Visitar URL original
fix(deps): update sanity-tooling by renovate[bot] · Pull Request #163 · sanity-io/codegen · GitHub
Skip to content

fix(deps): update sanity-tooling - #163

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/sanity-tooling
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/sanity-tooling

Conversation

@renovate

@renovate renovate Bot commented Sep 3, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@sanity/eslint-config-cli (source) ^1.1.2 → ^1.1.3 age confidence
@sanity/pkg-utils (source) ^10.5.5 → ^10.9.2 age confidence
groq (source) ^6.0.0 → ^6.23.0 age confidence
groq-js ^2.0.0 → ^2.0.1 age confidence
sanity (source) ^6.0.0 → ^6.23.0 age confidence

Release Notes

sanity-io/cli (@​sanity/eslint-config-cli)

v1.1.3

Compare Source

2026-07-17

Bug Fixes
sanity-io/pkg-utils (@​sanity/pkg-utils)

v10.9.2

Compare Source

Patch Changes

v10.9.1

Compare Source

Patch Changes

v10.9.0

Compare Source

Minor Changes
  • #​2955 935f6f6 Thanks @​stipsan! - Enable transpileTemplateLiterals by default in the babel.styledComponents transform, so unused styled components can be tree-shaken.

    The pure: true default has been emitting /*#__PURE__*/ annotations in front of tagged template expressions, a position no bundler supports (see rollup#4035), so the annotations were dropped and unused styled components were never tree-shaken - not by pkg-utils itself, and not by the bundlers of apps consuming the published package. Transpiling styled.button`...` to styled.button(["..."]) turns the styled component initializer into a plain call expression, which pure annotations are defined for:

    const UsedButton = /*#__PURE__*/ styled.button.withConfig({
      displayName: 'UsedButton',
      componentId: 'sc-1fal5wv-1',
    })(['cursor:pointer;'])

    With this shape, unused styled components are now removed from the build output, and the annotation survives into the published output so app bundlers (rollup, webpack, esbuild, etc) can drop exported styled components that the app never imports.

    To restore the previous output, set babel: {styledComponents: {transpileTemplateLiterals: false}} in package.config.ts.

Patch Changes

v10.8.2

Compare Source

Patch Changes
  • #​2934 d6cfe32 Thanks @​stipsan! - fix: preserve side-effect-only imports of external packages

    Tree-shaking no longer sets the equivalent of moduleSideEffects: 'no-external' and instead relies on the bundler's default (moduleSideEffects: true). Previously, binding-less side-effect imports of external package subpaths — e.g. import 'react-time-ago/locale/en' — were stripped from the output, breaking consumers that depended on those side effects. package.json sideEffects fields are still honored for bundled modules, so dead-code elimination is unaffected.

v10.8.1

Compare Source

Patch Changes

v10.8.0

Compare Source

Minor Changes
  • #​2888 59fdc02 Thanks @​stipsan! - feat: add strict dependency placement checks for well-known packages

    When running with --strict, package.json is now validated to ensure these packages are declared in the correct dependency fields:

    • react-is and @sanity/ui should not be in peerDependencies (use dependencies or devDependencies).
    • sanity, styled-components, react, and react-dom should not be in dependencies (use devDependencies and/or peerDependencies).
    • @types/react, @types/react-dom, and @types/node should not be in dependencies (use devDependencies and/or peerDependencies), and when listed in peerDependencies the version range should be *.
    • rxjs and @sanity/client should not be in peerDependencies (use dependencies or devDependencies).

    Each check is enabled by default at the error level and can be downgraded to warn or disabled via strictOptions in package.config.ts, e.g.:

    import {defineConfig} from '@sanity/pkg-utils'
    
    export default defineConfig({
      strictOptions: {
        noReactDependency: 'warn',
        noSanityClientPeerDependency: 'off',
      },
    })
Patch Changes
  • #​2903 296482a Thanks @​stipsan! - feat: disallow @sanity/icons in peerDependencies

    When running with --strict, package.json is now validated to ensure @sanity/icons is not declared in peerDependencies (use dependencies or devDependencies instead). The check defaults to error and can be configured via noSanityIconsPeerDependency in strictOptions.

v10.7.2

Compare Source

Patch Changes
  • #​2897 de87bc9 Thanks @​stipsan! - fix: mirror the auto-added bundle.css export into publishConfig.exports

    In vanilla-extract compat mode, pkg-utils auto-writes the conditional "./bundle.css" export to package.json. It only updated the top-level exports, so packages that also declare publishConfig.exports ended up out of sync, and the next strict --check failed with publishConfig.exports: missing export path "./bundle.css" that exists in exports.

    The conditional CSS export is now mirrored into publishConfig.exports as well (when that field exists), keeping the two in sync. The entry is identical in both places since the CSS export has no source/development/monorepo conditions to strip. publishConfig.exports is never created when it is absent.

  • #​2899 97cbc33 Thanks @​stipsan! - Emit a <css>.d.ts declaration alongside the vanilla-extract compat-mode CSS shim, so dts export checkers that resolve a .d.ts for every export target don't crash on a missing declaration file.

v10.7.1

Compare Source

Patch Changes
  • #​2895 ba964f1 Thanks @​stipsan! - Revert the upgrade of @babel/core and @babel/preset-typescript to v8, pinning them back to v7

v10.7.0

Compare Source

Minor Changes
  • #​2890 c219497 Thanks @​stipsan! - feat: auto-wire the conditional bundle.css export for vanilla-extract

    When rollup.vanillaExtract is enabled, pkg-utils now (by default) bakes in the conditional CSS export pattern so userland no longer needs a manual rollup.output.intro + shim plugin + package.json export. This new "compat mode" (rollup.vanillaExtract.extract.compatMode, defaults to true):

    • injects the self-referential import "<pkg-name>/<name>" into each entry chunk,
    • emits a no-op <name>.js shim for runtimes that cannot import .css files, and
    • writes the conditional "./<name>" export to package.json (browser/style → the real CSS, node/default → the shim).

    The emitted CSS file name is configurable via rollup.vanillaExtract.extract.name (default "bundle.css"), and the vanillaExtract option is now fully typed (PkgVanillaExtractOptions) with its real defaults documented. Set extract.compatMode: false to opt out and wire these up yourself.

Patch Changes

v10.6.0

Compare Source

Minor Changes
  • #​2887 a6adaa1 Thanks @​stipsan! - feat: support conditional exports for CSS files

    CSS subpath exports may now be declared as a conditional object (a flat map of condition name to path) instead of only a plain string. This enables re-adding a import "<pkg>/bundle.css" statement that resolves to the real CSS file in bundler/browser environments, while resolving to a no-op JS shim in runtimes (like Node) that cannot import .css files directly:

    {
      "exports": {
        "./bundle.css": {
          "browser": "./dist/bundle.css",
          "style": "./dist/bundle.css",
          "node": "./dist/bundle.css.js",
          "default": "./dist/bundle.css.js"
        }
      }
    }
Patch Changes

v10.5.8

Compare Source

Patch Changes

v10.5.7

Compare Source

Patch Changes

v10.5.6

Compare Source

Patch Changes
sanity-io/sanity (groq)

