Skip to content

chore(deps): update pnpm.catalog.vite-plus vite-plus to v0.2.7 - #3127

Merged
ghostdevv merged 3 commits into
mainfrom
renovate/vite
Aug 3, 2026
Merged

chore(deps): update pnpm.catalog.vite-plus vite-plus to v0.2.7#3127
ghostdevv merged 3 commits into
mainfrom
renovate/vite

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
vite-plus (source) 0.2.2 → 0.2.7 age confidence

Release Notes

voidzero-dev/vite-plus (vite-plus)

v0.2.7: vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

Compare Source

This release points users to vpr <name> when a Vite+ built-in command and package script share a name, adds concurrency control to vp pack, and smooths migrations and package-manager setup.

Highlights
  • Point users to vpr <name> when a Vite+ built-in command and package.json script share a name (#​2259, #​2262, #​2265, vite-task#570), by @​wan9chi
  • Add --concurrency to vp pack to limit parallel Rolldown builds, and update tsdown 0.22.13 -> 0.22.14 and Vite DevTools 0.4.2 -> 0.4.5 (#​2233), by @​voidzero-guard[bot]
  • Add read-only Svelte rune globals to migrated Oxlint overrides, preventing false no-undef errors (#​2192), by @​naokihaba
  • Install package managers from npm tarballs with nonstandard top-level directories, fixing Yarn 1.22.19 installation (#​2264), by @​TheAlexLichter
Fixes & Enhancements
  • Prevent the Oxc language server from crashing when contributors open the Vite+ workspace in VS Code (#​2245), by @​jong-kyung
Docs
  • Document the full procedure for removing Vite+ commit hooks (#​2218), by @​TheAlexLichter
  • Document per-process and per-machine ways to disable Vite+ commit hooks without uninstalling them (#​2230), by @​TheAlexLichter
  • Clarify when to use built-in vp commands versus package scripts through vp run or vpr, including migration and agent guidance (#​2255), by @​wan9chi
  • Document GitLab CI/CD setup with the reusable setup-vp template (#​2258), by @​naokihaba
Chore
  • Run Semgrep security scans on pull requests and pushes to main (#​2223), by @​Boshen
  • Re-enable Vitest browser-mode CLI snapshot coverage on every supported platform (#​2275), by @​wan9chi
  • Stabilize Windows CLI snapshot tests for interrupted installs and browser port fallback (#​2282), by @​wan9chi
  • Replace deprecated shared JavaScript and TypeScript VS Code settings with their current js/ts.* names (#​2246), by @​jong-kyung
Bundled Versions
Tool Version Source
vite 8.1.5 5e7fe12
rolldown 1.2.0 03e1e34
tsdown 0.22.14 npm
vitest 4.1.10 npm
oxlint 1.75.0 npm
oxlint-tsgolint 7.0.2001 npm
oxfmt 0.60.0 npm
Upgrade
vp upgrade

Full Changelog: voidzero-dev/vite-plus@v0.2.6...v0.2.7

Published Packages
  • @voidzero-dev/vite-plus-core@0.2.7
  • vite-plus@0.2.7
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: c17e1c3

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.7 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.6: vite-plus v0.2.6: Stable type-aware linting and more reliable task caching

Compare Source

This release moves Vite+'s type-aware linting to the stable tsgolint 7 engine, updates the bundled build and formatting tools, strengthens vp run caching and workspace discovery, and removes the redundant vp build startup banner.

