fix(deps): update non-major by renovate[bot] · Pull Request #99 · sanity-io/mutate

renovate · 2026-04-01T02:45:51Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@isaacs/ttlcache	`^2.1.4` → `^2.1.5`
@sanity/client (source)	`^7.22.0` → `^7.23.0`
@sanity/pkg-utils (source)	`^10.5.4` → `^10.8.2`
@sanity/uuid (source)	`^3.0.2` → `^3.0.3`
@shikijs/vitepress-twoslash (source)	`^4.0.2` → `^4.3.0`
@typescript-eslint/parser (source)	`^8.59.2` → `^8.62.0`
@vitest/coverage-v8 (source)	`^4.1.5` → `^4.1.9`
@vitest/ui (source)	`^4.1.5` → `^4.1.9`
eslint (source)	`^10.3.0` → `^10.6.0`
eslint-plugin-prettier	`^5.5.5` → `^5.5.6`
lefthook	`^2.1.6` → `^2.1.9`
nanoid	`^5.1.11` → `^5.1.16`
prettier (source)	`^3.8.3` → `^3.9.1`
tsx (source)	`^4.21.0` → `^4.22.4`
typescript-eslint (source)	`^8.59.2` → `^8.62.0`
vitest (source)	`^4.1.5` → `^4.1.9`
vue (source)	`^3.5.34` → `^3.5.39`
xstate (source)	`^5.19.0` → `^5.32.2`

Release Notes

isaacs/ttlcache (@isaacs/ttlcache)

`v2.1.5`

Compare Source

sanity-io/client (@sanity/client)

`v7.23.0`

Compare Source

Features

add documentsExists for batch existence checks (#1215) (7c0406a)
improve get-it HTTP stacktraces (#1184) (d3aad14)

`v7.22.1`

Compare Source

Bug Fixes

live: verify CORS via /check/cors (credentials-aware) before reporting CorsOriginError (#1219) (566e1b5)

sanity-io/pkg-utils (@sanity/pkg-utils)

`v10.8.2`

Compare Source

Patch Changes

#2934 d6cfe32 Thanks @stipsan! - fix: preserve side-effect-only imports of external packages

Tree-shaking no longer sets the equivalent of moduleSideEffects: 'no-external' and instead relies on the bundler's default (moduleSideEffects: true). Previously, binding-less side-effect imports of external package subpaths — e.g. import 'react-time-ago/locale/en' — were stripped from the output, breaking consumers that depended on those side effects. package.json sideEffects fields are still honored for bundled modules, so dead-code elimination is unaffected.

`v10.8.1`

Compare Source

Patch Changes

#2933 9f4550e Thanks @filmaj! - fix: order of paths passed into findCommonDirPath no longer matters.
#2928 c6dde4f Thanks @squiggler-app! - fix(deps): update dependency rolldown to v1.1.3

`v10.8.0`

Compare Source

Minor Changes

#2888 59fdc02 Thanks @stipsan! - feat: add strict dependency placement checks for well-known packages

When running with --strict, package.json is now validated to ensure these packages are declared in the correct dependency fields:
- react-is and @sanity/ui should not be in peerDependencies (use dependencies or devDependencies).
- sanity, styled-components, react, and react-dom should not be in dependencies (use devDependencies and/or peerDependencies).
- @types/react, @types/react-dom, and @types/node should not be in dependencies (use devDependencies and/or peerDependencies), and when listed in peerDependencies the version range should be *.
- rxjs and @sanity/client should not be in peerDependencies (use dependencies or devDependencies).
Each check is enabled by default at the error level and can be downgraded to warn or disabled via strictOptions in package.config.ts, e.g.:
```
import {defineConfig} from '@&#8203;sanity/pkg-utils'

export default defineConfig({
  strictOptions: {
    noReactDependency: 'warn',
    noSanityClientPeerDependency: 'off',
  },
})
```

Patch Changes

#2903 296482a Thanks @stipsan! - feat: disallow @sanity/icons in peerDependencies

When running with --strict, package.json is now validated to ensure @sanity/icons is not declared in peerDependencies (use dependencies or devDependencies instead). The check defaults to error and can be configured via noSanityIconsPeerDependency in strictOptions.

`v10.7.2`

Compare Source

Patch Changes

#2897 de87bc9 Thanks @stipsan! - fix: mirror the auto-added bundle.css export into publishConfig.exports

In vanilla-extract compat mode, pkg-utils auto-writes the conditional "./bundle.css" export to package.json. It only updated the top-level exports, so packages that also declare publishConfig.exports ended up out of sync, and the next strict --check failed with publishConfig.exports: missing export path "./bundle.css" that exists in exports.

The conditional CSS export is now mirrored into publishConfig.exports as well (when that field exists), keeping the two in sync. The entry is identical in both places since the CSS export has no source/development/monorepo conditions to strip. publishConfig.exports is never created when it is absent.
#2899 97cbc33 Thanks @stipsan! - Emit a <css>.d.ts declaration alongside the vanilla-extract compat-mode CSS shim, so dts export checkers that resolve a .d.ts for every export target don't crash on a missing declaration file.

`v10.7.1`

Compare Source

Patch Changes

#2895 ba964f1 Thanks @stipsan! - Revert the upgrade of @babel/core and @babel/preset-typescript to v8, pinning them back to v7

`v10.7.0`

Compare Source

Minor Changes

#2890 c219497 Thanks @stipsan! - feat: auto-wire the conditional bundle.css export for vanilla-extract

When rollup.vanillaExtract is enabled, pkg-utils now (by default) bakes in the conditional CSS export pattern so userland no longer needs a manual rollup.output.intro + shim plugin + package.json export. This new "compat mode" (rollup.vanillaExtract.extract.compatMode, defaults to true):
- injects the self-referential import "<pkg-name>/<name>" into each entry chunk,
- emits a no-op <name>.js shim for runtimes that cannot import .css files, and
- writes the conditional "./<name>" export to package.json (browser/style → the real CSS, node/default → the shim).
The emitted CSS file name is configurable via rollup.vanillaExtract.extract.name (default "bundle.css"), and the vanillaExtract option is now fully typed (PkgVanillaExtractOptions) with its real defaults documented. Set extract.compatMode: false to opt out and wire these up yourself.

Patch Changes

Updated dependencies [c219497]:
- @sanity/parse-package-json@2.2.1

`v10.6.0`

Compare Source

Minor Changes

#2887 a6adaa1 Thanks @stipsan! - feat: support conditional exports for CSS files

CSS subpath exports may now be declared as a conditional object (a flat map of condition name to path) instead of only a plain string. This enables re-adding a import "<pkg>/bundle.css" statement that resolves to the real CSS file in bundler/browser environments, while resolving to a no-op JS shim in runtimes (like Node) that cannot import .css files directly:
```
{
  "exports": {
    "./bundle.css": {
      "browser": "./dist/bundle.css",
      "style": "./dist/bundle.css",
      "node": "./dist/bundle.css.js",
      "default": "./dist/bundle.css.js"
    }
  }
}
```

Patch Changes

#2878 10e1150 Thanks @renovate! - fix(deps): Update babel monorepo to v8
#2883 c8c192f Thanks @renovate! - fix(deps): update rollup packages
Updated dependencies [a6adaa1]:
- @sanity/parse-package-json@2.2.0

`v10.5.8`

Compare Source

Patch Changes

#2875 8c1f3f3 Thanks @renovate! - fix(deps): Update dependency rolldown to v1.1.2
#2876 3948fd3 Thanks @renovate! - fix(deps): Update dependency rolldown-plugin-dts to v0.26.0

`v10.5.7`

Compare Source

Patch Changes

#2864 94505ec Thanks @renovate! - fix(deps): Update rollup packages to ^4.62.0

`v10.5.6`

Compare Source

Patch Changes

#2859 b7a6402 Thanks @renovate! - fix(deps): Update dependency esbuild to ^0.28.1
#2861 f3ca6b0 Thanks @renovate! - fix(deps): Update dependency @microsoft/api-extractor to ^7.58.9

`v10.5.5`

Compare Source

Patch Changes

#2854 9d06a16 Thanks @renovate! - fix(deps): Update dependency rolldown to v1.1.1

sanity-io/uuid (@sanity/uuid)

`v3.0.3`

Compare Source

shikijs/shiki (@shikijs/vitepress-twoslash)

`v4.3.0`

Compare Source

🚀 Features

stream: Add svelte renderer - by @CNSeniorious000 and Anthony Fu (via agent) in #1291 (2d18a)

View changes on GitHub

`v4.2.0`

Compare Source

🚀 Features

Add @shikijs/stream and @shikijs/magic-move packages - by @antfu in #1283 (d031f)

🐞 Bug Fixes

transformers: Handle YAML comment prefixes correctly for v3 - by @AkaHarshit in #1266 (f694a)
vitepress-twoslash: Scroll blocking on mobile viewports - by @micaiguai in #1262 (9e0e8)

View changes on GitHub

`v4.1.0`

Compare Source

🐞 Bug Fixes

twoslash: Forward tsModule to createTwoslasher - by @arthurfiorette in #1271 (be89a)

View changes on GitHub

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.62.0`

Compare Source

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.