Skip to content

chore(deps): update non-major#318

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major
Open

chore(deps): update non-major#318
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@sanity/client (source) ^7.22.0^7.23.0 age confidence devDependencies minor
@sanity/tsconfig (source) ^2.1.0^2.2.0 age confidence devDependencies minor
@sanity/tsdown-config (source) ^0.6.1^0.13.0 age confidence devDependencies minor
@sanity/ui (source) ^3.2.0^3.3.5 age confidence devDependencies minor
@types/react (source) ^19.2.14^19.2.17 age confidence devDependencies patch
@vitejs/plugin-react (source) ^6.0.2^6.0.3 age confidence devDependencies patch
groq (source) ^5.25.1^5.31.1 age confidence devDependencies minor
oxfmt (source) ^0.50.0^0.58.0 age confidence devDependencies minor
oxlint (source) ^1.65.0^1.73.0 age confidence devDependencies minor
oxlint-tsgolint ^0.23.0^0.24.0 age confidence devDependencies minor
peaceiris/actions-gh-pages (changelog) 4f9cc6684c30a8 action digest
portabletext/.github (changelog) 4d2d3a0a311e91 action digest
react (source) ^19.2.6^19.2.7 age confidence devDependencies patch
react-dom (source) ^19.2.6^19.2.7 age confidence devDependencies patch
react-is (source) ^19.2.6^19.2.7 age confidence devDependencies patch
sanity (source) ^5.25.1^5.31.1 age confidence devDependencies minor
tsdown (source) ^0.22.0^0.22.4 age confidence devDependencies patch
vitest (source) ^4.1.6^4.1.10 age confidence devDependencies patch

Release Notes

sanity-io/client (@​sanity/client)

v7.23.0

Compare Source

Features

v7.22.1

Compare Source

Bug Fixes
  • live: verify CORS via /check/cors (credentials-aware) before reporting CorsOriginError (#​1219) (566e1b5)
sanity-io/pkg-utils (@​sanity/tsconfig)

v2.2.0

Compare Source

Minor Changes
  • #​2959 7a1e207 Thanks @​stipsan! - Add outDir: "${configDir}/dist" to the recommended preset

    Emitting to dist is already the default in @sanity/pkg-utils and tsdown, but every repo extending these presets had to repeat it in their own tsconfig. Since ${configDir} resolves to the directory of the tsconfig that extends the preset, output now lands in the dist folder next to your package.json by default, and the manual declaration can be removed:

    {
      "extends": "@​sanity/tsconfig/strictest",
    -  "compilerOptions": {
    -    "outDir": "${configDir}/dist"
    -  }
    }
sanity-io/pkg-utils (@​sanity/tsdown-config)

v0.13.0

Compare Source

Minor Changes
  • #​2978 9caf824 Thanks @​stipsan! - feat: support TypeScript 7 (the Go-native compiler), require TypeScript 6 or later

    BREAKING: the typescript peer dependency range is now 6.x || 7.x — TypeScript 5.x is no longer supported. TypeScript 7 is not required yet, but 6.0 is the new minimum.

    • The classic JS compiler API (used for parsing tsconfig.json and the api-extractor dts pipeline) is now always loaded from the official @typescript/typescript6 compat package (a regular dependency), since TypeScript 7 no longer ships it. The installed typescript peer no longer affects that pipeline.
    • dts: 'rolldown' upgrades to rolldown-plugin-dts 0.27.x: with typescript v7 installed, type generation automatically uses the Go-native compiler (tsgo) from the typescript package itself, without needing @typescript/native-preview. With v6, the previous behavior is unchanged (tsgo is opt-in via the tsgo option or @typescript/native-preview in devDependencies, and tsgo: false still opts out).

v0.12.1

Compare Source

Patch Changes

v0.12.0

Compare Source

Minor Changes
  • #​2967 b5d524e Thanks @​stipsan! - Emit shared (non-entry) chunks into _chunks-es, _chunks-cjs and _chunks-dts folders, following the same naming convention as @sanity/pkg-utils, instead of placing them at the root of dist next to the entries.

    A chunk could otherwise take an entry's filename: code shared between two entries forms a chunk that rolldown may name after one of the entries (e.g. theme). The JS output deduplicates such filename collisions in favor of the entry, but the d.ts output could resolve them the other way around, handing the entry's .d.ts filename to the chunk - which exports everything under minified aliases like buildTheme as x - so every named import from that entry failed to type-check with TS2460 (see sanity-io/ui#2262). With chunks emitted into their own folders they can never collide with entry filenames.

v0.11.0

Compare Source

Minor Changes
  • #​2961 c32c11d Thanks @​stipsan! - Add dts and define options, passed through to tsdown as-is.

    The dts option customizes how .d.ts files are generated, for example to use tsgo for type generation (the same feature as the tsgo option in @sanity/pkg-utils, requires @typescript/native-preview to be installed):

    import {defineConfig} from '@​sanity/tsdown-config'
    
    export default defineConfig({
      tsconfig: 'tsconfig.dist.json',
      dts: {tsgo: true},
    })

    The define option replaces global identifiers with constant expressions at build time (the same feature as the define option in @sanity/pkg-utils):

    import {defineConfig} from '@​sanity/tsdown-config'
    
    export default defineConfig({
      tsconfig: 'tsconfig.dist.json',
      define: {'process.env.NODE_ENV': JSON.stringify('production')},
    })

v0.10.0

Compare Source

Minor Changes
  • #​2937 cfa9845 Thanks @​stipsan! - feat: add the vanillaExtract option known from @sanity/pkg-utils

    Enables @vanilla-extract/rollup-plugin to extract CSS from .css.ts files into a separate file that is optimized with lightningcss. Like in @sanity/pkg-utils, the compat mode (on by default) automatically injects the self-referential import "<pkg>/bundle.css" into the entry chunk, emits a no-op bundle.css.js shim (plus bundle.css.d.ts) for runtimes that cannot import .css files, and writes the conditional "./bundle.css" export (browser/style → the real CSS, node/default → the shim) to package.json.

    The feature is fully opt-in: neither @vanilla-extract/rollup-plugin nor the CSS toolchain (lightningcss, browserslist) is loaded unless vanillaExtract is enabled.

v0.9.0

Compare Source

Minor Changes
  • #​2954 ec35d61 Thanks @​stipsan! - Add reactCompiler option, the same feature as babel: {reactCompiler: true} in @sanity/pkg-utils.

    import {defineConfig} from '@&#8203;sanity/tsdown-config'
    
    export default defineConfig({
      tsconfig: 'tsconfig.dist.json',
      reactCompiler: true,
    })

    It runs babel-plugin-react-compiler on the source files before they are bundled, so published components are memoized automatically. Pass an object instead of true to configure the compiler with the same options as babel-plugin-react-compiler (e.g. reactCompiler: {target: '18'}). Requires babel-plugin-react-compiler to be installed.

v0.8.0

Compare Source

Minor Changes
  • #​2953 fd85068 Thanks @​stipsan! - Add styledComponents option, the same feature as babel: {styledComponents: true} in @sanity/pkg-utils.

    import {defineConfig} from '@&#8203;sanity/tsdown-config'
    
    export default defineConfig({
      tsconfig: 'tsconfig.dist.json',
      styledComponents: true,
    })

    It applies the styled-components transform (adding displayName for better debugging, componentId to avoid SSR hydration mismatches, and minifying the CSS in tagged template literals) with the same defaults as @sanity/pkg-utils. Unlike @sanity/pkg-utils it doesn't require installing babel-plugin-styled-components, as it uses oxc's native port of the babel plugin. Pass an object instead of true to customize the transform with the same options as babel-plugin-styled-components.

v0.7.3

Compare Source

Patch Changes
  • #​2934 d6cfe32 Thanks @​stipsan! - fix: preserve side-effect-only imports of external packages

    Tree-shaking no longer sets the equivalent of moduleSideEffects: 'no-external' and instead relies on the bundler's default (moduleSideEffects: true). Previously, binding-less side-effect imports of external package subpaths — e.g. import 'react-time-ago/locale/en' — were stripped from the output, breaking consumers that depended on those side effects. package.json sideEffects fields are still honored for bundled modules, so dead-code elimination is unaffected.

v0.7.2

Compare Source

Patch Changes

v0.7.1

Compare Source

Patch Changes

v0.7.0

Compare Source

Minor Changes
Patch Changes
sanity-io/ui (@​sanity/ui)

v3.3.5

Compare Source

Patch Changes
  • #​2275 6546a45 Thanks @​stipsan! - fix(build): restore named exports in dist/theme.d.ts so import {buildTheme} from '@&#8203;sanity/ui/theme' type-checks again (TS2460). Shared chunks are now emitted to dist/_chunks/ so they can no longer take an entry point's .d.ts filename.

v3.3.4

Compare Source

Patch Changes
  • #​2267 5553766 Thanks @​stipsan! - fix(deps): update dependency csstype to ^3.2.3, and use regular styled-components instead of the @sanity/styled-components fork for development and testing

v3.3.3

Compare Source

Patch Changes

v3.3.2

Compare Source

Patch Changes
  • #​2220 edb7248 Thanks @​stipsan! - The package is now built with tsdown. It continues to ship both CJS (require) and ESM (import) builds with identical entry points and named exports.

v3.3.1

Compare Source

Patch Changes

v3.3.0

Compare Source

Features
vitejs/vite-plugin-react (@​vitejs/plugin-react)

v6.0.3

Compare Source

sanity-io/sanity (groq)

v5.31.1

Compare Source

Sanity Studio v5.31.1

For the complete changelog with all details, please visit:
www.sanity.io/docs/changelog/5e41ca5a-489c-4390-a9e8-f3712b30bf37

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author Message Commit
@​stipsan fix(core): revert use schema preview selection for search (#​13029) ec87ab7
@​stipsan fix(core): exclude dereference paths from groq2024 score boosts (#​13027) ca4657e
@​bjoerge ci(release): add commit log and working compare link to v5 release pr (#​13028) 75a443d
@​bjoerge ci(release): block v5 release pr when commits would cause a major bump 0b8f8e3
@​bjoerge ci(release): keep pnpm install output out of v5 release pr description 451b07b
@​bjoerge chore(ci): set up release automation for v5 65d0a0c
squiggler-app[bot] chore(release): publish v5.31.1 (#​13022) 1cd4e22

v5.31.0

Compare Source

Sanity Studio v5.31.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4zMC4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author Message Commit
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​13015) 28ff40c
@​stipsan chore(deps): remove stray lockfiles and guard in gitignore (#​13018) 798b5be
@​stipsan test(e2e): fix internationalized array locators for plugin v5 (#​13016) ef89091
squiggler-app[bot] chore(deps): update react monorepo (#​12997) 29d4cd9
squiggler-app[bot] chore(deps): update dependency vitest-package-exports to ^1.2.0 (#​12995) 009b7e0
@​EoinFalconer test(form): align modal width helper test with new default width (#​13004) 9bb4386
squiggler-app[bot] chore(deps): update turbo monorepo to ^2.9.16 (#​12999) 9f01d74
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​13008) 52d3145
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​13007) f8b70e7
squiggler-app[bot] fix(deps): update dependency motion to ^12.40.0 (#​13001) 88044db
squiggler-app[bot] fix(deps): Update sentry-javascript monorepo to ^8.55.2 (#​13002) 0fe037d
squiggler-app[bot] fix(deps): Update CodeMirror (#​13000) c996dab
squiggler-app[bot] chore(deps): update testing-library monorepo to ^16.3.2 (#​12998) 29317c1
squiggler-app[bot] chore(deps): update dependency vite to ^7.3.5 (#​12994) 716818b
squiggler-app[bot] chore(deps): update dependency tsx to ^4.22.4 (#​12993) 4759a41
squiggler-app[bot] fix(deps): Update tanstack-virtual monorepo to ^3.14.2 (#​13005) 01f7bd1
squiggler-app[bot] chore(deps): update dev-non-major (#​12996) 82e7cc6
squiggler-app[bot] chore(deps): update dependency @​vitejs/plugin-react to ^5.2.0 (#​12992) 5fa01b4
squiggler-app[bot] chore(deps): update dependency @​mux/mux-player-react to ^3.13.0 (#​12991) b5ec84d
squiggler-app[bot] chore(deps): update dependency @​date-fns/tz to ^1.5.0 (#​12990) caace1e
squiggler-app[bot] fix(deps): update dependency @​sanity/client to ^7.22.1 (#​12989) b830a72
@​ChrisLaRocque feat(vision): Add shared queries support and UI improvements (#​12270) 88513f9
squiggler-app[bot] chore(deps): update dependency sanity-plugin-internationalized-array to v5 (#​12665) b60a045
@​kenjonespizza docs(examples): add stale-content-digest scheduled function (#​12776) ca20d97
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​12985) 513d6b2
squiggler-app[bot] chore(deps): update typescript-tooling to ^10.5.3 (#​12938) 2c19c50
squiggler-app[bot] chore(deps): update dependency @​sanity/image-url to ^2.1.1 (#​12891) 98b518d
@​pedrobonamin feat(core): use schema preview selection for search (#​12925) 78f227e
sieve-sanity[bot] fix(sanity): set touch-action: none on array drag handle (#​12931) (#​12932) 365bd6d
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​12982) c68dfd6
squiggler-app[bot] chore(deps): update portabletext (#​12896) 54d3b6e
squiggler-app[bot] chore(deps): update dependency @​sanity/functions to v1.3.1 (#​12890) 22bfb0a
squiggler-app[bot] chore(deps): update dependency @​sanity/sdk to ^2.12.0 (#​12892) ee60def
squiggler-app[bot] chore(deps): update dependency @​sanity/migrate to ^6.1.2 (#​12887) d7d731b
squiggler-app[bot] chore(deps): update dependency @​sanity/lezer-groq to ^1.0.4 (#​12886) 970607d
squiggler-app[bot] chore(deps): update vanilla-extract monorepo (#​12879) beab29f
squiggler-app[bot] chore(deps): update dependency @​sanity/ui to ^3.2.0 (#​12901) 78e33cf
squiggler-app[bot] fix(deps): update dependency @​sanity/insert-menu to v3.0.8 (#​12941) dd02d30
squiggler-app[bot] fix(deps): update dependency @​sanity/preview-url-secret to ^4.0.7 (#​12942) e5fd7f4
@​pedrobonamin fix(core): support modal width in Enhanced dialog (#​12955) 37d9ece
@​bjoerge test: migrate from playwright component tests to vitest browser tests (#​12971) c558ab4
squiggler-app[bot] fix(deps): Update xstate monorepo (#​12882) 1ec6335
squiggler-app[bot] chore(deps): update dependency babel-plugin-styled-components to ^2.3.0 (#​12893) 37d872c
squiggler-app[bot] fix(deps): update dependency groq-js to ^1.30.2 (#​12899) 5551206
squiggler-app[bot] fix(deps): update dependency @​sanity/client to ^7.22.1 (#​12940) 6b1084c
@​pedrobonamin feat(core): adds document level presence (#​12918) 735c095
@​pedrobonamin fix(presentation): ChildLink now renders missing docs (#​12958) 8cadf11
@​jordanl17 refactor(telemetry): rename camelcase document pane events to title case (#​12969) e3e77c0
@​EoinFalconer fix(form): keep edit dialog open on cmd+up inside text editors (#​12972) 7752b10
squiggler-app[bot] fix(deps): update dependency @​sanity/cli to ^6.7.2 (#​12939) f43f22e
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​12959) bff9f2f
@​EoinFalconer fix(form): apply default width to annotation edit popover when modal has no width (#​12975) d13c400
@​jordanl17 feat(presentation): add tab bar to switch panes at narrow viewports (#​12977) 434efa6
squiggler-app[bot] chore(deps): update dependency @​sanity/visual-editing-csm to ^3.0.9 (#​12937) 604e337
@​jordanl17 fix(core): react strict-mode improvements (#​12964) fcd6dac
@​EoinFalconer fix(studio): hide add-to-release option for archived scheduled drafts (#​12628) 1c3a0c6
squiggler-app[bot] chore(deps): lock file maintenance (#​12946) 3c02366
@​bjoerge feat(core): warn when no login providers are available (#​12957) 967a62d
@​stipsan refactor: reduce vite 8 delta, ensure vitest uses predictable vite version (#​12954) cb422a3
@​stipsan chore: make lefthook work without PATH trickery (#​12953) 273b0be
Copilot chore(deps): update @​sanity/mutate from ^0.16.1 to ^0.18.0 (#​12950) 6beebe3
squiggler-app[bot] chore(deps): update oxlint (#​12658) b88a4f0
squiggler-app[bot] chore(deps): update linters (#​12948)

