chore(deps): update vite-plus to v0.2.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	0.2.2 → 0.2.6
vite-plus (source)	0.2.2 → 0.2.6

---

Release Notes

voidzero-dev/vite-plus (vite)

v0.2.6: vite-plus v0.2.6: Stable type-aware linting and more reliable task caching

Compare Source

This release moves Vite+'s type-aware linting to the stable tsgolint 7 engine, updates the bundled build and formatting tools, strengthens vp run caching and workspace discovery, and removes the redundant vp build startup banner.

Highlights

• Move bundled type-aware linting to stable tsgolint 7, and update Vite 8.1.4 -> 8.1.5, Rolldown 1.1.5 -> 1.2.0, tsdown 0.22.7 -> 0.22.13, Oxlint 1.73.0 -> 1.75.0, oxlint-tsgolint 0.24.0 -> 7.0.2001, and Oxfmt 0.58.0 -> 0.60.0 (#​2214), by @​voidzero-guard[bot]
• Improve vp run reliability by caching much larger automatically tracked input sets, discovering npm workspaces whose patterns start with ./, and providing more accurate error messages (vite-task#554, vite-task#547, vite-task#552, #​2215), by @​wan9chi and @​liangmiQwQ
• Remove the redundant Vite startup banner from vp build output and fail fast when upstream Vite changes invalidate Vite+ branding patches (#​2200, #​2205), by @​liangmiQwQ

Refactor

• Deduplicate package-manager version gates in migration catalog handling (#​2216), by @​jong-kyung
• Unify static and generated CLI help under one document model and renderer (#​2211), by @​jong-kyung
• Reuse shared subprocess exit-status handling across global CLI command paths (#​2196), by @​jong-kyung

Docs

• Fix broken documentation anchors and add Migration Rules to the Migrate sidebar (#​2203), by @​charpeni

Chore

• Stabilize vp create build-approval snapshots by removing package-age timing from those fixtures (#​2224), by @​wan9chi
• Remove the temporary release workflow dispatch used for the previous release (#​2193), by @​wan9chi
• Share package-manager fixtures across CLI tests (#​2197), by @​jong-kyung
• Remove stale raw Oxlint and Oxfmt development dependencies that bypassed repository editor configuration (#​2187), by @​liangmiQwQ

Bundled Versions

Tool	Version	Source
vite	8.1.5	5e7fe12
rolldown	1.2.0	03e1e34
tsdown	0.22.13	npm
vitest	4.1.10	npm
oxlint	1.75.0	npm
oxlint-tsgolint	7.0.2001	npm
oxfmt	0.60.0	npm

Upgrade

vp upgrade

New Contributors

Welcome @​charpeni.

Full Changelog: voidzero-dev/vite-plus@v0.2.5...v0.2.6

Published Packages

• @voidzero-dev/vite-plus-core@0.2.6
• vite-plus@0.2.6

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: cd064c6

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.6 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.5: vite-plus v0.2.5: Cleaner environments and more reliable workflows

Compare Source

This release adds cleanup and package version commands, supports TypeScript 7 declaration generation, reduces the standalone binary size, and hardens task tracking, CLI output, package-manager routing, Docker workflows, and project scaffolding.

Highlights

• Add vp env clean to remove unused managed Node.js runtimes and package-manager caches (#​2003), by @​liangmiQwQ
• Add vp pm version, forwarding native version commands to npm, pnpm, Yarn, and Bun (#​2127), by @​jong-kyung
• Add TypeScript 7 support to declaration generation and generated library projects with tsdown 0.22.7 (#​2104, #​2168), by @​wan9chi
• Improve automatic task input tracking for Bun on macOS, Linux containers with constrained /dev/shm, and Windows process images, reduce Windows backing-file allocation, and clarify task wait failures (vite-task#515, vite-task#518, vite-task#523, vite-task#524, vite-task#542, #​2126, #​2167), by @​wan9chi
• Prevent CLI diagnostics from truncating or panicking when inherited standard output or error is nonblocking (#​2172, #​2173), by @​wan9chi

Fixes & Enhancements

• Reduce standalone vp binary sizes by about 5% on Linux and macOS and 19% on Windows (#​2043), by @​fengmk2
• Keep the Docker image non-root by default while allowing passwordless sudo for Playwright browser dependencies and system packages (#​2088), by @​fengmk2
• Ignore .env and .env.* in generated projects while keeping .env.example trackable (#​2095), by @​forehalo
• Create vp-use.cmd after the Windows environment bin directory is ready and document its Command Prompt-only usage (#​2128), by @​liangmiQwQ
• Render user-facing process statuses and paths without Rust debug wrappers (#​2130), by @​liangmiQwQ
• Make vp dedupe fall back to yarn install with a warning on Yarn Classic (#​2139), by @​jong-kyung
• Ensure package-manager child processes, including Bun, can always find the managed Node.js runtime (#​2158), by @​BlankParticle

Docs

• Update the release-manager post-release guidance (#​2096), by @​wan9chi
• Add Windows to the Namespace sponsor credit (#​2108), by @​fengmk2
• Document installer and runtime environment variables, registry settings, TLS options, and precedence rules (#​2114), by @​yukinoshi
• Mark shell examples in CONTRIBUTING.md as Bash code blocks (#​2159), by @​BlankParticle

Chore

• Assign prepared release PRs to the workflow actor (#​2094), by @​wan9chi
• Complete the PTY snapshot migration and harden the runner, fixtures, release-version redaction, registry teardown, timeouts, and Linux parallelism (#​2071, #​2080, #​2084, #​2099, #​2102, #​2103, #​2107, #​2109, #​2115, #​2117, #​2118, #​2119, #​2120, #​2121, #​2131, #​2132, #​2134, #​2137, #​2138, #​2141, #​2143, #​2145, #​2182), by @​fengmk2 and @​wan9chi
• Expose Vite+ managed binaries consistently inside snapshot fixtures (#​2110), by @​liangmiQwQ
• Exclude PTY snapshot configuration from Vitest discovery and remove the legacy snapshot infrastructure (#​2135, #​2146), by @​jong-kyung
• Modernize Windows runners, registry bridge publishing, native size reporting, merge-base comparisons, and package-manager installation CI (#​2083, #​2100, #​2105, #​2106, #​2112, #​2133), by @​fengmk2
• Verify that created monorepo libraries emit declarations in CI (#​2171), by @​wan9chi

Bundled Versions

Tool	Version	Source
vite	8.1.4	a477454
rolldown	1.1.5	f09947a
tsdown	0.22.7	npm
vitest	4.1.10	npm
oxlint	1.73.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.58.0	npm

Upgrade

vp upgrade

New Contributors

Welcome @​yukinoshi and @​BlankParticle.

Full Changelog: voidzero-dev/vite-plus@v0.2.4...v0.2.5

Published Packages

• @voidzero-dev/vite-plus-core@0.2.5
• vite-plus@0.2.5

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: 93dc59a

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.5 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.4: vite-plus v0.2.4: Vitest security hotfix

Compare Source

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights

• Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#​2089), by @​voidzero-guard[bot]

Chore

• Add the standard release-manager skill for vite-plus release operations (#​2019), by @​fengmk2

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.10	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages

• @voidzero-dev/vite-plus-core@0.2.4
• vite-plus@0.2.4

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.3: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

Compare Source

A patch release that fixes static config extraction for vite.config.ts files whose defineConfig comes from a preset or custom wrapper (no longer misread as Vite+'s own), fixes vp create for org templates on registries that strip custom package fields, cleans up terminal output after Ctrl-C during vp run, and updates bundled Vite to 8.1.3.

Highlights

• Custom VP_HOME is honored on every run: the global vp now respects a user-set VP_HOME for its home directory instead of falling back to ~/.vite-plus, and persists it in the generated env files, so a custom install location no longer produces multiple instances or unusable packages (#​2029), by @​liangmiQwQ

Features

• Upgrade bundled Vite from 8.1.2 to 8.1.3 (inlined CSS after the shebang line, CSS preload for nested dynamic imports, SSR stacktrace column fix) (#​2042), by @​voidzero-guard[bot]

Fixes & Enhancements

• vp run no longer misreads a vite.config.ts when its defineConfig comes from a preset or a custom wrapper instead of vite-plus or vite. Such configs are now evaluated at runtime rather than assumed to be Vite+'s own, so projects that use them no longer wrongly report Task "build" not found (#​2060, #​2075), by @​liangmiQwQ and @​fengmk2
• Killing a vp run task with Ctrl-C no longer leaves odd OSC escape sequences in the terminal; vp defers its own Ctrl-C handling until the child process exits (#​2079), by @​forehalo
• vp migrate: rewriting a package.json prettier script now emits a single --check, so scripts that combined --check with --list-different / -l / -c no longer produce a duplicated vp fmt --check --check (#​2044), by @​shulaoda
• vp create @​org:name: read the org template catalog (createConfig) from the published tarball when the registry (e.g. GitHub Packages) strips custom fields from packument metadata (#​2063), by @​hiro-daikin
• vp run: missing env vars requested through @voidzero-dev/vite-task-client now return undefined instead of null, preserving Vite production NODE_ENV semantics when builds run through vp run (vite-task#508, via #​2076), by @​wan9chi

Refactor

• static_config: drop the unreachable vite.config.json branch (#​2045), and remove unused exported CLI helpers (#​2046), by @​shulaoda

Docs

• Update the announcement links and callout for the beta release (#​2027), remove the stale Dockerfile.alpine comment (#​2068), by @​fengmk2
• Add the missing pnpm-workspace.yaml to the docs Dockerfile (#​2059), by @​wan-kong
• Refresh the root agent guide (#​2072), by @​jong-kyung

Chore

• Cross-compile Windows tests and CLI binaries on Linux with cargo-xwin (#​1824), install local vite-plus builds through a local npm registry (#​2021), fast docs format check for docs-only PRs (#​2028), pack local dirs for the registry bridge instead of pkg.pr.new (#​2038), remove the stale create workflow updater (#​2061), and add PTY-based interactive CLI snapshot tests (#​2052), by @​fengmk2
• Cache vp run output for docs builds (#​2006), by @​wan9chi
• Remove legacy completion cleanup (#​2050), by @​nekomoyi
• Update the crate-ci/typos action (#​2039) and GitHub Actions (#​2055, #​1905), by @​renovate[bot]
• Refresh the Node.js release keyring (#​2058) and the docs trusted-stack stats (#​2064), by @​voidzero-guard[bot]

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.9	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

@​wan-kong and @​hiro-daikin made their first contributions.

Full Changelog: voidzero-dev/vite-plus@v0.2.2...v0.2.3

Published Packages

• @voidzero-dev/vite-plus-core@0.2.3
• vite-plus@0.2.3

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.3 vp build

Run any vp command without installing it; see the Docker guide for more.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​voidzero-dev/​vite-plus-core@​0.2.6
	vite-plus@​0.2.6

View full report