Skip to content

feat(deps): upgrade upstream dependencies - #2233

Merged
wan9chi merged 2 commits into
mainfrom
deps/upstream-update
Jul 24, 2026
Merged

feat(deps): upgrade upstream dependencies#2233
wan9chi merged 2 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor

Summary

  • Automated upgrade of upstream dependencies.
  • Bumps tsdown (and @tsdown/css / @tsdown/exe) from 0.22.13 to 0.22.14 and @vitejs/devtools from 0.4.2 to 0.4.5.
  • Syncs the new tsdown CLI surface by adding a --concurrency <count> option to vp pack, with updated help snapshots and a new PTY fixture.
  • rolldown (v1.2.0) and vite (v8.1.5) are unchanged this run.

Dependency updates

Package From To
tsdown 0.22.13 0.22.14
@tsdown/css 0.22.13 0.22.14
@tsdown/exe 0.22.13 0.22.14
@vitejs/devtools 0.4.2 0.4.5

Code changes

  • Added --concurrency <count> ("Maximum number of Rolldown builds to run in parallel") to vp pack (packages/cli/src/pack-bin.ts).
  • Updated pack help snapshots to include the new option (crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_pack/snapshots/command_pack.md, crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_helper/snapshots/command_helper.md).
  • Added a PTY snapshot fixture exercising vp pack --concurrency (crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_pack_concurrency/).
  • Bumped bundled tsdown version to 0.22.14 and @vitejs/devtools to ^0.4.5 (packages/core/package.json).
  • Added @devframes/* and verkit to minimumReleaseAgeExclude (pnpm-workspace.yaml).
  • Lockfile updated (pnpm-lock.yaml).

Build status

  • sync-remote-and-build: failure
  • build-upstream: success

- tsdown: 0.22.13 -> 0.22.14
- @tsdown/css: 0.22.13 -> 0.22.14
- @tsdown/exe: 0.22.13 -> 0.22.14
- @vitejs/devtools: 0.4.2 -> 0.4.5

Code changes:
- Sync tsdown CLI option: add `--concurrency <count>` to `vp pack`
  (packages/cli/src/pack-bin.ts)
- Update pack help snapshots for the new option
  (crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_pack/snapshots/command_pack.md,
  crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_helper/snapshots/command_helper.md)
- Add PTY snapshot fixture covering `vp pack --concurrency`
  (crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_pack_concurrency/)
- Bump bundled tsdown version and @vitejs/devtools dependency
  (packages/core/package.json)
- Exclude fresh transitive deps from minimumReleaseAge (@devframes/*, verkit)
  (pnpm-workspace.yaml)
@netlify

netlify Bot commented Jul 24, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit eb4395f
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a62c6bcb188810008fc99cd

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​tsdown/​exe@​0.22.14721007398100
Addednpm/​@​vitejs/​devtools@​0.4.5801007597100
Addednpm/​@​tsdown/​css@​0.22.14751008098100
Addednpm/​tsdown@​0.22.14981008898100
Addednpm/​rolldown-plugin-dts@​0.27.139910010096100

View full report

@github-actions

Copy link
Copy Markdown
Contributor

Native binary sizes (eb4395f)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.31 MiB 10.31 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.42 MiB 4.42 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.07 MiB 33.07 MiB 0 B (0.00%)
NAPI (Linux x64) gzip -9 12.72 MiB 12.72 MiB 0 B (0.00%)
vp (macOS ARM64) Binary 7.64 MiB 7.64 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.84 MiB 3.84 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.50 MiB 40.50 MiB 0 B (0.00%)
NAPI (macOS ARM64) gzip -9 16.97 MiB 16.97 MiB +2 B (+0.00%)
vp (Windows x64) Binary 8.35 MiB 8.35 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.64 MiB 3.64 MiB -2 B (-0.00%)
NAPI (Windows x64) Binary 27.51 MiB 27.51 MiB 0 B (0.00%)
NAPI (Windows x64) gzip -9 10.70 MiB 10.70 MiB +23 B (+0.00%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB 0 B (0.00%)
Installer (Windows x64) Binary 4.44 MiB 4.44 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.08 MiB 2.08 MiB +1 B (+0.00%)

@wan9chi
wan9chi merged commit a24eede into main Jul 24, 2026
100 checks passed
@wan9chi
wan9chi deleted the deps/upstream-update branch July 24, 2026 02:37
wan9chi added a commit that referenced this pull request Jul 31, 2026
Release vite-plus v0.2.7: Clearer commands and smoother setup.

This release makes built-in and package-script collisions easier to
navigate, adds concurrency control to `vp pack`, and smooths migrations
and package-manager setup.

### Highlights

- Guide users to `vpr <name>` when a built-in shares a name with a
`package.json` script, preserve the exact command alias they typed, and
avoid duplicate notes from task-spawned tools
([#2262](#2262),
[#2259](#2259),
[vite-task#570](voidzero-dev/vite-task#570)), by
@wan9chi
- Add `--concurrency` to `vp pack` to limit parallel Rolldown builds,
and update tsdown `0.22.13` -> `0.22.14` and Vite DevTools `0.4.2` ->
`0.4.5` ([#2233](#2233)),
by @voidzero-guard[bot]
- Add read-only Svelte rune globals to migrated Oxlint overrides,
preventing false `no-undef` errors
([#2192](#2192)), by
@naokihaba
- Install package managers from npm tarballs with nonstandard top-level
directories, fixing Yarn 1.22.19 installation
([#2264](#2264)), by
@TheAlexLichter

### Fixes & Enhancements

- Preserve machine-readable command output by sending informational CLI
notes to stderr
([#2265](#2265)), by
@wan9chi
- Prevent the Oxc language server from crashing when contributors open
the Vite+ workspace in VS Code
([#2245](#2245)), by
@jong-kyung

### Docs

- Document the full procedure for removing Vite+ commit hooks
([#2218](#2218)), by
@TheAlexLichter
- Document per-process and per-machine ways to disable Vite+ commit
hooks without uninstalling them
([#2230](#2230)), by
@TheAlexLichter
- Clarify when to use built-in `vp` commands versus package scripts
through `vp run` or `vpr`, including migration and agent guidance
([#2255](#2255)), by
@wan9chi
- Document GitLab CI/CD setup with the reusable `setup-vp` template
([#2258](#2258)), by
@naokihaba

### Chore

- Run Semgrep security scans on pull requests and pushes to `main`
([#2223](#2223)), by
@Boshen
- Re-enable Vitest browser-mode CLI snapshot coverage on every supported
platform ([#2275](#2275)),
by @wan9chi
- Stabilize Windows CLI snapshot tests for interrupted installs and
browser port fallback
([#2282](#2282)), by
@wan9chi
- Replace deprecated shared JavaScript and TypeScript VS Code settings
with their current `js/ts.*` names
([#2246](#2246)), by
@jong-kyung

### Bundled Versions

| Tool | Version | Source |
| --------------- | ---------- |
-----------------------------------------------------------------------
|
| vite | `8.1.5` |
[`5e7fe12`](vitejs/vite@5e7fe12)
|
| rolldown | `1.2.0` |
[`03e1e34`](rolldown/rolldown@03e1e34)
|
| tsdown | `0.22.14` | [npm](https://npmx.dev/package/tsdown/v/0.22.14)
|
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.75.0` | [npm](https://npmx.dev/package/oxlint/v/1.75.0) |
| oxlint-tsgolint | `7.0.2001` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) |
| oxfmt | `0.60.0` | [npm](https://npmx.dev/package/oxfmt/v/0.60.0) |

### Upgrade

```bash
vp upgrade
```

**Full Changelog**:
v0.2.6...v0.2.7

---

Merging this PR will trigger the release workflow.

---------

Co-authored-by: voidzero-guard[bot] <278573678+voidzero-guard[bot]@users.noreply.github.com>
Co-authored-by: wan9chi <dk4rest@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant