Skip to content

chore(deps): update devdependencies (non-major) - #1811

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/devdependencies-(non-major)
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/devdependencies-(non-major)

Conversation

@renovate

@renovate renovate Bot commented Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@types/react-is (source) ^19.2.0 → ^19.3.0 age confidence
@vercel/detect-agent (source) ^1.2.3 → ^1.2.5 age confidence
knip (source) ^6.27.0 → ^6.37.0 age confidence
styled-components (source) ^6.4.3 → ^6.5.3 age confidence
turbo (source) ^2.10.5 → ^2.11.4 age confidence

Release Notes

webpro-nl/knip (knip)

v6.37.0: Release 6.37.0

Compare Source

  • fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#​2048) (06a68fc) - thanks @​RobHannay!
  • fix: enable JSX in the config loader (#​1959) (5b21dc9) - thanks @​addielaruee!
  • Match binaries only to their actual dependency providers (c5bdb69)
  • Preserve executable references across package manager commands (54af171)
  • Correct binary provider metadata in Relay fixtures (e67dfcb)
  • Separate shell binary expectations from reporting exemptions (resolve #​2022) (c1d7d75)
  • Respect npx no-install flags before the executable (4237010)
  • Update dependencies (038ea17)
  • Remove npm auth check now that's in release-it (4aaf77c)
  • Fix --format name resolution in the ESLint plugin (#​2046) (1269e98) - thanks @​bytedoe!

v6.36.0: Release 6.36.0

Compare Source

v6.35.1: Release 6.35.1

Compare Source

v6.35.0: Release 6.35.0

Compare Source

v6.34.0: Release 6.34.0

Compare Source

vercel/turborepo (turbo)

v2.11.4: Turborepo v2.11.4

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.11.3...v2.11.4

v2.11.3: Turborepo v2.11.3

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.11.2...v2.11.3

v2.11.2: Turborepo v2.11.2

Compare Source

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.1...v2.11.2

v2.11.1: Turborepo v2.11.1

Compare Source

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.0...v2.11.1

v2.11.0: Turborepo v2.11.0

Compare Source

What's Changed

Changelog

❗ Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here


Note

Low Risk
Version-only devDependency bumps with no runtime or source changes; main operational touchpoints are local/CI turbo runs and knip checks.

Overview
Bumps non-major devDependency versions only—no application or config source changes beyond package.json.

At the monorepo root, @vercel/detect-agent (used in vitest.config.ts for CI agent detection), knip (check:deps / unused-deps tooling), and turbo (build orchestration via build, check:lint, etc.) are updated.

In @sanity/cli-build, @types/react-is and styled-components devDependency ranges are raised for build/test typing and styling in that package.

Reviewed by Cursor Bugbot for commit 97a281d. Bugbot is set up for automated code reviews on this repo. Configure here.

@renovate
renovate Bot requested a review from a team as a code owner September 1, 2026 11:04
@renovate
renovate Bot enabled auto-merge (squash) September 1, 2026 11:04
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from 45bf10a to 8b9073c Compare September 1, 2026 11:14

@cursor cursor Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale Bugbot comment from a previous run.

Comment thread package.json Outdated
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 8 times, most recently from ea93433 to f7ae06d Compare September 1, 2026 13:01
@stipsan

stipsan commented Sep 1, 2026

Copy link
Copy Markdown
Member

@copilot add any dep to pnpm minimumReleaseAgeExcemptions that you need in order for the install to succeed, use pnpm dedupe instead of pnpm install, then commit the pnpm-lock.yaml and pnpm-workspace.yaml

@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 2 times, most recently from db35069 to 144626f Compare September 1, 2026 13:26
auto-merge was automatically disabled September 1, 2026 13:30

Head branch was pushed to by a user without write access

Copilot AI commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

@copilot add any dep to pnpm minimumReleaseAgeExcemptions that you need in order for the install to succeed, use pnpm dedupe instead of pnpm install, then commit the pnpm-lock.yaml and `pnpm-wor...

Ran pnpm dedupe — it completed cleanly without any minimumReleaseAge blocks, so no pnpm-workspace.yaml exclusions were needed. Committed the refreshed pnpm-lock.yaml in 43f... (see latest commit).

Copilot AI requested a review from stipsan September 1, 2026 13:30
@github-actions

github-actions Bot commented Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

📦 Bundle Stats — @sanity/cli

Compared against main (b0070479)

@sanity/cli

Metric Value vs main (b007047)
Internal (raw) 2.4 KB -
Internal (gzip) 926 B -
Bundled (raw) 11.17 MB -
Bundled (gzip) 2.10 MB -
Import time 525ms -10ms, -1.9%

bin:sanity

Metric Value vs main (b007047)
Internal (raw) 782 B -
Internal (gzip) 423 B -
Bundled (raw) 9.91 MB -
Bundled (gzip) 1.78 MB -
Import time 1.11s -24ms, -2.1%

🗺️ View treemap · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — @sanity/cli-core

Compared against main (b0070479)

Metric Value vs main (b007047)
Internal (raw) 128.6 KB -
Internal (gzip) 33.2 KB -
Bundled (raw) 21.59 MB -
Bundled (gzip) 3.41 MB -
Import time 466ms -7ms, -1.6%

🗺️ @sanity/cli-core:. treemap too large to embed · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — @sanity/cli-build

Compared against main (b0070479)

@sanity/cli-build/_internal/build

Metric Value vs main (b007047)
Internal (raw) 117.4 KB -
Internal (gzip) 29.7 KB -
Bundled (raw) 17.81 MB -
Bundled (gzip) 3.58 MB -
Import time 686ms +6ms, +0.9%

@sanity/cli-build/_internal/env

Metric Value vs main (b007047)
Internal (raw) 1.8 KB -
Internal (gzip) 644 B -
Bundled (raw) 1.31 MB -
Bundled (gzip) 332.6 KB -
Import time 86ms +1ms, +1.2%

@sanity/cli-build/_internal/extract

Metric Value vs main (b007047)
Internal (raw) 42.8 KB -
Internal (gzip) 10.3 KB -
Bundled (raw) 11.76 MB -
Bundled (gzip) 2.21 MB -
Import time 528ms -5ms, -0.9%

@sanity/cli-build/_internal/manifest

Metric Value vs main (b007047)
Internal (raw) 31.0 KB -
Internal (gzip) 7.8 KB -
Bundled (raw) 838.8 KB -
Bundled (gzip) 213.1 KB -
Import time 527ms -18ms, -3.3%

🗺️ ./_internal/env · ./_internal/extract · ./_internal/manifest · @sanity/cli-build:./_internal/build treemap too large to embed · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — create-sanity

Compared against main (b0070479)

Metric Value vs main (b007047)
Internal (raw) 908 B -
Internal (gzip) 483 B -
Bundled (raw) 931 B -
Bundled (gzip) 491 B -
Import time ❌ ChildProcess denied: node -
Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

@github-actions

github-actions Bot commented Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Coverage Delta

No covered files changed in this PR.

Overall Coverage

Metric Coverage
Statements 81.7% (±0%)
Branches 73.8% (±0%)
Functions 77.3% (±0%)
Lines 82.1% (±0%)

@renovate
renovate Bot enabled auto-merge (squash) September 3, 2026 08:56
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 4 times, most recently from 11e82fc to 64ab5c7 Compare September 3, 2026 10:31
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 11 times, most recently from 550d721 to abf71e8 Compare September 10, 2026 00:58
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 4 times, most recently from db3bc1a to 25c8aaa Compare September 14, 2026 19:06
@renovate

renovate Bot commented Sep 14, 2026 •

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Error: ERR_PNPM_NO_MATURE_MATCHING_VERSION

  × installing dependencies
  ╰─▶ 7 versions do not meet the minimumReleaseAge constraint:
        @turbo/darwin-64@2.11.4 was published at 2026-09-24T22:17:35.501Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        @turbo/darwin-arm64@2.11.4 was published at 2026-09-24T22:15:50.504Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        @turbo/linux-64@2.11.4 was published at 2026-09-24T22:16:00.638Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        @turbo/linux-arm64@2.11.4 was published at 2026-09-24T22:18:58.653Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        @turbo/windows-64@2.11.4 was published at 2026-09-24T22:16:33.040Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        @turbo/windows-arm64@2.11.4 was published at 2026-09-24T22:16:40.810Z,
      within the minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
        turbo@2.11.4 was published at 2026-09-24T22:17:55.335Z, within the
      minimumReleaseAge cutoff (2026-09-23T16:14:23.738Z)
  help: Run the install interactively to approve these picks, add them to
        minimumReleaseAgeExclude in pnpm-workspace.yaml, or wait for the
        packages to mature.


@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 4 times, most recently from 74c1772 to c4ef00e Compare September 21, 2026 09:22
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from c4ef00e to 41d2bec Compare September 23, 2026 02:26

@cursor cursor Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale Bugbot comment from a previous run.

Comment thread package.json Outdated
Comment thread package.json Outdated
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 3 times, most recently from 3b1c324 to 82a5ea1 Compare September 25, 2026 05:27

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 82a5ea1. Configure here.

Comment thread package.json
"oxfmt": "catalog:",
"rimraf": "catalog:",
"turbo": "^2.10.5",
"turbo": "^2.11.4",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lockfile out of sync with versions

High Severity

Version ranges were bumped in package.json without updating pnpm-lock.yaml. The lockfile still records the old specifiers, and several resolved versions no longer satisfy the new ranges. CI installs with --frozen-lockfile, so dependency installation fails.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 82a5ea1. Configure here.

@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from 82a5ea1 to 0dfe224 Compare September 25, 2026 22:37
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from 0dfe224 to 97a281d Compare September 26, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants