socket-security[bot]
commented
1 year ago 👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎
This PR previously contained dependency changes with security issues that have been removed or ignored.
Next steps
Take a deeper look at the dependency
Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.
Remove the package
If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.
Mark a package as acceptable risk
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
This PR contains the following updates:
3.10.1->3.12.0Release Notes
sanity-io/sanity
### [`v3.12.0`](https://togithub.com/sanity-io/sanity/releases/tag/v3.12.0) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.11.5...v3.12.0) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npm create sanity@latest **To upgrade a v3 Studio, run this command in its folder:** npm install sanity@latest ### ✨ Highlights #### Custom block, inlineBlock and annotation form components Adds support for block, inlineBlock and annotation form components. You can now write plugins or create workspace configuration that change how these types are rendered in the studio ### 🐛 Notable bugfixes - Fixes a regression that broke document-level readOnly - Fixes a bug that caused conditional field callbacks inside fieldsets to get passed a wrong parent value - Improves deep linking to the Portable Text Input for visual editing - Fixes an issue where `@sanity/block-tools` would remove whitespace from `` tags - Fixes an issue that could sometimes cause newly inserted array items to be immediately removed ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Per-Kristian Nordnes | feature(core): Add support for block form components in config and plugins ([#4327](https://togithub.com/sanity-io/sanity/issues/4327)) | [`3527b6c`](https://togithub.com/sanity-io/sanity/commit/3527b6c63b) Robin Pyon | chore(test-studio): add a debug case for patching custom input components | [`aaa74c0`](https://togithub.com/sanity-io/sanity/commit/aaa74c01da) Fred Carlsen | fix(block-tools): preserve whitespace in preprocess for certain html tags ([#4540](https://togithub.com/sanity-io/sanity/issues/4540)) | [`4848781`](https://togithub.com/sanity-io/sanity/commit/4848781bb0) Bjørge Næss | fix(perf): add flag to list known test ids ([#4553](https://togithub.com/sanity-io/sanity/issues/4553)) | [`981b99f`](https://togithub.com/sanity-io/sanity/commit/981b99f9c2) Bjørge Næss | refactor(util): rename isEmpty => isDeepEmpty and deprecate old name | [`e37be4a`](https://togithub.com/sanity-io/sanity/commit/e37be4a556) Bjørge Næss | test(util): add tests for isDeepEmpty | [`4ecf667`](https://togithub.com/sanity-io/sanity/commit/4ecf667e18) Bjørge Næss | refactor(util): expose isShallowEmptyObject util | [`605d716`](https://togithub.com/sanity-io/sanity/commit/605d716ce5) Bjørge Næss | fix(form): check for shallow emptyness instead of deep when determining whether a patch should unset the value | [`f2e16ff`](https://togithub.com/sanity-io/sanity/commit/f2e16ff560) Per-Kristian Nordnes | refactor(core/form/inputs): PT-input track irregular span node focusPath ([#4557](https://togithub.com/sanity-io/sanity/issues/4557)) | [`86bffd7`](https://togithub.com/sanity-io/sanity/commit/86bffd7e5d) Per-Kristian Nordnes | refactor(portable-text-editor): improve onPaste typings ([#4544](https://togithub.com/sanity-io/sanity/issues/4544)) | [`0909774`](https://togithub.com/sanity-io/sanity/commit/0909774f74) Bjørge Næss | fix(form): pass the correct data to conditional fields contained inside fieldsets ([#4556](https://togithub.com/sanity-io/sanity/issues/4556)) | [`a08334f`](https://togithub.com/sanity-io/sanity/commit/a08334fdf0) Bjørge Næss | fix(form): fix bug making fields not inherit document level readOnly state ([#4558](https://togithub.com/sanity-io/sanity/issues/4558)) | [`6f5578d`](https://togithub.com/sanity-io/sanity/commit/6f5578d5da) Knut Melvær | chore: fix installation command in release note template ([#4550](https://togithub.com/sanity-io/sanity/issues/4550)) | [`0d3c5b3`](https://togithub.com/sanity-io/sanity/commit/0d3c5b30e2) ### [`v3.11.5`](https://togithub.com/sanity-io/sanity/releases/tag/v3.11.5) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.11.3...v3.11.5) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ##### 🐛 Notable bugfixes and improvements - Fixes an issue where change indicators were no longer showing up on boolean fields - Adds document action custom dialog component - Improves presence rendering performance - Improves how focus and selection is handled and tracked in Portable Text fields - Adds support for ``, ``, `` and `` in [@sanity/block-tools](https://www.npmjs.com/package/@sanity/block-tools) - Improves how image blocks in Portable Text fields are rendered for custom named image types ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- renovate\[bot] | fix(deps): update dependency [@portabletext/types](https://togithub.com/portabletext/types) to v2 ([#4379](https://togithub.com/sanity-io/sanity/issues/4379)) | [`83711a4`](https://togithub.com/sanity-io/sanity/commit/83711a45e1) Fred Carlsen | fix: whitelist all standard text decorators in block-tools ([#4526](https://togithub.com/sanity-io/sanity/issues/4526)) | [`47be700`](https://togithub.com/sanity-io/sanity/commit/47be700993) renovate\[bot] | fix(deps): update dependency groq-js to v1 ([#4384](https://togithub.com/sanity-io/sanity/issues/4384)) | [`cf002fb`](https://togithub.com/sanity-io/sanity/commit/cf002fb977) Per-Kristian Nordnes | fix(core/form/inputs): use isImage asserter to determine image preview ([#4532](https://togithub.com/sanity-io/sanity/issues/4532)) | [`c2f98ba`](https://togithub.com/sanity-io/sanity/commit/c2f98ba88c) Herman Wikner | feat(core): add document action custom dialog component ([#4529](https://togithub.com/sanity-io/sanity/issues/4529)) | [`d6a841b`](https://togithub.com/sanity-io/sanity/commit/d6a841bf7a) Per-Kristian Nordnes | fix(core/form/inputs): value should be passed here, not schematype | [`854e37a`](https://togithub.com/sanity-io/sanity/commit/854e37a282) Per-Kristian Nordnes | refactor(core/form/inputs): refactor focus handling in the PT-input | [`6ff2b45`](https://togithub.com/sanity-io/sanity/commit/6ff2b459e6) Per-Kristian Nordnes | refactor(core/form/inputs): improve autofocus handling | [`f018467`](https://togithub.com/sanity-io/sanity/commit/f018467ca1) Per-Kristian Nordnes | refactor(portable-text-editor): provide focus event for focus and blur change | [`c0cdf87`](https://togithub.com/sanity-io/sanity/commit/c0cdf87e7b) Per-Kristian Nordnes | chore(portable-text-editor): move debug msg out of loop | [`121e906`](https://togithub.com/sanity-io/sanity/commit/121e906725) Per-Kristian Nordnes | fix(core/form/inputs): clean up rebase leftovers (next branch) | [`3923b6c`](https://togithub.com/sanity-io/sanity/commit/3923b6c221) Per-Kristian Nordnes | refactor(core/form/inputs): remove possibly destructive blur | [`e4ea215`](https://togithub.com/sanity-io/sanity/commit/e4ea215b45) Per-Kristian Nordnes | refactor(core/form/inputs): make PT-input scroll to top of elements | [`2efe806`](https://togithub.com/sanity-io/sanity/commit/2efe806c7e) Per-Kristian Nordnes | refactor(core/form/inputs): streamline prop names for PT-input components | [`dd9c9d0`](https://togithub.com/sanity-io/sanity/commit/dd9c9d0182) Per-Kristian Nordnes | refactor(core/form/inputs): blur editor when opening object in PT-input | [`76131d8`](https://togithub.com/sanity-io/sanity/commit/76131d89fd) Per-Kristian Nordnes | refactor(core/form/inputs): rename var to conventions | [`20fb696`](https://togithub.com/sanity-io/sanity/commit/20fb696b25) Per-Kristian Nordnes | refactor(core/form/inputs): wrap delete in try/catch to finalize ref assignment | [`cd3eb90`](https://togithub.com/sanity-io/sanity/commit/cd3eb906c9) Per-Kristian Nordnes | refactor(core/form/inputs): remove uneeded prop assignment | [`a2544a6`](https://togithub.com/sanity-io/sanity/commit/a2544a62e4) Per-Kristian Nordnes | docs(core/form/inputs): add some comments why we blur here. | [`0cbd4f4`](https://togithub.com/sanity-io/sanity/commit/0cbd4f4569) Per-Kristian Nordnes | doc(core/form/inputs): add comments on block props | [`fbd7be8`](https://togithub.com/sanity-io/sanity/commit/fbd7be88f8) Per-Kristian Nordnes | refactor(core/form/inputs): add prop \__unstable_textElementFocus | [`2d8aa4d`](https://togithub.com/sanity-io/sanity/commit/2d8aa4daeb) Per-Kristian Nordnes | refactor(core/form/inputs): make PT annotations handle focus correctly | [`021c2c6`](https://togithub.com/sanity-io/sanity/commit/021c2c6dff) Per-Kristian Nordnes | fix(core/form/inputs): fix issue with re-focusing the editor after toggling fullscreen | [`02feb8d`](https://togithub.com/sanity-io/sanity/commit/02feb8dc1d) Per-Kristian Nordnes | fix(core/form/inputs): rename autofocus > autoFocus | [`fb88521`](https://togithub.com/sanity-io/sanity/commit/fb88521d05) Per-Kristian Nordnes | refactor(core/form/inputs): clean up useTrackFocusPath | [`bf77938`](https://togithub.com/sanity-io/sanity/commit/bf77938faf) Per-Kristian Nordnes | feature(core/form): keep stable child presence list with immutableReconcile | [`f4a113f`](https://togithub.com/sanity-io/sanity/commit/f4a113ff19) Per-Kristian Nordnes | refactor(core/form/inputs): use child presence hook for PT-input nodes | [`145c573`](https://togithub.com/sanity-io/sanity/commit/145c573a0b) Victoria Wagenblast | fix(core): add change indicators to boolean fields ([#4538](https://togithub.com/sanity-io/sanity/issues/4538)) | [`94e1c7a`](https://togithub.com/sanity-io/sanity/commit/94e1c7a4e0) ### [`v3.11.3`](https://togithub.com/sanity-io/sanity/releases/tag/v3.11.3) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.11.2...v3.11.3) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ### 🐛 Notable bugfixes - Fixes a recent regression from v3.11.2 where text annotations nested inside Portable Text inputs could not be edited properly ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Bjørge Næss | chore(perf): support passing a comma-separated list of test-ids when running perf suite ([#4520](https://togithub.com/sanity-io/sanity/issues/4520)) | [`6fb3855`](https://togithub.com/sanity-io/sanity/commit/6fb3855a7) Herman Wikner | fix(core): add `PortableTextInputProps` to `InputProps` union ([#4522](https://togithub.com/sanity-io/sanity/issues/4522)) | [`4031d3c`](https://togithub.com/sanity-io/sanity/commit/4031d3c06) renovate\[bot] | fix(deps): update dependency [@tanstack/react-virtual](https://togithub.com/tanstack/react-virtual) to v3.0.0-beta.54 ([#4478](https://togithub.com/sanity-io/sanity/issues/4478)) | [`4bef600`](https://togithub.com/sanity-io/sanity/commit/4bef6000e) Per-Kristian Nordnes | fix(core/form/inputs): fix rendering regression for PT-input ([#4530](https://togithub.com/sanity-io/sanity/issues/4530)) | [`fba12cf`](https://togithub.com/sanity-io/sanity/commit/fba12cf73) ### [`v3.11.2`](https://togithub.com/sanity-io/sanity/releases/tag/v3.11.2) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.11.1...v3.11.2) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ### 🐛 Notable bugfixes - Fixes issue where image and file upload fields were not uploading data - Fixes issue that would cause the dropdown list of autocomplete suggestions for reference fields to not overflow correctly inside the Portable Text editor - Fixes issue where the current value of reference fields would not be displayed in the Portable Text editor - Improves performance for arrays and portable text inputs ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Espen Hovlandsdal | fix(deps): update dependency [@sanity/client](https://togithub.com/sanity/client) to 6.1.1 | [`05b29b7`](https://togithub.com/sanity-io/sanity/commit/05b29b767) RitaDias | fix(core): fix image and file upload ([#4518](https://togithub.com/sanity-io/sanity/issues/4518)) | [`8861dfa`](https://togithub.com/sanity-io/sanity/commit/8861dfafa) Binoy Patel | fix(core): fix PT reference autocomplete being cut off ([#4519](https://togithub.com/sanity-io/sanity/issues/4519)) | [`6581afd`](https://togithub.com/sanity-io/sanity/commit/6581afddb) Per-Kristian Nordnes | fix(form/inputs): use ref to value as dependency | [`4c83b91`](https://togithub.com/sanity-io/sanity/commit/4c83b91d2) Per-Kristian Nordnes | fix(form/inputs): ensure same empty presence object for PT-input components | [`6c7c4e4`](https://togithub.com/sanity-io/sanity/commit/6c7c4e43c) Per-Kristian Nordnes | refactor(form/inputs): simplify tenary statement | [`828e2da`](https://togithub.com/sanity-io/sanity/commit/828e2dace) Per-Kristian Nordnes | fix(form/inputs): fix re-rendering issue with PT-input block object | [`75dfb9c`](https://togithub.com/sanity-io/sanity/commit/75dfb9ca1) Per-Kristian Nordnes | refactor(form/inputs): improve value ref update for ArrayOfObjectsFiled | [`ff435ed`](https://togithub.com/sanity-io/sanity/commit/ff435ede6) Per-Kristian Nordnes | refactor(core/form): make sure empty presence arrays are same object | [`1299d60`](https://togithub.com/sanity-io/sanity/commit/1299d6079) Per-Kristian Nordnes | refactor(form/inputs): use stable empty presence from memberItem | [`a7ddef9`](https://togithub.com/sanity-io/sanity/commit/a7ddef953) Binoy Patel | fix(core): editing reference input in PTE does not show value ([#4499](https://togithub.com/sanity-io/sanity/issues/4499)) | [`7a4275e`](https://togithub.com/sanity-io/sanity/commit/7a4275e2b) ### [`v3.11.1`](https://togithub.com/sanity-io/sanity/releases/tag/v3.11.1) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.11.0...v3.11.1) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ### 🐛 Notable bugfixes - Fixes an issue causing field groups to be hidden if they only contain fieldsets ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Bjørge Næss | refactor(form): fix issue with hiding a field group that only have fieldsets ([#4477](https://togithub.com/sanity-io/sanity/issues/4477)) | [`906a6fe`](https://togithub.com/sanity-io/sanity/commit/906a6fe063) ### [`v3.11.0`](https://togithub.com/sanity-io/sanity/releases/tag/v3.11.0) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.10.3...v3.11.0) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ### ✨ Highlights #### Document list search It's now possible to search within document lists. We've also improved keyboard accessibility, making it much easier to navigate between lists and the document form editor itself.  ### 🐛 Notable bugfixes - Fixes issue where **Edit** intent links that opens the on-screen keyboard in iOS/android while also opening dialogs would break the layout - Improves linking to single spans of text in the Portable Text Input - Fixes a bug that made fields without a group appear in all groups - Fixes a bug with the Portable Text Editor where single span texts could become out of sync with the server value - Fixes an issue where an object field’s value is not unset when all object field values are empty ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Cody Olsen | fix: avoid scroll on `overflow: hidden` ([#4458](https://togithub.com/sanity-io/sanity/issues/4458)) | [`47302b5`](https://togithub.com/sanity-io/sanity/commit/47302b5fa) Espen Hovlandsdal | test(cli): reduce dangling entity cleanup threhold to 16 hours ([#4431](https://togithub.com/sanity-io/sanity/issues/4431)) | [`5780487`](https://togithub.com/sanity-io/sanity/commit/5780487c8) Per-Kristian Nordnes | fix(form/inputs): improve tracking of formState focusPath for PT-input ([#4466](https://togithub.com/sanity-io/sanity/issues/4466)) | [`bdcea25`](https://togithub.com/sanity-io/sanity/commit/bdcea252f) Bjørge Næss | fix(form): show fields without groups only when 'All fields' is selected ([#4472](https://togithub.com/sanity-io/sanity/issues/4472)) | [`b246b81`](https://togithub.com/sanity-io/sanity/commit/b246b818d) Herman Wikner | feat: document list search ([#4436](https://togithub.com/sanity-io/sanity/issues/4436)) | [`c6a729f`](https://togithub.com/sanity-io/sanity/commit/c6a729fbf) Bjørge Næss | fix(desk): remove path param from url after initially read ([#4469](https://togithub.com/sanity-io/sanity/issues/4469)) | [`eee026d`](https://togithub.com/sanity-io/sanity/commit/eee026d43) Cody Olsen | chore: delete junk files ([#4476](https://togithub.com/sanity-io/sanity/issues/4476)) | [`6b78d7e`](https://togithub.com/sanity-io/sanity/commit/6b78d7e7d) Robin Pyon | chore(test-studio): add an author references block to simpleBlock | [`8e83e86`](https://togithub.com/sanity-io/sanity/commit/8e83e8695) renovate\[bot] | fix(deps): update dependency [@vercel/fs-detectors](https://togithub.com/vercel/fs-detectors) to v3.9.2 | [`56c81ff`](https://togithub.com/sanity-io/sanity/commit/56c81ff3e) renovate\[bot] | fix(deps): update dependency framer-motion to v10.12.10 | [`9602964`](https://togithub.com/sanity-io/sanity/commit/96029646e) renovate\[bot] | fix(deps): update dependency [@vercel/frameworks](https://togithub.com/vercel/frameworks) to v1.4.2 | [`97b923e`](https://togithub.com/sanity-io/sanity/commit/97b923ec4) Per-Kristian Nordnes | fix(portable-text-editor): fix sync issue with text spans ([#4467](https://togithub.com/sanity-io/sanity/issues/4467)) | [`036e68a`](https://togithub.com/sanity-io/sanity/commit/036e68ab7) RitaDias | fix(core): unset objects when no values in patch when empty value ([#4495](https://togithub.com/sanity-io/sanity/issues/4495)) | [`ba760f3`](https://togithub.com/sanity-io/sanity/commit/ba760f3c9) renovate\[bot] | fix(deps): update dependency [@sanity/client](https://togithub.com/sanity/client) to v6 ([#4454](https://togithub.com/sanity-io/sanity/issues/4454)) | [`e092721`](https://togithub.com/sanity-io/sanity/commit/e092721ff) ### [`v3.10.3`](https://togithub.com/sanity-io/sanity/releases/tag/v3.10.3) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.10.2...v3.10.3) #### Installation and upgrading **To initiate a new Studio without installing the CLI globally:** npx create-sanity@latest **To upgrade a v3 Studio:** npm install sanity@latest ### 🐛 Notable bugfixes - Fixes an issue where array inputs inside Portable Text dialogs would not properly render ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Per-Kristian Nordnes | Add boundary provider for nested content inside PT-input dialogs ([#4486](https://togithub.com/sanity-io/sanity/issues/4486)) | [`4f961e9`](https://togithub.com/sanity-io/sanity/commit/4f961e9a8) ### [`v3.10.2`](https://togithub.com/sanity-io/sanity/compare/v3.10.1...v3.10.2) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.10.1...v3.10.2)Configuration
📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate using a preset from