v6.23.0

Compare Source

Sanity Studio v6.23.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4yMi4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author Message Commit
@​vquigley feat(access-ui): render advisory access-request states in shared card (#​15611) 90fa7fd
@​bjoerge refactor: follow a reactive client credential across token rotations (#​15798) 5cf4755
@​sjelfull feat(media-library): show video thumbnails in previews (#​12268) fd49806
squiggler-app[bot] chore(deps): update dependency ui5 to v5.0.0-alpha.21 (#​15792) 6dbf839
@​bjoerge chore(debug-proxy): add oauth token endpoint scenarios (#​15819) 73f186d
@​pedrobonamin chore(tests): keep only latest datasets in open PRs and only for 3 days (#​15820) bd26aa5
@​bjoerge fix: log out the auth store whose session was rejected (#​15788) fccea09
@​pedrobonamin fix: repair broken lockfile (#​15840) d02d5fc
@​jordanl17 docs(i18n): never delete locale resource keys (#​15789) 06f6ab4
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​15836) d641460
@​stipsan feat(vision): send oversized queries as a post body, load pasted curl commands, and drop the vista codename (#​15499) ac255a8
@​stipsan fix(vision): restore the redesign without groq-wasm top-level await (#​15803) f625557
@​laurenashpole chore: text migration final pass (#​15834) 12d06c6
@​kmelve chore(codeowners): remove examples/functions owners (#​15835) f567222
@​pedrobonamin feat(variants): gate variant creation on the content variants feature (#​15709) 4c1b4f1
@​juice49 feat(sanity): unify document group inventory version creation steps 5b3e9bc
@​juice49 feat(sanity): allow base version to be specified when creating version from document group inventory (#​15821) c29319c
@​stipsan Revert #​15825 (#​15828) 4e6bb54
@​stipsan fix(presentation): stop the document pane re-render loop (#​15825) a10ddd4
@​jordanl17 refactor(util): move accepts() utility from validation to util package (#​15804) 6155bb8
@​jonahsnider fix(schema): stop listing date as a future reserved type (#​15134) b426283
squiggler-app[bot] fix(deps): update dependency @​sanity/cli to ^8.28.0 (#​15794) b783ddf
@​pedrobonamin refactor(releases): route releases upsell through useUpsellContext (#​15801) a0be084
@​jordanl17 fix(releases): render portable text descriptions with toPlainText instead of blanking (#​15787) c8a890e
@​laurenashpole chore: migrate text in packages/@​sanity (#​15779) 40b70a4
squiggler-app[bot] chore(deps): update dependency @​sanity/client to ^8.15.0 (#​15791) d73ec0c
squiggler-app[bot] fix(deps): update portabletext (#​15783) 44bc779
@​jordanl17 test(core): add a sync test for a silent listener (#​15668) a7ef62e
@​jordanl17 test(core): add sync tests for the document engine against a fake content lake (#​15667) ed46fe0
@​jordanl17 fix(form): quote unsupported string patch type once (#​14933) bedfaaf
@​jordanl17 fix(releases): render releases whose description is not a string (#​15725) e2ef7b4
@​jordanl17 refactor(field): build default diff components on first lookup (#​15746) f3cac03
@​pedrobonamin fix(core): share the shard ping across document checkouts (#​15774) 003a7a2
@​christianhg feat(core): add telemetry for cancelled and retried commits (#​15778) 8e213a0
@​EoinFalconer feat(form): expose changed state to PTE previews and annotations (#​12988) 6e7e3a1
@​juice49 feat(sanity): add served version status to document group inventory (#​15723) fc8ccc2
squiggler-app[bot] chore(tests): generate dts tests 🤖 ✨ (#​15764) ead40e3
squiggler-app[bot] fix(deps): update portabletext (#​15757) 0110e57
@​jonahsnider fix(validation): validate reference target types (#​15736) 5b45e57
@​jonahsnider feat(validation): support workspace i18n configs in validation (#​15754) 437c370
@​juice49 feat(sanity): expand id matching to segments in path-like query strings (#​15762) 918328d
squiggler-app[bot] chore(deps): update dependency ui5 to v5.0.0-alpha.20 (#​15768) 2265c8e
@​laurenashpole chore: migrate text in remaining core/components directories (#​15623) 4322b99
@​stipsan ci(test): test supported react version boundaries (#​14709) c28744d
@​laurenashpole chore: migrate text in remaining form directories (#​15610) d98b4ec
@​laurenashpole chore: migrate text in remaining src directories (#​15626) 2d9b049
@​pedrobonamin feat(core): show a compact versions popover on document list rows (#​15749) 057171e
@​pedrobonamin fix(studio): keep the navbar color the same in every perspective (#​15657) 642b41b
@​juice49 test(sanity): fix ResourcesMenuItems test props (#​15763) a04a892
@​stipsan fix(e2e): archive the loaded studio in the navbar chromatic snapshot (#​14882) d96e804
@​stipsan refactor(core): load the help menu resources with suspense (#​15308) 371806f

v6.22.0

Compare Source

Sanity Studio v6.22.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4yMS4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog
Author Message Commit
@​pedrobonamin fix(core): restore the releases classic navbar pill when variants are off (#​15745) b42942c
@​pedrobonamin chore(structure): remove document target badges and onboarding hint (#​15712) 68eeac4
cursor[bot] test(field): cover review changes revert edge cases (#​14934) e9533eb
cursor[bot] test(router): cover scoped search param bracket parsing (#​15705) be5bc91
@​jordanl17 feat(validation): warn when an asset does not match its field's accept option (#​15673) 20d67d5
@​pedrobonamin chore(vision): ignore disconnected vista symbols in knip (#​15747) e9cf32d
cursor[bot] test(field): cover review changes list grouping (#​15310) 7d3ba79
@​pedrobonamin chore(core): adds releases detail link in releases dropdown menu items (#​15737) 0f366c2
@​pedrobonamin feat(structure): add document panel navigation with a variants menu (#​15706) 5975502
@​pedrobonamin chore(structure): document navigation menu for releases (#​15707) 7177d0e
@​pedrobonamin chore(structure): adds scheduled drafts form dropdown (#​15711) da3ba56
cursor[bot] test(presentation): cover overlay schema helper edge cases (#​15486) 7af7459
cursor[bot] test(storybook): add ui5 sentinels for filter empty state menu actions and validation icons (#​15715) 23952d0
@​juice49 fix(vision): temporarily remove Vista imports (#​15744) 128cce1
@​pedrobonamin fix(test): collect chromium garbage after every browser test file (#​15730) 2d3f570
squiggler-app[bot] fix(deps): update sanity-sdk to ^3.12.0 (#​15726) dab80c8
@​juice49 chore(vision): narrow @pierre/diffs to 1.6.2 ([#​15742](https://redirect.git

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate
renovate Bot enabled auto-merge (squash) September 3, 2026 08:36
@renovate renovate Bot added the 📦 deps label Sep 3, 2026
@pkg-pr-new

pkg-pr-new Bot commented Sep 3, 2026 •

Copy link
Copy Markdown
npm i https://pkg.pr.new/@sanity/codegen@163

commit: 52c978e

@socket-security

socket-security Bot commented Sep 3, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​sanity/​eslint-config-cli@​1.1.2 ⏵ 1.1.372 +11009392100
Updatednpm/​groq@​6.0.0 ⏵ 6.23.0100 +110081 +2100100
Updatednpm/​groq-js@​2.0.0 ⏵ 2.0.110010010093 +4100
Updatednpm/​sanity@​6.0.0 ⏵ 6.23.097 +110010098100
Updatednpm/​@​sanity/​pkg-utils@​10.5.5 ⏵ 10.9.297 +110010098 +1100

View full report

@socket-security

socket-security Bot commented Sep 3, 2026 •

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@github-actions

github-actions Bot commented Sep 3, 2026 •

Copy link
Copy Markdown

size-limit report 📦

Path Size
@sanity/codegen bundle (raw) 5.23 MB (+0.02% 🔺)
@sanity/codegen bundle (Brotli) 1.01 MB (+0.05% 🔺)

@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 5 times, most recently from 34e3121 to f1fbb75 Compare September 10, 2026 22:59
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 6 times, most recently from 7842838 to cedf3e4 Compare September 18, 2026 07:14
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 3 times, most recently from 08f56d4 to fe300d2 Compare September 24, 2026 21:05
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 4 times, most recently from 63f7bcf to 53efe7e Compare October 6, 2026 17:15
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 2 times, most recently from 68c0a53 to ef60e88 Compare October 13, 2026 21:06
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 2 times, most recently from c5e2fcc to 1c701ce Compare October 22, 2026 14:18
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 3 times, most recently from 744a5e1 to 9a19139 Compare October 29, 2026 13:34
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch 3 times, most recently from df95914 to 3b7d509 Compare November 10, 2026 23:32
@renovate
renovate Bot force-pushed the renovate/sanity-tooling branch from 3b7d509 to 52c978e Compare November 11, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants