shannon Releases

This release introduces support for custom PI model configurations using registry-resolvable IDs and distinct error codes. Additionally, it improves system reliability by surfacing startup and preflight failures for better debugging.

Sep 8, 2026

Shannon v3.1.0 introduces the ability to configure custom base URLs for OpenAI Responses on a per-provider basis. This enhancement offers greater flexibility in API endpoint management. The update specifically addresses feature request #445.

Sep 3, 2026

Shannon 3.0 introduces a major evolution with the addition of Agentic SAST, leveraging AI to enhance automated vulnerability detection. This release signifies a shift towards more autonomous security analysis capabilities within the platform. The update focuses on improving the efficiency and intelligence of the static application security testing process.

Sep 2, 2026

This release focuses on expanding authentication options for xAI services. It updates the pi harness and enables pentests to use xAI (Grok) subscription authentication.

Aug 28, 2026

The primary focus of this release was rebranding the project. It updates the visual identity across the npm page, command-line interface output, and generated reports.

Aug 27, 2026

This release improves reporting standards by emitting SARIF (Static Analysis Results Interchange Format) by default for exploit runs, enhancing compatibility with security tooling.

Aug 26, 2026

Fixes a memory issue affecting workers during startup caused by flow cache prewarming.

Aug 25, 2026

Ports the memory fix for workers related to flow cache prewarming to this version.

Aug 25, 2026

Disables piece cache prewarming on worker startup to resolve a memory issue.

Aug 25, 2026

Reverts a previous change to prevent CPU spikes in worker containers for flows with large dependencies.

Aug 25, 2026

Fixes the rate limiter to process parked jobs when a concurrency slot becomes available.

Aug 24, 2026

This release enhances error handling by terminating failed scans within Temporal workflows and ensuring the specific reason for termination is clearly surfaced to the user.

Aug 24, 2026

This release focuses on a minor UI improvement for the CLI help command to ensure better readability through proper alignment of columns.

Aug 19, 2026

This release addresses a display issue where the splash screen is now correctly shown when the CLI is invoked directly or during the setup process.

Aug 19, 2026

This is a feature-rich release introducing a significant CLI overhaul with live status tracking and a new method for generating PDF security reports using Typst.

Aug 18, 2026

This release introduces support for Codex subscription authentication specifically tailored for penetration testing workflows. It resolves issue #419 to enable better integration with Codex services, allowing users to leverage existing subscription credentials. The update enhances the tool's capability to handle automated security testing scenarios.

Aug 10, 2026

Adds generic API key support to the CLI, allowing users to utilize any Pi provider instead of being restricted to specific ones.

Aug 6, 2026

Enhances worker functionality by tracking severity levels during analysis and correcting prompt substitution logic.

Aug 4, 2026

This release introduces multi-provider model support, adds SARIF output capabilities, and includes fixes for exploit mode.

Jul 30, 2026

This release updates the FunASR llama.cpp runtime to v0.1.9, featuring prebuilt binaries for various platforms and incorporating a critical security fix for the YAML loader in the SenseVoice source snapshot.

Jul 24, 2026