[squiggler-app]

This PR contains the following updates:

Package	Change	Age	Confidence
@oxlint/plugins (source)	^1.86.0 → ^1.90.0
eslint-plugin-storybook (source)	^10.6.0 → ^10.6.5
oxfmt (source)	^0.73.0 → ^0.75.0
oxlint (source)	^1.83.0 → ^1.90.0

---

Release Notes

storybookjs/storybook (eslint-plugin-storybook)

v10.6.5

Compare Source

• Typescript: Exclude all dunderscore prefixed folders from production compilation - #​36740, thanks @​mrginglymus!

v10.6.4

Compare Source

• Core: Skip TypeScript loader hook registration under Jest - #​36790, thanks @​obvious-autobuild!

v10.6.3

Compare Source

• Addon Vitest: Support Vitest 5 - #​36671, thanks @​PaulMest!
• Next.js: Fix app-router mock crash on Next.js 16.4 - #​36588, thanks @​obvious-autobuild!
• Nextjs-Vite: Provide parentRenderTree.bfcacheId in app router mock - #​36732, thanks @​bhushan4work!
• TypeScript: Explicitly type returntype of ArgsStore#get - #​36583, thanks @​mrginglymus!

v10.6.2

Compare Source

• Angular-Vite: Require @​analogjs/vite-plugin-angular 2.7.3 or later - #​36525, thanks @​valentinpalkovic!
• CLI: Fix hidden output of CLI commands on Yarn 1 - #​36419, thanks @​kasperpeulen!
• Preact: Support Preact 11 - #​36526, thanks @​ghengeveld!
• Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #​36726, thanks @​Sidnioulz!
• Typescript: Explicitly type enhanceArgTypes - #​35664, thanks @​mrginglymus!

v10.6.1

Compare Source

• Addon A11y: Fix vision simulator color filters in Firefox - #​36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #​36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #​36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #​36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #​36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #​36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #​36210, thanks @​kasperpeulen!

oxc-project/oxc (oxfmt)

v0.75.0: oxfmt v0.75.0

Compare Source

🐛 Bug Fixes

• 5042019 formatter: Keep fill layout for array with comment after [ (#​28170) (leaysgur)
• 9d37ff6 formatter: Use position-based comment checks for concise arrays (#​28169) (leaysgur)
• 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#​28103) (vidigoat)
• 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#​28168) (leaysgur)
• a5314a1 formatter: Keep ; before in and instanceof class members (#​28166) (leaysgur)
• 3a56e7c formatter: Keep closing HTML comments at the start of a line (#​28064) (Cameron)
• 23d23d6 formatter_markdown: Honor range ignore inside directives (#​28164) (leaysgur)
• 5f1fd3d formatter: Measure width heuristics by display width (#​28098) (leaysgur)
• a5a52cf formatter: Keep parens around private in expressions (#​28096) (leaysgur)
• 999496e formatter: Measure a short key by its display width (#​28026) (vidigoat)
• 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#​28025) (vidigoat)
• 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#​27989) (leaysgur)
• eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#​27987) (leaysgur)

⚡ Performance

• 1ed93af data_structures: Copy short strings without a memcpy call (#​27953) (leaysgur)
• 7948f0b formatter_core: Shrink FormatElement to 16B (#​28012) (leaysgur)
• 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#​27963) (leaysgur)

📚 Documentation

• 068a8ea formatter: Fix up wording (#​28167) (leaysgur)
• db55461 formatter_core: Document text width divergence (#​28095) (leaysgur)
• 880d229 formatter: Add vitest-test-call to known divergences (#​28006) (leaysgur)

v0.74.0: oxfmt v0.74.0

Compare Source

🐛 Bug Fixes

• e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
• 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
• a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
• 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
• 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
• 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
• c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
• d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
• c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
• a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
• 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
• 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
• 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
• 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#​27814) (leaysgur)
• a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#​27812) (leaysgur)
• de110ce formatter: Keep more parens around TSInstantiationExpression (#​27811) (leaysgur)
• 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#​27785) (leaysgur)
• 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#​27780) (leaysgur)
• 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#​27778) (leaysgur)
• 5b2acb0 formatter_core: Report error position releative to CRLF source (#​27777) (leaysgur)
• c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#​27776) (leaysgur)
• 3a980c9 formatter_toml: Handle BOM like other languages (#​27775) (leaysgur)
• 97c9fc4 oxfmt: Handle BOM in config JSON (#​27774) (leaysgur)
• 28eb4a7 oxfmt: Print trailing newline for --list-different (#​27773) (leaysgur)
• d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#​27737) (leaysgur)
• 6a95ec1 formatter: Keep comment position on holey array (#​27730) (leaysgur)
• 54769da formatter: Break after dangling line comment in holey array (#​27729) (leaysgur)
• 99077ef formatter_json: Reject unary expressions other than signed numbers (#​27728) (leaysgur)
• 22cd4cd formatter_json: Handle holey array and comments (#​27727) (leaysgur)
• 644ca1c formatter: Do not indent logical chains whose right sides all inline (#​27667) (leaysgur)
• a07a0fb formatter: Wrap comment-only JSX expression container in a group (#​27666) (leaysgur)

