← Back to all sparks
C

CodeRabbit

DEVOPS
Velocity6.3

AI-powered code review platform that posts line-by-line pull request feedback

CodeRabbit moves review rules into a .coderabbit/ folder that sits next to the code.

code-reviewauto-approvalreview-configmonorepossecurity-scanning
◆Current state
CodeRabbit is moving from commenting on pull requests to deciding on them. Risk instructions let a team say what is routine and what is risky, so CodeRabbit approves the routine ones and a Triage rule can merge them on GitHub Team plans. This week it locked configuration to a protected branch, added a .coderabbit/ directory where review instructions and pre-merge checks live as Markdown per package, and retired Generate docstrings and the Docstring Coverage check.
◆Where it's heading
With approval authority comes tighter control over who writes the rules: protected config branches, then rules stored per package so each service owns its own definition of risky. The product is also trimming side features such as docstring generation to concentrate on review and merge decisions.
◆Prediction
Expect risk instructions and Automatic Approvals to read from the .coderabbit/ directory per package, and more platforms beyond GitHub Cloud getting the directory and config-source controls.

◆Recent moves

  1. 1d ago

    Review rules can live as Markdown in a .coderabbit/ folder

    Review instructions and custom pre-merge checks can now sit as Markdown files in a .coderabbit/ directory, at the root or inside a package, and the closest one applies to each changed file. For monorepos it lets each team own its review rules, which matters more now that CodeRabbit can approve routine pull requests.

    View source ↗
  2. 2d ago

    Docstring generation and Docstring Coverage check retired

    The Generate docstrings finishing touch and the Docstring Coverage pre-merge check are gone, and old settings are ignored rather than rejected. Dropping a side feature fits the narrowing toward review and merge decisions.

    View source ↗
  3. 2d ago

    GitHub repos can lock CodeRabbit config to a chosen branch

    Teams can read CodeRabbit's configuration from the default branch or a named branch that pull request edits can't override. Once CodeRabbit can approve pull requests, keeping a PR from rewriting its own review rules matters.

    View source ↗
  4. 2d ago

    Delta scans fall back to a full Deep Scan when coverage is low

    Delta scans now need 15% verified coverage; below that, or after a too-many-changes refusal, a full Deep Scan runs under full-scan billing. It sets the rules, and the cost, for the delta automation added on 2 November.

    View source ↗
  5. 3d ago

    Workspace API tokens can pick GitHub orgs by login

    API tokens can select GitHub Cloud organizations by login as well as ID. Convenience for API scripts.

    View source ↗
  6. 3d ago

    API and MCP can read review threads and set Triage priority

    Organizations can page through review-thread comments and set Triage priority via REST or the hosted MCP. It lets outside tools and AI agents work with the same review and triage data that now drives approvals.

    View source ↗