Skip to content

chore(deps): bump uuid, @sanity/plugin-kit and sanity#175

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-45a0b08b3d
Open

chore(deps): bump uuid, @sanity/plugin-kit and sanity#175
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-45a0b08b3d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.1 and updates ancestor dependencies uuid, @sanity/plugin-kit and sanity. These dependencies need to be updated together.

Updates uuid from 13.0.0 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @sanity/plugin-kit from 4.0.20 to 9.0.3

Release notes

Sourced from @​sanity/plugin-kit's releases.

@​sanity/plugin-kit@​9.0.3

Patch Changes

@​sanity/plugin-kit@​9.0.2

Patch Changes

  • #1687 96830b8 Thanks @​stipsan! - Update CLI dependencies to their latest majors: chalk 5, concurrently 9, execa 9, git-remote-origin-url 4, inquirer 12, meow 14, p-props 6, xdg-basedir 5 and nodemon 3.1.14. The CLI behaves the same as before, and its installed footprint shrinks noticeably (the new majors drop many transitive dependencies). concurrently 10, execa 10 and inquirer 13+ are intentionally held back for now, as they require Node.js versions newer than plugin-kit's supported range.

@​sanity/plugin-kit@​9.0.1

Patch Changes

@​sanity/plugin-kit@​9.0.0

Major Changes

  • #1588 f64af98 Thanks @​stipsan! - Remove Sanity Studio v2 upgrade and compatibility tooling

    verify-studio is removed. verify-package no longer checks for leftover v2 shims (@sanity/incompatible-plugin, v2-incompatible.js, sanity.json parts), obsolete @sanity/* package dependencies, or part:/config: imports. Package verification now focuses on current plugin-kit conventions for modern Studio plugins.

Changelog

Sourced from @​sanity/plugin-kit's changelog.

9.0.3

Patch Changes

9.0.2

Patch Changes

  • #1687 96830b8 Thanks @​stipsan! - Update CLI dependencies to their latest majors: chalk 5, concurrently 9, execa 9, git-remote-origin-url 4, inquirer 12, meow 14, p-props 6, xdg-basedir 5 and nodemon 3.1.14. The CLI behaves the same as before, and its installed footprint shrinks noticeably (the new majors drop many transitive dependencies). concurrently 10, execa 10 and inquirer 13+ are intentionally held back for now, as they require Node.js versions newer than plugin-kit's supported range.

9.0.1

Patch Changes

9.0.0

Major Changes

  • #1588 f64af98 Thanks @​stipsan! - Remove Sanity Studio v2 upgrade and compatibility tooling

    verify-studio is removed. verify-package no longer checks for leftover v2 shims (@sanity/incompatible-plugin, v2-incompatible.js, sanity.json parts), obsolete @sanity/* package dependencies, or part:/config: imports. Package verification now focuses on current plugin-kit conventions for modern Studio plugins.

8.0.1

Patch Changes

8.0.0

Major Changes

  • #1565 67f4292 Thanks @​stipsan! - Replace prettier with oxfmt and eslint with oxlint

    plugin-kit now ships shared formatter and linter configs:

    • @sanity/plugin-kit/oxfmt: an oxfmt preset. Re-export it from an oxfmt.config.ts next to the package.json that runs oxfmt (the workspace root in a monorepo, otherwise the plugin directory):

      export {default} from '@sanity/plugin-kit/oxfmt'

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sanity/plugin-kit since your current version.


Updates sanity from 5.19.0 to 6.6.0

Release notes

Sourced from sanity's releases.

v6.6.0

Sanity Studio v6.6.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit: www.sanity.io/changelog/studio-Ni41LjA

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author Message Commit
@​jordanl17 fix(releases): use replace when syncing router state to URL (#13669) e68c1a68851086fed99063e28b9531a7fbd065f2
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#13651) 9b1a60ae2d744241c329c397a7987e2eeb19dfae
@​christianhg chore(deps): bump @​portabletext/sanity-bridge to ^3.2.3 (#13627) cf7ea4caa09f9643d01ec4894b13d51a171eca46
squiggler-app[bot] fix(deps): update portabletext (#13658) 4403096b3706fd5311464cddfff38ef67e194b57
@​jordanl17 fix(release-notes): unwrap invalid callout blocks written to apiChange docs (#13667) cd5f06857c3635a7dc96e4610981fd063e739832
@​gu-stav fix(deps): update @​sanity/cli to 7.12.1 and @​sanity/workbench to 0.1.0-alpha.29 (#13668) 17d60668b69a8d9581fef5da5f41f76b34610643
@​stipsan fix(sanity): expand collapsed ancestors when opening a document with an initial focus path (#13575) a0265b1e132518daca4ab296477d30c1e8d9c384
squiggler-app[bot] fix(deps): update dependency @​sanity/icons to ^5.2.0 (#13652) 0f0d33ea6ca7e1d157def3d7457f4b3fd08eb84c
squiggler-app[bot] chore(deps): update dependency @​uiw/react-codemirror to ^4.25.11 (#13653) b90f7685aa12fbb2e6271706b335dc55ee08cca9
squiggler-app[bot] fix(deps): update dependency @​sanity/cli to ^7.12.0 (#13663) c5c49860d6a778693902418dbac60d46a45b9273
@​bjoerge fix: fix auth flash (#13497) 191814e3709fed7b6988f38d9496dc3bd3228524
@​pedrobonamin feat(presentation): share variant to presentation using comlink (#13616) 88167ddf7753c56f482a2a8f58b19044c9d38885
squiggler-app[bot] fix(deps): update dev-non-major (#13649) 4b794b15d9b1f9c15c9168f7f8a5472acb605193
squiggler-app[bot] chore(deps): lock file maintenance (#13646) a542b01cf889f1cbb258fea2a044a29ac9a12c82
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#13650) 90357936260da1e459d7d616f7e6560d40b03b4c
squiggler-app[bot] chore(deps): update dependency @​sanity/ui to ^3.4.0 (#13648) 51ee805d3826336a606794fcb02604db77c4b142
@​christianhg fix(core): disable toolbar actions the caret position can't honor (#13645) fb540f3919ebe849bfd38fa28b68b97eb4ed1fac
@​christianhg chore(test-studio): narrow the container table's cell blocks for toolbar contrast (#13645) 6510468aff673048b7c86e3d90c53e9de0b5a6ae
@​stipsan chore(deps): update dependency @​isaacs/ttlcache to v2 (#13587) c5f9a43199b765d7050d6a37797a356555056d39
squiggler-app[bot] chore(deps): dedupe pnpm-lock.yaml (#13635) b7dfd49feb1754b45f069ae2da4b9c3cab1e96d9
squiggler-app[bot] chore(deps): update dependency @​sanity/migrate to v8 (#13644) 1a16b6c598dff6a90388813c3f1d6065163bfc26
squiggler-app[bot] chore(deps): update actions/checkout action to v7 (#13643) 2ed51c10a01e70b8af786b7e7d35da3f94d5c95d
squiggler-app[bot] chore(deps): update dependency turbo to ^2.10.5 (#13641) 7d46655306fee197d3b100b3f717f729d3830544
squiggler-app[bot] chore(deps): update dependency @​sentry/react to ^10.66.0 (#13642) 6665fdb56475c4acc3e62f3cf354afc0aa9f8930
squiggler-app[bot] chore(deps): update dependency tsx to ^4.23.1 (#13640) 94b315ed1db3200662fe964d414556ad26a2a3a6
squiggler-app[bot] chore(deps): update dependency @​tanstack/react-virtual to ^3.14.6 (#13636) 2e87cc94ea3c2c1c137e83a94d397891bbf1adf8
squiggler-app[bot] chore(deps): update dependency is-network-error to ^1.3.2 (#13637) 4873a849114cfb04fd1008b9092ff8a6666b6ab1
squiggler-app[bot] chore(deps): update dependency prettier to ^3.9.5 (#13638) d0c260265b2dc0823cfe8da122f422dc90db2074

... (truncated)

Changelog

Sourced from sanity's changelog.

6.6.0 (2026-07-22)

Features

  • core: accept native table container definitions in the table plugin config (fdb9635)
  • core: add built-in table editing for Portable Text inputs (395437a)
  • presentation: share variant to presentation using comlink (#13616) (88167dd)
  • releases: add option to update existing drafts when publishing a release (#13400) (c7dd73c)
  • variants: add confirmation dialog for delete variant action (#13546) (36916e6)
  • variants: enable editing variant documents through the document form (#13505) (46d84dc)
  • variants: support document actions, diffs, comments and history for variant documents (#13156) (9c1d7a2)
  • workbench entry (#12511) (eef97ef)

Bug Fixes

  • comments: isolate mention permission failures (#13556) (0c99352)
  • core: disable toolbar actions the caret position can't honor (fb540f3)
  • core: report the .text focus-path suffix for spans at any depth (30952d1)
  • core: update variant to variant definition and related copy (#13547) (2e77b9f)
  • deps: bump @​sanity/workbench to 0.1.0-alpha.26 (#13585) (11ff1f9)
  • deps: update @​sanity/cli to 7.12.1 and @​sanity/workbench to 0.1.0-alpha.29 (#13668) (17d6066)
  • deps: update @​sanity/workbench to 0.1.0-alpha.28 (#13606) (67464c3)
  • deps: update dependency @​sanity/cli to ^7.10.0 (#13570) (17d211e)
  • deps: update dependency @​sanity/cli to ^7.11.0 (#13610) (1064414)
  • deps: update dependency @​sanity/cli to ^7.12.0 (#13663) (c5c4986)
  • deps: update dependency @​sanity/cli to ^7.9.0 (#13541) (d51c6d7)
  • deps: update dependency @​sanity/icons to ^5.1.0 (#13529) (3f9749b)
  • deps: update dependency @​sanity/icons to ^5.2.0 (#13652) (0f0d33e)
  • deps: update dependency @​sanity/presentation-comlink to ^2.2.0 (#13605) (2eda4a4)
  • deps: update dependency @​sanity/preview-url-secret to ^4.1.0 (#13613) (41a35ef)
  • deps: update dependency motion to ^12.42.2 (#13620) (c469bee)
  • deps: update dependency xstate to ^5.32.5 (#13621) (a879d11)
  • deps: update portabletext (#13527) (e2ba18d)
  • deps: update portabletext (#13579) (4c2662a)
  • deps: update portabletext (#13630) (625064a)
  • deps: update portabletext (#13658) (4403096)
  • deps: update vitest monorepo to ^4.1.10 (#13528) (ec4b071)
  • fix auth flash (#13497) (191814e)
  • form: allow array insert menu to overflow edit dialogs (#13503) (5f0a097)
  • form: prevent pte caret from jumping to block start while typing on new documents (#13574) (a54b0ba)
  • form: strip stega metadata when pasting into plain text fields (#13499) (b82ed3d)
  • portable-text: prevent duplicate nested annotation dialogs (#13551) (11e248d)
  • releases: use replace when syncing router state to URL (#13669) (e68c1a6)
  • sanity: document group inventory font weights (48872b7)
  • sanity: expand collapsed ancestors when opening a document with an initial focus path (#13575) (a0265b1)
  • sanity: pad tag pill on both sides when remove button is hidden (#13429) (#13513) (baf40c0)
  • sanity: recognise variants in isPublishedVersion and isDraftVersion (e902916)
  • sanity: use displayed document id to drive active variant (70af7f2)
  • structure: clear preference on restore-default and honor menuItems([]) (#13533) (ee015e1)
  • structure: hide share action when the targeted document does not exist (#13539) (2b973c4)

... (truncated)

Commits
  • e57bc7f chore(release): publish v6.6.0 (#13518)
  • e68c1a6 fix(releases): use replace when syncing router state to URL (#13669)
  • 4403096 fix(deps): update portabletext (#13658)
  • 17d6066 fix(deps): update @​sanity/cli to 7.12.1 and @​sanity/workbench to 0.1.0-alpha....
  • a0265b1 fix(sanity): expand collapsed ancestors when opening a document with an initi...
  • 0f0d33e fix(deps): update dependency @​sanity/icons to ^5.2.0 (#13652)
  • c5c4986 fix(deps): update dependency @​sanity/cli to ^7.12.0 (#13663)
  • 191814e fix: fix auth flash (#13497)
  • 88167dd feat(presentation): share variant to presentation using comlink (#13616)
  • fb540f3 fix(core): disable toolbar actions the caret position can't honor
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.1 and updates ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [@sanity/plugin-kit](https://github.com/sanity-io/plugins/tree/HEAD/packages/@sanity/plugin-kit) and [sanity](https://github.com/sanity-io/sanity/tree/HEAD/packages/sanity). These dependencies need to be updated together.


Updates `uuid` from 13.0.0 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v13.0.0...v14.0.1)

Updates `@sanity/plugin-kit` from 4.0.20 to 9.0.3
- [Release notes](https://github.com/sanity-io/plugins/releases)
- [Changelog](https://github.com/sanity-io/plugins/blob/main/packages/@sanity/plugin-kit/CHANGELOG.md)
- [Commits](https://github.com/sanity-io/plugins/commits/@sanity/plugin-kit@9.0.3/packages/@sanity/plugin-kit)

Updates `sanity` from 5.19.0 to 6.6.0
- [Release notes](https://github.com/sanity-io/sanity/releases)
- [Changelog](https://github.com/sanity-io/sanity/blob/main/packages/sanity/CHANGELOG.md)
- [Commits](https://github.com/sanity-io/sanity/commits/v6.6.0/packages/sanity)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: indirect
- dependency-name: "@sanity/plugin-kit"
  dependency-version: 9.0.3
  dependency-type: direct:development
- dependency-name: sanity
  dependency-version: 6.6.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant