fix(deps): update dependency react-photo-album to v3.6.1

[squiggler-app]

This PR contains the following updates:

Package	Change	Age	Confidence
react-photo-album (source)	^3.6.0 → ^3.6.1
react-photo-album (source)	^2.4.1 → ^3.6.1

---

Release Notes

igordanchenko/react-photo-album (react-photo-album)

v3.6.1

Compare Source

Bug Fixes

• avoid stack overflow in rows layout with very large photo arrays (5ea14bf)
• eliminate React key warnings for custom render.photo output (2716ee2)
• ignore non-positive breakpoints (9ff1774)
• keep the default sizes estimate at 100vw for full-width photos (60832ce)
• prevent crash when the container is too narrow for columns (de91b70)
• prevent ResizeObserver churn when an unstable ref is forwarded (47212ba)
• ssr: render photos in SSR below half the smallest breakpoint (258ea30)

Performance Improvements

• compute rows layout row costs in O(1) via prefix sums (0520392)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
plugins-studio	Error		Aug 3, 2026 3:20pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
plugins-e2e-test-studio	Ignored		Aug 3, 2026 3:20pm

[changeset-bot]

🦋 Changeset detected

Latest commit: 7449b30

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
sanity-plugin-shopify-assets	Patch
sanity-plugin-asset-source-unsplash	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​react-photo-album@​3.6.1

View full report

[github-actions]

✅ E2E Tests

🟢 24 passed • view full report • view run

Studio: https://plugins-e2e-test-studio-axx9zb2ue.sanity.dev

Datasets: pr-1798-chromium-30827001167, pr-1798-firefox-30827001167

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 134bc04. Configure here.}

[cursor]

Incompatible major album upgrade

High Severity

Bumping react-photo-album from v2 to v3 in sanity-plugin-shopify-assets without migrating callers breaks the asset picker. ShopifyAssetPicker still uses the v2 PhotoAlbum API (renderPhoto, componentsProps.containerProps) and never imports the required v3 CSS, so custom file rendering and selection stop working.

 

^{Reviewed by Cursor Bugbot for commit 134bc04. Configure here.}

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	32%	5507 / 17208
🔵	Statements	31.77%	5811 / 18287
🔵	Functions	27.79%	1428 / 5137
🔵	Branches	23.34%	2828 / 12116

File Coverage

No changed files found.

Generated in workflow #8599 for commit 7449b30 by the Vitest Coverage Report Action

[squiggler-app]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 3.x releases. But if you manually upgrade to 3.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.