Skip to content

fix(deps): update dependency @sanity/runtime-cli to v15#1059

Merged
renovate[bot] merged 2 commits intomainfrom
renovate/major-15-sanity-tooling
May 7, 2026
Merged

fix(deps): update dependency @sanity/runtime-cli to v15#1059
renovate[bot] merged 2 commits intomainfrom
renovate/major-15-sanity-tooling

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 7, 2026

This PR contains the following updates:

Package Change Age Confidence
@sanity/runtime-cli ^14.13.4^15.0.2 age confidence

Release Notes

sanity-io/runtime-cli (@​sanity/runtime-cli)

v15.0.2

Compare Source

v15.0.1

Compare Source

v15.0.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here


Note

Medium Risk
Medium risk because this is a major upgrade of the @sanity/runtime-cli plugin used by the CLI, which also updates key transitive tooling (notably vite and @oclif/core) and could change runtime/build behavior.

Overview
Bumps @sanity/cli to use @sanity/runtime-cli ^15.0.2 (from ^14.13.4) and adds a changeset for a patch release.

Updates pnpm-lock.yaml accordingly, including notable transitive upgrades such as vite 7.3.28.0.10, @oclif/core 4.10.64.11.0, and updated @inquirer/*/ora/tar-stream/ws versions tied to the new runtime CLI.

Reviewed by Cursor Bugbot for commit 87f5b61. Bugbot is set up for automated code reviews on this repo. Configure here.

@renovate renovate Bot requested a review from a team as a code owner May 7, 2026 16:38
@renovate renovate Bot enabled auto-merge (squash) May 7, 2026 16:38
@claude
Copy link
Copy Markdown

claude Bot commented May 7, 2026

Claude finished @renovate[bot]'s task in 2m 23s —— View job


Review: @sanity/runtime-cli v14.13.4 → v15.0.2

  • Gather context and analyze PR diff
  • Identify all usages of @sanity/runtime-cli in the codebase
  • Check new package exports/APIs for breaking changes
  • Verify compatibility of each usage with v15
  • Check peer dependencies and build tooling

Findings

How @sanity/runtime-cli is used in this repo

The package is used exclusively as an oclif plugin — there are no direct API imports:

  • packages/@sanity/cli/oclif.config.js — listed in the plugins array
  • packages/@sanity/cli/src/topicAliases.ts — the blueprints and functions topics (which come from this plugin) are registered as aliasable topics
  • packages/@sanity/cli/src/hooks/commandNotFound/__tests__/topicAliases.test.ts — has a test verifying blueprintblueprints resolves through the loaded plugin config (reference only in a comment, no import)

Because there are no direct API imports, the only compatibility surface is the oclif plugin interface itself.

Internal dependency changes (v14 → v15)

Dependency v14 v15 Impact
Vite 7.3.2 8.0.10 Internal — no impact on consumers
@oclif/core 4.10.6 4.11.0 Minor bump; catalog ^4.10.6 satisfies it
@sanity/blueprints 0.15.2 0.17.1 Minor bump; blueprints topic still present
Peer dep: lightningcss required removed Not used by the CLI project directly
Peer dep: esbuild added esbuild@0.28.0 already in the workspace

Compatibility verdict

No breaking changes for this repo. Specifically:

  1. oclif plugin interface — No API surface changed from this repo's perspective. The plugin is loaded by oclif at runtime; the plugin's internal Vite 7→8 upgrade is fully encapsulated.
  2. @oclif/core 4.10.6 → 4.11.0 — Minor version bump, compatible with the workspace catalog specifier ^4.10.6 (pnpm-workspace.yaml:@oclif/core: ^4.10.6).
  3. lightningcss removal — No usages of lightningcss found anywhere in the project source.
  4. esbuild peer dep — Already satisfied by esbuild@0.28.0 in the workspace.
  5. blueprints / functions topics — Still provided by the plugin (@sanity/blueprints@0.17.1 remains a dependency in v15).

CI status

All completed checks are passing: ✅ Check Types and Build, ✅ Depcheck, ✅ Validate PR title. Tests and lint are still in progress.


This upgrade looks safe to merge. No code changes are needed.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 7, 2026

📦 Bundle Stats — @sanity/cli

Compared against main (2ad0aa99)

@sanity/cli

Metric Value vs main (2ad0aa9)
Internal (raw) 2.1 KB -
Internal (gzip) 799 B -
Bundled (raw) 10.97 MB -
Bundled (gzip) 2.06 MB -
Import time 835ms -8ms, -1.0%

bin:sanity

Metric Value vs main (2ad0aa9)
Internal (raw) 975 B -
Internal (gzip) 460 B -
Bundled (raw) 9.84 MB -
Bundled (gzip) 1.77 MB -
Import time 2.00s -9ms, -0.5%

🗺️ View treemap · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — @sanity/cli-core

Compared against main (2ad0aa99)

Metric Value vs main (2ad0aa9)
Internal (raw) 93.1 KB -
Internal (gzip) 21.9 KB -
Bundled (raw) 21.60 MB -
Bundled (gzip) 3.42 MB -
Import time 789ms -17ms, -2.1%

🗺️ View treemap · Artifacts

Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

📦 Bundle Stats — create-sanity

Compared against main (2ad0aa99)

Metric Value vs main (2ad0aa9)
Internal (raw) 976 B -
Internal (gzip) 507 B -
Bundled (raw) 50.7 KB -
Bundled (gzip) 12.6 KB -
Import time ❌ ChildProcess denied: node -
Details
  • Import time regressions over 10% are flagged with ⚠️
  • Sizes shown as raw / gzip 🗜️. Internal bytes = own code only. Total bytes = with all dependencies. Import time = Node.js cold-start median.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​sanity/​runtime-cli@​15.0.29910010098100

View full report

@tbeseda
Copy link
Copy Markdown
Member

tbeseda commented May 7, 2026

The updates to runtime-cli include changes to support "org-scope" stacks in Blueprints which in turn supports the release of Scheduled Functions later today.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 7, 2026

Coverage Delta

No covered files changed in this PR.

Overall Coverage

Metric Coverage
Statements 84.2% (±0%)
Branches 74.1% (±0%)
Functions 84.0% (±0%)
Lines 84.6% (+ 0.0%)

Copy link
Copy Markdown
Member

@tbeseda tbeseda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As the author of runtime-cli, these changes look good to me. I'll hold off on merging until I get confirmation from owners of this CLI.

@renovate renovate Bot merged commit 7ae960a into main May 7, 2026
85 of 89 checks passed
@renovate renovate Bot deleted the renovate/major-15-sanity-tooling branch May 7, 2026 18:34
@squiggler-app squiggler-app Bot mentioned this pull request May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants