fix(deps): update sanity-tooling

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sanity/client (source)	^7.23.2 → ^7.24.0
@sanity/pkg-utils (source)	^11.0.9 → ^11.0.13
@sanity/runtime-cli	^17.1.0 → ^17.2.0
@sanity/schema (source)	^6.5.0 → ^6.6.0
@sanity/types (source)	^6.5.0 → ^6.6.0
@sanity/ui (source)	^3.3.5 → ^3.4.3
@sanity/vision (source)	^6.5.0 → ^6.6.0
sanity (source)	^6.5.0 → ^6.6.0

---

Release Notes

sanity-io/client (@​sanity/client)

v7.24.0

Compare Source

Features

• variant querying (#​1232) (8b3ed7c)

sanity-io/pkg-utils (@​sanity/pkg-utils)

v11.0.13

Compare Source

Patch Changes

• #​3106 f180e02 Thanks @​copilot-swe-agent! - Update lightningcss to ^1.33.0 and yuku-parser to ^0.7.0.

v11.0.12

Compare Source

Patch Changes

• Updated dependencies [aac3364]:
  • @​sanity/parse-package-json@​2.2.9

v11.0.11

Compare Source

Patch Changes

• #​3090 6519cff Thanks @​squiggler-app! - fix(deps): update dependency @​microsoft/api-extractor to ^7.58.10

• #​3091 a62e5c2 Thanks @​squiggler-app! - fix(deps): update dependency globby to ^16.2.2

• #​3092 ef426fb Thanks @​squiggler-app! - fix(deps): update dependency pretty-bytes to ^7.1.1

• #​3093 abfc898 Thanks @​squiggler-app! - fix(deps): update dependency rolldown-plugin-dts to v0.27.12

• #​3097 80f965e Thanks @​squiggler-app! - fix(deps): update dependency @​microsoft/api-extractor to ^7.58.11

• #​3086 b900be5 Thanks @​stipsan! - Stop emitting a redundant bundle.css.d.ts alongside the vanilla-extract CSS shim.

  The conditional ./bundle.css export already has an explicit types condition pointing at bundle-css.d.ts, so TypeScript never needs a sibling declaration for the CSS file itself. Compat mode now emits only that one declaration (plus bundle-css.js and bundle.css).

  cssFileDtsFileName is no longer exported from @sanity/vanilla-extract-rolldown-plugin (0.x breaking API change → minor).

• Updated dependencies [412881b]:

  • @​sanity/parse-package-json@​2.2.8

v11.0.10

Compare Source

Patch Changes

• #​3079 7fb3e17 Thanks @​squiggler-app! - fix(deps): update dependency rolldown-plugin-dts to v0.27.11

sanity-io/runtime-cli (@​sanity/runtime-cli)

v17.2.0

Compare Source

sanity-io/sanity (@​sanity/schema)

v6.6.0

Compare Source

Bug Fixes

• deps: update dependency @​sanity/icons to ^5.1.0 (#​13529) (3f9749b)
• deps: update dependency @​sanity/icons to ^5.2.0 (#​13652) (0f0d33e)

sanity-io/sanity (@​sanity/types)

v6.6.0

Compare Source

Features

• variants: enable editing variant documents through the document form (#​13505) (46d84dc)

sanity-io/ui (@​sanity/ui)

v3.4.3

Compare Source

Patch Changes

• #​2435 f3638b5 Thanks @​stipsan! - Remove the displayName assignments that followed every component definition. As top-level Component.displayName = '…' statements in the published dist they were side effects that pinned every component into consuming bundles, defeating tree-shaking of unused components (see sanity-io/visual-editing#3535 for the kind of workaround this forced downstream). They were also redundant: every component is declared as a named function (e.g. forwardRef(function Button(…) {…})), so React DevTools derives the exact same name from Function.name — the build now passes keepNames so those function names survive into the dist.

  If you profile or debug production builds with React DevTools and want component names to survive your own app's minification, configure the bundler to keep identifier names instead of relying on displayName, e.g. in Vite:

  export default defineConfig({
    // Allows running React Profiler and better debugging
    resolve: {
      alias: { "react-dom/client": require.resolve("react-dom/profiling") },
    },
    build: {
      // Enable production source maps to easier debug deployed test studios
      sourcemap: true,
      rolldownOptions: {
        output: {
          // Disabling `mangle` (while keeping compression and whitespace removal) ensures that
          // the React DevTools components inspector has readable component names.
          // This overrides the `build.minify: 'oxc'` default set by `sanity build`, replacing
          // `esbuild: {minifyIdentifiers: false}` which the rolldown-powered Vite silently ignores.
          minify: { compress: true, mangle: false, codegen: true },
        },
      },
    },
  });

v3.4.2

Compare Source

Patch Changes

• Updated dependencies [18c0323]:
  • @​sanity/icons@​5.2.1

v3.4.1

Compare Source

Patch Changes

• Updated dependencies [528c3c9]:
  • @​sanity/color@​3.0.7

v3.4.0

Compare Source

Minor Changes

• #​2410 e151988 Thanks @​stipsan! - update dependency @​sanity/icons to ^5.2.0

  @sanity/ui now imports every icon from its per-icon export path (e.g. @sanity/icons/Close) instead of the root barrel, so only the handful of icons the components actually render are pulled into your bundle.

Patch Changes

• #​2409 4f7947b Thanks @​stipsan! - fix(deps): update dependency styled-components to ^6.4.4

v3.3.6

Compare Source

Patch Changes

• #​2336 94b067c Thanks @​squiggler-app! - fix(deps): update dependency @​floating-ui/react-dom to ^2.1.9

• #​2377 20893cd Thanks @​stipsan! - Remove unused esm.sh property from package.json

sanity-io/sanity (@​sanity/vision)

v6.6.0

Compare Source

Bug Fixes

• deps: update codemirror (#​13363) (5db6df4)
• deps: update dependency @​sanity/icons to ^5.1.0 (#​13529) (3f9749b)
• deps: update dependency @​sanity/icons to ^5.2.0 (#​13652) (0f0d33e)

sanity-io/sanity (sanity)

v6.6.0

Compare Source

Features

• core: accept native table container definitions in the table plugin config (fdb9635)
• core: add built-in table editing for Portable Text inputs (395437a)
• presentation: share variant to presentation using comlink (#​13616) (88167dd)
• releases: add option to update existing drafts when publishing a release (#​13400) (c7dd73c)
• variants: add confirmation dialog for delete variant action (#​13546) (36916e6)
• variants: enable editing variant documents through the document form (#​13505) (46d84dc)
• variants: support document actions, diffs, comments and history for variant documents (#​13156) (9c1d7a2)
• workbench entry (#​12511) (eef97ef)

Bug Fixes

• comments: isolate mention permission failures (#​13556) (0c99352)
• core: disable toolbar actions the caret position can't honor (fb540f3)
• core: report the .text focus-path suffix for spans at any depth (30952d1)
• core: update variant to variant definition and related copy (#​13547) (2e77b9f)
• deps: bump @​sanity/workbench to 0.1.0-alpha.26 (#​13585) (11ff1f9)
• deps: update @​sanity/cli to 7.12.1 and @​sanity/workbench to 0.1.0-alpha.29 (#​13668) (17d6066)
• deps: update @​sanity/workbench to 0.1.0-alpha.28 (#​13606) (67464c3)
• deps: update dependency @​sanity/cli to ^7.10.0 (#​13570) (17d211e)
• deps: update dependency @​sanity/cli to ^7.11.0 (#​13610) (1064414)
• deps: update dependency @​sanity/cli to ^7.12.0 (#​13663) (c5c4986)
• deps: update dependency @​sanity/cli to ^7.9.0 (#​13541) (d51c6d7)
• deps: update dependency @​sanity/icons to ^5.1.0 (#​13529) (3f9749b)
• deps: update dependency @​sanity/icons to ^5.2.0 (#​13652) (0f0d33e)
• deps: update dependency @​sanity/presentation-comlink to ^2.2.0 (#​13605) (2eda4a4)
• deps: update dependency @​sanity/preview-url-secret to ^4.1.0 (#​13613) (41a35ef)
• deps: update dependency motion to ^12.42.2 (#​13620) (c469bee)
• deps: update dependency xstate to ^5.32.5 (#​13621) (a879d11)
• deps: update portabletext (#​13527) (e2ba18d)
• deps: update portabletext (#​13579) (4c2662a)
• deps: update portabletext (#​13630) (625064a)
• deps: update portabletext (#​13658) (4403096)
• deps: update vitest monorepo to ^4.1.10 (#​13528) (ec4b071)
• fix auth flash (#​13497) (191814e)
• form: allow array insert menu to overflow edit dialogs (#​13503) (5f0a097)
• form: prevent pte caret from jumping to block start while typing on new documents (#​13574) (a54b0ba)
• form: strip stega metadata when pasting into plain text fields (#​13499) (b82ed3d)
• portable-text: prevent duplicate nested annotation dialogs (#​13551) (11e248d)
• releases: use replace when syncing router state to URL (#​13669) (e68c1a6)
• sanity: document group inventory font weights (48872b7)
• sanity: expand collapsed ancestors when opening a document with an initial focus path (#​13575) (a0265b1)
• sanity: pad tag pill on both sides when remove button is hidden (#​13429) (#​13513) (baf40c0)
• sanity: recognise variants in isPublishedVersion and isDraftVersion (e902916)
• sanity: use displayed document id to drive active variant (70af7f2)
• structure: clear preference on restore-default and honor menuItems([]) (#​13533) (ee015e1)
• structure: hide share action when the targeted document does not exist (#​13539) (2b973c4)
• structure: render menuItemGroup title in pane action menus (#​13238) (#​13521) (ad4ffd7)

Performance Improvements

• core: deduplicate document version and permission subscriptions (#​13390) (7eba912)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 5am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 24 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 11, reused 0, downloaded 0, added 0
Progress: resolved 23, reused 0, downloaded 0, added 0
Progress: resolved 27, reused 0, downloaded 0, added 0
Progress: resolved 30, reused 0, downloaded 0, added 0
Progress: resolved 44, reused 0, downloaded 0, added 0
Progress: resolved 199, reused 0, downloaded 0, added 0
Progress: resolved 342, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/sanity-io/cli/packages/@repo/package.config:
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 1.33.0 (released 2 days ago) of lightningcss does not meet the minimumReleaseAge constraint

This error happened while installing the dependencies of @sanity/pkg-utils@11.0.13

The latest release of lightningcss is "1.33.0". Published at 7/20/2026

If you need the full list of all 43 published versions run "pnpm view lightningcss versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude

[cursor]

Catalog/lockfile version mismatch

Medium Severity

The catalog bumps @sanity/pkg-utils to ^11.0.13, but pnpm-lock.yaml still records specifier ^11.0.9 and resolves 11.0.9. With pnpm install --frozen-lockfile in CI, installs fail on the catalog/lockfile mismatch, so the intended update never applies.

 

^{Reviewed by Cursor Bugbot for commit d8ea442. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 3 total unresolved issues (including 2 from previous reviews).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 3542fb4. Configure here.}

[cursor]

Lockfile not updated with deps

High Severity

Manifests bump @sanity/client to ^7.24.0 and @sanity/pkg-utils to ^11.0.13, but pnpm-lock.yaml still pins 7.23.2 / 11.0.9 (including catalog and overrides). CI runs pnpm install --frozen-lockfile, so installs fail and the intended versions never resolve.

Additional Locations (2)

• package.json#L75-L76
• pnpm-workspace.yaml#L29-L76

 

^{Reviewed by Cursor Bugbot for commit 3542fb4. Configure here.}