Skip to content

chore(deps): update vite+ - autoclosed - #845

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite+
Closed

chore(deps): update vite+ - autoclosed#845
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite+

Conversation

@renovate

@renovate renovate Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@vitest/browser-playwright (source) 5.0.3 → 5.0.5 age adoption passing confidence
vite (source) 1.1.0 → 1.3.0 age adoption passing confidence
vite-plus (source) 1.1.0 → 1.3.0 age adoption passing confidence
vitest (source) 5.0.3 → 5.0.5 age adoption passing confidence

Release Notes

vitest-dev/vitest (@​vitest/browser-playwright)

v5.0.5

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v5.0.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
voidzero-dev/vite-plus (vite)

v1.3.0: vite-plus v1.3.0

Compare Source

Vite+ 1.3 adds create-vite-plus for starting a project without the global vp, new vp pm pkg and vp pm licenses commands, and package-manager dist-tags in vp env.

Features
  • Create a Vite+ project without installing the global vp through pnpm create vite-plus, npm create vite-plus@latest, yarn create vite-plus, or bun create vite-plus, which run vp create with the same arguments (docs) (#​3028, #​3048), by @​liangmiQwQ.
  • vp pm pkg get, set, delete, and fix read and update package.json through the detected package manager: npm 7.20.0 and later (fix from 9.8.0), pnpm 11.3.0 and later, and Bun 1.2.19 and later (docs) (#​3020), by @​jong-kyung.
  • vp pm licenses list (or ls) lists dependency licenses through pnpm 7.17.0 and later, Yarn Classic, or Bun 1.4.0 and later, with --json for machine-readable output (#​3037), by @​jong-kyung.
  • vp env accepts npm dist-tags in package-manager specs: vp env pin pnpm@latest-10 pins the exact version the tag points to, and vp env default pnpm@latest-10 follows the tag on each use (#​3047), by @​liangmiQwQ.
  • Upgrade the bundled tools (#​3058, #​3078), by @​voidzero-guard[bot] and @​fengmk2:
    • rolldown@1.2.13 to rolldown@1.2.14. Rolldown adds the output.charset option and fixes several tree-shaking, code-splitting, and renaming bugs.
    • vitest@5.0.4 to vitest@5.0.5, with fixes for browser mode, hook cleanup after a failing hook, and --changed with quoted file names.
Fixes & Enhancements
  • Import rewriting in vp migrate is up to 14 times faster on large projects, for example 78 s to 5.6 s on Dify (#​2987), by @​fengmk2.
  • vp dev prints Vite's ready in N ms line, so scripts that wait for it no longer time out after vp migrate. --debug, --filter, and --profile now take effect in vp dev, vp build, and vp preview, and vp preview stops when the build output is missing, as vite preview does (#​3056), by @​fengmk2.
  • vp staged prints one result line per task, such as ✔ vp check --fix, instead of the task list and Git progress. Warnings, errors, and rollback results stay visible, --verbose shows task output, and --debug keeps the full log (#​3060), by @​fengmk2.
  • After a successful upgrade, vp upgrade reminds you to run vp migrate in projects that use an older Vite+ version (#​3063), by @​KTrain5169.
  • The coding agent picker in vp create and vp migrate lists Claude Code under AGENTS.md and no longer offers a separate CLAUDE.md option. --agent claude and existing CLAUDE.md files still work (#​3055), by @​fengmk2.
Docs
  • Recommend setting runtimeOnFail: ignore and pmOnFail: ignore in the project's pnpm-workspace.yaml for pnpm 11 and later, since pnpm does not read runtimeOnFail from its global config (#​3077), by @​liangmiQwQ.
Chore
Bundled Versions
Tool Version Source Changelog
vite 8.3.4 b6c20f6 unchanged
rolldown 1.2.14 c9a8cda 1.2.14
tsdown 0.23.1 npm unchanged
vitest 5.0.5 npm 5.0.5
oxlint 1.88.0 npm unchanged
oxlint-tsgolint 7.0.2004 npm unchanged
oxfmt 0.73.0 npm unchanged
Upgrade
vp upgrade

Full Changelog: voidzero-dev/vite-plus@v1.2.0...v1.3.0

Published Packages
  • @voidzero-dev/vite-plus-core@1.3.0
  • vite-plus@1.3.0
  • create-vite-plus@1.3.0
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:1.3.0 vp build

Run any vp command without installing it; see the Docker guide for more.

Create a New App

Start a project without installing the global vp: create-vite-plus runs vp create through your package manager.

pnpm create vite-plus vite:application --directory my-app
cd my-app && pnpm exec vp dev

Run the command without arguments to pick a template interactively, and see the create guide for other package managers, templates, and options.

v1.2.0: vite-plus v1.2.0

Compare Source

Vite+ 1.2 supports authenticated private npm registries and shows a new vp run summary that counts cache hits among cache-enabled tasks and reports successful tasks. It also verifies installer downloads, shows download progress in vp upgrade, and fixes task cache misses in pnpm projects and PowerShell exit status.

Highlights
  • Support authenticated private npm registries (#​2624), by @​RSS1102.
  • The vp run summary now reads like 3/4 cache hit (75%), 9/10 successful, 2s saved.: the cache hit rate leaves out tasks with caching disabled, and the count of successful tasks replaces the count of failed tasks (vite-task#821), by @​wan9chi.
Features
  • The install.sh and install.ps1 installers check each downloaded platform archive against the registry's SHA-512 dist.integrity before extracting it, and stop when the digest is missing or does not match (#​2949), by @​fengmk2.
  • vp upgrade shows a progress bar while it downloads the new platform package, instead of looking frozen on slow connections (#​2968), by @​kshanxs.
  • When a task is not cached because it wrote a file it also read, the summary says it modified its inputs, and vp run --last-details shows the cache: { input, output } exclusions that let it be cached. Detailed summaries show each cause of an error on its own line, and an invalid --filter glob reports its error once (vite-task#783, vite-task#784, vite-task#761, vite-task#763), by @​wan9chi.
  • The task runner can be built without file-access tracking on additional platforms. Tasks on those platforms must configure both input and output explicitly to be cached (vite-task#829), by @​mfechner.
  • Upgrade the bundled tools (#​2935, #​2977, #​2998, #​3021, #​3039), by @​voidzero-guard[bot] and @​fengmk2:
    • vite@8.3.3 to vite@8.3.4.
    • rolldown@1.2.12 to rolldown@1.2.13.
    • tsdown@0.23.0 to tsdown@0.23.1.
    • vitest@5.0.3 to vitest@5.0.4. Vitest now turns on its on-disk caches by default, and vp test tasks run through vp run stay cacheable with them.
    • oxlint@1.87.0 to oxlint@1.88.0 and oxfmt@0.72.0 to oxfmt@0.73.0. Oxfmt now also formats TOML in Markdown code blocks and frontmatter. The new lint and format versions can flag code that passed before, so run vp fmt after upgrading if CI runs vp check.
    • vp migrate keeps Prettier and continues the rest of the migration when the Prettier config uses a format the bundled Oxfmt cannot read, such as .prettierrc.yml.
    • oxlint-tsgolint@7.0.2003 to oxlint-tsgolint@7.0.2004. Line disable comments apply to type-aware diagnostics again (tsgolint#1271), so disable comments moved to the } as T line for v1.1.0 need to move back above the statement.
    • Projects that use @effect/tsgo should stay on v1.1.0 for now. The latest @effect/tsgo@0.52.0 supports oxlint-tsgolint@7.0.2004 but not oxlint@1.88.0, so its install-time patch step fails until @effect/tsgo adds support.
Fixes & Enhancements
  • Reinstalling dependencies with pnpm, or installing them at another path, no longer causes task cache misses, and tasks that run pnpm run or pnpm exec no longer miss the cache after pnpm rechecks dependencies (vite-task#823, vite-task#824, vite-task#825), by @​wan9chi.
  • On macOS, tasks with automatic file-access tracking can run Node.js single executable applications, such as pnpm 11's standalone binary, and deno compile outputs (vite-task#840), by @​wan9chi.
  • Cached tasks can run scripts whose shebang names an interpreter path longer than 126 bytes (vite-task#788), by @​lifeiscontent.
  • When a cache hit's outputs cannot be restored, vp run fails with an error suggesting vp cache clean instead of reporting a successful cache hit (vite-task#770), by @​wan9chi.
  • vp run no longer stops every task when concurrent tasks write to a full output pipe, such as a CI log collector (vite-task#801), by @​naokihaba.
  • On Linux, tasks with automatic file-access tracking start faster (vite-task#817), by @​wan9chi.
  • In PowerShell, a failing vp command sets $? to False and stops && chains, as calling vp.exe directly does (#​2947), by @​fengmk2.
  • The Windows installer works when the PowerShell profile enables Set-StrictMode, and leaves the caller's strict mode unchanged (#​3005), by @​fengmk2.
  • Sourcing the Vite+ env script in POSIX shells is much faster with a long PATH, for example from 1.5 s to 6 ms in dash with 147 entries (#​2905), by @​jonykru.
  • Node.js version ranges from .node-version, engines.node, and devEngines.runtime, and package-manager version ranges, follow npm's semver rules (#​2835), by @​ryuapp.
  • vp migrate adds the tsdown <0.23 compatibility settings (deps.resolveDepSubpath and attw.profile) only for projects on an older tsdown, so upgrades from Vite+ 1.x or tsdown@0.23.0 and later keep the modern defaults (#​2910), by @​fengmk2.
  • vp create vite:generator keeps the description prompt visible instead of drawing the spinner over it, uses concrete version ranges for dependencies missing from the workspace catalog, adds rootDir: "src" to the generated tsconfig.json, and scaffolds generators on bingo@0.13.2 with Zod 4 option schemas (#​2940, #​2996, #​1831), by @​jong-kyung, @​fengmk2, and @​renovate[bot].
  • vp create stops processing an organization template archive that expands past fixed size, compression ratio, or entry count limits (#​2950), by @​fengmk2.
  • vp config skips Git config writes that change nothing, so concurrent runs across linked worktrees no longer fail with could not lock config file after the first setup (#​2958), by @​naokihaba.
  • Git hooks no longer append the legacy $VP_HOME/bin or ~/.vite-plus/bin directory to PATH. They use the inherited environment with the project's node_modules/.bin first, so projects without a local vite-plus dependency need the Vite+ bin directory on the Git client's PATH (#​2930), by @​liangmiQwQ.
  • Concurrent commands that need the same uninstalled Node.js version download it once; the others wait and reuse the installation (#​3024), by @​fengmk2.
  • @voidzero-dev/vite-plus-core declares the same postcss, optional fsevents, and Yuku parser ranges as the bundled Vite and tsdown, and @oxlint/plugins matches the bundled oxlint (#​2921), by @​fengmk2.
  • vp pack --help lists both default env prefixes, VITE_PACK_ and TSDOWN_ (#​3002), by @​jong-kyung.
  • Prompts and status lines use one space after status symbols (#​2928), by @​cpojer.
Docs
Chore
Bundled Versions
Tool Version Source Changelog
vite 8.3.4 b6c20f6 8.3.4
rolldown 1.2.13 f7de35f 1.2.13
tsdown 0.23.1 npm 0.23.1
vitest 5.0.4 npm 5.0.4
oxlint 1.88.0 npm 1.88.0
oxlint-tsgolint 7.0.2004 npm 7.0.2004
oxfmt 0.73.0 npm 0.73.0
Upgrade
vp upgrade
New Contributors

@​ryuapp @​jonykru @​myuron @​kshanxs @​mfechner

Full Changelog: voidzero-dev/vite-plus@v1.1.0...v1.2.0

Published Packages
  • @voidzero-dev/vite-plus-core@1.2.0
  • vite-plus@1.2.0
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:1.2.0 vp build

Run any vp command without installing it; see the Docker guide for more.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security

socket-security Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​voidzero-dev/​vite-plus-core@​1.1.0 ⏵ 1.3.098 +110077 +199 +1100
Updatednpm/​vitest@​5.0.3 ⏵ 5.0.59810079 +199 +2100
Updatednpm/​@​vitest/​browser-playwright@​5.0.3 ⏵ 5.0.59910086 +199100
Updatednpm/​vite-plus@​1.1.0 ⏵ 1.3.098100100100 +2100

View full report

@github-actions

github-actions Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

fspy benchmark

linux

dynamic/launch             change  +0.85%  [ -1.99% ..  +3.98%]  overhead   +50.03%
dynamic/access             change  +0.29%  [ -1.26% ..  +1.27%]  overhead   +12.18%
dynamic/access-relative    change  +0.10%  [ -0.99% ..  +1.00%]  overhead   +58.89%
dynamic/access-contended   change  +0.12%  [ -1.46% ..  +1.77%]  overhead   +13.87%
static/launch              change  +0.98%  [ -1.30% ..  +3.29%]  overhead  +179.75%
static/access              change  +0.04%  [ -0.70% ..  +0.95%]  overhead  +808.74%
static/access-relative     change  +0.32%  [ -0.52% ..  +1.37%]  overhead +1378.84%
static/access-contended    change  +0.32%  [ -0.50% ..  +0.98%]  overhead +3254.50%

macos

dynamic/launch             change  +0.35%  [ -2.76% ..  +4.00%]  overhead  +222.51%
dynamic/access             change  +0.01%  [ -2.46% ..  +2.78%]  overhead    +3.99%
dynamic/access-relative    change  +1.43%  [ -4.32% ..  +7.11%]  overhead  +260.23%
dynamic/access-contended   change  +0.29%  [ -5.69% ..  +4.51%]  overhead    +4.56%

windows

dynamic/launch             change  -0.64%  [ -4.85% ..  +1.26%]  overhead   +24.82%
dynamic/access             change  +0.37%  [ -0.92% ..  +1.50%]  overhead    +1.30%
dynamic/access-relative    change  +0.18%  [ -2.88% ..  +5.04%]  overhead    +1.29%
dynamic/access-contended   change  +0.18%  [ -1.42% ..  +1.43%]  overhead    +1.83%

@renovate
renovate Bot force-pushed the renovate/vite+ branch 5 times, most recently from b56b3b6 to 6f7412b Compare October 14, 2026 10:08
@renovate renovate Bot changed the title chore(deps): update vite+ to v5.0.4 chore(deps): update vite+ Oct 14, 2026
@renovate
renovate Bot force-pushed the renovate/vite+ branch 4 times, most recently from 91dd9a9 to 3bd4920 Compare October 15, 2026 16:12
@renovate renovate Bot changed the title chore(deps): update vite+ chore(deps): update vite+ - autoclosed Oct 16, 2026
@renovate renovate Bot closed this Oct 16, 2026
@renovate
renovate Bot deleted the renovate/vite+ branch October 16, 2026 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants