[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
shadcn (source)	4.13.0 → 4.22.1

---

Release Notes

shadcn-ui/ui (shadcn)

v4.22.1

Compare Source

Patch Changes

• #​12360 4381eeb Thanks @​shadcn! - Fix shadcn add --all and the component picker to only include components available for the project's style.

v4.22.0

Compare Source

Minor Changes

• #​12298 954ce95 Thanks @​shadcn! - Upgrade to Zod 4. shadcn/schema and @shadcn/registry/schema now export Zod 4 schemas, so passing them to Zod 3's z no longer typechecks. On Zod 3, use the exported types (RegistryItem, RegistryItemFile, Config) and the schema's own methods (registryItemSchema.array()) instead of z.infer and z.array. Zod errors expose issues, not errors. Validation messages now use Zod 4's wording.

Patch Changes

• Updated dependencies [954ce95]:
  • @​shadcn/registry@0.2.0

v4.21.5

Compare Source

Patch Changes

• #​12214 4407349 Thanks @​dependabot! - Update @modelcontextprotocol/sdk, browserslist, open and postcss-selector-parser.

• #​12192 dd34945 Thanks @​shadcn! - Move @​shadcn/registry modules out of utils.

• #​12297 7aa2110 Thanks @​mattzcarey! - Fix MCP search and list results showing [object Promise] instead of the add command.

• #​12174 2af71ac Thanks @​dependabot! - Update @modelcontextprotocol/sdk to 1.31.0.

• #​12048 cfb4cb6 Thanks @​dependabot! - Update undici to 7.29.1.

• Updated dependencies [97ddbf4, dd34945, cfb4cb6]:

  • @​shadcn/registry@0.1.4

v4.21.4

Compare Source

Patch Changes

• #​12189 76fd499595ba7cc01f49d159bd7ac82d7aca8e63 Thanks @​shadcn! - Drop the ts-morph dependency from @​shadcn/registry.

• #​12184 995c2cfff44c373bd210d451089726ec097ab917 Thanks @​shadcn! - Run the icons and asChild transformers without ts-morph.

• #​12160 6efecd8fe9aa167886fe2cc0c05c5623a5bb5670 Thanks @​shadcn! - Edit the Next.js layout for font items without ts-morph, and skip it with a warning instead of writing a broken layout.

• #​12188 efa11781f756c86debb0392fbea4fe468250b41b Thanks @​shadcn! - Rewrite imports and crawl file imports without ts-morph.

• #​12177 e8c3143b1cd191280befcd6c9538284bb43399a8 Thanks @​shadcn! - Edit tailwind.config without ts-morph, and skip it with a warning instead of writing a broken config.

• #​12183 f56bbd7282f0116a925a601cb6d7e0c3fede448b Thanks @​shadcn! - Run the rsc, import, CSS variable, cleanup, font and menu transformers without ts-morph.

• #​12185 4a90344c42dc9ae47494179065219377ff5f2a8f Thanks @​shadcn! - Run the Tailwind prefix and RTL transformers without ts-morph.

• Updated dependencies [76fd499595ba7cc01f49d159bd7ac82d7aca8e63, 995c2cfff44c373bd210d451089726ec097ab917, 6efecd8fe9aa167886fe2cc0c05c5623a5bb5670, 232d7e2c128d94d37a6dae74e3b0e1a8f08ff6e4, efa11781f756c86debb0392fbea4fe468250b41b, e8c3143b1cd191280befcd6c9538284bb43399a8, f56bbd7282f0116a925a601cb6d7e0c3fede448b, 4a90344c42dc9ae47494179065219377ff5f2a8f]:

  • @​shadcn/registry@0.1.3

v4.21.3

Compare Source

Patch Changes

• #​12148 596be8dda8f94927281184b8c4575150531f85ea Thanks @​shadcn! - Fix ERR_REQUIRE_CYCLE_MODULE when running the CLI with pnpm dlx on Windows.

• Updated dependencies [596be8dda8f94927281184b8c4575150531f85ea]:

  • @​shadcn/registry@0.1.2

v4.21.2

Compare Source

Patch Changes

• #​12143 8c2bf3882cb856ac10abbb162bdc0b8383ebd432 Thanks @​shadcn! - Accept components.json and package.json files that start with a UTF-8 byte order mark.

• #​12142 95efb5cd8d7f13adba70b58b1119211e8980683f Thanks @​shadcn! - replace cosmiconfig with a smaller custom reader.

• #​12140 3b1ae6e43f082dd82d0e5710b813cfad929abdb4 Thanks @​shadcn! - Skip npm audit and the funding check when installing or removing dependencies, or creating a project, with npm.

• Updated dependencies [8c2bf3882cb856ac10abbb162bdc0b8383ebd432, 95efb5cd8d7f13adba70b58b1119211e8980683f, 3b1ae6e43f082dd82d0e5710b813cfad929abdb4]:

  • @​shadcn/registry@0.1.1

v4.21.1

Compare Source

Patch Changes

• #​12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @​shadcn! - Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.

• #​12061 a9c1da49ec4eab488dc99c69ae20a7ffaa4897d4 Thanks @​shadcn! - fix shimmer reduced motion handling when used with a variant

• #​12087 bf6646b449684e687f28531305eca4e4768c2782 Thanks @​shadcn! - shadcn docs only rewrites links on the ui.shadcn.com host.

• Updated dependencies [bf6646b449684e687f28531305eca4e4768c2782]:

  • @​shadcn/registry@0.1.0

v4.21.0

Compare Source

Minor Changes

• #​11758 c257f688cf4de7ec10cc1be84cad29cd4631182c Thanks @​shadcn! - install cn and generate export { cn } from "cn" for lib/utils on init. Registry components now import cn from the cn package.

Patch Changes

• 8720dec73f5aebed9f649ea58636f54599fdedf1 Thanks @​shadcn! - use twMerge from cn instead of tailwind-merge internally.

v4.20.1

Compare Source

Patch Changes

• #​11742 04bb134c52af23af7d77673618ef4e3862b7c310 Thanks @​shadcn! - preserve leading comments when running shadcn migrate cn.

v4.20.0

Compare Source

Minor Changes

• #​11728 51f3e12203b0026ea106cafb4f770bda9abead87 Thanks @​shadcn! - add npx shadcn migrate cn to replace clsx, tailwind-merge and cnfast in Tailwind CSS v4 projects.

v4.19.1

Compare Source

Patch Changes

• #​11713 f9ea1e600ea5dd7b1b79769b7b25cafa400cee6f Thanks @​shadcn! - Add the official shadcn/ui website to the package metadata.

v4.19.0

Compare Source

Minor Changes

• #​11582 33c81f991f1013653444d6819107b2b356563f57 Thanks @​shadcn! - add private repository support to GitHub registries via GitHub CLI credentials or GH_TOKEN.

• #​11248 b4f2023b1d5c733db67d4e90eb9485a95c5ed480 Thanks @​rbadillap! - add npx shadcn migrate base-color to switch a project's base color.

v4.18.0

Compare Source

Minor Changes

• #​11501 aef1cdca54e8da689351cdddf959342909e45e76 Thanks @​shadcn! - merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present

Patch Changes

• #​11500 e66b99b14dd9c54afc434dbf5a702f170b1153b0 Thanks @​shadcn! - Skip unreadable directories during file scans instead of failing with EACCES.

• #​11504 9f4e3ff26025d16a243ea03cc891c734c4cf0b59 Thanks @​shadcn! - Skip unreadable directories when resolving monorepo targets.

• #​11502 87d71b3629c34f3c38a353a211ec8591c1ff1721 Thanks @​shadcn! - resolve registries declared in package.json when adding components. shadcn add, search, view and init now resolve registries from package.json in memory without persisting them to components.json

• #​9248 03c45b822e60195796dfd3d2fcf7c223ff4ece86 Thanks @​Grafikart! - Fix shadcn for projects with unreadable permission files

v4.17.0

Compare Source

Minor Changes

• #​10453 deda4df80fb350230b2fce2b575e769a90cae076 Thanks @​nbouvrette! - Add SOCKS4/SOCKS5 proxy support to the registry HTTP stack via ALL_PROXY=socks5://... (the curl convention), backed by the socks package.

  Proxy selection now goes through a createProxyDispatcher(env) factory that checks ALL_PROXY / all_proxy for a socks*:// URL before falling back to the existing HTTP/HTTPS handling. ALL_PROXY with a non-SOCKS scheme is ignored here — HTTP_PROXY / HTTPS_PROXY remain the way to configure those. Existing HTTPS_PROXY / HTTP_PROXY / NO_PROXY handling via undici.EnvHttpProxyAgent is unchanged.

v4.16.2

Compare Source

Patch Changes

• #​11348 df664e1bba86c6712bc5e08c8626590dca736089 Thanks @​OwenKephart! - Include registry item titles in searchRegistries results and fuzzy matching.

v4.16.1

Compare Source

Patch Changes

• #​11322 bfa1b5e9a69a155b2f590523d50fda810bde1a9a Thanks @​AndrewBarba! - fix shadcn build failing with ENOENT when registry item names contain path segments (e.g. extension/foo) by creating nested output directories before writing

• #​11352 5ca53ca7c7dea390e0e78091ff7c54adc48c773a Thanks @​shadcn! - forward search params to registries for server-side dynamic search

v4.16.0

Compare Source

Minor Changes

• #​11307 431da7169cae753643e67e56e168b93ec31dfe90 Thanks @​shadcn! - make addRegistryItems accept explicit registry configuration instead of loading components.json

• #​11304 bf906bb8aeebc64d374afb54497b822d587ac6d7 Thanks @​shadcn! - add getRegistriesConfig and registries in package.json support

v4.15.0

Compare Source

Minor Changes

• #​11276 7d90dfc0a5ec70cdc3bd08b741a42440041907ac Thanks @​cmpadden! - Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.

v4.14.1

Compare Source

Patch Changes

• #​11266 6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37 Thanks @​shadcn! - Add Base UI Toast support.

v4.14.0

Compare Source

Minor Changes

• #​11241 3c26ee2dbd3a772c1cddc2c76249cc1cb0a250d5 Thanks @​shadcn! - add support for icon migration

v4.13.1

Compare Source

Patch Changes

• #​11196 c49c3061b5b86b130736d36bf20008349f89b416 Thanks @​shadcn! - Drop custom registry headers on cross-origin redirects to prevent credential leakage.

• #​11191 df2656111fc8ca030eb768ade2da26cef2fd11b5 Thanks @​shadcn! - Validate file paths for registry items without an explicit target to prevent path traversal.

• #​11195 b8a8e9209659fa810514b61c60ad593bc81973f9 Thanks @​shadcn! - Prevent flag injection from registry-supplied dependency strings during install.

• #​11208 2b89d67e19ceda27381477e127b349f9aaa25355 Thanks @​shadcn! - Add React Aria support.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.