Skip to content
Sign inTry Shimpilot

Changelog

What shipped.

This changelog starts where Shimpilot's public record does — it isn't a backdated history of everything built before it.

  1. October 1, 2026

    AWS JavaScript SDK support

    Added recognized SDK v2 client detection to connected and public scans, with bounded v2→v3 Draft PR proposals using modular service packages. Required vendor-source and validation evidence must pass before a PR is created. Human review and merge are required in both modes. Cloud integrations, resources, IAM, and deployment are not changed or verified by a static scan.

    AWSProvidersHuman review

  2. September 29, 2026

    Anthropic provider support

    Added Node.js and Python detection for retired Claude model IDs, official model-retirement monitoring, public-scan support, and validated Manual Draft PR migrations using Anthropic's reviewed replacement model. Human review and merge remain required for model behavior changes.

    AnthropicProvidersMigrations

  3. September 16, 2026

    Automatic migration mode

    Organizations can choose Manual or Automatic migration mode. Manual now prepares the complete validated Draft PR automatically and waits for human review and merge in GitHub; Automatic continues through CI and merge when every configured safety gate passes, or stops safely when it cannot prove the change.

    MigrationsAutomation

  4. September 16, 2026

    Google and email sign-in

    Added Google OAuth and email/password sign-up and sign-in via Supabase Auth, alongside the existing GitHub sign-in. Includes password reset.

    Auth

  5. September 11, 2026

    Security page published

    A factual description of Shimpilot's GitHub App permission model, tenant isolation, secret handling, and migration safety — including what we do not claim.

    Trust