v4.16.15

What's Changed

• fix(web): restore ServiceError boundary in getFileSourceForRepo by @fatmcgav in #1145
• feat: improve diff tool display and token efficiency by @brendan-kellam in #1146
• fix: override uuid to ^14.0.0 to patch GHSA-w5hq-g745-h8pq by @brendan-kellam in #1147
• chore(web): bump @aws-sdk/credential-providers to ^3.1036.0 (CVE-2026-41650) by @brendan-kellam in #1148

Full Changelog: v4.16.14...v4.16.15

v4.16.14

What's Changed

• feat(web): GitLab MR Review Agent by @fatmcgav in #1104

Full Changelog: v4.16.13...v4.16.14

v4.16.13

What's Changed

• chore: sync vendor/zoekt with upstream sourcegraph/zoekt by @msukkari in #1140
• chore: bump vendor/zoekt with CodeQL security fixes by @msukkari in #1141
• feat(web): expose get_diff on MCP server by @msukkari in #1142

Full Changelog: v4.16.12...v4.16.13

v4.16.12

What's Changed

• fix(worker): prefer newest refs when applying the 64 revision cap by @GitBalake in #1122
• fix(backend): stop Gitea/Forgejo pagination on empty page response by @brendan-kellam in #1130
• fix: add explicit empty permissions to deploy-railway.yml by @msukkari in #1132
• fix: add explicit empty permissions to docs-broken-links workflow by @msukkari in #1131
• fix: validate reviewAgentLogPath to prevent path injection by @msukkari in #1134
• fix(web): prevent XSS via OAuth redirect URI scheme injection by @msukkari in #1136
• fix(query-language): preserve grouped filters in regex mode by @brianphillips in #1138

New Contributors

• @GitBalake made their first contribution in #1122

Full Changelog: v4.16.11...v4.16.12

v4.16.11

What's Changed

• chore(deps): bump protobufjs from 7.5.4 to 7.5.5 by @dependabot[bot] in #1128

Full Changelog: v4.16.10...v4.16.11

v4.16.10

What's Changed

• chore(web): Bump AI sdk dependencies by @brendan-kellam in #1126
• fix(web): Add support for adaptive thinking parameters by @brendan-kellam in #1127

Full Changelog: v4.16.9...v4.16.10

v4.16.9

What's Changed

• feat: add Coastfile for local development by @dahyman91 in #1058
• feat: add thinkingLevel and thinkingBudget config for Gemini models by @brendan-kellam in #1110
• feat(web): rename PostHog chat events, add tool_used tracking, and client-side ask events by @msukkari in #1111
• chore: upgrade Go toolchain 1.25 & zoekt version by @brendan-kellam in #1112
• chore: bump next.js by @brendan-kellam in #1113
• fix: upgrade Alpine packages to resolve CVEs by @brendan-kellam in #1114
• chore: upgrade vitest to v4 by @brendan-kellam in #1115
• chore: bump tsx to ^4.21.0 across all workspaces by @brendan-kellam in #1116
• chore: delete MCP package by @brendan-kellam in #1117
• chore: deduplicate esbuild via resolution by @brendan-kellam in #1118
• chore: remove unused npm and clean up ctags artifacts in Docker image by @brendan-kellam in #1119
• chore: fix security vulnerabilities found by yarn audit by @brendan-kellam in #1121

New Contributors

• @dahyman91 made their first contribution in #1058

Full Changelog: v4.16.8...v4.16.9

v4.16.8

What's Changed

• feat(web): Add Linear issue link card UI for chat responses by @msukkari in #1060
• feat(web): open chat links in new tab with external link icon by @msukkari in #1059
• chore(web): Remove org domain from routes by @brendan-kellam in #1076
• fix: use CURDIR for Zoekt build output in Makefile by @h30s in #1096
• Fix typo in authentication FAQ section by @wschoot in #1099
• feat(web): add reasoningEffort support for Azure OpenAI provider by @brendan-kellam in #1101
• feat(web): add reasoningSummary support for OpenAI and Azure providers by @brendan-kellam in #1102
• feat(web): add per-model temperature configuration by @brendan-kellam in #1103

New Contributors

• @h30s made their first contribution in #1096
• @wschoot made their first contribution in #1099

Full Changelog: v4.16.7...v4.16.8

v4.16.7

What's Changed

• fix(worker): Fix type error by @brendan-kellam in #1093

Full Changelog: v4.16.6...v4.16.7

v4.16.6

What's Changed

• chore(deps): bump underscore from 1.13.7 to 1.13.8 by @dependabot[bot] in #1082
• chore(deps): bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #1083
• chore(deps): bump socket.io-parser from 4.2.4 to 4.2.6 by @dependabot[bot] in #1084
• chore(deps): bump tar from 7.5.9 to 7.5.13 by @dependabot[bot] in #1085
• chore(deps): bump lodash from 4.17.21 to 4.18.1 by @dependabot[bot] in #1086
• chore(deps): bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #1087
• chore(deps): bump express-rate-limit from 8.2.1 to 8.3.2 by @dependabot[bot] in #1088
• chore(deps): bump hono from 4.12.3 to 4.12.10 by @dependabot[bot] in #1089
• chore(deps): bump @hono/node-server from 1.19.9 to 1.19.12 by @dependabot[bot] in #1090
• chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 by @dependabot[bot] in #1091
• chore(deps): bump vulnerable transitive dependencies by @brendan-kellam in #1092

Full Changelog: v4.16.5...v4.16.6