shadcn Release Notes

#11307 431da7169cae753643e67e56e168b93ec31dfe90 Thanks @shadcn! - make addRegistryItems accept explicit registry configuration instead of loading components.json

#11304 bf906bb8aeebc64d374afb54497b822d587ac6d7 Thanks @shadcn! - add getRegistriesConfig and registries in package.json support

#11196 c49c3061b5b86b130736d36bf20008349f89b416 Thanks @shadcn! - Drop custom registry headers on cross-origin redirects to prevent credential leakage.

#11191 df2656111fc8ca030eb768ade2da26cef2fd11b5 Thanks @shadcn! - Validate file paths for registry items without an explicit target to prevent path traversal.

#11195 b8a8e9209659fa810514b61c60ad593bc81973f9 Thanks @shadcn! - Prevent flag injection from registry-supplied dependency strings during install.

#11208 2b89d67e19ceda27381477e127b349f9aaa25355 Thanks @shadcn! - Add React Aria support.

#11106 f6a26478547c7057aeda82516666dc3473dc39bd Thanks @shadcn! - Fix MessageScroller autoScroll around anchored turns: the anchor hold now hands off to follow-output once the streamed reply fills the viewport, content growth outrunning the frame-coalesced resize handler no longer releases follow-output, and the scroll button no longer flickers while follow-output closes the gap a streamed chunk just opened.

#11100 dd6ce77cf1606eee2839368a97cc35417f763232 Thanks @shadcn! - Fix MessageScroller abandoning a newly appended scrollAnchor placement when autoScroll is enabled, so the anchored turn holds at the reading line while the reply streams.

#11085 628e427231ca4bb7f586a69f99fe7809749a53e2 Thanks @devnomic! - Fix MessageScroller firing "ResizeObserver loop completed with undelivered notifications" during streamed content growth by coalescing ResizeObserver callbacks into requestAnimationFrame.