# Product updates Source: https://docs.codemod.com/changelog Latest releases for Codemod platform. * **Global Chat follow-ups are smoother**: Global Chat now offers concise next-action choices after codemod generation, so you can continue into an Insights dashboard, migration campaign, or another follow-up without being routed through registry pages. Client-side tool output handling is also more reliable, especially when a conversation triggers navigation, code execution, or multiple tool results in sequence. * **Insights dashboards are more flexible and transparent**: * Query results can now group by directory for ast-grep and JSSG sources, with configurable depth * Indexing progress now shows clearer fetching, indexing, and multi-codebase status * Timeseries widgets handle earlier date ranges and indexed history more reliably * Query editor deletion, empty-dashboard saves, table overflow, long paths, and truncated metric labels were polished * **Multi-repo campaigns are easier to manage**: Campaigns created for multiple repositories now persist a parent campaign group with one child campaign per repository. You can review each repository campaign from the group page, apply the same campaign to additional repositories later, and reuse repository groups across campaign creation, Insights, Automations, and repository selectors. * **Organization settings and egress controls**: Organization settings now have a fuller structure for overview, billing, integrations, members, security, SSO, egress policies, values, and repository groups. Admins can define organization and project egress allowlists, and workflow runs now enforce those allowlists through isolated worker networking and authenticated proxy controls. * **Registry bundles and package discovery**: * Registry packages can now expose bundle relationships, including parent bundles and child codemods, through the UI and APIs * Bundle-aware package metadata extraction improves how workflow-based packages are represented * Registry cards, filters, sort controls, package pages, loading states, and Open Graph previews received usability polish * **Focused Studio experience**: Codemod Studio now focuses on the ast-grep editing, testing, sharing, and publishing workflow after removing the experimental Studio AI panel. Studio sessions also have creation quotas to protect platform reliability, and the editor layout, footer, AST tree, matches panel, and mobile behavior received cleanup. * **Security and account protection**: * Logout now revokes API session access immediately instead of relying on cached session cookies * SAML SSO callbacks now handle Better Auth verification IDs correctly * API key creation enforces future expiration dates, rejects disabled keys, and adds creation quotas * Dashboard, campaign, and Studio session creation now have abuse-protection limits * App and website content security policies were tightened, including stricter frame ancestor handling * **Admin generation and website polish**: ARC gained prompt-driven idea generation, prompt-to-implementation flow, SonarCloud as a scrape source, mining/reporting codemod support, and more resilient implementation jobs. The website home animation copy, Clients section, CTA links, logo loading, and responsive layout were also refined. * **Codemod Builder in Global Chat**: Global Chat can now help turn repeatable migration requests into generated codemod packages, publish to the registry, iterate on source-available generated packages, and hand off to campaign creation when appropriate. It also gained page-aware suggestions, repository mentions, directive chips, chat history improvements, and codebase tools for file search, AST search, dependency lookup, and indexed repository context. * **Self-healing campaigns**: Campaign-created pull requests can now track CI check state and run auto-heal attempts with copied check logs and branch context. Recovery supports manual triggering, retry limits, status links, GitHub Actions, and GitLab pipeline/job webhooks. * **Campaign and automation controls**: * Automations can trigger background agents * Pull request merged triggers can filter by author, title regex, state, and repository * Campaign and background-agent logs now render AI messages, tool calls, file edits, and search matches more clearly * **Insights dashboard notes**: Insights dashboards now support Markdown Notes widgets, so teams can add context, caveats, and next steps alongside metrics. Query editing and package/repository selection were also polished, especially when working with template variables. * **Reports are easier to read and share**: Execution reports now consolidate duplicate file entries when multiple steps touch the same file, with an option to view changes by step. The report UI now combines files and diffs into a single Changes tab, keeps Metrics separate, improves