shadcn

4.21.5MIT

4.21.5 is the latest, published 14 October 2026.
No known security advisory.
4.x: 48 releases since 6 March 2026, 18 in the last 90 days.

Releases in the last 90 days

Feed of releases and advisories

Every stable release, newest first. Notes are quoted as the maintainers published them.

4.21.5
14 October 2026
Update @modelcontextprotocol/sdk, browserslist, open and postcss-selector-parser.
Patch Changes
- Update @modelcontextprotocol/sdk, browserslist, open and postcss-selector-parser.
- Move @shadcn/registry modules out of utils.
- Fix MCP search and list results showing [object Promise] instead of the add command.
- Update @modelcontextprotocol/sdk to 1.31.0.
- Update undici to 7.29.1.
- Updated dependencies:
  @shadcn/registry@0.1.4
4.21.4
7 October 2026
Drop the ts-morph dependency from @shadcn/registry.
Patch Changes
- Drop the ts-morph dependency from @shadcn/registry.
- Run the icons and asChild transformers without ts-morph.
- Edit the Next.js layout for font items without ts-morph, and skip it with a warning instead of writing a broken layout.
- Rewrite imports and crawl file imports without ts-morph.
- Edit tailwind.config without ts-morph, and skip it with a warning instead of writing a broken config.
- Run the rsc, import, CSS variable, cleanup, font and menu transformers without ts-morph.
- Run the Tailwind prefix and RTL transformers without ts-morph.
- Updated dependencies:
  @shadcn/registry@0.1.3
4.21.3
6 October 2026
Fix ERR_REQUIRE_CYCLE_MODULE when running the CLI with pnpm dlx on Windows.
Patch Changes
- Fix ERR_REQUIRE_CYCLE_MODULE when running the CLI with pnpm dlx on Windows.
- Updated dependencies:
  @shadcn/registry@0.1.2
4.21.2
5 October 2026
Accept components.json and package.json files that start with a UTF-8 byte order mark.
Patch Changes
- Accept components.json and package.json files that start with a UTF-8 byte order mark.
- replace cosmiconfig with a smaller custom reader.
- Skip npm audit and the funding check when installing or removing dependencies, or creating a project, with npm.
- Updated dependencies:
  @shadcn/registry@0.1.1
4.21.1
1 October 2026
Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.
Patch Changes
- Add @shadcn/registry, the registry engine behind the CLI. shadcn now depends on it, and shadcn/registry and shadcn/schema re-export it, so there are no changes for existing users.
- fix shimmer reduced motion handling when used with a variant
- shadcn docs only rewrites links on the ui.shadcn.com host.
- Updated dependencies:
  @shadcn/registry@0.1.0
4.21.0
4 September 2026
Install cn and generate export { cn } from "cn" for lib/utils on init. Registry components now import cn from the cn package.
Minor Changes
- install cn and generate export { cn } from "cn" for lib/utils on init. Registry components now import cn from the cn package.
Patch Changes
- use twMerge from cn instead of tailwind-merge internally.
4.20.1
2 September 2026
Preserve leading comments when running shadcn migrate cn.
Patch Changes
- preserve leading comments when running shadcn migrate cn.
4.20.0
2 September 2026
Add npx shadcn migrate cn to replace clsx, tailwind-merge and cnfast in Tailwind CSS v4 projects.
Minor Changes
- add npx shadcn migrate cn to replace clsx, tailwind-merge and cnfast in Tailwind CSS v4 projects.
4.19.1
31 August 2026
Add the official shadcn/ui website to the package metadata.
Patch Changes
- Add the official shadcn/ui website to the package metadata.
4.19.0
21 August 2026
Add private repository support to GitHub registries via GitHub CLI credentials or GH_TOKEN.
Minor Changes
- add private repository support to GitHub registries via GitHub CLI credentials or GH_TOKEN.
- add npx shadcn migrate base-color to switch a project's base color.

Show 8 earlier releases

4.18.0
13 August 2026
Merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present
Minor Changes
- merge registries from package.json and components.json, and support adding registries to package.json when components.json is not present
Patch Changes
- Skip unreadable directories during file scans instead of failing with EACCES.
- Skip unreadable directories when resolving monorepo targets.
- resolve registries declared in package.json when adding components. shadcn add, search, view and init now resolve registries from package.json in memory without persisting them to components.json
- Fix shadcn for projects with unreadable permission files
4.17.0
11 August 2026
Add SOCKS4/SOCKS5 proxy support to the registry HTTP stack via ALL_PROXY=socks5://... (the curl convention), backed by the socks package.Proxy selection now goes through a createProxyDispatcher(env) factory that checks ALL_PROXY / all_proxy for a socks*:// URL before falling back to the existing HTTP/HTTPS handling. ALL_PROXY with a non-SOCKS scheme is ignored here — HTTP_PROXY / HTTPS_PROXY remain the way to configure those. Existing HTTPS_PROXY / HTTP_PROXY / NO_PROXY handling via undici.EnvHttpProxyAgent is unchanged.
Minor Changes
- Add SOCKS4/SOCKS5 proxy support to the registry HTTP stack via ALL_PROXY=socks5://... (the curl convention), backed by the socks package.
  Proxy selection now goes through a createProxyDispatcher(env) factory that checks ALL_PROXY / all_proxy for a socks*:// URL before falling back to the existing HTTP/HTTPS handling. ALL_PROXY with a non-SOCKS scheme is ignored here — HTTP_PROXY / HTTPS_PROXY remain the way to configure those. Existing HTTPS_PROXY / HTTP_PROXY / NO_PROXY handling via undici.EnvHttpProxyAgent is unchanged.
4.16.2
6 August 2026
Include registry item titles in searchRegistries results and fuzzy matching.
Patch Changes
- Include registry item titles in searchRegistries results and fuzzy matching.
4.16.1
31 July 2026
Fix shadcn build failing with ENOENT when registry item names contain path segments (e.g. extension/foo) by creating nested output directories before writing
Patch Changes
- fix shadcn build failing with ENOENT when registry item names contain path segments (e.g. extension/foo) by creating nested output directories before writing
- forward search params to registries for server-side dynamic search
4.16.0
27 July 2026
Make addRegistryItems accept explicit registry configuration instead of loading components.json
Minor Changes
- make addRegistryItems accept explicit registry configuration instead of loading components.json
- add getRegistriesConfig and registries in package.json support
4.15.0
25 July 2026
Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.
Minor Changes
- Add a public addRegistryItems API for installing registry items programmatically without invoking the CLI.
4.14.1
23 July 2026
Add Base UI Toast support.
Patch Changes
- Add Base UI Toast support.
4.14.0
22 July 2026
Add support for icon migration
Minor Changes
- add support for icon migration

All 106 releases

Major versions

4.xsince 6 March 2026 · latest 4.21.5 · 48 releases
3.xsince 27 August 2025 · latest 3.8.5 · 23 releases
2.xsince 30 August 2024 · latest 2.10.0 · 34 releases
1.xsince 9 July 2024 · latest 1.0.0 · 1 release

Quality and security signals

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 15 October 2026. Releases and advisories last read 15 October 2026.

Know when your own dependencies move

Inlinr tracks your coding time automatically. Switch dependency tracking on for a project and it reads that repository's manifest to show what is behind and what has been deprecated — off by default, one project at a time.

See what Inlinr does All packages

Releases in the last 90 days

4.21.5

4.21.4

4.21.3

4.21.2

4.21.1

4.21.0

4.20.1

4.20.0

4.19.1

4.19.0

4.18.0

4.17.0

4.16.2

4.16.1

4.16.0

4.15.0

4.14.1

4.14.0

Major versions

Quality and security signals

Know when your own dependencies move