Skip to content

chore(deps): update non-major - #339

Merged
stipsan merged 1 commit into
mainfrom
renovate/non-major
Aug 20, 2026
Merged

chore(deps): update non-major#339
stipsan merged 1 commit into
mainfrom
renovate/non-major

Conversation

@renovate

@renovate renovate Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@sanity/client (source) ^7.25.0 → ^7.26.2 age confidence
@sanity/ui (source) ^3.5.0 → ^3.5.3 age confidence
@types/leaflet (source) ^1.9.21 → ^1.9.22 age confidence
@types/react (source) ^19.2.17 → ^19.2.18 age confidence
@types/react-dom (source) ^19.2.3 → ^19.2.4 age confidence
esbuild ^0.28.1 → ^0.28.2 age confidence
groq (source) ^6.6.0 → ^6.10.1 age confidence
oxfmt (source) ^0.61.0 → ^0.64.0 age confidence
rollup-plugin-visualizer ^7.0.1 → ^7.1.1 age confidence
sanity (source) ^6.6.0 → ^6.10.1 age confidence
styled-components (source) ^6.4.4 → ^6.5.3 age confidence
vite (source) ^8.1.5 → ^8.2.1 age confidence
vitest (source) ^4.1.10 → ^4.1.11 age confidence

Release Notes

sanity-io/client (@​sanity/client)

v7.26.2

Compare Source

Bug Fixes

v7.26.1

Compare Source

Bug Fixes
  • stega: keep symbol-keyed properties unbranded in StegaBranded (#​1241) (a36eebb)

v7.26.0

Compare Source

Features
sanity-io/ui (@​sanity/ui)

v3.5.3

Compare Source

Patch Changes

v3.5.2

Compare Source

Patch Changes

  • #​2637 df34007 Thanks @​squiggler-app! - fix(deps): update dependency vite to ^8.2.1

  • #​2609 c3726c9 Thanks @​stipsan! - fix(deps): update dependency motion to ^13.0.0

    Motion 13 no longer loads the optional @emotion/is-prop-valid dependency to decide which props a
    motion component forwards to the DOM; it now only does so when an isValidProp function is passed
    to MotionConfig. @sanity/ui composes motion the way the upgrade guide recommends
    (motion.create(StyledComponent), never styled(motion.div)), so its own components are unaffected:
    for custom components motion still forwards every non-motion prop and lets the styled component
    filter, exactly as before. Apps that wrap a DOM-level motion component in a CSS-in-JS factory —
    styled(motion.div) — may need to pass isValidProp to MotionConfig, use transient props, or
    reverse the composition.

  • #​2632 5207572 Thanks @​stipsan! - fix(deps): update dependency styled-components to ^6.5.0

    styled-components 6.5 tightens polymorphic call-site and style prop typing. Adjust @sanity/ui for the new checks: narrow as at Box/VirtualList call sites to avoid TS2589, align Card's $tone/$muted with the values actually passed, and drop now-unnecessary assertions on motion.create(Card) wrappers.

v3.5.1

Compare Source

Patch Changes
evanw/esbuild (esbuild)

v0.28.2

Compare Source

  • Fix tree shaking bug due to TypeScript import alias (#​4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#​4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}

/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}

/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#​4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#​4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#​4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})
}

// Old output (with --minify-syntax --target=es6)
function foo() {
  bar(void 0 || (x = {}));
}

// New output (with --minify-syntax --target=es6)
function foo() {
  let x;
  bar(x || (x = {}));
}

  • Fix a potential deadlock when the JavaScript API is used incorrectly (#​4503, #​4506)

    The JavaScript API runs the native esbuild executable as a long-lived child process and communicates with it over stdin/stdout/stderr. Each API request is asynchronous and the executable stays open as long as it has work to do, which is as long as either stdin is still open (meaning there may be more API requests) or there are currently requests being processed.

    Previously esbuild's tracking of outstanding API requests missed decrementing a reference count in an edge case where esbuild's JavaScript API was used incorrectly and the API request returned an error. This could in some cases cause esbuild's native executable to exit with an error message about a deadlock. This release fixes the reference counting bug.

    This fix was submitted by @​ZuBB.

  • Handle target collisions (#​4509)

    It's possible to specify the same target engine multiple times, such as with --target=chrome1,chrome99. This edge case wasn't anticipated and previously took the last version for the duplicated target engine instead of the minimum version (so chrome99 in this case instead of chrome1). With this release, esbuild will now pick the minimum version between all duplicated target engines.

