chore(deps): update non-major (static)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@sanity/pkg-utils (source)	^8.1.21 -> ^8.1.29			devDependencies	patch
@sanity/prettier-config	^2.0.1 -> ^2.0.2			devDependencies	patch
@sanity/ui (source)	4.0.0-static.38 -> 4.0.0-static.46			devDependencies	patch
@types/cpx (source)	^1.5.5 -> ^1.5.6			devDependencies	patch
@types/express (source)	^5.0.3 -> ^5.0.5			devDependencies	patch
@types/lodash (source)	^4.17.20 -> ^4.17.21			devDependencies	patch
@types/node (source)	^20.19.21 -> ^20.19.25			devDependencies	patch
@types/react (source)	^19.2.2 -> ^19.2.7			devDependencies	patch
@types/react-dom (source)	^19.2.2 -> ^19.2.3			devDependencies	patch
@vanilla-extract/css (source)	^1.17.4 -> ^1.17.5			dependencies	patch
@vanilla-extract/vite-plugin (source)	^5.1.1 -> ^5.1.3			dependencies	patch
@vitejs/plugin-react (source)	^5.0.4 -> ^5.1.1			dependencies	minor
esbuild	^0.25.11 -> ^0.27.0			dependencies	minor
peter-evans/create-pull-request	271a8d0 -> 84ae59a			action	digest
vite (source)	^7.1.10 -> ^7.2.4			dependencies	minor

---

Release Notes

sanity-io/pkg-utils (@​sanity/pkg-utils)

v8.1.29

Compare Source

Bug Fixes

• deps: Update dependency @​rollup/plugin-commonjs to v29 (#​2133) (2b3bc4f)
• deps: Update dependency @​rollup/plugin-replace to ^6.0.3 (#​2128) (eab05db)
• deps: Update dependency rimraf to ^6.1.0 (#​2131) (a098c3b)
• deps: Update dependency rolldown-plugin-dts to v0.17.3 (#​2129) (3cbabcb)

v8.1.28

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.45 (#​2119) (a155063)
• deps: Update dependency rolldown-plugin-dts to v0.17.2 (#​2120) (3346ac6)

v8.1.27

Compare Source

Bug Fixes

• deps: Update dependency @​microsoft/api-extractor to v7.53.3 (#​2111) (c5387eb)
• deps: Update dependency @​rollup/plugin-commonjs to ^28.0.9 (#​2112) (7207534)
• deps: Update dependency rolldown-plugin-dts to v0.17.1 (#​2113) (a54a40d)

v8.1.26

Compare Source

Bug Fixes

• deps: Update babel monorepo to ^7.28.5 (#​2105) (b9d977f)
• deps: Update dependency @​microsoft/api-extractor to v7.53.2 (#​2098) (3d226ca)
• deps: Update dependency browserslist to ^4.27.0 (#​2099) (7f8f07b)
• deps: Update dependency rolldown-plugin-dts to v0.17.0 (#​2106) (0c0f07e)

v8.1.25

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.44 (#​2082) (55337d8)

v8.1.24

Compare Source

Bug Fixes

• deps: Update dependency rolldown-plugin-dts to v0.16.12 (#​2075) (f02ce99)
• deps: Update dependency rollup to ^4.52.5 (#​2077) (9d2b27d)

v8.1.23

Compare Source

Bug Fixes

• deps: Update dependency esbuild to ^0.25.11 (#​2067) (4c8f649)

v8.1.22

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.43 (#​2056) (3142582)
• deps: Update rollup packages (#​2057) (3958f8d)

sanity-io/prettier-config (@​sanity/prettier-config)

v2.0.2

Compare Source

Bug Fixes

• deps: update non-major (#​31) (1696363)

sanity-io/ui (@​sanity/ui)

v4.0.0-static.46

Compare Source

Bug Fixes

• revert "<Activity> on <Tooltip> & <Popover>" (2d7050f)

Reverts

• Revert "chore: fix test suite" (c2a03d6)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.45

Compare Source

Features

• use <Activity> on <Tooltip> & <Popover> (a20335f)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.44

Compare Source

Bug Fixes

• use native useEffectEvent (e75f30b)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.43

Compare Source

Bug Fixes

• button: revert adding explicity inline-size (b2aba01)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.42

Compare Source

Bug Fixes

• deps: replace framer-motion with motion/react (9a95ffd)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.41

Compare Source

Bug Fixes

• toast: clear existing timeout id when pushing toast (97b3a5f)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.40

Compare Source

Bug Fixes

• toast: support duration: Infinity (d6f7c61)

---

This release is also available on:

• npm package (@​static dist-tag)

v4.0.0-static.39

Compare Source

Bug Fixes

• css: increase contrast of placeholder text (2673e0a)

---

This release is also available on:

• npm package (@​static dist-tag)

vanilla-extract-css/vanilla-extract (@​vanilla-extract/css)

v1.17.5

Compare Source

Patch Changes

• #​1655 11a7c66 Thanks @​askoufis! - Update csstype dependency to ^3.2.3

vanilla-extract-css/vanilla-extract (@​vanilla-extract/vite-plugin)

v5.1.3

Compare Source

Patch Changes

• Updated dependencies []:
  • @​vanilla-extract/compiler@​0.3.3
  • @​vanilla-extract/integration@​8.0.6

v5.1.2

Compare Source

Patch Changes

• Updated dependencies [46ef1db, ad5a08b]:
  • @​vanilla-extract/compiler@​0.3.2
  • @​vanilla-extract/integration@​8.0.5

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.1.1

Compare Source

Update code to support newer rolldown-vite (#​976)

rolldown-vite will remove optimizeDeps.rollupOptions in favor of optimizeDeps.rolldownOptions soon. This plugin now uses optimizeDeps.rolldownOptions to support newer rolldown-vite. Please update rolldown-vite to the latest version if you are using an older version.

v5.1.0

Compare Source

Add @vitejs/plugin-react/preamble virtual module for SSR HMR (#​890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#​930)

Rolldown 1.0.0-beta.44+ removed the top-level jsx option in favor of transform.jsx. This plugin now uses the transform.jsx option to support Rolldown 1.0.0-beta.44+.

evanw/esbuild (esbuild)

v0.27.0

Compare Source

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

• Use Uint8Array.fromBase64 if available (#​4286)

  With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

• Update the Go compiler from v1.23.12 to v1.25.4 (#​4208, #​4311)

  This raises the operating system requirements for running esbuild:

  • Linux: now requires a kernel version of 3.2 or later
  • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

Compare Source

• Enable trusted publishing (#​4281)

  GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

  Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

v0.25.12

Compare Source

• Fix a minification regression with CSS media queries (#​4315)

  The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

• Update the list of known JavaScript globals (#​4310)

  This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

  From ES2017:

  • Atomics
  • SharedArrayBuffer

  From ES2020:

  • BigInt64Array
  • BigUint64Array

  From ES2021:

  • FinalizationRegistry
  • WeakRef

  From ES2025:

  • Float16Array
  • Iterator

  Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

  // This can now be tree-shaken by esbuild:
  class ExampleIterator extends Iterator {}

• Add support for the new @view-transition CSS rule (#​4313)

  With this release, esbuild now has improved support for pretty-printing and minifying the new @view-transition rule (which esbuild was previously unaware of):

  /* Original code */
  @​view-transition {
    navigation: auto;
    types: check;
  }
  
  /* Old output */
  @​view-transition { navigation: auto; types: check; }
  
  /* New output */
  @​view-transition {
    navigation: auto;
    types: check;
  }

  The new view transition feature provides a mechanism for creating animated transitions between documents in a multi-page app. You can read more about view transition rules here.

  This change was contributed by @​yisibl.

