Releasesby IbisRuntime verification for Deep Scan findings | GitHub Cloud | Beta
BetayesterdayUnverifiedAdded Oct 24, 2026
Runtime verification for Deep Scan findings | Deep Scan vulnerabilities now have a Runtime verification tab with a Reproducer Guide: step-by-step instructions for checking in your own staging or test environment whether the issue is real.
Topics: Security, Developer tools
More CodeRabbit releases
Every CodeRabbit releaseClaude Code rules in Code Guidelines | PR Reviews
Claude Code rules in Code Guidelines CodeRabbit now reads your Claude Code rules from .claude/rules/ . A rule with paths frontmatter applies only to the files those globs match. A rule without paths gets the scope CodeRabbit infers from its content, like other guideline files.
GitLab webhook migration with CSV input | Self-managed GitLab
GitLab migration CSV input You can now migrate project webhooks using headerless CSV lists of project or group IDs, full paths or GitLab URLs with the existing --project and --group flags. Migration mode requires Python 3 and previews changes by default. See the GitLab webhook migration guide for the CSV format and commands.
Autofix is now Fix comments, and Autopilot is now Autofix
Autofix is now Fix comments, and Autopilot is now Autofix We renamed two features so their names match what they do: Fix comments (formerly Autofix) fixes the review comments you select, as a one-off repair. Use @coderabbitai fix comments , or @coderabbitai fix comments stacked pr to get the fixes in a separate pull request.
CLI v0.9.0 | CLI, Beta
CLI v0.9.0 Manage cloud tasks with cr code , including interactive messages, side questions, plans, and delivery. Complete shell commands and read richer review JSON . Verify signed Linux releases and recover more reliably from login and update failures. Run cr update . See cloud tasks and upgrade details .
Security merge blocking | GitHub | Advanced, Enterprise | CodeRabbit Cloud
Security merge blocking | You can now block merges while qualifying Security comments remain unresolved on a pull request. Admins can publish the CodeRabbit Security check with a severity threshold, then require it in GitHub to enforce merge blocking. Publishing the check alone does not block merges.
AI Deep Scan with linked repositories | GitHub Cloud | Essentials and above, AI Deep Scan access, Beta
AI Deep Scan with linked repositories | You can now give AI Deep Scan context from linked repositories to analyze your primary repository more thoroughly. Source from dependencies, such as a shared authentication library, helps CodeRabbit investigate and verify security findings in the primary repository. Learn more in the linked repositories documentation .
AI Deep Scan API access | All plans, CodeRabbit Security
AI Deep Scan API access The AI Deep Scan code findings API is available on all plans with a non-agentic API key and the security:read permission. No Enterprise plan, Security add-on, or Security trial is required. Results remain limited to the key's authorized organization or workspace scope.
Repository guideline files in the review summary | PR Reviews
Repository guideline files in the review summary You can now see which of your repository's guideline files CodeRabbit used for a review. The summary lists each file and shows whether it was configured, auto-discovered, or an Agent Skill. Learn more in the Code Guidelines documentation .
Also shipped on Oct 23, 2026
CodeRabbit in October 2026Retrieve Cortex Search (Public Preview)
The CORTEX_SEARCH_RETRIEVE table function is now in public preview, allowing users to execute low-latency search queries directly from SQL for RAG and chatbot applications.
DataFrame caching on serverless compute is now in Public Preview
Databricks now supports DataFrame caching on serverless compute via df.cache() or df.persist(), allowing users to reuse results within a session.
Box Audit Logs managed ingestion connector (Beta)
The Box Audit Logs connector for Lakeflow Connect is now available in beta, enabling the ingestion of enterprise audit events into Databricks.
Manage Test Engine workflows with Terraform and the REST API
Users can now manage Test Engine workflows using the buildkite_test_suite_workflow Terraform resource or the REST API, enabling code-based configuration of monitors and actions.
Flagship - Target Flagship feature flags with structured evaluation context
Flagship now supports nested objects and arrays in evaluation context, allowing developers to target feature flags based on complex user profiles and tags.
Responses API for the Cortex REST API (Preview)
The new Responses API in the Cortex REST API provides OpenAI-compatible endpoints for accessing models.