Dependency Dashboard

[squiggler-app]

This issue lists Renovate updates and detected dependencies. More settings and logs here.

---

Using a curated preset maintained by

Sanity: The Content Operating System

---

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.
• ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @testing-library/user-event to ^14.6.3
• chore(deps): update dependency @types/lodash to ^4.17.25
• chore(deps): update dependency @vitejs/devtools to ^0.4.12
• chore(deps): update dependency @vitejs/devtools-oxc to ^0.4.12
• chore(deps): update dependency @vitejs/devtools-rolldown to ^0.4.12
• chore(deps): update dependency @vitejs/devtools-vite to ^0.4.12
• fix(deps): update codemirror (@codemirror/lang-html, @codemirror/lang-markdown, @codemirror/view)
• fix(deps): update dependency @portabletext/plugin-input-rule to ^6.0.13
• fix(deps): update dependency axios to ^1.19.0
• fix(deps): update dependency execa to ^10.0.1
• fix(deps): update dependency redux-observable to v3.0.0-rc.3
• fix(deps): update sanity monorepo to ^6.9.1 (@sanity/mutator, @sanity/schema, @sanity/types, @sanity/util, @sanity/vision, groq, sanity)
• fix(deps): update turbo monorepo to v2.10.8 (@turbo/gen, turbo)
• chore(deps): update dependency knip to ^6.32.0
• chore(deps): update pnpm to v11.20.0
• fix(deps): update dependency @nosferatu500/react-sortable-tree to ^5.1.0
• fix(deps): update dependency @sanity/themer to ^0.3.0
• fix(deps): update dependency katex to ^0.18.1
• fix(deps): update dependency styled-components to ^6.5.0
• fix(deps): update dependency swr to ^2.5.0
• chore(deps): update dependency hosted-git-info to v10
• chore(deps): update dependency vercel to v57
• chore(deps): update dependency vercel to v58
• fix(deps): update dependency @nosferatu500/react-sortable-tree to v6
• fix(deps): update dependency @sanity/pkg-utils to v12
• fix(deps): update dependency @tanem/react-nprogress to v6
• fix(deps): update dependency @tanem/react-nprogress to v7
• fix(deps): update dependency bezier-easing to v3
• fix(deps): update dependency copy-to-clipboard to v4
• fix(deps): update dependency filesize to v10
• fix(deps): update dependency filesize to v11
• fix(deps): update dependency jsonwebtoken-esm to v2
• fix(deps): update dependency lint-staged to v17
• fix(deps): update dependency motion to v13
• fix(deps): update dependency pretty-bytes to v7
• fix(deps): update dependency pretty-ms to v9
• fix(deps): update dependency react-dropzone to v12
• fix(deps): update dependency react-dropzone to v13
• fix(deps): update dependency react-dropzone to v14
• fix(deps): update dependency react-dropzone to v15
• fix(deps): update dependency react-dropzone to v16
• fix(deps): update dependency react-dropzone to v17
• fix(deps): update dependency react-dropzone to v18
• fix(deps): update dependency react-dropzone to v19
• fix(deps): update dependency react-dropzone to v20
• fix(deps): update dependency react-infinite-scroll-component to v7
• fix(deps): update dependency setup-npm-trusted-publish to v2
• fix(deps): update dependency type-fest to v5
• fix(deps): update dependency yup to v1
• fix(deps): update dependency zod to v4
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @portabletext/editor to ^7.10.16
• chore(deps): update dependency @types/google.maps to ^3.65.4
• fix(deps): update dependency @sanity/client to ^7.26.2
• fix(deps): update dependency @sanity/vanilla-extract-vite-plugin to ^0.2.11
• fix(deps): update dependency @tanstack/react-virtual to ^3.14.9
• fix(deps): update dependency nanoid to ^6.0.1
• fix(deps): update dependency tsx to ^4.23.9
• fix(deps): update dependency @sanity/tsdown-config to ^0.24.0
• fix(deps): update dependency oxfmt to ^0.62.0
• fix(deps): update dependency react-rx to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency @hookform/resolvers to v5
• fix(deps): update dependency jsdom to v30
• fix(deps): update dependency react-photo-album to v3.6.1
• fix(deps): update dependency video.js to v8

Detected Dependencies

github-actions (22)

.github/actions/setup/action.yml (2)

• pnpm/action-setup v6
• actions/setup-node v7

.github/workflows/changeset-pr-npmdiff-comment.yml (1)

• actions/github-script v9

.github/workflows/changesets-from-conventional-commits.yml (1)

• sanity-io/.github main

.github/workflows/ci.yml (8)

• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• actions/checkout v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• davelosert/vitest-coverage-report-action v2.12.2@8b157684c6a6b259b97d45e72b44242865c0f6a5

.github/workflows/deploy-test-studio.yml (1)

• actions/checkout v7

.github/workflows/e2e-periodic-cleanup.yml (1)

• actions/checkout v7

.github/workflows/e2e.yml (13)

• actions/checkout v7
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b
• actions/cache v6
• actions/checkout v7
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b
• actions/checkout v7
• actions/cache v6
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/upload-artifact v7
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b
• thollander/actions-comment-pull-request v3@24bffb9b452ba05a4f3f77933840a6a841d1b32b

.github/workflows/format-if-needed.yml (1)

• sanity-io/.github main

.github/workflows/issue-triage.yml (2)

• actions/checkout v7
• actions/setup-node v7

.github/workflows/lint-fix-if-needed.yml (3)

• actions/checkout v7
• actions/create-github-app-token v3
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/lock.yml (1)

• dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c

.github/workflows/pkg-pr-new.yml (2)

• actions/checkout v7
• actions/github-script v9

.github/workflows/pnpm-if-needed.yml (3)

• actions/checkout v7
• actions/create-github-app-token v3
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/release.yml (1)

• sanity-io/.github main

.github/workflows/remove-needs-info-on-response.yml

.github/workflows/renovate.yml (3)

• actions/create-github-app-token v3
• actions/checkout v7
• renovatebot/github-action v46.2.1@316d7cd859606d6039a2182b7d69199e9b036835

.github/workflows/setup-trusted-publish.yml (1)

• actions/checkout v7

.github/workflows/stale-issues.yml (1)

• actions/stale v11

.github/workflows/typegen.yml (3)

• actions/checkout v7
• actions/create-github-app-token v3
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/update-skills-if-needed.yml (3)

• actions/checkout v7
• actions/create-github-app-token v3
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/zizmor.yml (2)

• actions/checkout v7
• zizmorcore/zizmor-action v0.6.2@3dc1ecc9bcb9e94e9b2c709687979e1298497054

packages/@sanity/plugin-kit/assets/inject/semver-workflow/.github/workflows/main.yml (6)

• actions/checkout v7
• actions/setup-node v7
• actions/checkout v7
• actions/setup-node v7
• actions/checkout v7
• actions/setup-node v7

npm (56)

dev/e2e-studio/package.json (1)

• @tsconfig/vite-react ^8.1.1

dev/test-studio/package.json (7)

• @sanity/themer ^0.2.0 → [Updates: ^0.3.0]
• @tsconfig/vite-react ^8.1.1
• @vitejs/devtools ^0.4.10 → [Updates: ^0.4.12]
• @vitejs/devtools-oxc ^0.4.10 → [Updates: ^0.4.12]
• @vitejs/devtools-rolldown ^0.4.10 → [Updates: ^0.4.12]
• @vitejs/devtools-vite ^0.4.10 → [Updates: ^0.4.12]
• node 24

e2e/package.json (2)

• @playwright/test ^1.62.1
• node >=22.18

package.json (10)

• @changesets/changelog-github ^0.7.0
• @changesets/cli ^2.31.1
• husky ^9.1.7
• lint-staged ^16.4.0 → [Updates: ^17.3.0]
• setup-npm-trusted-publish ^1.3.1 → [Updates: ^2.1.0]
• turbo 2.10.7 → [Updates: 2.10.8]
• vitest-package-exports ^1.2.0
• knip ^6.29.0 → [Updates: ^6.32.0]
• vercel ^56.5.0 → [Updates: ^57.0.0, ^58.7.1]
• pnpm 11.13.1 → [Updates: 11.20.0]

packages/@sanity/plugin-kit/package.json (11)

• @rexxars/choosealicense-list ^1.1.2
• @typescript/typescript6 ^6.0.2
• concurrently ^10.0.4
• execa ^10.0.0 → [Updates: ^10.0.1]
• get-latest-version ^6.0.1
• inquirer ^14.0.2
• meow ^14.1.0
• nodemon 3.1.14
• yalc 1.0.0-pre.53
• @types/validate-npm-package-name ^4.0.2
• node >=24

plugins/@sanity/assist/package.json (2)

• rxjs-exhaustmap-with-trailing ^2.1.1
• node >=20.19 <22 || >=22.12

plugins/@sanity/block-insert-picker/package.json (5)

• @portabletext/plugin-input-rule ^6.0.10 → [Updates: ^6.0.13]
• @portabletext/editor ^7.10.13 → [Updates: ^7.10.16]
• @portabletext/editor ^7.10.7
• sanity ^5.6 || ^6.0.0-0
• node >=20.19 <22 || >=22.12

plugins/@sanity/code-input/package.json (16)

• @codemirror/lang-html ^6.4.11 → [Updates: ^6.4.12]
• @codemirror/lang-java ^6.0.2
• @codemirror/lang-javascript ^6.2.5
• @codemirror/lang-json ^6.0.2
• @codemirror/lang-markdown ^6.5.1 → [Updates: ^6.5.2]
• @codemirror/lang-php ^6.0.2
• @codemirror/lang-sql ^6.10.0
• @codemirror/language ^6.12.4
• @codemirror/legacy-modes ^6.5.3
• @codemirror/state ^6.7.1
• @codemirror/view ^6.43.6 → [Updates: ^6.43.8]
• @lezer/highlight ^1.2.3
• @sanity/lezer-groq ^1.0.4
• @uiw/codemirror-themes ^4.25.11
• @uiw/react-codemirror ^4.25.11
• node >=20.19 <22 || >=22.12

plugins/@sanity/color-input/package.json (3)

• tinycolor2 ^1.6.0
• @types/tinycolor2 ^1.4.6
• node >=20.19 <22 || >=22.12

plugins/@sanity/cross-dataset-duplicator/package.json (2)

• dset ^3.1.4
• node >=20.19 <22 || >=22.12

plugins/@sanity/dashboard/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/debug-live-sync-tags/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/debug-preview-url-secret-plugin/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/document-internationalization/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/embeddings-index-ui/package.json (2)

• react-rx ^4.2.5 → [Updates: ^5.1.1]
• node >=20.19 <22 || >=22.12

plugins/@sanity/form-toolkit/package.json (5)

• @formium/client ^0.1.4
• @mailchimp/mailchimp_marketing ^3.0.80
• h3 ^1.15.11
• @types/mailchimp__mailchimp_marketing ^3.0.22
• node >=20.19 <22 || >=22.12

plugins/@sanity/google-maps-input/package.json (2)

• @types/google.maps ^3.65.3 → [Updates: ^3.65.4]
• node >=20.19 <22 || >=22.12

plugins/@sanity/hierarchical-document-list/package.json (4)

• @nosferatu500/react-sortable-tree ^5.0.0 → [Updates: ^5.1.0, ^6.0.0]
• react-dnd ^16.0.1
• react-dnd-html5-backend ^16.0.1
• node >=24.11

plugins/@sanity/language-filter/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/orderable-document-list/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/personalization-plugin/package.json (2)

• fast-deep-equal ^3.1.3
• node >=20.19 <22 || >=22.12

plugins/@sanity/presets/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/rich-date-input/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/sanity-plugin-async-list/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/sfcc/package.json (2)

• sanity-plugin-internationalized-array ^4.0.0 || ^5.0.0
• node >=20.19 <22 || >=22.12

plugins/@sanity/studio-secrets/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/table/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/@sanity/vercel-protection-bypass/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-naive-html-serializer/package.json (2)

• just-clone ^6.2.0
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-aprimo/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-asset-source-unsplash/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-bynder-input/package.json (2)

• @bynder/compact-view ^5.4.0
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-cloudinary/package.json (2)

• @cloudinary/url-gen ^1.22.0
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-dashboard-widget-document-list/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-dashboard-widget-netlify/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-dashboard-widget-vercel/package.json (9)

• @tanstack/react-query ^5.101.4
• @xstate/react ^6.1.0
• object-hash 3.0.0
• react-time-ago ^7.4.4
• use-deep-compare-effect ^1.8.1
• xstate ^5.32.5
• yup ^0.32.11 → [Updates: ^1.7.1]
• @types/object-hash ^3.0.6
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-documents-pane/package.json (3)

• dlv ^1.1.3
• @types/dlv ^1.1.5
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-google-translate/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-graph-view/package.json (7)

• bezier-easing ^2.1.0 → [Updates: ^3.0.1]
• deep-equal ^2.2.3
• polished ^4.3.1
• react-force-graph-2d ^1.29.1
• uuid ^14.0.1
• @types/deep-equal ^1.0.4
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-hotspot-array/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-iframe-pane/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-internationalized-array/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-latex-input/package.json (2)

• katex ^0.17.0 → [Updates: ^0.18.1]
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-markdown/package.json (4)

• react-simplemde-editor ^5.2.0
• easymde ^2.21.0
• easymde ^2.18
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-media/package.json (18)

• @reduxjs/toolkit ^2.12.0
• @tanem/react-nprogress ^5.0.63 → [Updates: ^6.0.4, ^7.1.0]
• copy-to-clipboard ^3.3.3 → [Updates: ^4.0.2]
• filesize ^9.0.11 → [Updates: ^10.1.6, ^11.0.22]
• is-hotkey-esm ^1.0.0
• pluralize ^8.0.0
• react-dropzone ^11.7.1 → [Updates: ^12.1.0, ^13.0.0, ^14.4.1, ^15.0.0, ^16.0.0, ^17.0.0, ^18.3.0, ^19.3.0, ^20.0.0]
• react-file-icon ^1.6.0
• react-redux ^9.3.0
• react-select ^5.10.2
• react-virtuoso ^4.18.11
• redux ^5.0.1
• redux-observable 3.0.0-rc.2 → [Updates: 3.0.0-rc.3]
• zod ^3.25.76 → [Updates: ^4.4.3]
• @testing-library/user-event ^14.6.1 → [Updates: ^14.6.3]
• @types/pluralize ^0.0.33
• @types/react-file-icon ^1.0.5
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-mux-input/package.json (13)

• @mux/mux-player ^3.13.2
• @mux/mux-player-react ^3.13.2
• @mux/upchunk ^3.5.0
• iso-639-1 ^3.1.6
• jsonwebtoken-esm ^1.0.5 → [Updates: ^2.0.1]
• lodash ^4.18.1
• scroll-into-view-if-needed ^3.1.0
• swr ^2.4.2 → [Updates: ^2.5.0]
• type-fest ^4.41.0 → [Updates: ^5.8.0]
• use-device-pixel-ratio ^1.1.2
• use-error-boundary ^2.0.6
• @types/lodash ^4.17.24 → [Updates: ^4.17.25]
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-shopify-assets/package.json (6)

• axios ^1.18.1 → [Updates: ^1.19.0]
• pretty-bytes ^6.1.1 → [Updates: ^7.1.1]
• pretty-ms ^8.0.0 → [Updates: ^9.3.0]
• react-infinite-scroll-component ^6.1.1 → [Updates: ^7.2.1]
• react-photo-album ^2.4.1 → [Updates: ^3.6.1]
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-studio-smartling/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-transifex/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-utils/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-workflow/package.json (2)

• @tanstack/react-virtual ^3.14.8 → [Updates: ^3.14.9]
• node >=20.19 <22 || >=22.12

plugins/sanity-plugin-workspace-home/package.json (1)

• node >=20.19 <22 || >=22.12

plugins/sanity-translations-tab/package.json (1)

• node >=20.19 <22 || >=22.12

pnpm-workspace.yaml (65)

• @date-fns/tz ^1.5.0
• @hello-pangea/dnd ^18.0.1
• @hookform/resolvers ^4.1.3 → [Updates: ^5.7.1]
• @portabletext/block-tools ^5.1.12
• @portabletext/to-html ^5.0.2
• @portabletext/types ^4.0.2
• @sanity/asset-utils ^2.3.0
• @sanity/client ^7.26.0 → [Updates: ^7.26.2]
• @sanity/color ^3.0.8
• @sanity/icons ^5.2.1
• @sanity/image-url ^2.1.1
• @sanity/mutator ^6.9.0 → [Updates: ^6.9.1]
• @sanity/pkg-utils ^11.0.17 → [Updates: ^12.1.0]
• @sanity/preview-url-secret ^4.1.2
• @sanity/schema ^6.9.0 → [Updates: ^6.9.1]
• @sanity/telemetry ^1.1.0
• @sanity/tsconfig ^2.2.1
• @sanity/tsdown-config ^0.21.2 → [Updates: ^0.24.0]
• @sanity/types ^6.9.0 → [Updates: ^6.9.1]
• @sanity/ui ^3.5.1
• @sanity/util ^6.9.0 → [Updates: ^6.9.1]
• @sanity/uuid ^3.0.3
• @sanity/vanilla-extract-vite-plugin ^0.2.8 → [Updates: ^0.2.11]
• @sanity/vision ^6.9.0 → [Updates: ^6.9.1]
• @testing-library/jest-dom ^7.0.0
• @testing-library/react ^16.3.2
• @types/lodash-es ^4.17.12
• @types/node ^24.13.3
• @types/react ^19.2.18
• @types/react-dom ^19.2.4
• @types/react-is ^19.2.0
• @types/video.js ^7.3.58
• @vanilla-extract/css ^1.21.2
• @vanilla-extract/dynamic ^2.1.5
• @vis.gl/react-google-maps ^1.9.0
• @vitest/coverage-v8 ^4.1.10
• babel-plugin-react-compiler ^1.0.0
• date-fns ^4.4.0
• groq ^6.9.0 → [Updates: ^6.9.1]
• jsdom ^29.1.1 → [Updates: ^30.0.1]
• lexorank ^1.0.5
• lodash-es ^4.18.1
• motion ^12.43.0 → [Updates: ^13.0.0]
• nanoid ^6.0.0 → [Updates: ^6.0.1]
• oxfmt ^0.61.0 → [Updates: ^0.62.0]
• oxlint ^1.77.0
• oxlint-tsgolint ^7.0.2001
• react ^19.2.8
• react-dom ^19.2.8
• react-fast-compare ^3.2.2
• react-hook-form ^7.84.0
• react-icons ^5.7.0
• react-is ^19.2.8
• react-photo-album ^3.6.0 → [Updates: ^3.6.1]
• react-rx ^4.2.5 → [Updates: ^5.1.1]
• rxjs ^7.8.2
• sanity ^6.9.0 → [Updates: ^6.9.1]
• styled-components ^6.4.4 → [Updates: ^6.5.0]
• suspend-react ^0.1.3
• tsdown ^0.22.14
• tsx ^4.23.5 → [Updates: ^4.23.9]
• typescript 7.0.2
• validate-npm-package-name ^8.0.0
• video.js ^7.21.7 → [Updates: ^8.23.9]
• vitest ^4.1.10

scripts/trigger-triage/package.json (1)

• node >=22.18

turbo/generators/package.json (4)

• @turbo/gen 2.10.7 → [Updates: 2.10.8]
• @types/hosted-git-info ^3.0.5
• @types/validate-npm-package-name ^4.0.2
• hosted-git-info ^9.0.3 → [Updates: ^10.1.1]

renovate-config (1)

.github/renovate.json