GitLab group webhook migration | Self-managed GitLab
CodeRabbit updated its webhook migration script so the --group option modifies matching existing group webhooks, validates URLs, and cleans up project-level webhooks within scope.
41 releases · 5 this month
CodeRabbit updated its webhook migration script so the --group option modifies matching existing group webhooks, validates URLs, and cleans up project-level webhooks within scope.
CodeRabbit now allows users to trigger CI fixes on GitLab Cloud merge requests using the @coderabbitai fix-ci command. This feature is currently in beta.
Delta scan triggers | Delta automation now starts a delta Deep Scan after a merge to the default branch once a set number of commits or days have passed since the last scan, or once verified coverage drops below your target. Learn more in the delta scans documentation .
The CodeRabbit IDE extension now features a redesigned sidebar that groups findings and nitpicks by file. It also includes improved AI-driven fix capabilities and simplified CLI and skill installation.
Delta Deep Scans allow for incremental security coverage checks on changed code between full scans. This feature helps maintain security standards by automatically triggering scans when coverage drops.
CodeRabbit's Deep Scan now includes a runtime verification feature that provides a reproducer guide and automated analysis to validate vulnerabilities.
Claude Code rules in Code Guidelines CodeRabbit now reads your Claude Code rules from .claude/rules/ . A rule with paths frontmatter applies only to the files those globs match. A rule without paths gets the scope CodeRabbit infers from its content, like other guideline files.
GitLab migration CSV input You can now migrate project webhooks using headerless CSV lists of project or group IDs, full paths or GitLab URLs with the existing --project and --group flags. Migration mode requires Python 3 and previews changes by default. See the GitLab webhook migration guide for the CSV format and commands.
Autofix is now Fix comments, and Autopilot is now Autofix We renamed two features so their names match what they do: Fix comments (formerly Autofix) fixes the review comments you select, as a one-off repair. Use @coderabbitai fix comments , or @coderabbitai fix comments stacked pr to get the fixes in a separate pull request.
CLI v0.9.0 Manage cloud tasks with cr code , including interactive messages, side questions, plans, and delivery. Complete shell commands and read richer review JSON . Verify signed Linux releases and recover more reliably from login and update failures. Run cr update . See cloud tasks and upgrade details .
AI Deep Scan with linked repositories | You can now give AI Deep Scan context from linked repositories to analyze your primary repository more thoroughly. Source from dependencies, such as a shared authentication library, helps CodeRabbit investigate and verify security findings in the primary repository. Learn more in the linked repositories documentation .
GitLab webhook migration You can now move existing CodeRabbit project webhooks to a new endpoint without recreating them, for one project or the projects in a group. The script's migrate command previews changes by default; --apply updates the URL and destination secret together while preserving hook IDs and event settings.
Author approval control Set reviews.allow_author_approval to false to prevent pull request authors from using @coderabbitai approve and @coderabbitai resolve on their own pull requests. The setting defaults to true , and the pull request's branch configuration cannot re-enable it when disabled. See Explicit approval commands .
Triage for GitLab | is now available in beta for GitLab Cloud and self-managed GitLab organizations on the Team plan and higher. The Triage documentation covers access requirements, prioritization, views, and supported actions.
CLI v0.8.0 Deep review: Added cr review --deep . Included-review availability: Run cr usage to see available included reviews, the rolling window, and when capacity returns. Add --agent for structured output.
CLI v0.8.1 Continue local work in the cloud: Use cr code handoff --summary to start a new cloud Coding Agent task with your session summary, an optional plan, and an automatically discovered transcript when available. Clearer handoff results: See transfer progress, the branch and commit, transferred filenames, and a direct link to the cloud task.
Share TypeScript configuration from another repository Programmatic .coderabbit.config.ts files can now load shared fragments from an authorized repository selected with includeRemote({ repo, path, ref? }) . Omit repo to keep using your organization's central coderabbit repository.
CodeRabbit Triage | CodeRabbit Triage is a single queue of every open pull request your organization is tracking, across repositories, ordered by what each one needs next and what acting on it is worth. It is built for reviewers, code owners, maintainers, and team leads who have more pull requests in front of them than review hours.
Dynamic CodeRabbit configuration with TypeScript Define CodeRabbit settings in a programmatic .coderabbit.config.ts , with PR-aware conditions, reusable merged fragments, local TypeScript/YAML includes, and shared includes from the organization’s coderabbit config repository!
CLI v0.7.7 Review without a local clone: Use cr review --remote owner/repo --base main --source-branch feature to review an installed GitHub repository from any directory. See remote reviews for requirements and limits. Configure reviews from the CLI: Run cr config to create or update repository settings with a preview before saving.
Requested team overrides When Pre-Merge Check override access is restricted with reviews.pre_merge_checks.override_requested_reviewers_only: true , members of a requested GitHub reviewer team can now ignore failing checks. Individually requested reviewers remain eligible, and the pull request author remains excluded. See Pre-Merge Checks for details.
Connections and scopes Connecting CodeRabbit to issue trackers, documentation systems, analytics tools, and other external services used to mean setting up the same service separately for pull request reviews, Agent for Slack, and Agent for Discord.
Project vocabulary | Comment @coderabbitai generate project vocabulary on a pull request to receive an alphabetized Markdown list of up to 50 terms specific to that repository.
Attack surface map | The attack surface map is a living view of the security-relevant parts of that repository: CodeRabbit groups mapped code locations into subsystems, sorts each one into a lane , entry points, trust boundaries, access controls, sinks, or security configuration , and overlays open findings.
Cross-repository targeted guidelines Guidelines sourced from another repository in your organization previously applied globally to the reviewed repository. The { files, applyTo } object form now works for cross-repository sources too: write the guideline document reference in files using the repo:path form, and applyTo defines the source-file patterns that...
AI code reviews.
| Release-notes page | Site | Feed |
|---|---|---|
| Changelog docs.coderabbit.ai | docs.coderabbit.ai | None |