sanity-io / sanity-template-astro-clean

Clean starter template with Astro
https://template-astro-clean.sanity.build/
119 stars 39 forks source link

chore(deps): update non-major #34

Closed renovate[bot] closed 5 months ago

renovate[bot] commented 11 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@astrojs/check (source) 0.2.0 -> 0.7.0 age adoption passing confidence
@astrojs/react (source) 3.0.2 -> 3.6.0 age adoption passing confidence
@portabletext/types 2.0.7 -> 2.0.13 age adoption passing confidence
@sanity/types (source) 3.17.0 -> 3.48.1 age adoption passing confidence
@sanity/vision (source) 3.17.0 -> 3.48.1 age adoption passing confidence
@types/react (source) 18.2.24 -> 18.3.3 age adoption passing confidence
@types/react-dom (source) 18.2.8 -> 18.3.0 age adoption passing confidence
astro (source) 3.2.2 -> 3.6.5 age adoption passing confidence
astro-portabletext (source) 0.9.4 -> 0.10.0 age adoption passing confidence
autoprefixer 10.4.16 -> 10.4.19 age adoption passing confidence
eslint (source) 8.50.0 -> 8.57.0 age adoption passing confidence
groq (source) 3.17.0 -> 3.48.1 age adoption passing confidence
prettier (source) 3.0.3 -> 3.3.2 age adoption passing confidence
prettier-plugin-astro 0.12.0 -> 0.14.0 age adoption passing confidence
react (source) 18.2.0 -> 18.3.1 age adoption passing confidence
react-dom (source) 18.2.0 -> 18.3.1 age adoption passing confidence
sanity (source) 3.17.0 -> 3.48.1 age adoption passing confidence
typescript (source) 5.2.2 -> 5.4.5 age adoption passing confidence

Release Notes

withastro/language-tools (@​astrojs/check) ### [`v0.7.0`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#070) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.6.0...@astrojs/check@0.7.0) ##### Minor Changes - [`c8af6db`](https://togithub.com/withastro/language-tools/commit/c8af6db): Upgrades the language server to use the latest version of Volar. This changes should have no negative impacts on the experience. ##### Patch Changes - Updated dependencies \[[`c8af6db`](https://togithub.com/withastro/language-tools/commit/c8af6db)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).10.0 ### [`v0.6.0`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#060) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.10...@astrojs/check@0.6.0) ##### Minor Changes - [`65d3425`](https://togithub.com/withastro/language-tools/commit/65d3425): Upgrades the language server to use Volar 2.2. This changes should have no negative impacts on the experience. ##### Patch Changes - Updated dependencies \[[`65d3425`](https://togithub.com/withastro/language-tools/commit/65d3425)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).9.0 ### [`v0.5.10`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#0510) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.9...@astrojs/check@0.5.10) ##### Patch Changes - [`9ca368b`](https://togithub.com/withastro/language-tools/commit/9ca368b): Update to the latest version of Volar. This release should fix some of the caching issues that has crept up recently - Updated dependencies \[[`9ca368b`](https://togithub.com/withastro/language-tools/commit/9ca368b)] - Updated dependencies \[[`d57daad`](https://togithub.com/withastro/language-tools/commit/d57daad)] - Updated dependencies \[[`b166787`](https://togithub.com/withastro/language-tools/commit/b166787)] - Updated dependencies \[[`eb49fb2`](https://togithub.com/withastro/language-tools/commit/eb49fb2)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).8.4 ### [`v0.5.9`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#059) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.8...@astrojs/check@0.5.9) ##### Patch Changes - [`f1447ef`](https://togithub.com/withastro/language-tools/commit/f1447ef): chore: Update `volar-service-prettier`. This is only an internal refactor and there should be no visible changes. - Updated dependencies \[[`f1447ef`](https://togithub.com/withastro/language-tools/commit/f1447ef)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).8.1 ### [`v0.5.8`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#058) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.7...@astrojs/check@0.5.8) ##### Patch Changes - [`85b42dc`](https://togithub.com/withastro/language-tools/commit/85b42dc): Update to the latest version of Volar. This release fixes a few issues such as missing Prettier crashing the language server in some cases, resolutions not working correctly inside TSX files, and more. - Updated dependencies \[[`85b42dc`](https://togithub.com/withastro/language-tools/commit/85b42dc)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).8.0 ### [`v0.5.7`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#057) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.6...@astrojs/check@0.5.7) ##### Patch Changes - [`1b68dfb`](https://togithub.com/withastro/language-tools/commit/1b68dfb): Improves descriptions for attributes specific to Astro (`is:raw`, `set:html`, etc.) - Updated dependencies \[[`2bad6a8`](https://togithub.com/withastro/language-tools/commit/2bad6a8)] - Updated dependencies \[[`1b68dfb`](https://togithub.com/withastro/language-tools/commit/1b68dfb)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.7 ### [`v0.5.6`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#056) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.5...@astrojs/check@0.5.6) ##### Patch Changes - [`fe6165b`](https://togithub.com/withastro/language-tools/commit/fe6165b): Makes astro check --tsconfig understand relative file names - Updated dependencies \[[`fe6165b`](https://togithub.com/withastro/language-tools/commit/fe6165b)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.6 ### [`v0.5.5`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#055) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.4...@astrojs/check@0.5.5) ##### Patch Changes - [`1436e6e`](https://togithub.com/withastro/language-tools/commit/1436e6e): Fixes mapping from compiler location to LSP range. - Updated dependencies \[[`7c4c1f2`](https://togithub.com/withastro/language-tools/commit/7c4c1f2)] - Updated dependencies \[[`1436e6e`](https://togithub.com/withastro/language-tools/commit/1436e6e)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.5 ### [`v0.5.4`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#054) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.3...@astrojs/check@0.5.4) ##### Patch Changes - [`6924c7e`](https://togithub.com/withastro/language-tools/commit/6924c7e): Fixes semantic highlighting not working inside .ts(x) files in certain cases - [`310fbfe`](https://togithub.com/withastro/language-tools/commit/310fbfe): Fix Svelte and Vue integrations not working on Windows in certain cases - Updated dependencies \[[`6924c7e`](https://togithub.com/withastro/language-tools/commit/6924c7e)] - Updated dependencies \[[`310fbfe`](https://togithub.com/withastro/language-tools/commit/310fbfe)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.4 ### [`v0.5.3`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#053) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.2...@astrojs/check@0.5.3) ##### Patch Changes - [`de58706`](https://togithub.com/withastro/language-tools/commit/de58706): Fix imports from certain packages not working correctly in certain cases - Updated dependencies \[[`de58706`](https://togithub.com/withastro/language-tools/commit/de58706)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.3 ### [`v0.5.2`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#052) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.1...@astrojs/check@0.5.2) ##### Patch Changes - [`a2280a8`](https://togithub.com/withastro/language-tools/commit/a2280a8): Avoid checking Svelte and Vue files when running astro check - Updated dependencies \[[`a2280a8`](https://togithub.com/withastro/language-tools/commit/a2280a8)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.2 ### [`v0.5.1`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#0510) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.5.0...@astrojs/check@0.5.1) ##### Patch Changes - [`9ca368b`](https://togithub.com/withastro/language-tools/commit/9ca368b): Update to the latest version of Volar. This release should fix some of the caching issues that has crept up recently - Updated dependencies \[[`9ca368b`](https://togithub.com/withastro/language-tools/commit/9ca368b)] - Updated dependencies \[[`d57daad`](https://togithub.com/withastro/language-tools/commit/d57daad)] - Updated dependencies \[[`b166787`](https://togithub.com/withastro/language-tools/commit/b166787)] - Updated dependencies \[[`eb49fb2`](https://togithub.com/withastro/language-tools/commit/eb49fb2)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).8.4 ### [`v0.5.0`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#050) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.4.1...@astrojs/check@0.5.0) ##### Minor Changes - [`15a5532`](https://togithub.com/withastro/language-tools/commit/15a5532): Upgrade to Volar 2.0. No regressions are currently expected, however as this is a fairly consequential backend change, please report any issues you encounter. For reference, Volar is the underlying framework that powers the Astro language server, you can think of it as Vite for editor tooling. ##### Patch Changes - Updated dependencies \[[`15a5532`](https://togithub.com/withastro/language-tools/commit/15a5532)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).7.0 ### [`v0.4.1`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#041) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.4.0...@astrojs/check@0.4.1) ##### Patch Changes - [`63e2c81`](https://togithub.com/withastro/language-tools/commit/63e2c81): Fix fallback types not being properly included in some contexts such as inside the VS Code extension - Updated dependencies \[[`63e2c81`](https://togithub.com/withastro/language-tools/commit/63e2c81)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).6.2 ### [`v0.4.0`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#040) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.3.4...@astrojs/check@0.4.0) ##### Minor Changes - [`a314bcc`](https://togithub.com/withastro/language-tools/commit/a314bcc): Remove temporary workaround `astro check` that disabled checking JSX and TSX files ##### Patch Changes - Updated dependencies \[[`a314bcc`](https://togithub.com/withastro/language-tools/commit/a314bcc)] - Updated dependencies \[[`dab6801`](https://togithub.com/withastro/language-tools/commit/dab6801)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).6.0 ### [`v0.3.4`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#034) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.3.3...@astrojs/check@0.3.4) ##### Patch Changes - [`b16fcbb`](https://togithub.com/withastro/language-tools/commit/b16fcbb): Temporarily disable checking `.jsx` and `.tsx` files using `astro check` until [https://github.com/withastro/language-tools/issues/727](https://togithub.com/withastro/language-tools/issues/727) is fixed - Updated dependencies \[[`b16fcbb`](https://togithub.com/withastro/language-tools/commit/b16fcbb)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).5.5 ### [`v0.3.3`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#033) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.3.2...@astrojs/check@0.3.3) ##### Patch Changes - [`45d49f5`](https://togithub.com/withastro/language-tools/commit/45d49f5): Fix errors spilling out of inline event attributes in certain cases - [`7c9c981`](https://togithub.com/withastro/language-tools/commit/7c9c981): Fix errors inside `.ts` files not being properly reported in certain cases - Updated dependencies \[[`45d49f5`](https://togithub.com/withastro/language-tools/commit/45d49f5)] - Updated dependencies \[[`7c9c981`](https://togithub.com/withastro/language-tools/commit/7c9c981)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).5.4 ### [`v0.3.2`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#032) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.3.1...@astrojs/check@0.3.2) ##### Patch Changes - [`621320a`](https://togithub.com/withastro/language-tools/commit/621320a): Fix language server crashing when encountering malformed files in certain cases - [`dc98b0b`](https://togithub.com/withastro/language-tools/commit/dc98b0b): Fixes an issue where type checking errors were shown on define:vars scripts when "type=module" attribute was also present. - Updated dependencies \[[`621320a`](https://togithub.com/withastro/language-tools/commit/621320a)] - Updated dependencies \[[`dc98b0b`](https://togithub.com/withastro/language-tools/commit/dc98b0b)] - Updated dependencies \[[`015a667`](https://togithub.com/withastro/language-tools/commit/015a667)] - Updated dependencies \[[`598689a`](https://togithub.com/withastro/language-tools/commit/598689a)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).5.3 ### [`v0.3.1`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#031) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.3.0...@astrojs/check@0.3.1) ##### Patch Changes - [`ee41dce`](https://togithub.com/withastro/language-tools/commit/ee41dce): Add support for TypeScript 5.3 - [`19217c4`](https://togithub.com/withastro/language-tools/commit/19217c4): Automatically flatten inferred unions from `getStaticPaths` into each other so that divergent props don't need to be manually discriminated before destructuring. - Updated dependencies \[[`bd3d933`](https://togithub.com/withastro/language-tools/commit/bd3d933)] - Updated dependencies \[[`ee41dce`](https://togithub.com/withastro/language-tools/commit/ee41dce)] - Updated dependencies \[[`19217c4`](https://togithub.com/withastro/language-tools/commit/19217c4)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).5.2 ### [`v0.3.0`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#030) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.2.1...@astrojs/check@0.3.0) ##### Minor Changes - [`f4402eb`](https://togithub.com/withastro/language-tools/commit/f4402eb): Add intellisense for Astro.self, add auto inferring of props for `getStaticPaths` ##### Patch Changes - Updated dependencies \[[`f4402eb`](https://togithub.com/withastro/language-tools/commit/f4402eb)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).5.0 ### [`v0.2.1`](https://togithub.com/withastro/language-tools/blob/HEAD/packages/astro-check/CHANGELOG.md#021) [Compare Source](https://togithub.com/withastro/language-tools/compare/@astrojs/check@0.2.0...@astrojs/check@0.2.1) ##### Patch Changes - [`9381e1d`](https://togithub.com/withastro/language-tools/commit/9381e1d): Update dependencies - Updated dependencies \[[`9381e1d`](https://togithub.com/withastro/language-tools/commit/9381e1d)] - [@​astrojs/language-server](https://togithub.com/astrojs/language-server)[@​2](https://togithub.com/2).4.0
withastro/astro (@​astrojs/react) ### [`v3.6.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#360) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.5.0...@astrojs/react@3.6.0) ##### Minor Changes - [#​11234](https://togithub.com/withastro/astro/pull/11234) [`4385bf7`](https://togithub.com/withastro/astro/commit/4385bf7a4dc9c65bff53a30c660f7a909fcabfc9) Thanks [@​ematipico](https://togithub.com/ematipico)! - Adds a new function called `addServerRenderer` to the Container API. Use this function to manually store renderers inside the instance of your container. This new function should be preferred when using the Container API in environments like on-demand pages: ```ts import type { APIRoute } from 'astro'; import { experimental_AstroContainer } from 'astro/container'; import reactRenderer from '@​astrojs/react/server.js'; import vueRenderer from '@​astrojs/vue/server.js'; import ReactComponent from '../components/button.jsx'; import VueComponent from '../components/button.vue'; // MDX runtime is contained inside the Astro core import mdxRenderer from 'astro/jsx/server.js'; // In case you need to import a custom renderer import customRenderer from '../renderers/customRenderer.js'; export const GET: APIRoute = async (ctx) => { const container = await experimental_AstroContainer.create(); container.addServerRenderer({ renderer: reactRenderer }); container.addServerRenderer({ renderer: vueRenderer }); container.addServerRenderer({ renderer: customRenderer }); // You can pass a custom name too container.addServerRenderer({ name: 'customRenderer', renderer: customRenderer, }); const vueComponent = await container.renderToString(VueComponent); return await container.renderToResponse(Component); }; ``` ### [`v3.5.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#350) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.4.0...@astrojs/react@3.5.0) ##### Minor Changes - [#​11144](https://togithub.com/withastro/astro/pull/11144) [`803dd80`](https://togithub.com/withastro/astro/commit/803dd8061df02138b4928442bcb76e77dcf6f5e7) Thanks [@​ematipico](https://togithub.com/ematipico)! - The integration now exposes a function called `getContainerRenderer`, that can be used inside the Container APIs to load the relative renderer. ```js import { experimental_AstroContainer as AstroContainer } from 'astro/container'; import ReactWrapper from '../src/components/ReactWrapper.astro'; import { loadRenderers } from 'astro:container'; import { getContainerRenderer } from '@​astrojs/react'; test('ReactWrapper with react renderer', async () => { const renderers = await loadRenderers([getContainerRenderer()]); const container = await AstroContainer.create({ renderers, }); const result = await container.renderToString(ReactWrapper); expect(result).toContain('Counter'); expect(result).toContain('Count: 5'); }); ``` ### [`v3.4.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#340) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.3.4...@astrojs/react@3.4.0) ##### Minor Changes - [#​11071](https://togithub.com/withastro/astro/pull/11071) [`8ca7c73`](https://togithub.com/withastro/astro/commit/8ca7c731dea894e77f84b314ebe3a141d5daa918) Thanks [@​bholmesdev](https://togithub.com/bholmesdev)! - Adds two new functions `experimental_getActionState()` and `experimental_withState()` to support [the React 19 `useActionState()` hook](https://react.dev/reference/react/useActionState) when using Astro Actions. This introduces progressive enhancement when calling an Action with the `withState()` utility. This example calls a `like` action that accepts a `postId` and returns the number of likes. Pass this action to the `experimental_withState()` function to apply progressive enhancement info, and apply to `useActionState()` to track the result: ```tsx import { actions } from 'astro:actions'; import { experimental_withState } from '@​astrojs/react/actions'; export function Like({ postId }: { postId: string }) { const [state, action, pending] = useActionState( experimental_withState(actions.like), 0 // initial likes ); return (
); } ``` You can also access the state stored by `useActionState()` from your action `handler`. Call `experimental_getActionState()` with the API context, and optionally apply a type to the result: ```ts import { defineAction, z } from 'astro:actions'; import { experimental_getActionState } from '@​astrojs/react/actions'; export const server = { like: defineAction({ input: z.object({ postId: z.string(), }), handler: async ({ postId }, ctx) => { const currentLikes = experimental_getActionState(ctx); // write to database return currentLikes + 1; }, }), }; ``` ### [`v3.3.4`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#334) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.3.3...@astrojs/react@3.3.4) ##### Patch Changes - [#​10986](https://togithub.com/withastro/astro/pull/10986) [`4d16381`](https://togithub.com/withastro/astro/commit/4d163811e1a25affb2c3d9adb3af650b7f1c91b6) Thanks [@​emish89](https://togithub.com/emish89)! - Fixes incorrect `peerDependencies` for `@types/react` and `@types/react-dom` ### [`v3.3.3`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#333) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.3.2...@astrojs/react@3.3.3) ##### Patch Changes - [#​10942](https://togithub.com/withastro/astro/pull/10942) [`d47baa4`](https://togithub.com/withastro/astro/commit/d47baa466aaeedde9c79ed5375d0be34762ac8b6) Thanks [@​matthewp](https://togithub.com/matthewp)! - Updates package to support React 19 beta ### [`v3.3.2`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#332) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.3.1...@astrojs/react@3.3.2) ##### Patch Changes - [#​10893](https://togithub.com/withastro/astro/pull/10893) [`fd7a9ed`](https://togithub.com/withastro/astro/commit/fd7a9ed3379a123f02f297b69fa5da0053e84a89) Thanks [@​Angrigo](https://togithub.com/Angrigo)! - Removes using deprecated `ReactDOMServer.renderToStaticNodeStream` API ### [`v3.3.1`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#331) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.3.0...@astrojs/react@3.3.1) ##### Patch Changes - [#​10855](https://togithub.com/withastro/astro/pull/10855) [`f6bddd3`](https://togithub.com/withastro/astro/commit/f6bddd3a155cd10a9f85c92d43b1af8b74786a42) Thanks [@​lamATnginx](https://togithub.com/lamATnginx)! - Fix Redoc usage in React integration ### [`v3.3.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#330) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.2.0...@astrojs/react@3.3.0) ##### Minor Changes - [#​10689](https://togithub.com/withastro/astro/pull/10689) [`683d51a5eecafbbfbfed3910a3f1fbf0b3531b99`](https://togithub.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99) Thanks [@​ematipico](https://togithub.com/ematipico)! - Deprecate support for versions of Node.js older than `v18.17.1` for Node.js 18, older than `v20.0.3` for Node.js 20, and the complete Node.js v19 release line. This change is in line with Astro's [Node.js support policy](https://docs.astro.build/en/upgrade-astro/#support). ### [`v3.2.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#320) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.1.1...@astrojs/react@3.2.0) ##### Minor Changes - [#​10675](https://togithub.com/withastro/astro/pull/10675) [`14f1d49a10541fecc4c10def8a094322442ccf23`](https://togithub.com/withastro/astro/commit/14f1d49a10541fecc4c10def8a094322442ccf23) Thanks [@​fightingcat](https://togithub.com/fightingcat)! - Expose Babel config for [@​astro/react](https://togithub.com/astro/react). ### [`v3.1.1`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#311) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.1.0...@astrojs/react@3.1.1) ##### Patch Changes - [#​10654](https://togithub.com/withastro/astro/pull/10654) [`195f51f82a44df32be73865949aabee0d46ffe61`](https://togithub.com/withastro/astro/commit/195f51f82a44df32be73865949aabee0d46ffe61) Thanks [@​matthewp](https://togithub.com/matthewp)! - Mark [@​material-tailwind/react](https://togithub.com/material-tailwind/react) as noExternal ### [`v3.1.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#310) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.10...@astrojs/react@3.1.0) ##### Minor Changes - [#​10136](https://togithub.com/withastro/astro/pull/10136) [`9cd84bd19b92fb43ae48809f575ee12ebd43ea8f`](https://togithub.com/withastro/astro/commit/9cd84bd19b92fb43ae48809f575ee12ebd43ea8f) Thanks [@​matthewp](https://togithub.com/matthewp)! - Changes the default behavior of `transition:persist` to update the props of persisted islands upon navigation. Also adds a new view transitions option `transition:persist-props` (default: `false`) to prevent props from updating as needed. Islands which have the `transition:persist` property to keep their state when using the `` router will now have their props updated upon navigation. This is useful in cases where the component relies on page-specific props, such as the current page title, which should update upon navigation. For example, the component below is set to persist across navigation. This component receives a `products` props and might have some internal state, such as which filters are applied: ```astro ``` Upon navigation, this component persists, but the desired `products` might change, for example if you are visiting a category of products, or you are performing a search. Previously the props would not change on navigation, and your island would have to handle updating them externally, such as with API calls. With this change the props are now updated, while still preserving state. You can override this new default behavior on a per-component basis using `transition:persist-props=true` to persist both props and state during navigation: ```astro ``` ### [`v3.0.10`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#3010) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.9...@astrojs/react@3.0.10) ##### Patch Changes - [#​9849](https://togithub.com/withastro/astro/pull/9849) [`20ca3154fb37049cbcd51b06d9fa2ef25ac25a36`](https://togithub.com/withastro/astro/commit/20ca3154fb37049cbcd51b06d9fa2ef25ac25a36) Thanks [@​StandardGage](https://togithub.com/StandardGage)! - Fixes an issue where passing void elements (img, etc..) did not work with the `experimentalReactChildren` option enabled ### [`v3.0.9`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#309) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.8...@astrojs/react@3.0.9) ##### Patch Changes - [#​9482](https://togithub.com/withastro/astro/pull/9482) [`72b26daf694b213918f02d0fcbf90ab5b7ebc31f`](https://togithub.com/withastro/astro/commit/72b26daf694b213918f02d0fcbf90ab5b7ebc31f) Thanks [@​natemoo-re](https://togithub.com/natemoo-re)! - Improves compatability with the [Qwik adapter](https://togithub.com/QwikDev/astro) - [#​9479](https://togithub.com/withastro/astro/pull/9479) [`1baf0b0d3cbd0564954c2366a7278794fad6726e`](https://togithub.com/withastro/astro/commit/1baf0b0d3cbd0564954c2366a7278794fad6726e) Thanks [@​sarah11918](https://togithub.com/sarah11918)! - Updates README ### [`v3.0.8`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#308) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.7...@astrojs/react@3.0.8) ##### Patch Changes - [#​9403](https://togithub.com/withastro/astro/pull/9403) [`7eb9fe8a7`](https://togithub.com/withastro/astro/commit/7eb9fe8a717dd2b66b1d541e1aa4d3eb5d959ddf) Thanks [@​knpwrs](https://togithub.com/knpwrs)! - Prevents unsupported `forwardRef` components created by Preact from being rendered by React - [#​9452](https://togithub.com/withastro/astro/pull/9452) [`e83b5095f`](https://togithub.com/withastro/astro/commit/e83b5095f164f48ba40fc715a805fc66a3e39dcf) Thanks [@​florian-lefebvre](https://togithub.com/florian-lefebvre)! - Upgrades vite to latest ### [`v3.0.7`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#307) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.6...@astrojs/react@3.0.7) ##### Patch Changes - [#​9122](https://togithub.com/withastro/astro/pull/9122) [`1c48ed286`](https://togithub.com/withastro/astro/commit/1c48ed286538ab9e354eca4e4dcd7c6385c96721) Thanks [@​bluwy](https://togithub.com/bluwy)! - Adds Vite 5 support. There are no breaking changes from Astro. Check the [Vite migration guide](https://vitejs.dev/guide/migration.html) for details of the breaking changes from Vite instead. ### [`v3.0.6`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#306) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.5...@astrojs/react@3.0.6) ##### Patch Changes - [#​9141](https://togithub.com/withastro/astro/pull/9141) [`af43fb517`](https://togithub.com/withastro/astro/commit/af43fb51726fa2242cec03cb019fa4fa4a4403ef) Thanks [@​lilnasy](https://togithub.com/lilnasy)! - Fixes an issue where slotting self-closing elements (img, br, hr) into react components with `experimentalReactChildren` enabled led to an error. ### [`v3.0.5`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#305) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.4...@astrojs/react@3.0.5) ##### Patch Changes - [#​8925](https://togithub.com/withastro/astro/pull/8925) [`ac5633b8f`](https://togithub.com/withastro/astro/commit/ac5633b8f615fe90ea419e00c5c771d00783a6e2) Thanks [@​brandonsdebt](https://togithub.com/brandonsdebt)! - Uses `node:stream` during server rendering for compatibility with Cloudflare ### [`v3.0.4`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#304) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.3...@astrojs/react@3.0.4) ##### Patch Changes - [#​8898](https://togithub.com/withastro/astro/pull/8898) [`4dee38711`](https://togithub.com/withastro/astro/commit/4dee38711cbf83efb5e12fbfa8e69e2495c49acf) Thanks [@​matthewp](https://togithub.com/matthewp)! - Fixes client hydration in islands when using experimentalReactChildren ### [`v3.0.3`](https://togithub.com/withastro/astro/blob/HEAD/packages/integrations/react/CHANGELOG.md#303) [Compare Source](https://togithub.com/withastro/astro/compare/@astrojs/react@3.0.2...@astrojs/react@3.0.3) ##### Patch Changes - [#​8737](https://togithub.com/withastro/astro/pull/8737) [`6f60da805`](https://togithub.com/withastro/astro/commit/6f60da805e0014bc50dd07bef972e91c73560c3c) Thanks [@​ematipico](https://togithub.com/ematipico)! - Add provenance statement when publishing the library from CI
portabletext/types (@​portabletext/types) ### [`v2.0.13`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#2013-2024-04-10) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.12...v2.0.13) ##### Bug Fixes - **deps:** update dependency [@​sanity/pkg-utils](https://togithub.com/sanity/pkg-utils) to ^6.3.0 ([#​74](https://togithub.com/portabletext/types/issues/74)) ([88c52d4](https://togithub.com/portabletext/types/commit/88c52d4fd51da027dc8d64159e3df8b03ba6b205)) ### [`v2.0.12`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#2012-2024-04-05) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.11...v2.0.12) ##### Bug Fixes - **deps:** update non-major ([#​67](https://togithub.com/portabletext/types/issues/67)) ([e75e44d](https://togithub.com/portabletext/types/commit/e75e44d1c6b8657ffc54f33304afa09c5948d956)) ### [`v2.0.11`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#2011-2024-03-20) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.10...v2.0.11) ##### Bug Fixes - **deps:** update dependency [@​sanity/pkg-utils](https://togithub.com/sanity/pkg-utils) to ^5.1.4 ([#​65](https://togithub.com/portabletext/types/issues/65)) ([fc74584](https://togithub.com/portabletext/types/commit/fc74584c630b4ba61c09d063205c48d50dd97144)) ### [`v2.0.10`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#2010-2024-03-18) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.9...v2.0.10) ##### Bug Fixes - **deps:** update non-major ([#​61](https://togithub.com/portabletext/types/issues/61)) ([70f13e7](https://togithub.com/portabletext/types/commit/70f13e799a4ea54812f085ef7ab4f7b2cfe1580f)) ### [`v2.0.9`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#209-2024-03-16) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.8...v2.0.9) ##### Bug Fixes - update license year ([b96c2d2](https://togithub.com/portabletext/types/commit/b96c2d27986d564e8a8866ad2582623a0d718892)) ### [`v2.0.8`](https://togithub.com/portabletext/types/blob/HEAD/CHANGELOG.md#208-2023-10-10) [Compare Source](https://togithub.com/portabletext/types/compare/v2.0.7...v2.0.8) ##### Bug Fixes - **deps:** update dependency [@​sanity/pkg-utils](https://togithub.com/sanity/pkg-utils) to v3 ([#​42](https://togithub.com/portabletext/types/issues/42)) ([a4547af](https://togithub.com/portabletext/types/commit/a4547af2a4bef4727ac836e9333a595a23f9b016))
sanity-io/sanity (@​sanity/types) ### [`v3.48.1`](https://togithub.com/sanity-io/sanity/releases/tag/v3.48.1) [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.48.0...v3.48.1) ### Install or upgrade Sanity Studio To initiate a new Sanity Studio project or upgrade an existing one, please refer to our comprehensive guide on [Installing and Upgrading Sanity Studio](https://www.sanity.io/docs/upgrade). If you are updating from a version earlier than [3.37.0](https://www.sanity.io/changelog/93306939-973b-4e48-bb63-89a6b91d70b3), you should also check out [this article](https://www.sanity.io/help/upgrade-packages) to ensure your dependencies are up to date. ### 🐛 Notable Bugfixes - Fixes a regression that caused the Select button to not appear for single-asset sources. - Fixes a bug to allow the `--no-dry-run` and `--no-confirm` CLI options to be used together. Big thanks to [@​pawelngei](https://togithub.com/pawelngei)! ### 📓 Full changelog Author | Message | Commit \------------ | ------------- | ------------- Binoy Patel | fix(core): update url for notify endpoint ([#​7022](https://togithub.com/sanity-io/sanity/issues/7022)) | [`6e2ad73`](https://togithub.com/sanity-io/sanity/commit/6e2ad738b4) Christian Grøngaard | chore(page-building): clean up schema types ([#​6973](https://togithub.com/sanity-io/sanity/issues/6973)) | [`af414d5`](https://togithub.com/sanity-io/sanity/commit/af414d5aae) Rostislav Melkumyan | Fix(CLI): Set integration value for createProject directly in the createProject function ([#​7021](https://togithub.com/sanity-io/sanity/issues/7021)) | [`2d11505`](https://togithub.com/sanity-io/sanity/commit/2d11505f7b) ecospark\[bot] | chore(deps): dedupe pnpm-lock.yaml ([#​7028](https://togithub.com/sanity-io/sanity/issues/7028)) | [`8c66d24`](https://togithub.com/sanity-io/sanity/commit/8c66d24a71) Jason Rose | Fixes NO_CHANGES localization key ([#​7008](https://togithub.com/sanity-io/sanity/issues/7008)) | [`666c420`](https://togithub.com/sanity-io/sanity/commit/666c4209ea) Carolina Gonzalez | fix: check for telemetry consent before error reporting ([#​7019](https://togithub.com/sanity-io/sanity/issues/7019)) | [`83e1111`](https://togithub.com/sanity-io/sanity/commit/83e11116e1) Rico Kahler | fix(core): put back select button for single-asset source ([#​7030](https://togithub.com/sanity-io/sanity/issues/7030)) | [`4af12eb`](https://togithub.com/sanity-io/sanity/commit/4af12eb0b0) Rico Kahler | fix(cli): allow no-confirm no-dry-run migrations ([#​7031](https://togithub.com/sanity-io/sanity/issues/7031)) | [`b06d143`](https://togithub.com/sanity-io/sanity/commit/b06d14356c) Rico Kahler | build: remove `Version` step from release workflow ([#​7032](https://togithub.com/sanity-io/sanity/issues/7032)) | [`5006d7f`](https://togithub.com/sanity-io/sanity/commit/5006d7f3a3) ### [`v3.48.0`](https://togithub.com/sanity-io/sanity/releases/tag/v3.48.0): 3.48.0 [Compare Source](https://togithub.com/sanity-io/sanity/compare/v3.47.1...v3.48.0) ### Install or upgrade Sanity Studio To initiate a new Sanity Studio project or upgrade an existing one, please refer to our comprehensive guide on [Installing and Upgrading Sanity Studio](https://www.sanity.io/docs/upgrade). If you are updating from a version earlier than [3.37.0](https://www.sanity.io/changelog/93306939-973b-4e48-bb63-89a6b91d70b3), you should also check out [this article](https://www.sanity.io/help/upgrade-packages) to ensure your dependencies are up to date. ### 🐛 Notable Bugfixes - Fixes an issue that caused trailing commas to appear when sanitizing schemas. - Adds periodic debug logging and improves error handling in the `dataset export` workflow. ### 📓 Full changelog | Author | Message | Commit | | ------------------- | --------------------------------------------------------------------------------------------------- | ---------- | | ecospark\[bot] | chore(deps): dedupe pnpm-lock.yaml ([#​6994](https://togithub.com/sanity-io/sanity/issues/6994)) | [`1d3b68d`](https://togithub.com/sanity-io/sanity/commit/1d3b68ded7) | | Fred Carlsen | chore(ci): upgrade pnpm setup to use node20 ([#​6968](https://togithub.com/sanity-io/sanity/issues/6968)) | [`e39e7f6`](https://togithub.com/sanity-io/sanity/commit/e39e7f6009) | | RitaDias | test(e2e): rewrite e2e toolbar tests to component tests & update e2e expectations on others ([#​6967](https://togithub.com/sanity-io/sanity/issues/6967)) | [`5aa2ee8`](https://togithub.com/sanity-io/sanity/commit/5aa2ee8152) | | renovate\[bot] | chore(deps): update dependency recast to ^0.23.9 ([#​7006](https://togithub.com/sanity-io/sanity/issues/7006)) | [`b29a444`](https://togithub.com/sanity-io/sanity/commit/b29a444164) | | Rostislav Melkumyan | fix: remove trailing commas when sanitizing ([#​7007](https://togithub.com/sanity-io/sanity/issues/7007)) | [`6b9f910`](https://togithub.com/sanity-io/sanity/commit/6b9f910292) | | Christian Grøngaard | feat(core): support insert menu options in array item context menus ([#​6921](https://togithub.com/sanity-io/sanity/issues/6921)) | [`784cfd3`](https://togithub.com/sanity-io/sanity/commit/784cfd3f4a) | | RitaDias | feat(core): array editing improvements ([#​6682](https://togithub.com/sanity-io/sanity/issues/6682)) | [`6fbfcdc`](https://togithub.com/sanity-io/sanity/commit/6fbfcdc70b) | | Herman Wikner | fix(core): tree editing dialog open issue ([#​7013](https://togithub.com/sanity-io/sanity/issues/7013)) | [`fcb09f9`](https://togithub.com/sanity-io/sanity/commit/fcb09f9847) | | Sindre Gulseth | chore(deps): always bump [@​sanity/export](https://togithub.com/sanity/export) package ([#​7010](https://togithub.com/sanity-io/sanity/issues/7010)) | [`fd6f56c`](https://togithub.com/sanity-io/sanity/commit/fd6f56c466) | | renovate\[bot] | fix(deps): update dependency [@​sanity/export](https://togithub.com/sanity/export) to ^3.38.2 ([#​7015](https://togithub.com/sanity-io/sanity/issues/7015)) | [`d09cc9b`](https://togithub.com/sanity-io/sanity/commit/d09cc9b658) | | Rico Kahler | chore: update release note template ([#​7017](https://togithub.com/sanity-io/sanity/issues/7017)) | [`7e633bb`](https://togithub.com/sanity-io/sanity/commit/7e633bb21d) | | Christian Grøngaard | fix: deprecate [@​sanity/portable-text-editor](https://togithub.com/sanity/portable-text-editor) ([#​7020](https://togithub.com/sanity-io/sanity/issues/7020)) | [`f2ddfa7`](https://togithub.com/sanity-io/sanity/commit/f2ddfa7d4f) | | Rico Kahler | feat: utilize timestamps in build and renderDocument for AUS ([#​6964](https://togithub.com/sanity-io/sanity/issues/6964)) | [`a1da8cc`](https://togithub.com/sanity-io/sanity/commit/a1da8ccdb9) | | Rico Kahler | feat: include hashes in vendor builds ([#​7018](https://togithub.com/sanity-io/sanity/issues/7018)) | [`4bbe337`](https://togithub.com/sanity-io/sanity/commit/4bbe337ce6) | ### [`v3.47.1`](https://togithub.com/sanity-io/sanity/releases/tag/v3.47.1) [Compare Source](https://togithub.com/sanity-io/san

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

vercel[bot] commented 11 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
template-astro-clean ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 28, 2024 7:15am
socket-security[bot] commented 6 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@astrojs/check@0.7.0 Transitive: environment, filesystem, network, shell +80 17.8 MB fredkschott
npm/@astrojs/react@3.6.0 Transitive: environment, filesystem, shell, unsafe +63 12.1 MB fredkschott
npm/@astrojs/vercel@7.7.2 Transitive: environment, eval, filesystem, network, shell, unsafe +110 230 MB
npm/@portabletext/types@2.0.13 None 0 22.9 kB sanity-io
npm/@sanity/astro@3.1.4 Transitive: environment, network +34 13.9 MB sanity-io
npm/@sanity/types@3.48.1 Transitive: environment, network +25 8.58 MB bjoerge
npm/@sanity/vision@3.48.1 Transitive: environment, filesystem +86 14.7 MB bjoerge
npm/@types/react-dom@18.3.0 None 0 37.8 kB types
npm/@types/react@18.3.3 None +2 1.69 MB types
npm/astro-portabletext@0.10.0 None +1 173 kB theisel
npm/astro@4.11.3 Transitive: environment, eval, filesystem, network, shell, unsafe +375 457 MB fredkschott
npm/autoprefixer@10.4.19 environment Transitive: filesystem, shell +13 3.18 MB ai
npm/eslint@8.57.0 environment, filesystem Transitive: eval, shell, unsafe +87 10.6 MB eslintbot
npm/groq@3.48.1 None 0 8.84 kB bjoerge
npm/prettier-plugin-astro@0.14.0 environment Transitive: filesystem +4 5.26 MB fredkschott
npm/prettier@3.3.2 environment, filesystem, unsafe 0 8.25 MB prettier-bot
npm/react-dom@18.3.1 environment +3 4.63 MB react-bot
npm/react@18.3.1 environment +2 339 kB react-bot
npm/sanity@3.48.1 Transitive: environment, eval, filesystem, network, shell, unsafe +830 634 MB bjoerge
npm/typescript@5.4.5 None 0 32.4 MB typescript-bot
npm/vite@5.3.2 environment, eval, filesystem, network, shell, unsafe +64 287 MB vitebot

🚮 Removed packages: npm/@astrojs/check@0.2.0, npm/@astrojs/react@3.0.2, npm/@astrojs/vercel@4.0.5, npm/@portabletext/types@2.0.7, npm/@sanity/astro@1.3.0, npm/@sanity/types@3.17.0, npm/@sanity/vision@3.17.0, npm/@types/react-dom@18.2.8, npm/@types/react@18.2.24, npm/astro-portabletext@0.9.4, npm/astro@3.2.2, npm/autoprefixer@10.4.16, npm/eslint@8.50.0, npm/groq@3.17.0, npm/prettier-plugin-astro@0.12.0, npm/prettier@3.0.3, npm/react-dom@18.2.0, npm/react@18.2.0, npm/sanity@3.17.0, npm/typescript@5.2.2, npm/vite@4.4.10

View full report↗︎

renovate[bot] commented 5 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

socket-security[bot] commented 5 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/sharp@0.33.4
  • Install script: install
  • Source: node install/check
🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/sharp@0.33.4