chore(deps): update non-major (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sanity/pkg-utils (source)	^8.1.21 -> ^8.1.29
@sanity/ui (source)	^3.1.10 -> ^3.1.11
@types/cpx (source)	^1.5.5 -> ^1.5.6
@types/express (source)	^5.0.3 -> ^5.0.5
@types/node (source)	^20.19.21 -> ^20.19.24
@vitejs/plugin-react (source)	^5.0.4 -> ^5.1.0
esbuild	^0.25.11 -> ^0.25.12
vite (source)	^7.1.10 -> ^7.2.2

---

Release Notes

sanity-io/pkg-utils (@​sanity/pkg-utils)

v8.1.29

Compare Source

Bug Fixes

• deps: Update dependency @​rollup/plugin-commonjs to v29 (#​2133) (2b3bc4f)
• deps: Update dependency @​rollup/plugin-replace to ^6.0.3 (#​2128) (eab05db)
• deps: Update dependency rimraf to ^6.1.0 (#​2131) (a098c3b)
• deps: Update dependency rolldown-plugin-dts to v0.17.3 (#​2129) (3cbabcb)

v8.1.28

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.45 (#​2119) (a155063)
• deps: Update dependency rolldown-plugin-dts to v0.17.2 (#​2120) (3346ac6)

v8.1.27

Compare Source

Bug Fixes

• deps: Update dependency @​microsoft/api-extractor to v7.53.3 (#​2111) (c5387eb)
• deps: Update dependency @​rollup/plugin-commonjs to ^28.0.9 (#​2112) (7207534)
• deps: Update dependency rolldown-plugin-dts to v0.17.1 (#​2113) (a54a40d)

v8.1.26

Compare Source

Bug Fixes

• deps: Update babel monorepo to ^7.28.5 (#​2105) (b9d977f)
• deps: Update dependency @​microsoft/api-extractor to v7.53.2 (#​2098) (3d226ca)
• deps: Update dependency browserslist to ^4.27.0 (#​2099) (7f8f07b)
• deps: Update dependency rolldown-plugin-dts to v0.17.0 (#​2106) (0c0f07e)

v8.1.25

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.44 (#​2082) (55337d8)

v8.1.24

Compare Source

Bug Fixes

• deps: Update dependency rolldown-plugin-dts to v0.16.12 (#​2075) (f02ce99)
• deps: Update dependency rollup to ^4.52.5 (#​2077) (9d2b27d)

v8.1.23

Compare Source

Bug Fixes

• deps: Update dependency esbuild to ^0.25.11 (#​2067) (4c8f649)

v8.1.22

Compare Source

Bug Fixes

• deps: Update dependency rolldown to v1.0.0-beta.43 (#​2056) (3142582)
• deps: Update rollup packages (#​2057) (3958f8d)

sanity-io/ui (@​sanity/ui)

v3.1.11

Compare Source

Bug Fixes

• deps: replace framer-motion with motion/react (cc49ab6)

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.1.0

Compare Source

Add @vitejs/plugin-react/preamble virtual module for SSR HMR (#​890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#​930)

Rolldown 1.0.0-beta.44+ removed the top-level jsx option in favor of transform.jsx. This plugin now uses the transform.jsx option to support Rolldown 1.0.0-beta.44+.

evanw/esbuild (esbuild)

v0.25.12

Compare Source

• Fix a minification regression with CSS media queries (#​4315)

  The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

• Update the list of known JavaScript globals (#​4310)

  This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

  From ES2017:

  • Atomics
  • SharedArrayBuffer

  From ES2020:

  • BigInt64Array
  • BigUint64Array

  From ES2021:

  • FinalizationRegistry
  • WeakRef

  From ES2025:

  • Float16Array
  • Iterator

  Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

  // This can now be tree-shaken by esbuild:
  class ExampleIterator extends Iterator {}

• Add support for the new @view-transition CSS rule (#​4313)

  With this release, esbuild now has improved support for pretty-printing and minifying the new @view-transition rule (which esbuild was previously unaware of):

  /* Original code */
  @​view-transition {
    navigation: auto;
    types: check;
  }
  
  /* Old output */
  @​view-transition { navigation: auto; types: check; }
  
  /* New output */
  @​view-transition {
    navigation: auto;
    types: check;
  }

  The new view transition feature provides a mechanism for creating animated transitions between documents in a multi-page app. You can read more about view transition rules here.

  This change was contributed by @​yisibl.

• Trim CSS rules that will never match

  The CSS minifier will now remove rules whose selectors contain :is() and :where() as those selectors will never match. These selectors can currently be automatically generated by esbuild when you give esbuild nonsensical input such as the following:

  /* Original code */
  div:before {
    color: green;
    &.foo {
      color: red;
    }
  }
  
  /* Old output (with --supported:nesting=false --minify) */
  div:before{color:green}:is().foo{color:red}
  
  /* New output (with --supported:nesting=false --minify) */
  div:before{color:green}

  This input is nonsensical because CSS nesting is (unfortunately) not supported inside of pseudo-elements such as :before. Currently esbuild generates a rule containing :is() in this case when you tell esbuild to transform nested CSS into non-nested CSS. I think it's reasonable to do that as it sort of helps explain what's going on (or at least indicates that something is wrong in the output). It shouldn't be present in minified code, however, so this release now strips it out.

vitejs/vite (vite)

v7.2.2

Compare Source

Bug Fixes

• revert "refactor: use fs.cpSync (#​21019)" (#​21081) (728c8ee)

v7.2.1

Compare Source

Bug Fixes

• worker: some worker asset was missing (#​21074) (82d2d6c)

Code Refactoring

• build: rename indexOfMatchInSlice to findPreloadMarker (#​21054) (f83264f)

v7.2.0

Compare Source

Bug Fixes

• css: fallback to sass when sass-embedded platform binary is missing (#​21002) (b1fd616)
• module-runner: make getBuiltins response JSON serializable (#​21029) (ad5b3bf)
• types: add undefined to optional properties for exactOptionalProperties type compatibility (#​21040) (2833c55)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​21047) (e3a6a83)

v7.1.12

Compare Source

Please refer to CHANGELOG.md for details.

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
ui-workshop	Ready	Preview	Comment	Nov 10, 2025 8:13am

[changeset-bot]

⚠️ No Changeset found

Latest commit: 89a8691

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​express@​5.0.3 ⏵ 5.0.5
	npm/​esbuild@​0.25.11 ⏵ 0.25.12
	npm/​@​types/​cpx@​1.5.5 ⏵ 1.5.6				+1
	npm/​@​types/​node@​20.19.21 ⏵ 20.19.24	+1		+1	-1
	npm/​vite@​7.1.11 ⏵ 7.2.2	+1			+1
	npm/​@​sanity/​ui@​3.1.10 ⏵ 3.1.11				-1
	npm/​@​vitejs/​plugin-react@​5.0.4 ⏵ 5.1.0	+1
	npm/​@​sanity/​pkg-utils@​8.1.21 ⏵ 8.1.29	+1			+1

View full report