Merge branch 'main' into cursor/development-environment-setup-5c91

Author: msukkari

.github/workflows/release-prod.yml

@@ -126,14 +126,25 @@ jobs:
           echo "Updated version.ts with version v$VERSION"
           cat packages/shared/src/version.ts
 
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile
+
+      - name: Generate OpenAPI docs
+        run: yarn openapi:generate
+
       - name: Configure git
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
       - name: Commit changes
         run: |
-          git add CHANGELOG.md packages/shared/src/version.ts
+          git add CHANGELOG.md packages/shared/src/version.ts docs/api-reference/sourcebot-public.openapi.json
           git commit -m "[skip ci] Release v$VERSION"
 
       - name: Push to temporary branch

CHANGELOG.md

@@ -10,6 +10,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Added AGENTS.md with Cursor Cloud development environment instructions. [#1001](https://github.com/sourcebot-dev/sourcebot/pull/1001)
 
+## [4.15.6] - 2026-03-13
+
+### Added
+- Added generated OpenAPI documentation for the public search, repo, and file browsing API surface. [#996](https://github.com/sourcebot-dev/sourcebot/pull/996)
+
+### Fixed
+- [EE] Fixed account-driven permission sync silently wiping all Bitbucket Server repository permissions when the OAuth token expires on instances with anonymous access enabled. [#998](https://github.com/sourcebot-dev/sourcebot/pull/998)
+- [EE] Fixed Bitbucket Server repos being incorrectly treated as public in Sourcebot when the instance-level `feature.public.access` flag is disabled but per-repo public flags were not reset. [#999](https://github.com/sourcebot-dev/sourcebot/pull/999)
+- [EE] Fixed account-driven permission sync jobs failing when OAuth tokens expire between user visits by moving token refresh into the backend sync flow. [#1000](https://github.com/sourcebot-dev/sourcebot/pull/1000)
+
+## [4.15.5] - 2026-03-12
+
+### Added
+- [EE] Added JumpCloud as an identity provider for SSO authentication. [#997](https://github.com/sourcebot-dev/sourcebot/pull/997)
+
 ### Changed
 - Require explicit invocation of ask_codebase tool in MCP [#995](https://github.com/sourcebot-dev/sourcebot/pull/995)
 - Gate MCP API behind authentication when Ask GitHub is enabled. [#994](https://github.com/sourcebot-dev/sourcebot/pull/994)

Dockerfile

@@ -220,6 +220,9 @@ RUN chown -R sourcebot:sourcebot /app
 # Copy zoekt proto files (needed for gRPC client at runtime)
 COPY --chown=sourcebot:sourcebot vendor/zoekt/grpc/protos /app/vendor/zoekt/grpc/protos
 
+# Copy OpenAPI docs
+COPY --chown=sourcebot:sourcebot docs/api-reference/sourcebot-public.openapi.json /app/docs/api-reference/sourcebot-public.openapi.json
+
 # Copy all of the things
 COPY --chown=sourcebot:sourcebot --from=web-builder /app/packages/web/public ./packages/web/public
 COPY --chown=sourcebot:sourcebot --from=web-builder /app/packages/web/.next/standalone ./