fix: abort underlying EventSource request when response fails validation

[rexxars]

Description

Upgrades eventsource and eventsource-parser to fix three issues:

• Aborts underlying fetch request when a response fails to be validated as eventsource (might happen on API errors)
• Stops emitting events once request is closed. Previously, if a received chunk caused a close to happen but also contained messages after what caused it, they'd be emitted
• Parser fed empty chunk at start will not strip BOM marker (not relevant to Sanity since we don't send BOM)

---

Note

Medium Risk
Touches the realtime EventSource path used by listen/live; risk is limited to upstream SSE connection and parsing behavior, with no local logic changes.

Overview
Bumps eventsource from ^5.1.1 to ^5.1.2 (and eventsource-parser transitively) so live/listen SSE behavior picks up upstream fixes—no application source changes in this repo.

Consumers of realtime listening get aborted underlying fetch when a response fails EventSource validation (e.g. API error bodies), no further events after close when a chunk both closes the stream and contains trailing messages, plus a parser edge case around empty initial chunks/BOM (not relevant to Sanity’s API).

Adds a minor changeset for @sanity/client and whitelists eventsource@5.1.2 under pnpm minimumReleaseAgeExclude so the newer release can install.

^{Reviewed by Cursor Bugbot for commit 6c030f9. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
tsdocs-client	Ignored		Sep 21, 2026 7:58pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​eventsource@​5.1.1 ⏵ 5.1.2				-2

View full report

[github-actions]

📚 TypeDoc Generation Result

✅ TypeDoc generated successfully!

• File size: 4.1M
• Total exports: 259
• Artifact: typedoc-acdc8a7d35ff982ceab8c4d483a22de0fd9a2aa5
• HTML docs preview: Download artifact

The TypeDoc JSON file has been generated and validated. All documentation scripts completed successfully.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	83.82%	1918 / 2288
🔵	Statements	83.69%	1992 / 2380
🔵	Functions	78.85%	522 / 662
🔵	Branches	83.06%	1398 / 1683

File Coverage

No changed files found.

Generated in workflow #5145 for commit 6c030f9 by the Vitest Coverage Report Action