• Trim CSS rules that will never match

  The CSS minifier will now remove rules whose selectors contain :is() and :where() as those selectors will never match. These selectors can currently be automatically generated by esbuild when you give esbuild nonsensical input such as the following:

  /* Original code */
  div:before {
    color: green;
    &.foo {
      color: red;
    }
  }
  
  /* Old output (with --supported:nesting=false --minify) */
  div:before{color:green}:is().foo{color:red}
  
  /* New output (with --supported:nesting=false --minify) */
  div:before{color:green}

  This input is nonsensical because CSS nesting is (unfortunately) not supported inside of pseudo-elements such as :before. Currently esbuild generates a rule containing :is() in this case when you tell esbuild to transform nested CSS into non-nested CSS. I think it's reasonable to do that as it sort of helps explain what's going on (or at least indicates that something is wrong in the output). It shouldn't be present in minified code, however, so this release now strips it out.

vitejs/vite (vite)

v7.2.4

Compare Source

Bug Fixes

• revert "perf(deps): replace debug with obug (#​21107)" (2d66b7b)

v7.2.3

Compare Source

Bug Fixes

• allow multiple bindCLIShortcuts calls with shortcut merging (#​21103) (5909efd)
• deps: update all non-major dependencies (#​21096) (6a34ac3)
• deps: update all non-major dependencies (#​21128) (4f8171e)

Performance Improvements

• deps: replace debug with obug (#​21107) (acfe939)

Miscellaneous Chores

• deps: update dependency @​rollup/plugin-commonjs to v29 (#​21099) (02ceaec)
• deps: update rolldown-related dependencies (#​21095) (39a0a15)
• deps: update rolldown-related dependencies (#​21127) (5029720)

v7.2.2

Compare Source

Bug Fixes

• revert "refactor: use fs.cpSync (#​21019)" (#​21081) (728c8ee)

v7.2.1

Compare Source

Bug Fixes

• worker: some worker asset was missing (#​21074) (82d2d6c)

Code Refactoring

• build: rename indexOfMatchInSlice to findPreloadMarker (#​21054) (f83264f)

v7.2.0

Compare Source

Bug Fixes

• css: fallback to sass when sass-embedded platform binary is missing (#​21002) (b1fd616)
• module-runner: make getBuiltins response JSON serializable (#​21029) (ad5b3bf)
• types: add undefined to optional properties for exactOptionalProperties type compatibility (#​21040) (2833c55)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​21047) (e3a6a83)

v7.1.12

Compare Source

Please refer to CHANGELOG.md for details.

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
ui-workshop	Ready	Preview	Comment	Nov 28, 2025 3:36am

[changeset-bot]

⚠️ No Changeset found

Latest commit: a737e32

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​express@​5.0.3 ⏵ 5.0.5				-2
	npm/​esbuild@​0.27.0
	npm/​@​types/​react-dom@​19.2.2 ⏵ 19.2.3
	npm/​@​types/​react@​19.2.2 ⏵ 19.2.7			+1
	npm/​@​sanity/​prettier-config@​2.0.1 ⏵ 2.0.2	-1			+7
	npm/​@​types/​lodash@​4.17.20 ⏵ 4.17.21			+1
	npm/​@​types/​node@​20.19.21 ⏵ 20.19.25	+1		+1
	npm/​vite@​7.1.11 ⏵ 7.2.4	+1		+1
	npm/​@​types/​cpx@​1.5.5 ⏵ 1.5.6	+4			+6
	npm/​@​sanity/​ui@​4.0.0-static.38 ⏵ 4.0.0-static.46			+1
	npm/​@​vanilla-extract/​css@​1.17.4 ⏵ 1.17.5
	npm/​@​vitejs/​plugin-react@​5.0.4 ⏵ 5.1.1	+1
	npm/​@​sanity/​pkg-utils@​8.1.21 ⏵ 8.1.29	+1			+1
	npm/​@​vanilla-extract/​vite-plugin@​5.1.1 ⏵ 5.1.3				+3

View full report