mobile layout, and has clearer authenticated sharing flows. * **Registry transparency and discovery**: * Generated package names and visibility defaults are safer * Registry cards, filters, package pages, and generated-source campaign creation received UI polish * **JSSG and CLI improvements**: * Full XML support in Codemod engine * `jssg run` and `jssg test` now surface runtime logs again * `addImport()` formatting is more reliable when merging named imports * Dry runs no longer auto-launch the workflow TUI, and workflow summaries/log output are cleaner * Windows bundling handles canonical paths more reliably * Package publishing and registry download errors are clearer * **App navigation and platform UX**: * Global Cmd/Ctrl+K search now jumps to pages, Insights dashboards, Campaigns, and Automations * API Keys now have clearer tabs for keys and trusted publishers, better table filtering, and improved create/delete dialogs * Repository selectors now use a cleaner modal flow * The app shell, login experience, sidebar, user menu, dashboards, website landing pages, and mobile styling received broad polish * **Automations are now more powerful**: Automations can start from scheduled or incoming webhook triggers, scan codebases with ast-grep or JSSG queries, create campaigns, and pass action outputs into downstream steps. The editor now starts from a blank canvas, has clearer node insertion/configuration flows, shows action output fields, supports action-to-action chaining, and can use Handlebars templates for looping over array values. * **Insights expanded to dependencies and semantic controls**: Insights can now analyze third-party dependency usage across repositories from lockfiles, with filters for ecosystem, package name, semver range, and direct/transitive depth. JSSG queries now include semantic analysis mode options, and Insights, Campaigns, and Automations list pages have improved search and pagination. * **Multi-workflow packages**: Codemod packages can now define multiple workflows, with CLI, registry, campaign creation, and documentation support. Workflow authors also get expression-based shard sizing, automatic shard-file pickup for ast-grep/JSSG steps, task-context variable resolution, and a new string-list resolver. * **Workflow CLI/TUI improvements**: * Reworked workflow TUI keeps statuses, logs, sharding progress, runtime controls, and failure details in one place * Dirty-repo confirmations and manual pull request prompts now stay inside the TUI * Sandbox, git, and auth failures are routed into task logs instead of breaking the task table * Codex/OpenCode AI handoffs resolve more reliably * **JSSG & codemod authoring**: * New sandboxed file system defaults let codemods work inside the target repo while requiring explicit capability elevation for out-of-repo access * `getAllImports()` was added to `@jssg/utils` * `removeImport()` now handles default imports, `var require()` declarations, and side-effect imports more safely * `addImport()` places new imports more predictably * `SgRoot.relativeFilename` is available, and `jssg test` handles metrics more reliably * The `Transform` type is deprecated in favor of the clearer `Codemod` type * **AI-assisted codemod creation**: Wish is now available as an in-app assistant overlay, and Codemod AI/MCP package generation better preserves the selected package manager, validates package-manager drift, and uses the published `codemod ai` setup for OpenCode handoffs. * **Registry, website & code readability**: * Registry package pages have cleaner copy-command controls, Pro access flow improvements, and refreshed layout/search/filter styling * Homepage now tells the Plan -> Automate -> Orchestrate product story with a new interactive section and Zapier case study strip * Shared navigation, header, and footer components make the website and app feel more consistent * Code blocks, syntax highlighting, and report/blog Open Graph previews render more cleanly * **Reliability & polish**: * Pro codemods now show a free-preview notice instead of pushing users through a login prompt * Cloud semantic analysis and JSSG runs do less unnecessary polling and file processing * Managed update manifest failures now return an actionable 503 response instead of a generic server error * Select menus, dialogs over resizable panels, SAML setup docs, and the Studio banner received usability fixes * **AI-native CLI & agent skills**: `npx codemod ai` now installs Codemod MCP and the `/codemod` command across Claude, Goose, OpenCode, Cursor, and Codex, with signed managed updates for installed components. Registry packages can now include installable skills, and bare `npx codemod` opens an interactive launcher for creating a package or running one from the registry. * **Workflow orchestration upgrades**: * New terminal UI for workflow runs with inline logs, task triggering/retry/cancel, runtime dry-run controls, and capability settings * Shell steps can now require approval in interactive runs * Workflow nodes now support commit checkpoints and pull request configuration * **Sharded campaigns**: Large migrations can now be split into smaller pull requests by directory or `CODEOWNERS` grouping. Campaign creation now includes sharding controls and preview details before launch. * **Pro codemods can now be previewed with dry-run**: Authenticated users can discover Pro packages in the registry and run them locally in dry-run-only mode before upgrading, while full execution remains gated to Pro plans. * **JSSG improvements**: * Workspace-wide semantic analysis now works in `jssg test`, including cross-file resolution * Directory snapshot testing now supports created and deleted files, not just modified ones ([Learn more ->](/jssg/testing#directory-snapshot-fixtures)) * Renamed files are handled more reliably during execution and test runs * **Registry & campaign UX**: * Featured packages now surface at the top of matching registry results * Legacy codemods are clearly disabled for cloud campaigns * Skill-only versions are skipped during campaign creation * Project title and description can now be edited inline * Repository pickers load faster with synced repository catalogs * **Website improvements**: * Website and preview pages load faster and render more reliably * **CLI polish & reliability**: * Interactive dirty-repo confirmation instead of immediate failure in TTY sessions * Cleaner workflow output with step labels and no duplicate shell output * Empty runs no longer prompt you to open a report * `jssg` semantic analysis behaves better when `node_modules` is missing * **Shareable reports**: Codemod execution reports can now be shared via URL, complete with metrics, file lists, and diff viewers — with Open Graph previews for social sharing. The CLI now also supports a `--report` flag to open reports locally in the browser. * **Code change previews in the registry**: Registry packages now display before/after diffs from cached test cases, so you can see exactly what a codemod will do before running it. Diffs are shown on click rather than hover for a cleaner experience. * **Redesigned navigation**: App navigation now mirrors the website with dropdown menus, grouped items, and improved visual hierarchy for easier feature discovery. * **New website**: Completely redesigned website with updated feature sections, case studies, client testimonials, and improved responsive design. * **Structured logging**: The CLI now supports a `--format jsonl` flag on `codemod run` and `codemod workflow run` for machine-readable JSONL output, enabling easier integration with CI pipelines and external tooling. * **JSSG & Insights improvements**: * `jssgTransform()` API for applying multi-file transforms atomically and `SgRoot.rename()` for renaming files within codemods * Cross-thread state management via the new `codemod:workflow` module for sharing state between workflow steps * Metrics snapshot testing support in JSSG tests for validating metrics output alongside code transformations * Indentation normalization in loose test comparison mode for more flexible test assertions * Split-screen editor for side-by-side code editing and preview * Variable and rule editor modals for managing template variables * Running state indicator and ⌘↵ keyboard shortcut across all code editor modals * Fixed include/exclude glob filtering and codeowner query double-counting * Streaming timeseries results for faster dashboard loading * **New language templates**: `codemod init` now includes templates for PHP, C#, C++, C, Angular, Ruby, Elixir, CSS, HTML, and Kotlin — making it easier to scaffold codemods for additional languages. * **Less language support**: Studio and code analysis now support the Less CSS preprocessor for writing and running codemods on `.less` files. * **Grouped build logs**: Build logs now display in collapsible step groups with status icons, duration, and auto-expanding failed steps for easier debugging. * **SSO & authentication**: * New SSO provider edit page for updating existing configurations * Fixed SAML IdP parsing, domain verification, and relay state handling * Faster GitHub login with optimized member sync * **Jira integration**: Added issue type support and enhanced project linking for more flexible task synchronization. * **Reliability improvements**: * Fixed Windows path handling and line ending normalization for JSSG tests and bundler * Improved error surfacing for async module evaluation in codemods * Better JS code extraction from bundler output * Legacy codemods can now be filtered out of the registry * Team switching properly refreshes all data * Diff viewer displays correctly in light mode * Fixed navigation links and logo home link * Corrected date handling and article styling in registry package details * Restored Open Graph images for registry templates * **Performance**: * Code indexer rewritten in Rust for significantly faster repository analysis * Large widget payloads offloaded to Redis for snappier dashboards * Database query planner optimizations for improved query performance * **Multi-repo insights**: Select multiple repositories in the Insights dashboard to analyze patterns across your entire codebase at once. Template variables are now always visible and editable. * **JSSG support in Insights**: JavaScript Static Graph queries are now fully integrated into Insights, with improved metrics, inline source editing, and better performance for large-scale analysis. * **Registry discovery improvements**: Sort codemods by "most recent" or "most executions," plus enhanced SEO with structured data for better discoverability. * **Trusted publishers**: Manage trusted publisher permissions directly from API key settings for better access control. * **Reliability improvements**: * Historical and legacy codemods no longer clutter the codemod picker * Improved search with debounce and infinite scroll loading * Table sorting now correctly handles numeric values * SSR hydration fixes for smoother page loads * Insights refresh behavior fixed when changing variables * **UI polish**: * Command execution animation for better feedback * Cleaner footer with updated links * Removed counter badge from registry header for a cleaner look * **Semantic analysis for codemods**: JS/TS and Python now support workspace-wide definitions and references, enabling cross-file aware codemods powered by semantic providers. ([Learn more ->](/jssg/semantic-analysis)) * **Campaign creation streamlined**: The campaign creation UI is now cleaner, and when launching from “apply to repository,” the associated codemod is pre-selected to accelerate setup. * **Login flow improved**: Enhanced loading and error handling, plus stronger OIDC authentication via JWT. * **Insights & dashboards**: * Template variables remain visible and editable at all times. * Re-index and AST updates boost dashboard responsiveness. * Query rule editor now supports immediate editing of newly added queries. * Ingestion and timeseries reliability fixes ensure improved chart accuracy. * **Workflows enhancements**: Added email setup and streamlined metadata extraction/backfill for easier automated communications. * **Registry**: `Run via bunx` enabled in registry entries for faster codemod execution. * **Reliability improvements**: * Hardened authentication and improved SSL defaults reduce connection errors. * Next.js build process is more stable, with refreshed dependencies. * UI fixes, including code editor indentation and ARC/UI touch-ups, keep the app consistent and polished. October update highlights

**Codemod Workflows—now production-ready:** Complete overhaul of our workflow automation platform with manual task triggering, real-time cancellation, parameter editing during runs, and smart encryption for sensitive data. Run campaigns at scale with confidence. **Insights dashboards—more powerful:** Duplicate widgets and entire dashboards with one click, archive old analytics, and leverage multi-query widgets to combine data sources. Table views make large datasets easier to navigate. **GitLab integration:** Full GitLab support joins GitHub—browse all your groups and repositories, infinite scrolling through large orgs, and webhook integration for automated workflows. **Project management integrations:** * Jira bidirectional sync keeps your tasks aligned across platforms * GitHub organization role synchronization * Automatic task status updates and assignment tracking **Codemod Studio enhancements:** * **GitHub-style diffs:** Beautiful syntax-highlighted side-by-side comparisons powered by Shiki * **Restore checkpoints:** Easily revert to previous versions of your code transformations * **Pro codemods:** Premium transformations now available with team subscriptions **Stripe-powered subscriptions:** Seamless billing management directly in organization settings, with pro plan access controls for premium features and enterprise codemods. **JSSG security & capabilities:** JSSG now enforces a deny-by-default security model. File system access, network requests, and process spawning are disabled by default and must be explicitly enabled via the `capabilities` field in `codemod.yaml` or CLI flags. This ensures untrusted codemods cannot access sensitive resources without explicit permission, providing better security and auditability. **Platform upgrades:** * Next.js 16 and React 19 for improved performance and developer experience * Enhanced authentication flows and session handling **UX & design polish:** * Refined theme toggle with better dark mode support * Improved mobile experience across registry and studio * Breadcrumb navigation in package details * Streamlined repository selection with search and infinite scroll * Cleaner task cards and status indicators * **Studio Multi-File Model**: Introduces a faster, more reliable state with persistent sessions and seamless migration of older workspaces. * **Explorer Performance & UX**: Virtualized tree with rename, reorder, create, and delete actions plus hotkeys. Actions are transactional and consistent. * **JSON/YAML Support**: Adds full parsing, validation, and syntax highlighting for JSON and YAML for safer edits and better previews. * **Editor & Runtime Stability**: Improves worker error handling, clearly shows the currently running file, and keeps state consistent during rename/move operations. * **AI SDK v5 Rollout**: Moves Codemod AI to the latest SDK, migrates existing conversations, and simplifies the chat UI for smoother sessions. * **ast-grep Hooks**: Exposes ast-grep in sandbox and validation tools, unlocking more precise analysis for advanced authors. * **Registry Search & SEO**: Adds tag and author filters, improves pagination and empty states, shows accurate 404s, and upgrades metadata and structured data for better discoverability. * **Registry UI Polish**: Adds theme toggle, improves timestamps and avatars, and refines navigation. * **Git Integrations**: Ships a GitLab proxy service and hardens installation/webhook flows for more reliable CI. * **Validation Workflow UX**: Clearer validation status and errors in Studio; PR creation flow is more resilient. * **Workflows Engine**: Adds an Append diff operation, relaxes rate limits to reduce 429s, and clarifies testing instructions. * **SSO Setup**: Introduces provider creation and management with validated forms. * **Docs & Templates**: Adds a pull request template and improves registry search suggestions. * **Polish & Fixes**: Build compliance improvements, safer multi-host headers, pagination correctness, stable editor updates, UI interaction refinements, and many under-the-hood improvements. * **API Keys Management**: Generate, rotate, and revoke keys with per-user/org permissions and automatic expiry. * **Package Registry Overhaul**: Publish, search, and download codemods with version pinning, download stats, and scoped visibility. * **Studio Interface Redesign**: Tabbed rule editor, mobile-friendly layout, and streamlined action bar improve focus and navigation. * **CLI Improvements**: JavaScript bundling support for improved developer experience and faster execution. * **Performance & Build**: Faster builds and lower memory use. * **Security Improvements**: Enhanced security measures to keep your projects and data safe. * **Under-the-hood Improvements**: bug fixes, dependency upgrades, and refactors for better stability. * **Faster, lighter Codemod Studio**: the underlying runtime was rebuilt, cutting load times when you switch languages and adding support for several new languages. * **GitLab integration reliability**: improved token handling makes CI workflows and branch pushes smoother. * **Insights dashboards**: you can now choose custom date ranges, and charts automatically fill gaps on days without commits for cleaner trend lines. * **Authentication & installation fixes**: resolved the sign-in loop that affected a few users and squashed related auth bugs. * **Performance upgrades**: multithreaded query processing and SQL optimisations speed up large-repo searches. * **Design polish**: refreshed 404 page with subtle animations plus button, colour, and spacing tweaks across the app. * **Various bug fixes & minor enhancements**: ongoing quality-of-life improvements. May update highlights

* **Interactive docs**: Learn by doing—our documentation now includes built-in interactive demos. * **Streamlined sign-in**: We've revamped the sign-in flow for a smoother and more helpful experience. * **UX & design polish**: * Refined rough edges across the app * Introduced a more consistent, cleaner, more functional sidebar * Improved utility pages on the website * **Codemod Insights filters**: You can now include or exclude specific file glob patterns in your Insights queries. * **Under the hood**: General performance enhancements across the platform for a faster, more reliable experience. * **Enterprise experience**: New pro codemods and enterprise features for [enterprise customers](https://codemod.com/pricing). We're excited to announce a new feature, [Codemod Insights](https://app.codemod.com/insights)! 🚀 title

In large codebases, tracking migrations, legacy and current APIs, security anti-patterns, and trends can be incredibly useful. With Codemod Insights, you can generate customized dashboards that provide valuable insights into your code’s posture as your codebases scale over time. This way, you can stay on top of your codebase’s evolution and make better-informed decisions.