Merge branch 'main' into konrad/public-api-auth

Author: KonradStanski

CHANGELOG.md

@@ -9,8 +9,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Added documentation for public API authentication in the generated OpenAPI spec and docs. [#101](https://github.com/sourcebot-dev/sourcebot/issues/101)
 
+## [4.16.3] - 2026-03-27
+
 ### Added
 - Added support for `.gitattributes` `linguist-language` overrides in the file viewer ([#1048](https://github.com/sourcebot-dev/sourcebot/pull/1048))
+- Added Basic language syntax highlighting in the file viewer ([#1054](https://github.com/sourcebot-dev/sourcebot/pull/1054))
 
 ### Fixed
 - Fixed Ask GitHub landing page chat box placement to be centered on the page instead of at the bottom. [#1046](https://github.com/sourcebot-dev/sourcebot/pull/1046)

docs/api-reference/sourcebot-public.openapi.json

@@ -2,8 +2,9 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Sourcebot Public API",
-    "version": "v4.16.2",
+    "version": "v4.16.3",
     "description": "OpenAPI description for the public Sourcebot REST endpoints used for search, repository listing, and file browsing. Authentication is instance-dependent: API keys are the standard integration mechanism, OAuth bearer tokens are EE-only, and some instances may allow anonymous access."
+
   },
   "security": [
     {

docs/docs/configuration/idp.mdx

@@ -418,12 +418,16 @@ A Keycloak connection can be used for [authentication](/docs/configuration/auth)
 </Steps>
 </Accordion>
 
-### Microsoft Entra ID
+### Microsoft Entra ID (Azure AD)
 
 [Auth.js Microsoft Entra ID Provider Docs](https://authjs.dev/getting-started/providers/microsoft-entra-id)
 
 A Microsoft Entra ID connection can be used for [authentication](/docs/configuration/auth).
 
+<Info>
+Microsoft renamed Azure Active Directory (Azure AD) to Microsoft Entra ID in 2023. If you have an existing Azure AD setup, these instructions will work for you. The underlying authentication infrastructure is the same.
+</Info>
+
 <Accordion title="instructions">
 <Steps>
     <Step title="Register an OAuth Application">
@@ -570,4 +574,47 @@ A JumpCloud connection can be used for [authentication](/docs/configuration/auth
 </Steps>
 </Accordion>
 
+### Google Cloud IAP
+
+[Google Cloud IAP Documentation](https://cloud.google.com/iap/docs)
+
+Google Cloud Identity-Aware Proxy (IAP) can be used for [authentication](/docs/configuration/auth). IAP provides a layer of security for applications deployed on Google Cloud, allowing you to control access based on user identity and context.
+
+<Info>
+GCP IAP works differently from other identity providers. Instead of redirecting users to an OAuth flow, IAP intercepts requests at the infrastructure level and adds a signed JWT header that Sourcebot validates. This means users are automatically authenticated when accessing Sourcebot through an IAP-protected endpoint.
+</Info>
+
+<Accordion title="instructions">
+<Steps>
+    <Step title="Enable IAP for your application">
+        Your Sourcebot deployment must be behind Google Cloud IAP. Follow [this guide](https://cloud.google.com/iap/docs/enabling-on-premises-howto) by Google to enable IAP for your application.
+
+        After enabling IAP, note the **Signed Header JWT Audience**. You can find this in the Google Cloud Console under **Security → Identity-Aware Proxy → (your application) → Edit OAuth Client → Application settings**.
+
+        The audience will be in the format: `/projects/<project-number>/global/backendServices/<service-id>` or `/projects/<project-number>/apps/<project-id>`.
+    </Step>
+    <Step title="Define environment variables">
+        Set the IAP audience as an environment variable. This can be named whatever you like (ex. `GCP_IAP_AUDIENCE`).
+    </Step>
+    <Step title="Define the identity provider config">
+        Create a `identityProvider` object in the [config file](/docs/configuration/config-file) with the following fields:
+
+       ```json wrap icon="code"
+        {
+            "$schema": "https://raw.githubusercontent.com/sourcebot-dev/sourcebot/main/schemas/v3/index.json",
+            "identityProviders": [
+                {
+                    "provider": "gcp-iap",
+                    "purpose": "sso",
+                    "audience": {
+                        "env": "GCP_IAP_AUDIENCE"
+                    }
+                }
+            ]
+        }
+        ```
+    </Step>
+</Steps>
+</Accordion>
+
 

packages/shared/src/version.ts

@@ -1,2 +1,2 @@
 // This file is auto-generated by .github/workflows/release-sourcebot.yml
-export const SOURCEBOT_VERSION = "v4.16.2";
+export const SOURCEBOT_VERSION = "v4.16.3";

packages/web/src/lib/codemirrorLanguage.ts

@@ -169,6 +169,7 @@ export const codemirrorLanguageMap = {
     "xml": xml(),
     "yaml": yaml(),
     "zig": zig(),
+    "basic": StreamLanguage.define(vb),
     // Legacy CodeMirror 5 modes
     "apl": StreamLanguage.define(apl),
     "ceylon": StreamLanguage.define(ceylon),

packages/web/src/lib/languageDetection.ts

@@ -16,6 +16,7 @@ const ambiguousExtensionOverrides: Record<string, string> = {
     '.txt': 'Text',     // Not Adblock Filter List, Vim Help File
     '.yaml': 'YAML',    // Not MiniYAML, OASv2-yaml, OASv3-yaml
     '.yml': 'YAML',
+    '.bas': 'BASIC'
 };
 
 const extensionToLanguage = new Map<string, string>();

packages/web/src/lib/languageMetadata.ts

@@ -190,7 +190,7 @@ export const languageMetadataMap: LanguageMetadataMap = {
    },
    "BASIC": {
       "iconify": "devicon:visualbasic",
-      "codemirrorLanguage": null,
+      "codemirrorLanguage": 'basic',
    },
    "BQN": {
       "iconify": null,