Skip to content

chore(deps): bump groq-js to v2#1597

Open
stipsan wants to merge 1 commit into
mainfrom
cursor/bump-groq-js-v2-9319
Open

chore(deps): bump groq-js to v2#1597
stipsan wants to merge 1 commit into
mainfrom
cursor/bump-groq-js-v2-9319

Conversation

@stipsan

@stipsan stipsan commented Jul 24, 2026

Copy link
Copy Markdown
Member

Description

Bumps groq-js from ^1.30.3 to ^2.0.0 in @sanity/cli (SDK-2127).

groq-js@2 is ESM-only and requires Node >=22.12, which this package already declares. The public parse / AST API used by validateProjection is unchanged.

Also:

  • Catalog entry in pnpm-workspace.yaml updated to ^2.0.0
  • Temporary root pnpm.overrides for groq-js: ^2.0.0 so transitive deps from @sanity/codegen, @sanity/migrate, and @sanity/runtime-cli (still on [email protected]) resolve to v2 in this monorepo — pnpm why groq-js reports a single version
  • @sanity/runtime-cli range bumped to ^17.2.0 (latest published; still on groq-js 1.x until RUN-1535)

Do not merge until these publish with groq-js@^2:

Once those ship, bump the dependency versions here and remove the temporary groq-js override so consumers (including the sanity monorepo) no longer pull [email protected] via this package.

Parent: SDK-2123

What to review

  • Catalog + lockfile resolve only [email protected]
  • Temporary override is intentional until satellite packages publish
  • Direct usage in validateProjection needs no code changes

Testing

  • validateProjection unit tests (22) pass against [email protected]
  • pnpm check:types
  • pnpm check:lint
  • pnpm check:deps
  • pnpm build:cli
  • CI Ubuntu unit-test jobs (Node 22/24/26) green
  • pnpm why groq-js --filter @sanity/cli → Found 1 version of groq-js (2.0.0)

Notes for release

N/A

Linear Issue: SDK-2127

Open in Web Open in Cursor 

Bump the workspace catalog and force transitive consumers onto
groq-js@^2.0.0 until @sanity/codegen, @sanity/migrate, and
@sanity/runtime-cli publish their own v2 bumps (SDK-2125/2126, RUN-1535).
@github-actions

github-actions Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

📦 Bundle Stats — @sanity/cli

Compared against main (d9887459)

@sanity/cli

Metric Value vs main (d988745)
Internal (raw) 2.2 KB -
Internal (gzip) 838 B -
Bundled (raw) 11.20 MB -
Bundled (gzip) 2.11 MB -
Import time 865ms -5ms, -0.6%

bin:sanity

Metric Value vs main (d988745)
Internal (raw) 782 B -
Internal (gzip) 423 B -
Bundled (raw) 9.90 MB -
Bundled (gzip) 1.78 MB -
Import time 2.07s -12ms, -0.6%

🗺️ View treemap · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — @sanity/cli-core

Compared against main (d9887459)

Metric Value vs main (d988745)
Internal (raw) 114.1 KB -
Internal (gzip) 29.2 KB -
Bundled (raw) 21.76 MB -
Bundled (gzip) 3.46 MB -
Import time 768ms +3ms, +0.4%

🗺️ View treemap · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — @sanity/cli-build

Compared against main (d9887459)

@sanity/cli-build/_internal/build

Metric Value vs main (d988745)
Internal (raw) 113.2 KB -
Internal (gzip) 28.7 KB -
Bundled (raw) 17.75 MB -
Bundled (gzip) 3.56 MB -
Import time 1.11s -3ms, -0.3%

@sanity/cli-build/_internal/env

Metric Value vs main (d988745)
Internal (raw) 1.8 KB -
Internal (gzip) 644 B -
Bundled (raw) 1.31 MB -
Bundled (gzip) 333.8 KB -
Import time 123ms -1ms, -0.6%

@sanity/cli-build/_internal/extract

Metric Value vs main (d988745)
Internal (raw) 8.6 KB -
Internal (gzip) 2.7 KB -
Bundled (raw) 155.0 KB -
Bundled (gzip) 39.5 KB -
Import time 239ms -3ms, -1.1%

🗺️ ./_internal/env · ./_internal/extract · @sanity/cli-build:./_internal/build treemap too large to embed · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — create-sanity

Compared against main (d9887459)

Metric Value vs main (d988745)
Internal (raw) 908 B -
Internal (gzip) 483 B -
Bundled (raw) 931 B -
Bundled (gzip) 491 B -
Import time ❌ ChildProcess denied: node -
Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​sanity/​runtime-cli@​17.2.08910010097100
Addednpm/​groq-js@​2.0.010010010097100

View full report

@stipsan
stipsan marked this pull request as ready for review July 24, 2026 14:37
@stipsan
stipsan requested a review from a team as a code owner July 24, 2026 14:37
@github-actions

Copy link
Copy Markdown
Contributor

Coverage Delta

No covered files changed in this PR.

Overall Coverage

Metric Coverage
Statements 78.4% (±0%)
Branches 70.0% (±0%)
Functions 73.5% (±0%)
Lines 78.8% (±0%)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants