feat(deps): upgrade upstream dependencies by voidzero-guard[bot] · Pull Request #2500 · voidzero-dev/vite-plus

voidzero-guard · 2026-08-19T06:53:11Z

Summary

Automated upgrade of upstream dependencies: Vitest 4.1.10 -> 4.1.11 (all @vitest/* packages), Oxlint 1.78.0 -> 1.79.0, Oxfmt 0.63.0 -> 0.64.0, the oxc family 0.144.0 -> 0.145.0, and @vitejs/devtools 0.4.12 -> 0.5.0.
rolldown (v1.2.4) and vite (v8.2.1) are unchanged; tsdown stays at 0.22.14, so no CLI option sync or workspace re-merge was needed.
PTY snapshots re-recorded for the new Vitest banner, the new react/* rules emitted by oxlint 1.79.0, and the migration dependency table.
Snapshot runner now pins pnpm's minimumReleaseAge to 0 so freshly published toolchain packages are not quarantined on the day of a bump.

Dependency updates

Package	From	To
`vitest`	`4.1.10`	`4.1.11`
`@vitest/browser`	`4.1.10`	`4.1.11`
`@vitest/browser-playwright`	`4.1.10`	`4.1.11`
`@vitest/browser-preview`	`4.1.10`	`4.1.11`
`@vitest/browser-webdriverio`	`4.1.10`	`4.1.11`
`@vitest/expect`	`4.1.10`	`4.1.11`
`@vitest/mocker`	`4.1.10`	`4.1.11`
`@vitest/pretty-format`	`4.1.10`	`4.1.11`
`@vitest/runner`	`4.1.10`	`4.1.11`
`@vitest/snapshot`	`4.1.10`	`4.1.11`
`@vitest/spy`	`4.1.10`	`4.1.11`
`@vitest/utils`	`4.1.10`	`4.1.11`
`oxfmt`	`0.63.0`	`0.64.0`
`oxlint`	`1.78.0`	`1.79.0`
`@oxlint/plugins`	`1.73.0`	`1.79.0`
`@oxc-project/runtime`	`0.144.0`	`0.145.0`
`@oxc-project/types`	`0.144.0`	`0.145.0`
`oxc-minify`	`0.144.0`	`0.145.0`
`oxc-parser`	`0.144.0`	`0.145.0`
`oxc-transform`	`0.144.0`	`0.145.0`
`@vitejs/devtools`	`0.4.12`	`0.5.0`
`VITEST_VERSION` constant	`4.1.10`	`4.1.11`
README vitest pins	`4.1.10`	`4.1.11`

Unchanged dependencies

rolldown: v1.2.4 (483c648)
vite: v8.2.1 (4216158)
tsdown: 0.22.14
@tsdown/css: 0.22.14
@tsdown/exe: 0.22.14
lightningcss: ^1.33.0
@oxc-node/cli: 0.1.0
@oxc-node/core: 0.1.0
oxlint-tsgolint: 7.0.2001

Code changes

crates/vp_cli_snapshots/tests/cli_snapshots/main.rs: set PNPM_CONFIG_MINIMUM_RELEASE_AGE and pnpm_config_minimum_release_age to 0 in the baseline snapshot env. pnpm >= 11 defaults minimumReleaseAge to 24 hours, which quarantines the just-published toolchain packages in real-install fixtures and writes exact-version minimumReleaseAgeExclude entries into the generated pnpm-workspace.yaml.
crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_tool_help/snapshots/command_tool_deep_help_delegation.md: vitest banner 4.1.10 -> 4.1.11.
crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/migration_npmx_dev/snapshots/migration_npmx_dev.md: dependency table now lists vitest, @vitest/browser-playwright and @vitest/coverage-v8 upgrades, with realigned columns.
crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/new_create_vite_migrates_eslint_prettier/snapshots/new_create_vite_migrates_eslint_prettier.md: records the additional react/* rules emitted by oxlint 1.79.0.
packages/cli/src/migration/migrator/catalog.ts, packages/cli/src/migration/migrator/setup.ts: oxfmt 0.64.0 rewrites invisible Unicode characters in comments (U+2009 thin space -> two spaces, U+200B zero-width space -> backslash escape). Comment text only.
README.md, packages/cli/README.md, docs/guide/migrate.md, packages/cli/src/utils/constants.ts, packages/core/package.json, pnpm-workspace.yaml, pnpm-lock.yaml: version pins and lockfile.

Build status

sync-remote-and-build: success
build-upstream: success

- vitest: 4.1.10 -> 4.1.11 - @vitest/browser: 4.1.10 -> 4.1.11 - @vitest/browser-playwright: 4.1.10 -> 4.1.11 - @vitest/browser-preview: 4.1.10 -> 4.1.11 - @vitest/browser-webdriverio: 4.1.10 -> 4.1.11 - @vitest/expect: 4.1.10 -> 4.1.11 - @vitest/mocker: 4.1.10 -> 4.1.11 - @vitest/pretty-format: 4.1.10 -> 4.1.11 - @vitest/runner: 4.1.10 -> 4.1.11 - @vitest/snapshot: 4.1.10 -> 4.1.11 - @vitest/spy: 4.1.10 -> 4.1.11 - @vitest/utils: 4.1.10 -> 4.1.11 - oxfmt: 0.63.0 -> 0.64.0 - oxlint: 1.78.0 -> 1.79.0 - @oxlint/plugins: 1.73.0 -> 1.79.0 - @oxc-project/runtime: 0.144.0 -> 0.145.0 - @oxc-project/types: 0.144.0 -> 0.145.0 - oxc-minify: 0.144.0 -> 0.145.0 - oxc-parser: 0.144.0 -> 0.145.0 - oxc-transform: 0.144.0 -> 0.145.0 - @vitejs/devtools: 0.4.12 -> 0.5.0 - VITEST_VERSION constant: 4.1.10 -> 4.1.11 - README vitest pins: 4.1.10 -> 4.1.11 rolldown (v1.2.4, 483c648) and vite (v8.2.1, 4216158) are unchanged. Code changes: - crates/vp_cli_snapshots/tests/cli_snapshots/main.rs: set PNPM_CONFIG_MINIMUM_RELEASE_AGE / pnpm_config_minimum_release_age to 0 in the baseline snapshot env so pnpm's 24h minimumReleaseAge default does not quarantine freshly published toolchain packages and emit minimumReleaseAgeExclude entries into fixture output. - crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_tool_help/snapshots/command_tool_deep_help_delegation.md: vitest banner 4.1.10 -> 4.1.11. - crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/migration_npmx_dev/snapshots/migration_npmx_dev.md: dependency table now lists vitest, @vitest/browser-playwright and @vitest/coverage-v8 upgrades, with realigned columns. - crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/new_create_vite_migrates_eslint_prettier/snapshots/new_create_vite_migrates_eslint_prettier.md: records the additional react/* rules emitted by oxlint 1.79.0. - packages/cli/src/migration/migrator/catalog.ts, packages/cli/src/migration/migrator/setup.ts: oxfmt 0.64.0 rewrites invisible Unicode characters in comments (U+2009 -> two spaces, U+200B -> backslash escape).

voidzero-guard · 2026-08-19T06:53:12Z

✅ No upstream CLI help changes detected

Compared normalized --help output for the upstream CLIs mirrored by Vite+.

➖ Vite: no version update (8.2.1)

No version update was detected, so there is no CLI help diff.

✅ Vitest: no CLI help changes (4.1.10 → 4.1.11)

The version was updated, but the normalized CLI help output has no differences.

✅ Oxlint: no CLI help changes (1.78.0 → 1.79.0)

The version was updated, but the normalized CLI help output has no differences.

✅ Oxfmt: no CLI help changes (0.63.0 → 0.64.0)

The version was updated, but the normalized CLI help output has no differences.

➖ tsdown: no version update (0.22.14)

No version update was detected, so there is no CLI help diff.

netlify · 2026-08-19T06:53:16Z

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	`c05f9ae`
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a85c4113258730008154317

github-actions · 2026-08-19T06:54:05Z

✅ Staging deployment successful!

Preview: https://viteplus-staging.void.app/
Commit: c05f9ae

socket-security · 2026-08-19T06:55:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
npm/@oxc-project/types@0.144.0 ⏵ 0.145.0		^-1
npm/@vitejs/devtools@0.5.0
npm/@oxc-project/runtime@0.145.0
npm/@vitest/browser-preview@4.1.11
npm/@vitest/browser-webdriverio@4.1.10 ⏵ 4.1.11	⁺⁴	⁺¹
npm/oxfmt@0.64.0
npm/oxc-parser@0.144.0 ⏵ 0.145.0		^-1
npm/@oxlint/plugins@1.79.0

View full report

github-actions · 2026-08-19T07:02:30Z

Native binary sizes (`c05f9ae`)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact	Format	Base	PR	Change
`vp` (Linux x64)	Binary	10.70 MiB	10.70 MiB	0 B (0.00%)
`vp` (Linux x64)	gzip -9	4.63 MiB	4.63 MiB	0 B (0.00%)
NAPI (Linux x64)	Binary	32.03 MiB	32.03 MiB	0 B (0.00%)
NAPI (Linux x64)	gzip -9	12.61 MiB	12.61 MiB	0 B (0.00%)
`vp` (macOS ARM64)	Binary	8.00 MiB	8.00 MiB	0 B (0.00%)
`vp` (macOS ARM64)	gzip -9	4.04 MiB	4.04 MiB	0 B (0.00%)
NAPI (macOS ARM64)	Binary	39.68 MiB	39.68 MiB	0 B (0.00%)
NAPI (macOS ARM64)	gzip -9	16.92 MiB	16.92 MiB	+1 B (+0.00%)
`vp` (Windows x64)	Binary	8.59 MiB	8.59 MiB	0 B (0.00%)
`vp` (Windows x64)	gzip -9	3.75 MiB	3.75 MiB	+1 B (+0.00%)
NAPI (Windows x64)	Binary	26.91 MiB	26.91 MiB	0 B (0.00%)
NAPI (Windows x64)	gzip -9	10.69 MiB	10.69 MiB	+8 B (+0.00%)
Trampoline (Windows x64)	Binary	216.50 KiB	216.50 KiB	0 B (0.00%)
Trampoline (Windows x64)	gzip -9	104.34 KiB	104.34 KiB	0 B (0.00%)
Installer (Windows x64)	Binary	4.48 MiB	4.48 MiB	0 B (0.00%)
Installer (Windows x64)	gzip -9	2.10 MiB	2.10 MiB	-1 B (-0.00%)

github-actions · 2026-08-19T14:34:59Z

Registry bridge build (`c05f9ae`)

This commit build is published to the registry bridge, which serves these as ordinary npm versions (every other package proxies to npmjs):

Package	Version
`vite-plus`	`0.0.0-commit.c05f9ae9fd34ca943667bcfd54c5e12c3735bc96`
`@voidzero-dev/vite-plus-core`	`0.0.0-commit.c05f9ae9fd34ca943667bcfd54c5e12c3735bc96`

Install the Vite+ CLI built from this commit, then migrate a project:

# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/voidzero-dev/vite-plus/c05f9ae9fd34ca943667bcfd54c5e12c3735bc96/packages/cli/install.sh | VP_PR_VERSION=2500 bash

# Windows (PowerShell)
$env:VP_PR_VERSION="2500"; irm https://raw.githubusercontent.com/voidzero-dev/vite-plus/c05f9ae9fd34ca943667bcfd54c5e12c3735bc96/packages/cli/install.ps1 | iex

Or download the standalone Windows installer built from this commit:

Architecture	Installer
x64	`vp-setup-x86_64-pc-windows-msvc.exe`
Arm64	`vp-setup-aarch64-pc-windows-msvc.exe`

GitHub requires you to sign in and downloads each installer as a ZIP artifact. Extract vp-setup.exe, then run it against this preview build:

.\vp-setup.exe --version "0.0.0-commit.c05f9ae9fd34ca943667bcfd54c5e12c3735bc96" --registry "https://registry-bridge.viteplus.dev/"

After installing, upgrade the current project's vite-plus to this test build with:

vp migrate

Or point your package manager at the bridge registry https://registry-bridge.viteplus.dev/:

Package manager	Registry config
npm / pnpm / Bun	`.npmrc`: `registry=https://registry-bridge.viteplus.dev/`
Yarn (v2+)	`.yarnrc.yml`: `npmRegistryServer: "https://registry-bridge.viteplus.dev/"`

Then pin the build (vite aliases to vite-plus-core; pnpm can use a catalog, npm an overrides entry):

{
  "devDependencies": {
    "vite-plus": "0.0.0-commit.c05f9ae9fd34ca943667bcfd54c5e12c3735bc96",
    "vite": "npm:@voidzero-dev/vite-plus-core@0.0.0-commit.c05f9ae9fd34ca943667bcfd54c5e12c3735bc96"
  }
}

github-actions · 2026-08-19T14:36:25Z

🐳 Docker preview image

Built from this PR's registry bridge build:

Image	Compressed size
`ghcr.io/voidzero-dev/vite-plus:pr-2500`	236MB

# remove any stale local copy from a previous run, then pull fresh
docker rmi ghcr.io/voidzero-dev/vite-plus:pr-2500 2>/dev/null; docker pull ghcr.io/voidzero-dev/vite-plus:pr-2500

Quick check:

docker run --rm ghcr.io/voidzero-dev/vite-plus:pr-2500 vp --version

See docs/guide/docker.md for usage.

fengmk2 self-assigned this Aug 19, 2026

fengmk2 added 2 commits August 19, 2026 16:29

fix(ci): adapt vinext to oxlint 1.79

772d32e

Merge branch 'main' into deps/upstream-update

7428371

fengmk2 added the preview-build Publish this PR's commits to the registry bridge as preview builds label Aug 19, 2026

Merge branch 'main' into deps/upstream-update

c05f9ae

fengmk2 added preview-build Publish this PR's commits to the registry bridge as preview builds and removed preview-build Publish this PR's commits to the registry bridge as preview builds labels Aug 19, 2026

fengmk2 approved these changes Aug 19, 2026

View reviewed changes

fengmk2 merged commit a44405f into main Aug 19, 2026
115 of 142 checks passed

fengmk2 deleted the deps/upstream-update branch August 19, 2026 15:41

Navigation Menu

Uh oh!

feat(deps): upgrade upstream dependencies - #2500

feat(deps): upgrade upstream dependencies#2500
fengmk2 merged 4 commits into
mainfrom
deps/upstream-update

voidzero-guard Bot commented Aug 19, 2026

Uh oh!

voidzero-guard Bot commented Aug 19, 2026

Uh oh!

netlify Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

voidzero-guard Bot commented Aug 19, 2026

Summary

Dependency updates

Code changes

Build status

Uh oh!

voidzero-guard Bot commented Aug 19, 2026

✅ No upstream CLI help changes detected

Uh oh!

netlify Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for viteplus-preview canceled.

Uh oh!

github-actions Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Native binary sizes (c05f9ae)

Uh oh!

github-actions Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Registry bridge build (c05f9ae)

Uh oh!

github-actions Bot commented Aug 19, 2026

🐳 Docker preview image

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify Bot commented Aug 19, 2026 •

edited

Loading

github-actions Bot commented Aug 19, 2026 •

edited

Loading

socket-security Bot commented Aug 19, 2026 •

edited

Loading

github-actions Bot commented Aug 19, 2026 •

edited

Loading

Native binary sizes (`c05f9ae`)

github-actions Bot commented Aug 19, 2026 •

edited

Loading

Registry bridge build (`c05f9ae`)