Highlights
  • Move bundled type-aware linting to stable tsgolint 7, and update Vite 8.1.4 -> 8.1.5, Rolldown 1.1.5 -> 1.2.0, tsdown 0.22.7 -> 0.22.13, Oxlint 1.73.0 -> 1.75.0, oxlint-tsgolint 0.24.0 -> 7.0.2001, and Oxfmt 0.58.0 -> 0.60.0 (#​2214), by @​voidzero-guard[bot]
  • Improve vp run reliability by caching much larger automatically tracked input sets, discovering npm workspaces whose patterns start with ./, and providing more accurate error messages (vite-task#554, vite-task#547, vite-task#552, #​2215), by @​wan9chi and @​liangmiQwQ
  • Remove the redundant Vite startup banner from vp build output and fail fast when upstream Vite changes invalidate Vite+ branding patches (#​2200, #​2205), by @​liangmiQwQ
Refactor
Docs
  • Fix broken documentation anchors and add Migration Rules to the Migrate sidebar (#​2203), by @​charpeni
Chore
  • Stabilize vp create build-approval snapshots by removing package-age timing from those fixtures (#​2224), by @​wan9chi
  • Remove the temporary release workflow dispatch used for the previous release (#​2193), by @​wan9chi
  • Share package-manager fixtures across CLI tests (#​2197), by @​jong-kyung
  • Remove stale raw Oxlint and Oxfmt development dependencies that bypassed repository editor configuration (#​2187), by @​liangmiQwQ
Bundled Versions
Tool Version Source
vite 8.1.5 5e7fe12
rolldown 1.2.0 03e1e34
tsdown 0.22.13 npm
vitest 4.1.10 npm
oxlint 1.75.0 npm
oxlint-tsgolint 7.0.2001 npm
oxfmt 0.60.0 npm
Upgrade
vp upgrade
New Contributors

Welcome @​charpeni.

Full Changelog: voidzero-dev/vite-plus@v0.2.5...v0.2.6

Published Packages
  • @voidzero-dev/vite-plus-core@0.2.6
  • vite-plus@0.2.6
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: cd064c6

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.6 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.5: vite-plus v0.2.5: Cleaner environments and more reliable workflows

Compare Source

This release adds cleanup and package version commands, supports TypeScript 7 declaration generation, reduces the standalone binary size, and hardens task tracking, CLI output, package-manager routing, Docker workflows, and project scaffolding.

Highlights
Fixes & Enhancements
  • Reduce standalone vp binary sizes by about 5% on Linux and macOS and 19% on Windows (#​2043), by @​fengmk2
  • Keep the Docker image non-root by default while allowing passwordless sudo for Playwright browser dependencies and system packages (#​2088), by @​fengmk2
  • Ignore .env and .env.* in generated projects while keeping .env.example trackable (#​2095), by @​forehalo
  • Create vp-use.cmd after the Windows environment bin directory is ready and document its Command Prompt-only usage (#​2128), by @​liangmiQwQ
  • Render user-facing process statuses and paths without Rust debug wrappers (#​2130), by @​liangmiQwQ
  • Make vp dedupe fall back to yarn install with a warning on Yarn Classic (#​2139), by @​jong-kyung
  • Ensure package-manager child processes, including Bun, can always find the managed Node.js runtime (#​2158), by @​BlankParticle
Docs
Chore
Bundled Versions
Tool Version Source
vite 8.1.4 a477454
rolldown 1.1.5 f09947a
tsdown 0.22.7 npm
vitest 4.1.10 npm
oxlint 1.73.0 npm
oxlint-tsgolint 0.24.0 npm
oxfmt 0.58.0 npm
Upgrade
vp upgrade
New Contributors

Welcome @​yukinoshi and @​BlankParticle.

Full Changelog: voidzero-dev/vite-plus@v0.2.4...v0.2.5

Published Packages
  • @voidzero-dev/vite-plus-core@0.2.5
  • vite-plus@0.2.5
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: 93dc59a

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.5 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.4: vite-plus v0.2.4: Vitest security hotfix

Compare Source

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights
  • Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#​2089), by @​voidzero-guard[bot]
Chore
  • Add the standard release-manager skill for vite-plus release operations (#​2019), by @​fengmk2
Bundled Versions
Tool Version Source
vite 8.1.3 578ffb8
rolldown 1.1.4 6cbd233
tsdown 0.22.3 npm
vitest 4.1.10 npm
oxlint 1.72.0 npm
oxlint-tsgolint 0.24.0 npm
oxfmt 0.57.0 npm
Upgrade
vp upgrade
New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages
  • @voidzero-dev/vite-plus-core@0.2.4
  • vite-plus@0.2.4
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.3: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

Compare Source

A patch release that fixes static config extraction for vite.config.ts files whose defineConfig comes from a preset or custom wrapper (no longer misread as Vite+'s own), fixes vp create for org templates on registries that strip custom package fields, cleans up terminal output after Ctrl-C during vp run, and updates bundled Vite to 8.1.3.

