chore(deps): update non-major (app-router)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@sanity/assist	3.0.4 -> 3.2.2					dependencies	minor
@sanity/client (source)	6.18.2 -> 6.29.0					dependencies	minor
@sanity/image-url (source)	1.0.2 -> 1.1.0					dependencies	minor
@sanity/preview-url-secret (source)	1.6.13 -> 1.6.21					dependencies	patch
@sanity/vision (source)	3.42.1 -> 3.85.1					dependencies	minor
@tailwindcss/typography	0.5.13 -> 0.5.16					dependencies	patch
@types/react (source)	18.3.2 -> 18.3.20					dependencies	patch
@types/react-dom (source)	18.3.0 -> 18.3.6					dependencies	patch
@urql/core (source)	5.0.3 -> 5.1.1					dependencies	minor
@vercel/speed-insights (source)	1.0.10 -> 1.2.0					dependencies	minor
autoprefixer	10.4.19 -> 10.4.21					dependencies	patch
eslint (source)	8.57.0 -> 8.57.1					devDependencies	patch
eslint-config-next (source)	14.2.3 -> 14.2.28					devDependencies	patch
next-sanity (source)	9.0.19 -> 9.10.2					dependencies	minor
peter-evans/create-pull-request	6d6857d -> c5a7806					action	digest
postcss (source)	8.4.38 -> 8.5.3					dependencies	minor
prettier (source)	3.2.5 -> 3.5.3					devDependencies	minor
prettier-plugin-packagejson	2.5.0 -> 2.5.10					devDependencies	patch
prettier-plugin-tailwindcss	0.5.14 -> 0.6.11					devDependencies	minor
rxjs (source)	7.8.1 -> 7.8.2					dependencies	patch
sanity (source)	3.42.1 -> 3.85.1					dependencies	minor
sanity-plugin-asset-source-unsplash	3.0.1 -> 3.0.3					dependencies	patch
styled-components (source)	6.1.11 -> 6.1.17					dependencies	patch
tailwindcss (source)	3.4.3 -> 3.4.17					dependencies	patch
typescript (source)	5.4.5 -> 5.8.3					dependencies	minor

---

Release Notes

sanity-io/assist (@​sanity/assist)

v3.2.2

Compare Source

Bug Fixes

• flags auto updating studio support for studios with global reference type in schema (#​66) (f353ec7)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.2.1

Compare Source

Bug Fixes

• ignore GDR type (#​64) (74c3ca0)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.2.0

Compare Source

Features

• allow specifying a translation style guide (#​61) (dd91d61)
• can now set maxPathDepth for field translations (#​62) (ca1743e)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.1.1

Compare Source

Bug Fixes

• useSyncState version argument type (312fbbe)
• update README release section (#​55) (5e2185a)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.1.0

Compare Source

Features

• adds support for versions ids in Studio releases (#​54) (6b1e8d4)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.0.9

Compare Source

Bug Fixes

• upgrade @​sanity/icons, @​sanity/ui, react 19 compatibility (#​53) (e1fefab)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.0.8

Compare Source

Bug Fixes

• docs: fix readme example for image gen (#​52) (c91e364)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.0.7

Compare Source

Bug Fixes

• ensures conditional readOnly state for document is included in requests (b8949fc)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.0.6

Compare Source

Bug Fixes

• adds support for document types named using _id incompatible characters (6d5ee68)

---

This release is also available on:

• npm package (@​latest dist-tag)

v3.0.5

Compare Source

Bug Fixes

• docs: corrects messaging on plan availability (growth and up) (c3e2ce7)

---

This release is also available on:

• npm package (@​latest dist-tag)

sanity-io/client (@​sanity/client)

v6.29.0

Compare Source

Features

• add experimental support for resources (#​1040) (9f15a36)
• live: add goaway event (#​1055) (7c57d3d)

v6.28.4

Compare Source

Bug Fixes

• do not set withCredentials if token is set (#​1037) (0d0730a)
• remove client side validation of api perspective (#​1036) (f10b170)

v6.28.3

Compare Source

Bug Fixes

• docs: invalid changelog url (#​1029) (0ddde6f)
• invalid changelog url (0ddde6f)

v6.28.2

Compare Source

Bug Fixes

• docs: make dataset and project related types public (#​1026) (b0a622a)

v6.28.1

Compare Source

Bug Fixes

• trigger semantic release version bump (#​1024) (6ccc8bd)

v6.28.0

Compare Source

Features

• listener: add support for includeAllVersions (#​1003) (fff3a76)

Bug Fixes

• deprecate previewDrafts-perspective in favor of drafts (#​1007) (3b03ac5)
• lift restriction on release perspective name (#​1005) (cdfacc9)
• live: dedupe event source instances (#​990) (a26714d)

v6.27.2

Compare Source

Bug Fixes

• deps: update dependency get-it to ^8.6.7 (#​989) (b36339c)
• live: includeDrafts no longer require vX (#​991) (22e50aa)

v6.27.1

Compare Source

Bug Fixes

• csm: handle Cannot read properties of undefined (cb80d68)

v6.27.0

Compare Source

Features

• csm: support releases in applySourceDocuments (#​981) (ab82a35)

v6.26.1

Compare Source

Bug Fixes

• stega: append perspective to edit links (#​979) (65ce82d)
• stega: remove isDraft search param (#​978) (08d189d)

v6.26.0

Compare Source

Features

• csm: add document id utils (#​976) (0d4cd76)

v6.25.0

Compare Source

Features

• request: add flag to disable logging api warnings (#​925) (3f90ab0)

v6.24.4

Compare Source

Bug Fixes

• allow mutation selection without passing a patch builder (#​964) (fd70208)
• deps: update dependency get-it to ^8.6.6 (#​960) (941203d)

v6.24.3

Compare Source

Bug Fixes

• deps: update non-major (#​955) (37b88bf)

v6.24.2

Compare Source

Bug Fixes

• deps: update non-major (#​952) (479ea80)

v6.24.1

Compare Source

Bug Fixes

• make validateApiPerspective a TS asserter (#​936) (baaa62c)

v6.24.0

Compare Source

Features

• query: add support for release perspectives (#​934) (59bd477)

Bug Fixes

• export validateApiPerspective (b73ae46)

v6.23.0

Compare Source

Features

• query: add cacheMode support (#​933) (01b6576)

Bug Fixes

• types: add (abort) signal to raw request typings (#​926) (fcd9a16)

v6.22.5

Compare Source

Bug Fixes

• stega: 2x faster encoding of portable text (#​920) (8ae6d30)

v6.22.4

Compare Source

Bug Fixes

• stega: add textTheme to deny list (39edfe1)
• stega: ignore paths that end with Id (81aa664)

v6.22.3

Compare Source

Bug Fixes

• live: detect CORS errors (#​910) (553cb38)

v6.22.2

Compare Source

Bug Fixes

• live: add withCredentials and tag support (#​898) (4f882c9)

v6.22.1

Compare Source

Bug Fixes

• add missing listenerName property on welcome event (#​894) (6173089)

v6.22.0

Compare Source

Features

• live: add experimental includeDrafts option (#​890) (e1406b1)

Bug Fixes

• deps: update dependency get-it to ^8.6.5 (#​885) (847ad5b)

v6.21.3

Compare Source

Bug Fixes

• deprecate studioHost, externalStudioHost in typings (#​879) (ebe840b)
• support signal on getDocument(s) to cancel requests (#​881) (13d71bb)

v6.21.2

Compare Source

Bug Fixes

• deps: update dependency get-it to ^8.6.4 (#​876) (e71b985)

v6.21.1

Compare Source

Bug Fixes

• add support for includeMutations listen parameter (#​872) (5f0a991)

v6.21.0

Compare Source

Features

• codegen: Allow query reponse types to be overridden through SanityQueries (#​858) (c25d51a)

v6.20.2

Compare Source

Bug Fixes

• deps: update dependency get-it to ^8.6.3 (#​866) (0661f5d)

v6.20.1

Compare Source

Bug Fixes

• add warning about setting both useCdn and withCredentials to true (#​849) (ae01edb)
• deps: update dependency get-it to ^8.6.1 (#​856) (ced69bc)

v6.20.0

Compare Source

Features

• the client.live.events() API is now stable (#​843) (d03fc09)

v6.19.2

Compare Source

Bug Fixes

• deps: update dependency get-it to ^8.6.0 (#​846) (85afc9e)

v6.19.1

Compare Source

Bug Fixes

• types: adjust action types to reflect Actions API (#​830) (e116c62)

v6.19.0

Compare Source

Features

• add actions API in client (#​818) (03c15a9)

v6.18.3

Compare Source

Bug Fixes

• deps: update dependency get-it to ^8.5.0 (#​824) (f4fc8f6)

sanity-io/image-url (@​sanity/image-url)

v1.1.0

Compare Source

Changes

• Add new frame() method
• Add new vanityName() method (thanks @​Isissss!)
• Allow specifying baseUrl in builder typings (thanks @​ryami333!)
• Allow resetting format through .format(undefined) (thanks @​selbekk!)

sanity-io/visual-editing (@​sanity/preview-url-secret)

v1.6.21

Bug Fixes

• deps: update dependency @​sanity/client to ^6.21.3 (#​1793) (1dc1b1b)
• remove document.referrer inference (173f519)

v1.6.20

Bug Fixes

• deps: update dependency @​sanity/client to v6.21.2 (#​1749) (b9efdd2)

v1.6.19

Bug Fixes

• deps: update dependency @​sanity/client to v6.21.1 (#​1704) (32f1ef8)

v1.6.18

Bug Fixes

• deps: update dependency @​sanity/client to v6.20.1 (#​1680) (bb89688)

v1.6.17

Bug Fixes

• deps: update dependency @​sanity/client to v6.19.1 (#​1602) (ebaa50c)

v1.6.16

Bug Fixes

• deps: update dependency @​sanity/icons to v3 (#​1588) (dd087e4)

v1.6.15

Bug Fixes

• deps: update dependency @​sanity/client to v6.19.0 (#​1575) (f0094a1)

v1.6.14

Bug Fixes

• deps: update dependency @​sanity/client to v6.18.3 (#​1563) (609a3b1)

sanity-io/sanity (@​sanity/vision)

v3.85.1

Compare Source

v3.85.0

Compare Source

v3.84.0

Compare Source

This release includes various improvements and bug fixes.

