chore(deps): update non-major

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/config-conventional (source)	^17.4.3 → ^17.8.1
@sanity/icons (source)	^3.7.0 → ^3.8.0
@sanity/pkg-utils (source)	^2.2.5 → ^2.4.10
@sanity/semantic-release-preset (source)	^4.0.0 → ^4.1.8
@sanity/ui (source)	^3.1.11 → ^3.3.0
@types/node (source)	^24.10.1 → ^24.13.2
@types/react (source)	^19.2.5 → ^19.2.17
@typescript-eslint/eslint-plugin (source)	^5.52.0 → ^5.62.0
@typescript-eslint/parser (source)	^5.52.0 → ^5.62.0
commitizen	^4.3.0 → ^4.3.2
commitlint (source)	^17.4.3 → ^17.8.1
eslint (source)	^8.34.0 → ^8.57.1
eslint-config-prettier	^8.6.0 → ^8.10.2
eslint-plugin-import	^2.27.5 → ^2.32.0
eslint-plugin-jsx-a11y	^6.7.1 → ^6.10.2
eslint-plugin-prettier	^4.2.1 → ^4.2.5
eslint-plugin-react	^7.32.2 → ^7.37.5
prettier (source)	^2.8.4 → ^2.8.8
react (source)	^19.2.0 → ^19.2.7
react-dom (source)	^19.2.0 → ^19.2.7
react-is (source)	^19.2.0 → ^19.2.7
rimraf	^4.1.2 → ^4.4.1
sanity (source)	^4.15.0 → ^4.22.0
semantic-release	^20.1.0 → ^20.1.3
styled-components (source)	^6.1.15 → ^6.4.3
typescript (source)	5.3.3 → 5.9.3

---

Release Notes

sanity-io/icons (@​sanity/icons)

v3.8.0

Compare Source

Minor Changes

• 812c93b Thanks @​somerandomdude! - Add double quote icon

Patch Changes

• #​192 57bb44a Thanks @​mitchuman! - fix: connect diamond icon stroke corners

v3.7.7

Compare Source

Patch Changes

• #​181 5b9d2cb Thanks @​stipsan! - Bumped @testing-library/react, @types/node, and @types/react devDependencies to their latest versions.

v3.7.6

Compare Source

Bug Fixes

• enable trusted publishing (925545b)

v3.7.4

Compare Source

Bug Fixes

• fully support rollup treeshaking (#​130) (8372571)

v3.7.3

Compare Source

Bug Fixes

• improve dts output (3201a0c)

v3.7.2

Compare Source

Bug Fixes

• generate dts with rolldown (2426033)

v3.7.1

Compare Source

Bug Fixes

• place ref prop after ...props spread (#​126) (b9f42ef)

sanity-io/ui (@​sanity/ui)

v3.3.0

Compare Source

Features

• backport polymorphic as typings from v4 (#​2209) (ae60285)

v3.2.0

Compare Source

Features

• space, columns, rows and box grid item deprecation warnings (#​2182) (2e2013e), closes #​2184

v3.1.14

Compare Source

Bug Fixes

• useDelayedState: cancel timeouts on unmount (#​2181) (ec8beba)

v3.1.13

Compare Source

Bug Fixes

• lazily compute color themes, tones, v0 colors (#​2177) (31ec324)

v3.1.12

Compare Source

Bug Fixes

• match storybook output to Vercel config (#​2178) (c911333)

commitizen/cz-cli (commitizen)

v4.3.2

Compare Source

4.3.2 (2026-06-12)

• chore(deps): bump semantic-release to 25 for npm trusted publishing (#​1029) (6eb168c), closes #​1029
• ci(release): bump actions/checkout and actions/setup-node to v4 (#​1024) (f5702c4), closes #​1024
• ci(release): use npm trusted publishing via OIDC (#​1028) (096ed52), closes #​1028
• chore(deps) Update all non-major dependencies (#​1026) (4e98218), closes #​1026
• chore(deps) Update dependency lodash to v4.18.1 [SECURITY] (#​1010) (11be6a1), closes #​1010
• fix(ci): fix pipelines and update matrices to node 18/20/22 (#​1023) (48e4b8b), closes #​1023
• docs: update README.md to add contributors (#​985) (3c08866), closes #​985

prettier/eslint-config-prettier (eslint-config-prettier)

v8.10.2

Compare Source

import-js/eslint-plugin-import (eslint-plugin-import)

v2.32.0

Compare Source

Added

• add [enforce-node-protocol-usage] rule and import/node-version setting ([#​3024], thanks [@​GoldStrikeArch] and [@​sevenc-nanashi])
• add TypeScript types ([#​3097], thanks [@​G-Rath])
• [extensions]: add `pathGroupOverrides to allow enforcement decision overrides based on specifier ([#​3105], thanks [@​Xunnamius])
• [order]: add sortTypesGroup option to allow intragroup sorting of type-only imports ([#​3104], thanks [@​Xunnamius])
• [order]: add newlines-between-types option to control intragroup sorting of type-only imports ([#​3127], thanks [@​Xunnamius])
• [order]: add consolidateIslands option to collapse excess spacing for aesthetically pleasing imports ([#​3129], thanks [@​Xunnamius])

Fixed

• [no-unused-modules]: provide more meaningful error message when no .eslintrc is present ([#​3116], thanks [@​michaelfaith])
• configs: added missing name attribute for eslint config inspector ([#​3151], thanks [@​NishargShah])
• [order]: ensure arcane imports do not cause undefined behavior ([#​3128], thanks [@​Xunnamius])
• [order]: resolve undefined property access issue when using named ordering ([#​3166], thanks [@​Xunnamius])
• [enforce-node-protocol-usage]: avoid a crash with some TS code ([#​3173], thanks [@​ljharb])
• [order]: codify invariants from docs into config schema ([#​3152], thanks [@​Xunnamius])

Changed

• [Docs] [extensions], [order]: improve documentation ([#​3106], thanks [@​Xunnamius])
• [Docs] add flat config guide for using tseslint.config() ([#​3125], thanks [@​lnuvy])
• [Docs] add missing comma ([#​3122], thanks [@​RyanGst])
• [readme] Update flatConfig example to include typescript config ([#​3138], thanks [@​intellix])
• [Refactor] [order]: remove unnecessary negative check ([#​3167], thanks [@​JounQin])
• [Docs] [no-unused-modules]: add missing double quote ([#​3191], thanks [@​albertpastrana])
• [Docs] no-restricted-paths: clarify wording and fix errors ([#​3172], thanks [@​greim])

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v4.2.5

Compare Source

republish the v4 version

Full Changelog: prettier/eslint-plugin-prettier@v4.2.4...v4.2.5

v4.2.4

Compare Source

republish the v4 version

Full Changelog: prettier/eslint-plugin-prettier@v4.2.1...v4.2.4

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.37.5

Compare Source

Fixed

• [no-unknown-property]: allow shadow root attrs on <template> (#​3912 @​ljharb)
• [prop-types]: support ComponentPropsWithRef from a namespace import (#​3651 @​corydeppen)
• [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#​3910 @​TildaDares)
• [no-unknown-property]: allow transform-origin on rect (#​3914 @​ljharb)

Changed

• [Docs] [button-has-type]: clean up phrasing (#​3909 @​hamirmahal)

facebook/react (react)

v19.2.7: 19.2.7 (June 1st, 2026)

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6
  (#​36566 by @​unstubbable)

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

• Type hardening and performance improvements
  (by @​eps1lon and @​unstubbable)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

v19.2.3: 19.2.3 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.2.2: 19.2.2 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289)

v19.2.1: 19.2.1 (December 3rd, 2025)

Compare Source

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #​35277)

sanity-io/sanity (sanity)

v4.22.0

Compare Source

Features

• cors: add registration to cors error screen (#​11484) (7b8e9be) by Dain Cilke (dain.cilke@gmail.com)
• sanity: enable editing canvas documents (#​11421) (cb8ed7d) by Josef Hlavacek (josef.hlavacek@sanity.io)
• structure: support linking to documents in focus mode (#​11489) (cb74919) by Bjørge Næss (bjoerge@gmail.com)

Bug Fixes

• cli: handle sanity binary as esm/cjs/executable (#​11460) (e88b4b7) by Espen Hovlandsdal (espen@hovlandsdal.com)
• cli: mark react < 19.2.2 as deprecated (#​11482) (217ee0a) by Bjørge Næss (bjoerge@gmail.com)
• cli: pass releasesOperation to @​sanity/import when using --replace or --missing (#​11515) (f4d980e) by Tonina Zhelyazkova (zhelyazkova.tonina@gmail.com)
• cli: remove missing appId warning from sanity dev (#​11476) (1a087f8) by Bjørge Næss (bjoerge@gmail.com)
• delete all versions (#​11474) (78c96f1) by Jordan Lawrence (<jordanl17@​me.com>)
• deps: pin isomorphic-dompurify to solve jsdom errors on next.js (#​11497) (d63ef28) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• deps: update dependency @​sanity/export to ^6.0.2 (#​11491) (3aa21a9) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11450) (735f7b4) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11518) (f2adcc3) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• excluding releases and scheduled plugins from list of plugins to reroute (#​11505) (6f19a3c) by Jordan Lawrence (<jordanl17@​me.com>)
• fix issue where backward drag and selecting text in fullscreen pte would skip the focus (#​11492) (b47f9f6) by RitaDias (rita@sanity.io)
• fix when deleting and reverting objects of arrays in the middle of an array (#​11455) (684cc41) by RitaDias (rita@sanity.io)
• manifest: better handling of user application clients (48bf231) by Dain Cilke (dain.cilke@gmail.com)
• selected items in the collapseoverflow menu (#​11452) (8b2ccb3) by RitaDias (rita@sanity.io)

v4.21.1

Compare Source

Bug Fixes

• cli: use caret for upgrade command, mark react < 19.2.1 as deprecated (#​11470) (91b861a) by Bjørge Næss (bjoerge@gmail.com)
• core: diffs author and timestamp missing when removing data (#​11404) (bdb099f) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• deps: update dependency @​portabletext/react to v6 (#​11440) (953b513) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11431) (ebfdc6e) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext to v5 (major) (#​11438) (dbc98f7) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• restore fonts for schema icon extract (#​11442) (671ebc3) by Cody Olsen (81981+stipsan@users.noreply.github.com)

v4.21.0

Compare Source

Features

• build: expose build id (18221e9) by Dain Cilke (dain.cilke@gmail.com)
• studioManifest: register live manifest with content operating system (2271b97) by Dain Cilke (dain.cilke@gmail.com)
• userApplications: add live user application provider (801d868) by Dain Cilke (dain.cilke@gmail.com)

Bug Fixes

• allow for more flexibility for custom components? and using the enhanced object dialog (#​11358) (9ea5074) by RitaDias (rita@sanity.io)
• core: revisionNotFound wait until document is ready (#​11279) (727b190) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• core: always save UTC timezone in date input (#​11435) (5126428) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• deps: update dependency get-it to ^8.7.0 (#​11395) (5f4487a) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: update dependency groq-js to ^1.23.0 (#​11429) (b100ba4) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: update dependency motion to ^12.23.25 (#​11401) (9509da7) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11388) (5f63f2f) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11407) (a9b92c9) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• fix position for telemetry requests which were wrong + make sure that the requests don't have miltiple calls accidentally (#​11408) (bb9cff4) by RitaDias (rita@sanity.io)

v4.20.3

Compare Source

Note: Version bump only for package sanity

v4.20.2

Compare Source

Note: Version bump only for package sanity

v4.20.1

Compare Source

Bug Fixes

• cli: handle url imports for themer.sanity.build (#​11346) (eedec5b) by Kristoffer Brabrand (kristoffer@brabrand.no)
• core: remove key prop from BaseItemProps (#​11375) (8908e08) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• deps: update dependency groq-js to ^1.22.0 (#​11366) (6976b77) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• ERR_REQUIRE_CYCLE_MODULE on older node, and windows resolve regression (#​11385) (bfaa1c7) by Cody Olsen (81981+stipsan@users.noreply.github.com)

v4.20.0

Compare Source

Features

• cli: add command for visualizing schema bloat (721e6d2) by Magnus Holm (judofyr@gmail.com)
• delete scheduled drafts allows for copy back to draft when appropriate (#​11143) (3210749) by Jordan Lawrence (<jordanl17@​me.com>)
• descriptors: minimize blocking the UI (2826615) by Magnus Holm (judofyr@gmail.com)
• schema: de-dupe re-used fields in the descriptor (b287558) by Magnus Holm (judofyr@gmail.com)
• support private assets (#​11316) (9a661ca) by Rupert Dunk (rupert@rupertdunk.com)

Bug Fixes

• add dialog for content releases misconfiguration with support contact option (#​11276) (a43f8e0) by Jordan Lawrence (<jordanl17@​me.com>)
• allow createGlobalStyle to work with auto updating studios (#​11313) (c964ffe) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• concat previewUrl and targetOrigin correctly (#​11322) (a18d3ed) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• core: date time input fixes (#​11233) (84418b4) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• core: fix props function delcaration (#​11362) (6b54783) by Per-Kristian Nordnes (per.kristian.nordnes@gmail.com)
• core: only validate .media validation markers (#​11311) (f8643c1) by Per-Kristian Nordnes (per.kristian.nordnes@gmail.com)
• core: pte inline comments respect __internal_comments disabled (#​11341) (0f566b5) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• core: set correct focus path for assets inputs in images (#​11317) (f1182f5) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• core: update server delete operation to include versions list (#​11364) (482f1d1) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• core: use toolTitle for document.title if present (#​11285) (c7967d8) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• deps: mark support for react < 19.2 and @sanity/ui < 3 as deprecated (#​11238) (8cd0a7c) by Bjørge Næss (bjoerge@gmail.com)
• deps: Update portabletext (#​11270) (bf4bf3b) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11329) (ab15495) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: Update portabletext (#​11338) (7ee38ba) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• ensure schema errors are caught (#​11349) (30b67b5) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• make sure require calls comes from createRequire (#​11306) (0ae1f8b) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• media-library: support groups and fieldset in defineVideoField (#​11361) (3c840ce) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• remove ServerStyleSheet usage (#​10757) (76028e1) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• sanity: allow editing documents in non-release bundles (#​11312) (dfa9dc1) by Bjørge Næss (bjoerge@gmail.com)
• structure: replace delete action for discard in non published docs (#​11363) (ef60727) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• validate published document when it is displayed (#​11130) (adf299b) by Jordan Lawrence (<jordanl17@​me.com>)

v4.19.0

Compare Source

Features

• clarifying published doc has been edited and last published (#​11186) (5681cc5) by Jordan Lawrence (<jordanl17@​me.com>)