⚡ Performance

• e220293 formatter: Check only the operator suppression mark in is_quiet (#​27952) (leaysgur)
• e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#​27559) (leaysgur)
• a342f7e formatter: Skip comment handling for nodes with no comment near them (#​27557) (leaysgur)
• d8ce750 formatter: Write string literals with swapped quotes into the arena (#​27558) (Yuji Sugiura)
• 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#​27561) (leaysgur)
• 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#​27673) (leaysgur)

📚 Documentation

• 1325225 oxfmt: Update useless comment prefix (#​27956) (leaysgur)
• d0dd140 formatter: Note lossy cooked round-trip in template embeds (#​27944) (leaysgur)
• 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#​27824) (leaysgur)

oxc-project/oxc (oxlint)

v1.90.0

Compare Source

🚀 Features

• 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#​28118) (camc314)
• d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#​28117) (camc314)
• 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#​28116) (camc314)

v1.89.0

Compare Source

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#​27699) (camc314)

v1.88.0

Compare Source

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#​27346) (Mikhail Baev)

v1.87.0: oxlint v1.87.0

Compare Source

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#​27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#​27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#​27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#​27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#​27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#​27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#​27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#​27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#​27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#​27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#​27146) (Cameron)
• ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#​26925) (camc314)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 3am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[changeset-bot]

🦋 Changeset detected

Latest commit: a2b122f

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@sanity/plugin-kit	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
plugins-studio	Ready	Preview	Nov 2, 2026 4:15pm UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
plugins-e2e-test-studio	Ignored		Nov 2, 2026 4:15pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​sanity/​util@​6.22.0-next.37 ⏵ 6.22.0-next.44
	npm/​@​sanity/​mutator@​6.22.0-next.37 ⏵ 6.22.0-next.44
	npm/​groq@​6.22.0-next.37 ⏵ 6.22.0-next.44	+1
	npm/​oxfmt@​0.73.0 ⏵ 0.75.0	-7			+2
	npm/​@​sanity/​ui@​4.4.9 ⏵ 4.4.10	+1			+1
	npm/​oxlint@​1.86.0 ⏵ 1.90.0			+1
	npm/​@​oxlint/​plugins@​1.89.0 ⏵ 1.90.0
	npm/​@​sanity/​vision@​6.22.0-next.37 ⏵ 6.22.0-next.44
	npm/​sanity@​6.22.0-next.37 ⏵ 6.22.0-next.44	+12
	npm/​@​sanity/​schema@​6.22.0-next.37 ⏵ 6.22.0-next.44
	npm/​eslint-plugin-storybook@​10.6.0 ⏵ 10.6.5				+1

View full report

[stipsan]

@copilot please run pnpm install (and pnpm dedupe if needed), commit the updated lockfile, and push

[Copilot]

@copilot please run pnpm install (and pnpm dedupe if needed), commit the updated lockfile, and push

pnpm install now passes. The lockfile already contained eslint-plugin-storybook@10.6.1 and oxlint@1.88.0, so install/dedupe required no lockfile changes. I added exact temporary release-age exclusions for the six locked versions blocking the install and pushed that as 822d47f.

[pedrobonamin]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merged main and resolved the lockfile conflict in merge commit 6cf7cfb. Frozen install passes.

[github-actions]

✅ E2E Tests

🟢 54 passed • 🟡 2 flaky • view full report • view run

Studio: https://plugins-e2e-test-studio-brr189svj.sanity.dev

Datasets: pr-2188-chromium-41479287610, pr-2188-firefox-41479287610

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	35.8%	6538 / 18261
🔵	Statements	35.72%	6967 / 19503
🔵	Functions	31.92%	1751 / 5485
🔵	Branches	27.23%	3500 / 12853

File Coverage

No changed files found.

Generated in workflow #11051 for commit 6cf7cfb by the Vitest Coverage Report Action

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a2b122f. Configure here.}

[cursor]

Oxlint tsgolint peer version mismatch

Medium Severity

oxlint is now ^1.90.0, which declares a peer of oxlint-tsgolint >=7.0.2005, but the catalog and lockfile still resolve 7.0.2003. The shared config turns on typeAware and the suspicious category, so type-aware lint can fail when 1.90 sends rules the older tsgolint does not implement.

 

^{Reviewed by Cursor Bugbot for commit a2b122f. Configure here.}