For the complete changelog with details, please visit:
www.sanity.io/changelog/5dd5b6a7-346d-4007-be22-c3f5d7f4f47d

Install or upgrade Sanity Studio

To upgrade to this version, run one of the following commands:

### Using npm
npm install sanity@latest

### Using pnpm
pnpm add sanity@latest

### Using yarn
yarn add sanity@latest

### Using bun
bun add sanity@latest

v3.83.0

Compare Source

This release includes various improvements and bug fixes.

For the complete changelog with details, please visit:
www.sanity.io/changelog/5dd5b6a7-346d-4007-be22-c3f5d7f4f47d

Install or upgrade Sanity Studio

To upgrade to this version, run one of the following commands:

### Using npm
npm install sanity@latest

### Using pnpm
pnpm add sanity@latest

### Using yarn
yarn add sanity@latest

### Using bun
bun add sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog
Author | Message | Commit
------------ | ------------- | -------------
renovate[bot] | fix(deps): update dependency @​sanity/ui to ^2.15.11 (#​9106) | ff06350
Cole Peters | feat(cli): use useCurrentUser hook in app-quickstart template (#​9094) | fc28b05
renovate[bot] | fix(deps): update dependency @​sanity/insert-menu to v1.1.8 (#​9111) | 89a239e
renovate[bot] | chore(deps): update dependency @​sanity/visual-editing-csm to ^2.0.11 (#​9110) | 7204054
renovate[bot] | chore(deps): pin actions-cool/check-user-permission action to 7b90a27 (#​9113) | 779baf0
renovate[bot] | fix(deps): Update dev-non-major (#​9115) | 6038a8e
renovate[bot] | fix(deps): update dependency react-rx to ^4.1.27 (#​9118) | 3fb02c8
ecospark[bot] | chore(deps): dedupe pnpm-lock.yaml (#​9119) | e91338e
renovate[bot] | fix(deps): update dependency @​sanity/presentation-comlink to ^1.0.14 (#​9116) | 11b0ce5
renovate[bot] | fix(deps): update dependency @​sanity/preview-url-secret to ^2.1.7 (#​9117) | 167cc75
renovate[bot] | fix(deps): update dependency @​sanity/ui to ^2.15.12 (#​9121) | c5ba17f
renovate[bot] | chore(deps): update react monorepo (#​9114) | 55dd6f5
renovate[bot] | fix(deps): update dependency framer-motion to ^12.6.3 (#​9122) | 65495bc
Pedro Bonamin | fix(presentation): use perspectiveStack for useDocumentLocations listen (#​9107) | 1dcf324
renovate[bot] | chore(lockfile): update dependency scrollmirror to v1.2.1 (#​9124) | 571f39b
renovate[bot] | chore(deps): update dev-non-major (#​9123) | feffaa2
renovate[bot] | chore(deps): update dependency vite to ^6.2.4 (#​9125) | 118c6f5
renovate[bot] | chore(deps): update react monorepo (#​9126) | 3410f27
Cody Olsen | fix(deps): upgrade use-sync-external-store (#​9112) | 11e0bd4
renovate[bot] | fix(deps): update dependency @​sanity/import to ^3.38.2 (#​9104) | db23c55
Christian Grøngaard | test: add Image slideshow to the first all bells-PTE field (#​9130) | 11a5136
renovate[bot] | fix(deps): update dependency @​portabletext/editor to ^1.44.10 (#​9108) | 1ca2803
Bjørge Næss | feat(studio): add version info/about dialog (#​9131) | eb5a259
Per-Kristian Nordnes | fix(core): restore intended func. for 'directUploads' config param (#​9109) | d42025b
Bjørge Næss | refactor(ci): prepare for renaming next-branch to main (#​9086) | 4c50890
James Warner | feat(core): rewrite imagetool with SVG rendering, improved interactions and accessibility (#​9134) | dab3ed6
Bjørge Næss | f

---

Configuration

📅 Schedule: Branch creation - "* * 1 */3 *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
demo-graphql-presentation-nextjs	❌ Failed (Inspect)			Apr 16, 2025 9:47am

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click for details)
Warn		[email protected] has a License Policy Violation. License: GPL-3.0 (package/LICENSE) Source: package.json Source: pnpm-lock.yaml ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected]. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report