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@changeset-bot

changeset-bot Bot commented Jun 1, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 83143db

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Jun 1, 2026

Copy link
Copy Markdown

@renovate renovate Bot force-pushed the renovate/non-major branch 9 times, most recently from 8b6eeb0 to 9e5796a Compare June 8, 2026 16:57
@renovate renovate Bot force-pushed the renovate/non-major branch 6 times, most recently from 53ce415 to d3246db Compare June 17, 2026 15:14
@renovate renovate Bot force-pushed the renovate/non-major branch 2 times, most recently from 88decf1 to 82e6965 Compare June 18, 2026 21:30
@socket-security

socket-security Bot commented Jun 18, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/rollup-plugin-visualizer@7.0.1npm/@rolldown/plugin-babel@0.2.3npm/tsdown@0.22.4npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot force-pushed the renovate/non-major branch 4 times, most recently from 0b99bee to 5c16b6a Compare June 26, 2026 14:00
@renovate renovate Bot force-pushed the renovate/non-major branch 4 times, most recently from 31dc491 to 6115b12 Compare July 2, 2026 00:09
@renovate renovate Bot force-pushed the renovate/non-major branch 12 times, most recently from 34e9c93 to 1907a29 Compare July 9, 2026 15:01
@renovate renovate Bot force-pushed the renovate/non-major branch from 1907a29 to 83143db Compare July 11, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants