You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#241818c0323 Thanks @stipsan! - @sanity/icons is now developed in the sanity-io/ui monorepo (packages/icons), with full git history preserved. No runtime changes.
Icon components (and the Icon wrapper) are wrapped in React.forwardRef again, so refs attach to the underlying svg element on React 18 as well as React 19. The react peer dependency range is widened from ^19 to ^18 || ^19, and the Node.js engines range from >=22.12 to >=20.19 <22 || >=22.12, matching @sanity/ui.
#223e5657d5 Thanks @stipsan! - Importing an icon from the root entry now resolves in the type system to a @deprecatednever-typed tombstone instead of failing with a bare "has no exported member" error. Since v5 removed the per-icon barrel exports, import {RocketIcon} from '@sanity/icons' was indistinguishable from the icon having been deleted; the tombstone's deprecation message now points at the subpath the icon lives on, e.g. import {RocketIcon} from '@sanity/icons/Rocket'. The tombstones are declaration-only (export declare const RocketIcon: never), so nothing changes at runtime: the root entry still ships no icon code and bundlers/Node.js still reject root icon imports.
#21519689cc Thanks @stipsan! - The deprecated per-icon barrel exports are removed: import {RocketIcon} from '@sanity/icons' no longer works, import icons from their own export path instead, e.g. import {RocketIcon} from '@sanity/icons/Rocket'. The root entry now only exposes the dynamic pieces – the <Icon> component, the icons map, and their types – and every entry in the icons map is built with React.lazy, so importing the root entry no longer pulls the full icon set into your bundle: each icon loads as its own chunk the first time it renders. <Icon> wraps the lazy icon in a <Suspense> boundary whose fallback is an svg with the same shell (viewBox, width/height and spread props) as the icon it is loading, so the slot reserves its final size and responds to the same styling while the chunk loads – the way an <img> with intrinsic dimensions behaves. When rendering components from the icons map directly, provide your own <Suspense> boundary.
#182e7538d4 Thanks @stipsan! - Every icon is now available on its own export path, e.g. import {RocketIcon} from '@sanity/icons/Rocket', letting userland opt in to smaller bundles and faster treeshaking. Each subpath exposes the icon both as a named export (identical to the barrel export) and as the default export, so React.lazy(() => import('@sanity/icons/Rocket')) works out of the box. Importing individual icons from the root barrel (import {RocketIcon} from '@sanity/icons') still works but is now marked @deprecated, pointing to the per-icon subpath to avoid barrel file performance issues.
@sanity/icons is now ESM-only. The require export condition and the CommonJS build output (./dist/index.cjs) have been removed, so the package must be consumed via ESM import. The minimum supported Node.js version has been raised to >=22.12 to match sanity.
Icon components no longer use forwardRef. Refs are now accepted as a regular prop (typed via React.ComponentPropsWithRef), following React 19's ref-as-prop model. The react peer dependency range is now ^19, and the exported IconComponent type has changed accordingly.
#14912361892 Thanks @stipsan! - Build with tsdown instead of @sanity/pkg-utils. Internal build-tooling change only, with no intended changes to the public API or runtime behavior.
#1460f50f060 Thanks @stipsan! - Regenerate TypeScript declaration output: isolatedDeclarations is no longer used and declarations are now generated with tsgo (@typescript/native-preview). Internal build-tooling change only, with no runtime behavior or public API changes.
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
[email protected].
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore npm/@vercel/[email protected]. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
Warn
Obfuscated code: npm data-urls is 90.0% likely obfuscated
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
[email protected].
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore npm/[email protected]. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
Warn
Obfuscated code: npm jsdom is 90.0% likely obfuscated
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
[email protected].
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore npm/[email protected]. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
Warn
Obfuscated code: npm jsdom is 90.0% likely obfuscated
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
[email protected].
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore npm/[email protected]. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
Warn
Obfuscated code: npm web-vitals is 90.0% likely obfuscated
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
[email protected].
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore npm/[email protected]. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.7.4→5.2.12.0.1→5.0.194.6.1→5.31.13.0.4→5.7.34.6.1→5.31.14.6.1→5.31.14.0.0→5.0.30Release Notes
sanity-io/ui (@sanity/icons)
v5.2.1Patch Changes
18c0323Thanks @stipsan! -@sanity/iconsis now developed in the sanity-io/ui monorepo (packages/icons), with full git history preserved. No runtime changes.v5.2.0Minor Changes
#234
6dae460Thanks @stipsan! - Restore React 18 support.Icon components (and the
Iconwrapper) are wrapped inReact.forwardRefagain, so refs attach to the underlyingsvgelement on React 18 as well as React 19. Thereactpeer dependency range is widened from^19to^18 || ^19, and the Node.jsenginesrange from>=22.12to>=20.19 <22 || >=22.12, matching@sanity/ui.v5.1.0Minor Changes
e5657d5Thanks @stipsan! - Importing an icon from the root entry now resolves in the type system to a@deprecatednever-typed tombstone instead of failing with a bare "has no exported member" error. Since v5 removed the per-icon barrel exports,import {RocketIcon} from '@sanity/icons'was indistinguishable from the icon having been deleted; the tombstone's deprecation message now points at the subpath the icon lives on, e.g.import {RocketIcon} from '@sanity/icons/Rocket'. The tombstones are declaration-only (export declare const RocketIcon: never), so nothing changes at runtime: the root entry still ships no icon code and bundlers/Node.js still reject root icon imports.v5.0.0Major Changes
19689ccThanks @stipsan! - The deprecated per-icon barrel exports are removed:import {RocketIcon} from '@sanity/icons'no longer works, import icons from their own export path instead, e.g.import {RocketIcon} from '@sanity/icons/Rocket'. The root entry now only exposes the dynamic pieces – the<Icon>component, theiconsmap, and their types – and every entry in theiconsmap is built withReact.lazy, so importing the root entry no longer pulls the full icon set into your bundle: each icon loads as its own chunk the first time it renders.<Icon>wraps the lazy icon in a<Suspense>boundary whose fallback is an svg with the same shell (viewBox,width/heightand spread props) as the icon it is loading, so the slot reserves its final size and responds to the same styling while the chunk loads – the way an<img>with intrinsic dimensions behaves. When rendering components from theiconsmap directly, provide your own<Suspense>boundary.v4.1.0Minor Changes
e7538d4Thanks @stipsan! - Every icon is now available on its own export path, e.g.import {RocketIcon} from '@sanity/icons/Rocket', letting userland opt in to smaller bundles and faster treeshaking. Each subpath exposes the icon both as a named export (identical to the barrel export) and as the default export, soReact.lazy(() => import('@sanity/icons/Rocket'))works out of the box. Importing individual icons from the root barrel (import {RocketIcon} from '@sanity/icons') still works but is now marked@deprecated, pointing to the per-icon subpath to avoid barrel file performance issues.v4.0.0Major Changes
#200
26b9248Thanks @stipsan! - Drop CommonJS support and require Node.js>=22.12@sanity/iconsis now ESM-only. Therequireexport condition and the CommonJS build output (./dist/index.cjs) have been removed, so the package must be consumed via ESMimport. The minimum supported Node.js version has been raised to>=22.12to matchsanity.#201
01e3807Thanks @stipsan! - Drop React 18 support — React 19 is now required.Icon components no longer use
forwardRef. Refs are now accepted as a regular prop (typed viaReact.ComponentPropsWithRef), following React 19's ref-as-prop model. Thereactpeer dependency range is now^19, and the exportedIconComponenttype has changed accordingly.v3.8.0Minor Changes
812c93bThanks @somerandomdude! - Add double quote iconPatch Changes
57bb44aThanks @mitchuman! - fix: connect diamond icon stroke cornersv3.7.7Patch Changes
5b9d2cbThanks @stipsan! - Bumped@testing-library/react,@types/node, and@types/reactdevDependencies to their latest versions.v3.7.6Bug Fixes
sanity-io/plugins (@sanity/vercel-protection-bypass)
v5.0.19Compare Source
Patch Changes
2a3a7eaThanks @stipsan! - Update@sanity/uidependency to ^3.4.3.v5.0.18Compare Source
Patch Changes
#1684
4ea0d1fThanks @copilot-swe-agent! - Update@sanity/iconsdependency to the latest catalog version.#1684
4ea0d1fThanks @copilot-swe-agent! - Update@sanity/uidependency to the latest catalog version.v5.0.17Compare Source
Patch Changes
6fe3c11Thanks @squiggler-app! - fix(deps): update dependency tsdown to ^0.22.9v5.0.16Compare Source
Patch Changes
f06fd76Thanks @squiggler-app! - fix(deps): update dependency tsdown to ^0.22.8v5.0.15Compare Source
Patch Changes
52975b2Thanks @stipsan! - fix(deps): update tsdown to ^0.22.7 and @sanity/tsdown-config to ^0.14.0v5.0.14Compare Source
Patch Changes
a11d511Thanks @squiggler-app! - fix(deps): update dependency tsdown to ^0.22.5v5.0.13Compare Source
Patch Changes
2361892Thanks @stipsan! - Build withtsdowninstead of@sanity/pkg-utils. Internal build-tooling change only, with no intended changes to the public API or runtime behavior.v5.0.12Patch Changes
f50f060Thanks @stipsan! - Regenerate TypeScript declaration output:isolatedDeclarationsis no longer used and declarations are now generated with tsgo (@typescript/native-preview). Internal build-tooling change only, with no runtime behavior or public API changes.v5.0.11Patch Changes
52487d2Thanks @stipsan! - Update@sanity/iconsto v4 and adopt its per-icon import paths for smaller bundles and faster treeshakingv5.0.10Compare Source
Patch Changes
3694754Thanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to ^4.0.7v5.0.9Compare Source
Patch Changes
98d148eThanks @copilot-swe-agent! - Update@sanity/pkg-utilsto pick up a DTS generation bug fix.v5.0.8Compare Source
Patch Changes
2f03c8dThanks @bjoerge! - Widensanitypeer-dependency range to^5 || ^6.0.0-0to support Sanity Studio v6 (including v6 pre-releases).v5.0.7Compare Source
Patch Changes
2a3f19dThanks @renovate! - Replace deprecatedspaceprop withgapto address @sanity/ui v3.2.0 deprecation warningsv5.0.6Compare Source
Patch Changes
377a170Thanks @stipsan! - Upgrade@sanity/preview-url-secretto ^4.0.4v5.0.5Compare Source
Patch Changes
7529052Thanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to ^4.0.3v5.0.4Compare Source
Patch Changes
6397826Thanks @stipsan! - Improve build output and dts genv5.0.3Compare Source
Patch Changes
d3978bcThanks @stipsan! - Update LICENSE yearv5.0.2Compare Source
Patch Changes
e251678Thanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to v4.0.2v5.0.1Compare Source
Patch Changes
3694754Thanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to ^4.0.7v5.0.0Compare Source
Major Changes
20c43acThanks @stipsan! - Require Sanity Studio V5v4.0.6Compare Source
Patch Changes
7074855Thanks @stipsan! - Fix linter issuesv4.0.5Compare Source
Patch Changes
69a8d2fThanks @stipsan! - Declare support for Studio v5v4.0.4Compare Source
Patch Changes
4399a30Thanks @stipsan! - Improve quality of generated dtsv4.0.3Compare Source
Patch Changes
33d90c3Thanks @stipsan! - Improve react lazy loadingv4.0.2Compare Source
Patch Changes
5307c0dThanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to v3v4.0.1Compare Source
Patch Changes
c934098Thanks @stipsan! - Target React 19 in React Compilerv4.0.0Compare Source
Major Changes
#26
32fb288Thanks @stipsan! - Require React 19.2 or later#26
32fb288Thanks @stipsan! - Require Sanity Studio v4v3.1.0Compare Source
Minor Changes
d090d93Thanks @stipsan! - Add schema type for debuggingPatch Changes
4f82b31Thanks @stipsan! - Stop publishing src folder to npmv3.0.0Compare Source
Major Changes
#11
d2283b2Thanks @stipsan! - Set node engines to minimum v22.12 in addition to the existing required v20.19 or later#11
d2283b2Thanks @stipsan! - Remove CJS, this package is now ESM-onlyPatch Changes
#8
17e4495Thanks @renovate! - fix(deps): Update dependency @sanity/preview-url-secret to ^2.1.162bda9e1Thanks @stipsan! - Reduce reliance on@sanity/preview-url-secretv2.1.1Patch Changes
0c47c28Thanks @stipsan! - Setup npm Trusted Publishingv2.1.0Features
v2.0.2Dependencies
sanity-io/sanity (@sanity/vision)
v5.31.1Compare Source
Sanity Studio v5.31.1
For the complete changelog with all details, please visit:
www.sanity.io/docs/changelog/5e41ca5a-489c-4390-a9e8-f3712b30bf37
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
ec87ab7ca4657e75a443d0b8f8e3451b07b65d0a0c1cd4e22v5.31.0Compare Source
Features
Bug Fixes
v5.30.0Compare Source
Sanity Studio v5.30.0
This release includes various improvements and bug fixes.
For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yOS4w
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
2ae1370cf5baebdf8fc74v5.29.0Compare Source
Sanity Studio v5.29.0
This release includes various improvements and bug fixes.
For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yOC4w
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
3fa8dc546f9caa30f89d5054950f3a2fc8b8df5ed300aa75307d4dd9472c31421c6530daf6c3534982cf4c3064b2273ad607cda4665872fev5.28.0Compare Source
Sanity Studio v5.28.0
This release includes various improvements and bug fixes.
For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yNy4w
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
4397d7b1b76d8ba91bdc29dea35a5c460ed931641a632282c6195111e604c3e8a5b3aee16ba95c4b5b4d4b5e4bbv5.27.0Compare Source
Sanity Studio v5.27.0
This release includes various improvements and bug fixes.
For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yNi4w
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
2057560SanityImageSourceto permitted media preview types (#12863)ecf8f3944bc72c5742d89ca41e8fc78ec37e296b6c9178fe2ee6c14936a8b112428346Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate using a curated preset maintained by