified revision, including a branch, tag, or commit.
Use it to investigate regressions at exact commits, find code on non-default release branches, or explore older release tags.
The minimum supported GitHub Enterprise Server version is now 3.4.
Read moreSee what changed in Sourcegraph.
Our fast, efficient MCP tool for finding relevant code is now generally available.
Following the Code Finder Beta period, Code Finder is now generally available through the Sourcegraph MCP server. Code Finder is an agent optimized specifically for code search that helps coding agents quickly locate relevant implementations, configuration, tests, or documentation within a repository. It returns a concise summary with links and line ranges, giving your agent focused results it can immediately use.
Visit Enterprise Portal to learn more about this feature's credits usage, or see the documentation.
See what changed in Sourcegraph.
Understand large diffs with a guided tour.
Large diffs are hard to review because there's no natural order to follow. Guided diff tour groups related files into sections, orders them into a suggested reading path, and adds short explanations so you can review quicker and with more confidence.
See what changed in Sourcegraph.
Sourcegraph is reinforcing the technical safeguards that enforce geographic access restrictions.
We are reinforcing the technical safeguards that enforce our geographic access restrictions. These updates are in line with the supported access you already expect from Sourcegraph, to meet Sourcegraph and your obligations under applicable law and requirements from the AI providers our products rely on.
As always, access to Sourcegraph products is permitted in supported regions only. These updates are solely designed to make it easier for Sourcegraph and our customers to meet their contractual and legal obligations.