  • Force .mp3 files to use the audio/mpeg MIME type (#​4485)

    MIME type detection for esbuild's data URLs uses Go's built-in MIME type detection, which is based on the MIME sniffing standard. This works correctly for MP3 files that start with the byte sequence ID3, which is commonly the case. However, it's possible to construct valid MP3 files that do not start with ID3, and that perhaps Go's built-in MIME type detection doesn't implement the "Signature for MP3 without ID3" part of the algorithm. This results in some .mp3 files incorrectly using the application/octet-stream MIME type instead of audio/mpeg. With this release, esbuild will now always use the audio/mpeg MIME type for files ending in .mp3.

  • Add a new TypeScript syntax warning

    TypeScript 7 turned some previously-valid TypeScript syntax into a syntax error because it was confusing. TypeScript 6 accepts 1 + 2 as number * 3 as valid syntax but confusingly converts it to (1 + 2) * 3 instead of the more intuitive conversion to 1 + (2 * 3). This syntax is now an error in TypeScript 7+. With this release, esbuild will now warn about the use of this syntax:

    ▲ [WARNING] Operator "*" should not directly follow a TypeScript type cast after the "+" operator [confusing-typescript-cast]

    example.ts:1:28:
      1 │ console.log(1 + 2 as number * 3)
        ╵                             ^

  This is a syntax error in newer versions of TypeScript because the type cast has unintuitive
  precedence in this case. Surround the inner expression in parentheses to silence this warning:

    example.ts:1:12:
      1 │ console.log(1 + 2 as number * 3)
        │             ~~~~~~~~~~~~~~~
        ╵             (             )

    See microsoft/TypeScript#63527 for more information.

  • Add support for formatting errors for Visual Studio (#​4460)

    Visual Studio has a specific style that it expects log messages to be in for them to show up in the UI when esbuild is run as a custom build step. The current log style that esbuild uses doesn't conform to this specific style.

    With this release, esbuild has a new log style for Visual Studio (and other tools in the MSBuild ecosystem) that can be enabled with --log-style=visualstudio. Here is an example log message in this style:

    $ esbuild example.ts --log-style=visualstudio
/Users/evan/dev/esbuild/example.ts(1,29): warning ES0010: Operator "*" should not directly follow a TypeScript type cast after the "+" operator

    This log style is also available via the JS and Go APIs, and can now be used with the existing formatMessages API.

  • Fix a bug with CSS gamut mapping (#​4488)

    Due to a typo, the fallback colors generated for CSS colors outside of the sRGB gamut weren't correct. This release fixes the generated colors to use the intended algorithm.

    This fix was submitted by @​chatman-media.

sanity-io/sanity (groq)

v6.10.1

Compare Source

Sanity Studio v6.10.1

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4xMC4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog
Author Message Commit
@​stipsan fix(build): bake correct package version into cdn module bundles (#​14155) 3e5a82e
@​stipsan chore(deps): revert client v8 upgrade for hotfix release (#​14153) fdb7c52
@​stipsan fix(core): classify client v8 timeout errors in the request-error channel (#​14146) dc5e4c0
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​14130) 8b8eaf9
@​pedrobonamin fix(core): duplicate variant documents into the same variant (#​14041) a29e7a7
@​rexxars chore(deps): upgrade @sanity/client to v8 (#​14092) 37bdbaa

v6.10.0

Compare Source

Sanity Studio v6.10.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni45LjI

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog
Author Message Commit
@​stipsan chore(deps): remove unused @​tanstack/react-table dependency (#​14121) 6f143b4
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​14122) 08e96ff
@​christianhg chore: ignore and remove committed browser-test failure screenshots (#​14038) 62e62db
squiggler-app[bot] fix(deps): update portabletext (#​14080) 9079e9a
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​14064) 2c1d713
@​christianhg fix(core): open the added annotation via markDefPaths instead of the deprecated markDefPath (#​14048) 44d3ee2
squiggler-app[bot] fix(deps): update dependency @​portabletext/react to v8 (#​14082) 14c460a
@​bjoerge chore(bench): avoid self-test failing on inconclusive + syntheticLarge (#​14085) dcb12a5
squiggler-app[bot] chore(deps): update dependency @​sanity/workbench to v0.1.0-alpha.42 (#​14120) ae5001d
@​bjoerge fix(core): increase spacing between troubleshooting tips (#​14099) a2d57e6
squiggler-app[bot] chore(deps): update dependency @​testing-library/user-event to ^14.6.4 (#​14111) ac3d154
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​14118) f6d25a2
squiggler-app[bot] fix(deps): update portabletext to v6 (#​14084) 1012cce
squiggler-app[bot] chore(deps): update dependency web-vitals to ^6.1.1 (#​14112) e8fdbfa
squiggler-app[bot] chore(deps): update dependency @​sanity/workbench to v0.1.0-alpha.41 (#​14097) 2330f13
@​pedrobonamin feat(vision): pass navbar variant with pinned release queries (#​14063) ee6ebee
squiggler-app[bot] fix(deps): update dependency @​sanity/cli to ^8.0.2 (#​14113) 9a3f73a
@​jordanl17 feat(test-studio): add sso login option for sandbox org (#​14089) dbd7e76
squiggler-app[bot] chore(deps): update renovatebot/github-action action to v46.2.2 (#​14076) 6f1e8c0
squiggler-app[bot] chore(deps): update dependency @​sanity/functions to v1.6.8 (#​14067) 72338f9
@​stipsan chore(sanity): add opt-in markdown bundle analyzer (#​14106) 31ae4a5
@​stipsan test(storybook): co-locate visual regression stories (#​14104) 3729ae4
@​stipsan chore(deps): bump styled-components to 6.5.3 (#​14103) 7d2ea95
squiggler-app[bot] chore(deps): update dependency @​sanity/vanilla-extract-vite-plugin to ^0.2.13 (#​14096) 4ea5888
@​christianhg fix(core): declare the Style and ListItem prop shapes locally (#​14049) e032325
squiggler-app[bot] chore(deps): update dependency chromatic to ^18.2.0 (#​14081) 2a12d2f
squiggler-app[bot] fix(deps): update dependency @​sanity/preview-url-secret to ^4.1.4 (#​14077) cf51cf9
squiggler-app[bot] chore(deps): update dependency swr to ^2.5.1 (#​14075) a4e6056
squiggler-app[bot] chore(deps): update dependency sanity-plugin-internationalized-array to ^5.1.27 (#​14073) 093ac7f
squiggler-app[bot] chore(deps): update dependency esbuild to v0.28.2 (#​14071) 8403750
squiggler-app[bot] chore(deps): update dependency eventsource-parser to ^3.1.1 (#​14072) c9b486e
squiggler-app[bot] chore(deps): update dependency @​sanity/visual-editing-csm to ^3.0.15 (#​14070) aa52529
squiggler-app[bot] chore(deps): update dependency @​sanity/sdk-react to ^2.19.0 (#​14069) 4b18a10
squiggler-app[bot] chore(deps): update dependency @​sanity/blueprints to ^0.23.6 (#​14066) 2da388a
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​14094) d6fb375
@​bjoerge fix(core): link status.sanity.io in network troubleshooting tips (#​14095) 8ee1ed0
@​pedrobonamin refactor(releases): route version discard through document operations (#​14058) 94ce4b8
@​pedrobonamin refactor(structure): remove obsolete selectedVariantDisplay chip (#​13932) 9f542af
squiggler-app[bot] fix(deps): update dependency @​sanity/cli to v8 (#​14083) 68297d0
@​shapirodaniel fix(studio): replace robot token sign out with claim action (#​14044) bbe74b5
squiggler-app[bot] fix(deps): update dev-non-major (#​14078) bb95b55
@​laurenashpole chore: migrate box in components directories in core/studio (#​14019) 8341627
@​laurenashpole chore: migrate box in misc directories in core/studio (#​14018) b03ff17
squiggler-app[bot] chore(deps): update dependency @​sanity/google-maps-input to ^6.1.11 (#​14068) 3999125
squiggler-app[bot] chore(deps): update dependency @​sanity/ui to ^4.0.3 (#​14065) 999f834
squiggler-app[bot] chore(deps): update dependency @​sanity/tsdown-config to ^0.24.1 (#​14047) d53048e
@​pedrobonamin fix(variants): report ALREADY_UNPUBLISHED for release-scoped variants (#​14012) 0b6b972
@​bjoerge ci(bench): build packages in the self-test job (#​14061) fe71d2e
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#​14046) d1a4c99
@​EoinFalconer chore: untrack the lefthook-generated husky hook (#​14060) 1524806
@​pedrobonamin test(e2e): make navbar search spec resilient to search index lag (#​14043) 8c88091
@​shapirodaniel fix(core): redirect to login after project claim (#​14042) 4666d4e
@​bjoerge fix(bench): borrow head harness install for worktree builds (#​14040) c1eaa37
@​pedrobonamin refactor(releases): route version unpublish through document operations (#​14001) 708f04d
@​pedrobonamin fix(structure): show published badge for live edit documents (#​14029) f859eb2
@​jordanl17 fix(vision): stop swallowing paste events outside vision (#​14016) 75de447
@​stipsan fix(presentation): replace path-to-regexp with urlpattern for main document routes (#​14028) 7147d04
@​pedrobonamin fix(structure): keep manage versions when document has no actions (#​14031) 66e492c
squiggler-app[bot] fix(deps): update dependency motion to ^13.1.0 (#​13981) 67ac5e9
@​jordanl17 ci(release): reconcile in-flight release checks on a schedule (#​13927) 481d12f
@​laurenashpole chore: migrate box in core tasks (#​14015) e63212d
@​laurenashpole chore: migrate box in core field (#​13996) 4a671a6
@​christianhg refactor(core): render the comment input through editor node registrations (#​14034) da6f0f0
@​bjoerge fix: prevent layout shift when switching field groups in dialog (#​14039) 4eeeb55
@​bjoerge fix(core): record a resolvable schema type name at copy time (#​14035) ec4383a
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​14032) 781ade4
@​pedrobonamin fix(variants): allow colons and reject commas in condition values (#​14021) b9e2e17
@​bjoerge chore(ci): publish next releases on a twice-daily schedule instead of per-commit (#​14000) 41ebb67
@​bjoerge ci(release): comment on the release pr when a next release is published (#​14007) 548b7de
@​shapirodaniel fix(core): hide lapsed unclaimed project nudge (#​13993) 908f00d
@​pedrobonamin fix(e2e): pin workspace icon for chromatic snapshot stability (#​14022) 49133aa
@​bjoerge chore(release-notes): bump all publishable packages (#​14013) 70d135a
@​laurenashpole chore: migrate box in core/perspective to core/variants (#​13997) c363f28
@​laurenashpole chore: migrate box in core/releases (#​13992) 71303ab
@​bjoerge fix: forward the workspace apiHost to the embedded sdk instance (#​13998) 2bc730c
@​stipsan feat(storybook): add visual regression testing with chromatic (#​14002) ac542a4
@​stipsan feat(e2e): add chromatic visual regression snapshots to the e2e suite (#​14003) 276d055
@​jordanl17 feat(releases): instrument release description usage (#​13775) dbe61d6
@​RostiMelk feat(access-ui): add renderAction slot and note in submit callback (#​13990) f3be9e8
@​pedrobonamin fix(structure): variants unpublish updates (#​13938) 6e3ced7
@​shapirodaniel fix(core): improve unclaimed project nudge accessibility (#​13995) 79677e1
@​laurenashpole chore: migrate box in core/scheduled-publishing (#​13986) d77af9f
@​ryanbonial feat(studio): provide SDKStudioContext to enable zero-config SDK usage (#​12157) 5354056
@​bjoerge feat(core): replace request access screen with sanity access-ui (#​13978) 4f77828
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@changeset-bot

changeset-bot Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: ec1206b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate
renovate Bot force-pushed the renovate/non-major branch 10 times, most recently from e0e10ae to bae75b2 Compare August 8, 2026 17:32
@renovate
renovate Bot force-pushed the renovate/non-major branch 3 times, most recently from cc0e35d to f1793f6 Compare August 11, 2026 22:31
@socket-security

socket-security Bot commented Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedesbuild@​0.28.2921007390100
Added@​types/​leaflet@​1.9.221001007786100
Updatedvitest@​4.1.10 ⏵ 4.1.119810079 +199100
Addedgroq@​6.10.110010081100100
Addedvite@​8.2.2981008296100
Added@​sanity/​tsdown-config@​0.26.08410010098100
Addedoxfmt@​0.64.0861008896100
Added@​sanity/​ui@​3.5.3991008898100
Addedrollup-plugin-visualizer@​7.1.19910010089100
Added@​sanity/​client@​7.26.29310010097100
Added@​vitejs/​plugin-react@​6.1.010010010094100
Addedstyled-components@​6.5.39510010098100
Addedsanity@​6.10.19710010098100

View full report

@renovate
renovate Bot force-pushed the renovate/non-major branch 11 times, most recently from 4a0daaa to b740220 Compare August 19, 2026 06:28
@renovate
renovate Bot force-pushed the renovate/non-major branch 3 times, most recently from 8b82d78 to 8f15c40 Compare August 20, 2026 13:21
@renovate
renovate Bot force-pushed the renovate/non-major branch from 8f15c40 to ec1206b Compare August 20, 2026 13:40
@stipsan
stipsan merged commit ea85eb7 into main Aug 20, 2026
10 checks passed
@stipsan
stipsan deleted the renovate/non-major branch August 20, 2026 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

🤖 bot 📦 deps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@stipsan