Bug Fixes

• cli: load config properly in sanity schema validate (#​11223) (e3f4e7d) by Magnus Holm (judofyr@gmail.com)
• core: releases time input behaves incorrectly with timezones offset (#​11242) (8a358fa) by Pedro Bonamin (46196328+pedrobonamin@users.noreply.github.com)
• deps: update dependency @​sanity/comlink to ^4.0.1 (#​11248) (2493536) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: update dependency @​sanity/presentation-comlink to ^2.0.1 (#​11249) (2035ff2) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• deps: update dependency @​sanity/preview-url-secret to v3 (#​11234) (67f4ffb) by Cody Olsen (81981+stipsan@users.noreply.github.com)
• deps: Update portabletext (#​11217) (86feb1f) by renovate[bot] (2913961+renovate[bot]@​users.noreply.github.com)
• sanity: excessive comment mutations when editing in PTE (#​11230) (c64b279) by Ash (ash@sanity.io)
• sanity: skip assetRequired rule to allow selection in media library (#​11197) (dbeeea0) by Fred Carlsen (fred@sjelfull.no)

v4.18.0

Compare Source

Features

• sanity: Add Canvas document actions to version documents (#​11141) (078a0ac) by Josef Hlavacek (josef.hlavacek@sanity.io)

Bug Fixes

• core: flush pending Portable Text Input changes on unmount (7de417d) by Christian Hamburger Grøngaard (christian.groengaard@sanity.io)
• deps: update dependency @​sanity/preview-url-secret to ^2.1.16 (#​11212) (917e212) by renovate[bot] ([2913961](https://redirect.github.com/sanity-io/

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 3am on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

 WARN  GET https://registry.npmjs.org/@commitlint%2Fconfig-conventional error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fpkg-utils error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fsemantic-release-preset error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Ficons error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fui error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fui-workshop error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact-dom error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fstyled-components error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Fparser error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/commitlint error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-config-prettier error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-import error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-jsx-a11y error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@commitlint%2Fconfig-conventional error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fpkg-utils error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fsemantic-release-preset error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Ficons error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fui error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@sanity%2Fui-workshop error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact-dom error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fstyled-components error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Fparser error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/commitlint error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-config-prettier error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-import error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-jsx-a11y error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types/node/-/node-18.13.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
undefined
 ERR_PNPM_META_FETCH_FAIL  GET https://registry.npmjs.org/@commitlint%2Fconfig-conventional: Value of "this" must be of type URLSearchParams

This error happened while installing a direct dependency of /tmp/renovate/repos/github/sanity-io/ui-workshop-plugin-sanity
 WARN  GET https://registry.npmjs.org/commitizen/-/commitizen-4.3.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-4.2.1.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/husky/-/husky-8.0.3.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/sanity-testing-library/-/sanity-testing-library-1.0.0.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react-hooks error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/npm-run-all2 error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/prettier error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/react error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/react-dom error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/react-is error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/rimraf error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/sanity error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/semantic-release error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm es-abstract is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/eslint-plugin-jsx-a11y@6.10.2 → npm/npm-run-all@4.1.5 → npm/eslint-plugin-react@7.37.5 → npm/eslint-plugin-import@2.32.0 → npm/es-abstract@1.24.2 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es-abstract@1.24.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm eslint-plugin-react is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/eslint-plugin-react@7.37.5 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-react@7.37.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: npm typescript License: LicenseRef-W3C-Community-Final-Specification-Agreement - The applicable license policy does not permit this license (5) (package/ThirdPartyNoticeText.txt) From: package.json → npm/typescript@5.9.3 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/typescript@5.9.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​eslint-config-prettier@​8.10.2
	npm/​@​types/​react@​19.2.17
	npm/​@​types/​node@​24.13.2
	npm/​eslint-plugin-react@​7.37.5
	npm/​@​sanity/​icons@​3.8.0
	npm/​eslint-plugin-import@​2.32.0
	npm/​react@​19.2.7
	npm/​@​sanity/​ui@​3.3.0
	npm/​commitizen@​4.3.2
	npm/​typescript@​5.9.3
	npm/​eslint-plugin-prettier@​4.2.5
	npm/​react-dom@​19.2.7
	npm/​styled-components@​6.4.3
	npm/​sanity@​4.22.0
	npm/​react-is@​19.2.7

View full report