Highlights
  • Custom VP_HOME is honored on every run: the global vp now respects a user-set VP_HOME for its home directory instead of falling back to ~/.vite-plus, and persists it in the generated env files, so a custom install location no longer produces multiple instances or unusable packages (#​2029), by @​liangmiQwQ
Features
  • Upgrade bundled Vite from 8.1.2 to 8.1.3 (inlined CSS after the shebang line, CSS preload for nested dynamic imports, SSR stacktrace column fix) (#​2042), by @​voidzero-guard[bot]
Fixes & Enhancements
  • vp run no longer misreads a vite.config.ts when its defineConfig comes from a preset or a custom wrapper instead of vite-plus or vite. Such configs are now evaluated at runtime rather than assumed to be Vite+'s own, so projects that use them no longer wrongly report Task "build" not found (#​2060, #​2075), by @​liangmiQwQ and @​fengmk2
  • Killing a vp run task with Ctrl-C no longer leaves odd OSC escape sequences in the terminal; vp defers its own Ctrl-C handling until the child process exits (#​2079), by @​forehalo
  • vp migrate: rewriting a package.json prettier script now emits a single --check, so scripts that combined --check with --list-different / -l / -c no longer produce a duplicated vp fmt --check --check (#​2044), by @​shulaoda
  • vp create @&#8203;org:name: read the org template catalog (createConfig) from the published tarball when the registry (e.g. GitHub Packages) strips custom fields from packument metadata (#​2063), by @​hiro-daikin
  • vp run: missing env vars requested through @voidzero-dev/vite-task-client now return undefined instead of null, preserving Vite production NODE_ENV semantics when builds run through vp run (vite-task#508, via #​2076), by @​wan9chi
Refactor
  • static_config: drop the unreachable vite.config.json branch (#​2045), and remove unused exported CLI helpers (#​2046), by @​shulaoda
Docs
Chore
Bundled Versions
Tool Version Source
vite 8.1.3 578ffb8
rolldown 1.1.4 6cbd233
tsdown 0.22.3 npm
vitest 4.1.9 npm
oxlint 1.72.0 npm
oxlint-tsgolint 0.24.0 npm
oxfmt 0.57.0 npm
Upgrade
vp upgrade
New Contributors

@​wan-kong and @​hiro-daikin made their first contributions.

Full Changelog: voidzero-dev/vite-plus@v0.2.2...v0.2.3

Published Packages
  • @voidzero-dev/vite-plus-core@0.2.3
  • vite-plus@0.2.3
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.3 vp build

Run any vp command without installing it; see the Docker guide for more.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel

vercel Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs.npmx.dev Ready Ready Preview Aug 3, 2026 8:39pm
npmx.dev Ready Ready Preview Aug 3, 2026 8:39pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
npmx-lunaria Ignored Ignored Aug 3, 2026 8:39pm

Request Review

@renovate renovate Bot added the chore label Aug 3, 2026
@socket-security

socket-security Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​vitest/​coverage-v8@​4.1.10991007998100
Addedvitest@​4.1.10981007998100
Addedvite-plus@​0.2.77910010099100
Added@​vitest/​browser-playwright@​4.1.101001008599100

View full report

@codecov

codecov Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@ghostdevv ghostdevv mentioned this pull request Aug 3, 2026
Closed
1 task
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

e18e dependency analysis

No dependency warnings found.

@renovate

renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@ghostdevv
ghostdevv added this pull request to the merge queue Aug 3, 2026
Merged via the queue into main with commit de926e2 Aug 3, 2026
27 checks passed
@ghostdevv
ghostdevv deleted the renovate/vite branch August 3, 2026 21:12
@github-actions github-actions Bot mentioned this pull request Aug 3, 2026
Open
ghostdevv added a commit that referenced this pull request Aug 3, 2026
@renovate @autofix-ci @ghostdevv
chore(deps): update pnpm.catalog.vite-plus vite-plus to v0.2.7 (#3127)
f9185ea 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Willow (GHOST) <git@willow.sh>
ayo-run pushed a commit to ayo-run/npmx.dev that referenced this pull request Aug 5, 2026
@renovate @autofix-ci
@ghostdevv @ayo-run
chore(deps): update pnpm.catalog.vite-plus vite-plus to v0.2.7 (npmx-…
8065e8a 
…dev#3127)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Willow (GHOST) <git@willow.sh>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ghostdevv ghostdevv ghostdevv approved these changes

Assignees

No one assigned

Labels

chore dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ghostdevv