Merge branch 'main' into brendan/improve-public-api-docs

Author: brendan-kellam

CHANGELOG.md

@@ -7,11 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [4.16.4] - 2026-04-01
+
 ### Added
 - Added `GET /api/diff` endpoint for retrieving structured diffs between two git refs [#1063](https://github.com/sourcebot-dev/sourcebot/pull/1063)
 
 ### Fixed
 - Fixed `GET /api/mcp` hanging with zero bytes by returning `405 Method Not Allowed` per the MCP Streamable HTTP spec [#1064](https://github.com/sourcebot-dev/sourcebot/pull/1064)
+- Fixed tokens with trailing newlines breaking git clone URLs by adding `.trim()` in `getTokenFromConfig()` [#1067](https://github.com/sourcebot-dev/sourcebot/pull/1067)
 
 ### Removed
 - Removed "general" settings page with options to change organization name and domain. [#1065](https://github.com/sourcebot-dev/sourcebot/pull/1065)

docs/api-reference/sourcebot-public.openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Sourcebot Public API",
-    "version": "v4.16.3",
+    "version": "v4.16.4",
     "description": "OpenAPI description for the public Sourcebot REST endpoints used for search, repository listing, and file browsing. Authentication is instance-dependent: API keys are the standard integration mechanism, OAuth bearer tokens are EE-only, and some instances may allow anonymous access."
   },
   "tags": [

packages/shared/src/crypto.ts

@@ -107,7 +107,7 @@ export const getTokenFromConfig = async (token: Token): Promise<string> => {
             throw new Error(`Environment variable ${token.env} not found.`);
         }
 
-        return envToken;
+        return envToken.trim();
     } else if ('googleCloudSecret' in token) {
         try {
             const client = new SecretManagerServiceClient();
@@ -119,7 +119,7 @@ export const getTokenFromConfig = async (token: Token): Promise<string> => {
                 throw new Error(`Secret ${token.googleCloudSecret} not found.`);
             }
 
-            return response.payload.data.toString();
+            return response.payload.data.toString().trim();
         } catch (error) {
             throw new Error(`Failed to access Google Cloud secret ${token.googleCloudSecret}: ${error instanceof Error ? error.message : String(error)}`);
         }

packages/shared/src/version.ts

@@ -1,2 +1,2 @@
 // This file is auto-generated by .github/workflows/release-sourcebot.yml
-export const SOURCEBOT_VERSION = "v4.16.3";
+export const SOURCEBOT_VERSION = "v4.16.4";