CodeRabbit

CodeRabbit helps teams review, understand, govern, and trust agent-generated code:

[CodeRabbit @coderabbitai]

1,049,817 open-source code reviews in September, a new monthly record!

That's 2.49x April's volume and up 14.4% from August.

"Not using it today would be like racing Formula One without a seatbelt or helmet." – @tannerlinsley, creator of TanStack

[Hendrik Krack @HKrackDev]

Forgot to grab a good photo with you all, but I really enjoyed joining you at ThunderPlains @techlahoma! Thanks to @vlucas and the Techlahoma team for having me.

Slides & Github Repo in the comments 👇

[CodeRabbit @coderabbitai]

350,666 installs on GitHub marketplace 🎉

400k soon?

[CodeRabbit @coderabbitai]

@brexHQ 🧡

[CodeRabbit @coderabbitai]

PHP users: patch today.

Two critical RCEs (CVSS 9.2) affect "all PHP installations serving web requests".

Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.

[The PHP Foundation @ThePHPF]

We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. #php #security https://t.co/gbGTmk7yh1

[CodeRabbit @coderabbitai]

In Berlin for @nvidia GTC?

Join CodeRabbit and @baseten October 21 at Fabrik 23 for Inference on Tap.

Talk AI inference and the agentic SDLC over drinks with fellow builders!

Request to join: https://t.co/VI50DxpQyU

[Harjot Gill @harjotsgill]

We at @coderabbitai shipped 5K PRs last week. Our tiny team is shipping more than a thousand-person dev team. And we are nowhere near hitting our maximum potential. If we industrialize software development correctly, 50K PRs a week are totally achievable, if not more. At this point, it’s machines building machines.
We are looking for pioneers to join our software factory initiative. Must meet one of the following criteria to join the project:

- Tastefully shipped at least 1000 PRs in the last 30 days.
- Played at least 500 hours of strategy or simulation games such as Civilization, Age of Empires, Transport Tycoon, Factorio, etc.

This is a once-in-a-lifetime opportunity to define the UX/DS for building and shipping software at scale. You'll solve a broad spectrum of problems, from designing provably correct software using formal methods to achieving operational excellence with agentic operations. You will also get millions of dollars of token budgets!

Please DM me only if you qualify and want to spend your next few months/years on this!

[CodeRabbit @coderabbitai]

Congrats to TypesafeAI on the Series A!

At the first ever Jevathon, we watched developers build some seriously impressive apps on their new System One model.

Can't wait to see what's next!

[TypeSafe AI @typesafeai]

we told @a16z we wanted to put intelligent software everywhere

they asked how much compute that would take

we said Uh Yes.

announcing our really big Series A

[CodeRabbit @coderabbitai]

@icpp_pro You're welcome!

[ic++ @icpp_pro]

I want to give a shoutout to @coderabbitai for letting me do free code reviews on open source github repos.

Claude codes well, but coderabbit always finds the edge cases.

[CodeRabbit @coderabbitai]

@erhannah

[CodeRabbit @coderabbitai]

@JuanPa @MiniMax_AI Did you give them the keys to our ship?

[CodeRabbit @coderabbitai]

@MiniMax_AI Make sure you return our rocket in one piece please

[CodeRabbit @coderabbitai]

@maria_rcks @t3dotcodes

[CodeRabbit @coderabbitai]

Config inheritance, explained in four steps!

Save this for the next time your settings aren't doing what you expected!

[Konrad @yoimkonrad]

Which @coderabbitai setting actually wins when you have a repo .coderabbit.yaml, a central config and org settings?

In other words: how configuration inheritance works

1. Without it, only the highest-priority source is used. Nothing merges

2. Add inheritance: true and the chain continues to each parent that also has it set. Missing levels get skipped, and it stops at the first level where it’s false or not set

3. Then values merge:
- scalars: the child’s value wins when it’s defined
- objects: deep merge, so you only override the keys you set
- arrays: your items first, then the parent’s unique ones (deduplicated by path, label, name, id or key)

4. Global overrides are applied last, over every other source

Not sure where a value came from? Comment @coderabbitai configuration on any PR and you get the resolved YAML with the source of every setting

[CodeRabbit @coderabbitai]

Sensational

[Konrad @yoimkonrad]

A morning in the warren, or how @coderabbitai fix-ci works

6:02 a.m. Your carrot bed (your PR) fails inspection (CI)

1. You ring the bell: comment @coderabbitai fix-ci on the PR

2. The rabbit reads the inspector’s notes first: the failing checks, their output and your CI config

3. It never digs in your bed. It clones your repo into a sandbox and fixes things there

4. The irrigation isn’t its business. CI config, lockfiles and dependency manifests are left for you, listed in the status comment

5. The fix lands as a raised bed on top of yours: a stacked PR on your branch. Want it straight on your branch instead? fix-ci commit

6. The inspector comes back. Your real CI runs on the stacked PR
Merge it into your branch

Back in bed by 6:15

[CodeRabbit @coderabbitai]

AI adoption needs more than a rollout.

Announcing DevClarity + CodeRabbit: hands-on AI enablement meets independent code review, helping software teams put AI to work and stay in control of what ships.

https://t.co/OnJEE2k3EX

[CodeRabbit @coderabbitai]

@kunalstwt 🧡

[CodeRabbit @coderabbitai]

AI coding tools keep getting better. What are we getting better at?

We sat with @kunalstwt to talk about the skills software engineers should invest in: understanding systems, solving useful problems, and taking responsibility for what ships.

Catch the full 1hr 16 video below!

[CodeRabbit @coderabbitai]

https://t.co/YsVVSQxxTI