CodeRabbit

CLI v0.7.1 introduces coderabbit config validate for YAML syntax checking against the official schema, and agent login that uses localhost callbacks instead of requiring an API key or interactive sign-in. Also improved GitLab authentication for large organizations, verified paid-seat guidance for legacy GitHub sessions, and partial review reporting for interrupted agent-driven reviews.

CodeRabbit added six new outbound IP addresses from its infrastructure. Self-hosted GitHub Enterprise Server, GitLab, Bitbucket, and Jira Data Center users must add these to their firewall allowlist to keep reviews and integrations working.

CodeRabbit can now show a "Fix failing CI" checkbox in the Finishing Touches section of the PR Walkthrough when it detects failing CI checks. The checkbox starts the same remediation flow as the @coderabbitai fix-ci command, investigating failures in a sandbox and opening a stacked pull request with proposed fixes.

In-IDE reviews now stay connected and reconnect more reliably during longer sessions, and sign-in routes users through organization selection when they use SSO, belong to multiple organizations, or have multiple sign-in providers.

A new Review > Caches tool lets organizations view and search sandbox caches, with administrators able to delete a cache to force an immediate rebuild.

CodeRabbit Agent can now write reusable procedures (skills) stored in durable memory across sessions, complementing existing durable facts for remembering what the agent should know.

The Connections picker now offers prefilled presets for five MCP servers — Context7, GitHub Copilot, Monday.com, ClickUp, and DeepWiki — filling in provider endpoint and authentication automatically.

Obsolete --plain, --fast, --interactive, --cwd, and --prompt-only flags are removed; use --light, --dir, and --agent. By default, coderabbit review now covers all tracked changes with committed, uncommitted, and include-untracked flags to narrow scope. Too-large reviews now suggest narrower commands with file-count estimates instead of failing.

CodeRabbit now runs @e18e/eslint-plugin v0.5.1 as part of ESLint reviews, flagging unmaintained packages, modern replacements, and opportunities for lighter-weight alternatives. The plugin is enabled by default and can be disabled via reviews.tools.eslint.e18e.enabled.

CodeRabbit now publishes review status and progress through GitHub progress reports and check runs by default instead of commit statuses. Legacy commit status users can opt back in with reviews.commit_status while reviews.review_progress is disabled.

Security Agent now uses repository context — a description of the repository's architecture and business domain — to interpret findings more accurately on full-codebase scans.

Secrets Detection now assigns a verification status—Verified Active, Verified Inactive, or Unknown—to each finding, helping users prioritize confirmed-live credentials. The findings list can be filtered by verification status.

Auto-approval now proceeds once all actionable comments are resolved, ignoring grouped or lower-priority feedback. Failed commit statuses, unresolved review threads, and actionable inline comments can still block approval.

Code Guidelines can now target files outside their parent directory tree using a filePatterns object — the files field locates the guideline document, and applyTo defines which source files it governs. Existing string-form guidelines continue working unchanged.

Users can now connect to Semrush from the Connections catalog using a direct v4 API key or hosted MCP with OAuth or API-key authentication, supporting read-only domain, keyword, competitor, backlink, traffic, paid-search, position-tracking, site-audit, and report queries.

Users can now inspect the full pull request review history, including human and bot approvals, comments, change requests, and pending reviews, directly in the Change Stack Overview. Supports filtering by state or reviewer, latest-per-reviewer mode, timeline sorting, and in-app viewing.

Organization administrators can now view conditional rate-limit impact metrics, including users rate limited, reviews rate limited, and review wait time, on the Billing > Usage page. A warning appears when monthly spend reaches 90% of the configured cap, with an Increase cap action and guided recommendations.

CodeRabbit can now automatically create and maintain an account-wide PagerDuty webhook subscription for Slack and workspace automations after a global admin connects PagerDuty from the automation editor, eliminating manual webhook setup. Default event is incident.triggered.

Repository administrators can now disable the Fix Failing CI and Resolve Merge Conflicts finishing touches by setting the corresponding config options to false. Both remain enabled by default.

Authenticated Bitbucket Cloud and Bitbucket Data Center users can now open Change Stack from the Review Change Stack button, with build statuses and merge blockers surfaced for repository reviewers.