Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 23, 2025

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.


This PR contains the following updates:

Package Change Age Confidence
@sanity/pkg-utils ^8.1.4 -> ^8.1.17 age confidence
@sanity/ui (source) 4.0.0-static.23 -> 4.0.0-static.36 age confidence
@types/node (source) ^24.3.0 -> ^24.6.2 age confidence
@types/react (source) ^19.1.12 -> ^19.2.0 age confidence
@types/react-dom (source) ^19.1.9 -> ^19.2.0 age confidence
lint-staged ^15.4.3 -> ^15.5.2 age confidence
oxlint (source) ^1.14.0 -> ^1.19.0 age confidence
react (source) ^19.1.1 -> ^19.2.0 age confidence
react-dom (source) ^19.1.1 -> ^19.2.0 age confidence
typescript (source) 5.9.2 -> 5.9.3 age confidence

Release Notes

sanity-io/pkg-utils (@​sanity/pkg-utils)

v8.1.17

Compare Source

Bug Fixes

v8.1.16

Compare Source

Bug Fixes

v8.1.15

Compare Source

Bug Fixes

v8.1.14

Compare Source

Bug Fixes

v8.1.13

Compare Source

Bug Fixes

v8.1.12

Compare Source

Bug Fixes

v8.1.11

Compare Source

Bug Fixes

v8.1.10

Compare Source

Bug Fixes

v8.1.9

Compare Source

Bug Fixes

v8.1.8

Compare Source

Bug Fixes
  • deps: Update dependency rolldown-plugin-dts to v0.16.2 (#​1920) (b056cf8)

v8.1.7

Compare Source

Bug Fixes

v8.1.6

Compare Source

Bug Fixes

v8.1.5

Compare Source

Bug Fixes
  • deps: Update dependency rolldown-plugin-dts to v0.16.0 (#​1897) (d9abda7)
sanity-io/ui (@​sanity/ui)

v4.0.0-static.36

Compare Source

Bug Fixes
  • deps: update dependency framer-motion to ^12.23.21 (v4) (#​2103) (dc92b9f)

This release is also available on:

v4.0.0-static.35

Compare Source

Features
  • take full advantage of conditional context sub (484a92d)

This release is also available on:

v4.0.0-static.34

Compare Source

Bug Fixes
  • reduce usage of useResponsiveProp (2ea4568)

This release is also available on:

v4.0.0-static.33

Compare Source

Bug Fixes
  • add displayName to React.createContext (1787b4d)

This release is also available on:

v4.0.0-static.32

Compare Source

Features
Bug Fixes
  • handle react-hooks/preserve-manual-memoization (62d84e2)
  • handle react-hooks/refs (4cf16e3)
  • handle react-hooks/set-state-in-effect (f9f0b46)
  • use v4 as the global scope context key (f6f21ba)

This release is also available on:

v4.0.0-static.31

Compare Source

Bug Fixes
  • deps: update dependency framer-motion to ^12.23.19 (v4) (#​2098) (483f7c4)

This release is also available on:

v4.0.0-static.30

Compare Source

Bug Fixes
  • deps: update dependency framer-motion to ^12.23.18 (v4) (#​2085) (74bffe8)

This release is also available on:

v4.0.0-static.29

Compare Source

Bug Fixes
  • deps: update dependency framer-motion to ^12.23.16 (v4) (#​2082) (4e8d7a9)

This release is also available on:

v4.0.0-static.28

Compare Source

Bug Fixes
  • card: revert transitions (023d7ee)

This release is also available on:

v4.0.0-static.27

Compare Source

Bug Fixes
  • data props (c79d288)
  • input: revert hovered border when using border={false} (0435e7d)
  • revert transitions (5a9cced)

This release is also available on:

v4.0.0-static.26

Compare Source

Bug Fixes
  • deps: update dependency framer-motion to ^12.23.15 (v4) (#​2065) (f28c18c)

This release is also available on:

v4.0.0-static.25

Compare Source

Features
  • add margin and max-width props to typographic primitives (7588f33)
  • width: add max option (404f2b7)
Bug Fixes
  • avatar: optionally hide inner avatar stroke (84e55a7)
  • box: transition muted background color (d336fba)
  • button: explicit button inline size (e3ba3cb)
  • card: support muted cards (d3bb0b7)
  • checkbox: set flex: none (5e73265)
  • deps: update dependency babel-plugin-react-compiler to v19.1.0-rc.3 (v4) (#​2056) (aec4bff)
  • input primitives (ed7a9e5)
  • menu: pass selected property (17d7f29)
  • selectable: fix muted colors (9166cf3)
  • use react namespace (7de06d8)

This release is also available on:

v4.0.0-static.24

Compare Source

Features
Bug Fixes

This release is also available on:

oxc-project/oxc (oxlint)

v1.19.0

Compare Source

🚀 Features
  • b4d716f linter/plugins: Move custom JS plugin config to jsPlugins (#​14133) (overlookmotel)
🐛 Bug Fixes
  • 8879b5a linter/plugins: Add types export to npm/oxlint (#​14219) (overlookmotel)

v1.18.0: oxlint v1.18.0

Compare Source

[1.18.0] - 2025-09-24

This release should fix a critical memory leak when import plugin is enabled in IDEs.

🚀 Features
  • 2481964 linter/exhaustive-deps: Add support for useEffectEvent (#​14041) (Cody Olsen)
🐛 Bug Fixes
  • 444fcf0 linter: Fix false positive in vue/no-required-prop-with-default (#​14066) (yefan)
  • 2186b28 linter: Fix Arc memory leak and lifecycle issues (#​14049) (Boshen)
  • 314c27d linter/plugins: definePlugin apply defineRule to rules (#​14065) (overlookmotel)
  • 7bd01ed linter/plugins: defineRule call createOnce lazily (#​14062) (overlookmotel)
  • fb3e7e3 linter/plugins: defineRule accept visitor with no before / after hooks (#​14060) (overlookmotel)
🚜 Refactor
⚡ Performance
  • ce538c7 linter/plugins: Load methods of globals into local vars (#​14073) (overlookmotel)
  • c2f7459 language_server: Avoid cloning on message conversion (#​14058) (Sysix)
🧪 Testing
  • 2fd4b1e linter/plugins: Rename test (#​14064) (overlookmotel)
  • f2b3934 linter/plugins: Test returning false from before hook skips visitation in ESLint (#​14061) (overlookmotel)
  • b109419 linter/plugins: Align ESLint plugin with Oxlint (#​14059) (overlookmotel)

v1.17.0

Compare Source

🚀 Features
🚜 Refactor
  • bb040bc parser, linter: Replace .mjs files with .js (#​14045) (overlookmotel)
  • 7e0d736 linter/plugins: Rename --experimental-js-plugins to --js-plugins (#​13860) (overlookmotel)

v1.16.0: oxlint v1.16.0

Compare Source

[1.16.0] - 2025-09-16

🚀 Features
  • 97c8d06 linter: Add preserve-caught-error rule (#​13748) (孔辉)
  • 8c19b18 linter/exhaustive-deps: Implement fixer for dep in global scope (#​13783) (camc314)
  • 06bce8f linter/exhaustive-deps: Implement fixer for missing dep (#​13782) (camc314)
  • a8675f4 linter: Add eslint/class-methods-use-this rule (#​12977) (Peter Cardenas)
  • db33196 parser: Adds typescript rule for empty argument list (#​13730) (Karan Kiri)
  • 2751193 linter: Add eslint/no-useless-computed-key rule (#​13428) (yefan)
  • 9a205d1 regex-parser: Parse simple TemplateLiterals (#​13265) (Sysix)
🐛 Bug Fixes
  • a2c91cd linter: Drop rules to allow mutable access to ctx_host in run_external_rules (#​13832) (camc314)
  • 3af1e5d linter/no-unsafe-declaration-merging: Always mark first span as primary (#​13830) (camc314)
  • 1c43c7c linter: Keep message when merging composite fixes (#​13827) (camc314)
  • 26af302 linter/exhaustive-deps: Check stable value is on lhs of assignment expr (#​13815) (camc314)
  • 4bc12d0 linter/exhaustive-deps: Remove impossible comparison with parent kind (#​13814) (camc314)
  • 12baf5e linter/exhaustive-deps: Respect primary span when identifying disable directive location (#​13781) (camc314)
  • fa7400a linter/no-undef: False positive with arguments in functions (#​13763) (camc314)
  • 50e6e3c editor: Restrict servers paths for oxc.path.server (#​13740) (Sysix)
  • b45077d editor: Strip leading slash for bin path on windows (#​13738) (Sysix)
  • 8fa6227 editor: Don't allow oxc.path.server for untrusted workspaces (#​13734) (Sysix)
  • 56da114 linter/react/jsx-handler-names: Do not detect the function name within the inline-function's body block (#​13456) (Takuji Shimokawa)
  • b2bc5b4 linter/react-perf/jsx-no-new-object-as-prop: Skip as/satisfies exprs (#​13718) (camc314)
  • ab51394 raw_transfer: Disable layout assertions on some 32-bit platforms (#​13716) (overlookmotel)
  • 09428f6 linter/plugins: Remove outdated comment (#​13691) (overlookmotel)
  • a294721 linter/plugins: Exit early if JS plugins enabled on unsupported platforms (#​13689) (overlookmotel)
  • 68a2280 linter/plugins: More graceful exit for --experimental-js-plugins CLI option (#​13688) (overlookmotel)
🚜 Refactor
  • 395d40d linter: Derive inmpls for PartialEq, Eq over manual ones (#​13828) (camc314)
  • 8e4cd8f linter/func-names: Use run_once over looping over all nodes (#​13798) (camc314)
  • 7f4e2fe eslint/func-names: Clean up implementation and improve documentation (#​13601) (Antoine Zanardi)
  • 137896a language_server: Split options for linting and formatting (#​13627) (Sysix)
  • 7346099 linter: Move oxlint application code into separate module (#​13745) (overlookmotel)
  • 6dd4107 linter: Remove #[cfg(test)] attributes from tester module (#​13714) (overlookmotel)
  • c40c6ef linter/plugins: Directory for JS plugins-related code (#​13701) (overlookmotel)
  • a0022c1 linter/plugins: Improve error messages for JS plugins (#​13699) (overlookmotel)
  • 1fd993f napi/oxlint: Rename napi/oxlint2 to napi/oxlint (#​13682) (overlookmotel)
⚡ Performance
  • 90c8286 linter: Detect node types from let..else statements (#​13690) (camchenry)
  • 08c05df semantic: Make CFG construction a compile-time feature (#​13678) (Boshen)
🎨 Styling
  • 99a7638 linter: Add comments + re-organise imports (#​13715) (overlookmotel)
🧪 Testing
  • 18a1145 linter: Add debug assertions for skipping rules (#​13724) (camc314)
  • cb080de linter/no-unused-vars: Add test for non ASCII chars in JSX components (#​13820) (camc314)
  • b6eba27 linter/no-undef: Add more test cases for arguments (#​13764) (camc314)
  • fb2d087 linter: Set CWD for tests (#​13722) (overlookmotel)
💼 Other

v1.15.0: oxlint v1.15.0

Compare Source

🚀 Features
🐛 Bug Fixes
  • fb9d0f4 language_server: Don't resend diagnostic on save, when typeAware is disabled and run is onType (#​13604) (YongSeok Jang (장용석))
  • 2f36350 editor: Add notice for a possible restart when fixing filename-case (#​13557) (Sysix)
  • e17fccc linter: Update RuleRunner impl after merge (#​13642) (camc314)
  • 3d27c5b linter/no-unused-private-class-members: False positive with spread expr (#​13634) (yefan)
  • 8314ed5 linter/tsgolint: Correct comment (#​13589) (camc314)
  • 198243b semantic: Dont parse @ as jsdoc tags inside quotes (#​13571) (Gwenn Le Bihan)
  • 89084d7 linter/custom-plugins: Enforce exact matching for disable directives (#​13538) (Copilot)
  • 277c5e1 linter: Output eslint-plugin-vue for vue diagnostics (#​13564) (Sysix)
  • 34d3cde rust: Fix clippy issues (#​13540) (Boshen)
  • 5fccafc linter: unicorn/prefer-array-flat-map ignore React.Children (#​13534) (Sysix)
  • 7e78e39 linter: Don't panic when parsing regex with multiple parentheses (#​13524) (Sysix)
  • 0d867b1 linter: Skip running tsgolint when no files need type aware linting (#​13502) (Copilot)
  • b677376 language_server: Include the diagnostic of the other linter (#​13490) (Sysix)
  • e87d7bd linter: Parse regex inside new RegExp() with parentheses (#​13448) (Sysix)
  • 5990f17 linter: Change typescript/no-confusing-void-expression to pedantic (#​13473) (Boshen)
🚜 Refactor
  • 7775c21 linter/plugins: Remove oxlint2 Cargo feature (#​13648) (overlookmotel)
  • 8f37e88 linter: Update tsgolint payload (#​13547) (camchenry)
  • 2d53203 linter/plugins: Move tokio usage from oxc_linter to napi/oxlint2 (#​13647) (overlookmotel)
  • 6cd6be2 linter: Add --experimental-js-plugins CLI arg (#​13658) (overlookmotel)
  • 476729b linter: Simplify RuleRunner trait definition (#​13637) (camchenry)
  • 2f02ac6 linter/plugins: Remove disable_oxlint2 Cargo feature (#​13626) (overlookmotel)
  • ff9e4fb linter/plugins: Use fixed-size allocators when ExternalLinter exists (#​13623) (overlookmotel)
  • f9bff64 linter_codegen: Improve code style for collecting nodes (#​13636) (camchenry)
  • babbaca all: Remove pub from modules with no exports (#​13618) (overlookmotel)
  • 91759c6 linter/plugins: Only use RawTransferFileSystem if JS plugins registered (#​13599) (overlookmotel)
  • 118020c linter/plugins: Discard ExternalLinter if no JS plugins registered (#​13598) (overlookmotel)
  • 8d30bce linter/tsgolint: Report an error if the tsgolint exe could not be found (#​13590) (camc314)
  • bccc276 eslint/for-direction: Clean up implementation and improve documentation (#​13532) (Antoine Zanardi)
  • 1425da2 eslint/default-case-last: Simplify default case last check in switch statement (#​13529) (Antoine Zanardi)
  • d245376 oxlint: Remove unused runner module (#​13561) (camc314)
  • 53f2fc1 eslint/default-case: Simplify implementation and enhance readability (#​13430) (Antoine Zanardi)
  • 6f15060 eslint/block-scoped-var: Clean up implementation and improve documentation (#​13417) (Antoine Zanardi)
  • 671e0fd language_server: Only store one instance of a diagnostic (#​13514) (Sysix)
  • 1b425d6 eslint/default-case-last: Simplify implementation and enhance readability (#​13515) (Antoine Zanardi)
  • e4bbbce eslint/default-param-last: Simplify implementation and enhance readability (#​13516) (Antoine Zanardi)
  • e0396fd linter: Remove static lifetime from disable directives function argument (#​13492) (camc314)
📚 Documentation
  • eb1f167 linter: Note which rules require type info to run on rule page (#​13675) (camc314)
  • e66f93b linter: Fix backtick formatting in no-return-wrap (#​13633) (camc314)
⚡ Performance
🎨 Styling
🧪 Testing
facebook/react (react)

v19.2.0

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features
  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools
New React DOM Features
  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.
Notable changes
  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId
All Changes
React

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

Copy link

vercel bot commented Sep 23, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
logos Ready Ready Preview Comment Oct 2, 2025 2:23am

Copy link

socket-security bot commented Sep 23, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedoxlint@​1.14.0 ⏵ 1.19.093 +110088 +596 +2100
Updatedtypescript@​5.9.2 ⏵ 5.9.310010090 +110090
Updated@​sanity/​pkg-utils@​8.1.4 ⏵ 8.1.17100 +5100100100 +1100
Updated@​sanity/​ui@​4.0.0-static.23 ⏵ 4.0.0-static.36100 +2100100 +18100100
Updatedreact@​19.1.1 ⏵ 19.2.0100 +1100100 +17100 +4100
Updatedreact-dom@​19.1.1 ⏵ 19.2.0100 +1100100 +9100 +4100
Updated@​types/​react@​19.1.12 ⏵ 19.2.0100 +1100100 +21100 +6100
Updated@​types/​react-dom@​19.1.9 ⏵ 19.2.0100 +1100100 +26100 +12100
Updated@​types/​node@​24.3.0 ⏵ 24.6.2100 +1100100 +20100 +5100

View full report

@renovate renovate bot force-pushed the renovate/non-major branch from b320be9 to d3c4549 Compare September 24, 2025 04:09
@renovate renovate bot force-pushed the renovate/non-major branch from d3c4549 to c16187b Compare September 24, 2025 16:02
@renovate renovate bot force-pushed the renovate/non-major branch from c16187b to 534a8a7 Compare September 25, 2025 11:05
@renovate renovate bot force-pushed the renovate/non-major branch from 534a8a7 to b7286bd Compare September 25, 2025 17:40
@renovate renovate bot force-pushed the renovate/non-major branch from b7286bd to 1898ef3 Compare September 26, 2025 19:22
@renovate renovate bot force-pushed the renovate/non-major branch from 1898ef3 to 7ca651b Compare September 28, 2025 14:09
@renovate renovate bot force-pushed the renovate/non-major branch from 7ca651b to c134dfe Compare September 29, 2025 12:02
@renovate renovate bot force-pushed the renovate/non-major branch from c134dfe to 1275b22 Compare September 29, 2025 19:15
@renovate renovate bot force-pushed the renovate/non-major branch from 1275b22 to 1b62770 Compare September 30, 2025 06:43
@renovate renovate bot force-pushed the renovate/non-major branch from 1b62770 to 3a83127 Compare October 1, 2025 00:08
@renovate renovate bot force-pushed the renovate/non-major branch from 3a83127 to 2249189 Compare October 1, 2025 22:39
Copy link

socket-security bot commented Oct 1, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
[email protected] has a License Policy Violation.

License: LicenseRef-W3C-Community-Final-Specification-Agreement (package/ThirdPartyNoticeText.txt)

From: package.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/non-major branch from 2249189 to 9f7f7a7 Compare October 2, 2025 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants