[Snyk] Security upgrade @sanity/core from 0.144.0 to 1.149.19

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • studio/package.json
  • studio/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept

Commit messages

Package name: @sanity/core

The new version differs by 250 commits.

• 2bda917 v1.149.19
• 338b55f [chore] Bump configstore from 3.0.0 to 5.0.1 in /packages/@sanity/cli & core
• 78cc597 [chore] Bump dot-prop from 4.2.0 to 5.2.0 in /packages/@sanity/document-window
• d47d829 Support overriding validation on array subtypes (#1939)
• bd7c279 [chore] Upgrade image-url dependency (#1944)
• ef0f209 v1.149.18
• e5f1c8b [client] Add effectFormat as allowed parameter to listener (#1941)
• f33b781 [core] Prevent throwing on missing static folder when building (#1934)
• a1dbb9f [desk-tool] Remove the drafts prefix + warn when resolving intent links (#1930)
• 11dc7dd [chore] CSS custom properties in JS (#1931)
• e9ab623 [chore] Fix inconsiderately named references (#1924)
• 7a5cb5a [export] Fix extensions with numbers not being recognized as valid asset ID (#1925)
• b46fa7c Use the 'current' branch for official releases
• b0892f0 v1.149.17
• 6a3e676 [export] Fix setTimeout called on reused socket
• a058f82 [export] Fix incorrectly handled rewriting of non-sanity assets
• c0be978 v1.149.16
• 1fa1a67 [desk-tool] Fix an issue with disappearing document action button (#1915)
• e8bc426 [chore] Fix eslint so it uses a common config for packages (#1886)
• 4fbd16f [default-layout] Fix router state bug (NotFound component) (#1786)
• 7b8cb38 [core] Add GraphQL endpoint URL to `sanity graphql list` action (#1905)
• 0a3094a [desk-tool] add showCloseButton prop to action dialogs
• 8250b88 [validation] use date-fns instead of momentjs
• d6f4a68 [validation] format dates in validation messages, give date type same validation as datetime

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic