chore(deps): update vite-plus to v0.2.7 by renovate[bot] · Pull Request #107 · voidzero-dev/setup-vp

renovate · 2026-07-10T08:51:09Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	`0.2.2` → `0.2.7`
vite-plus (source)	`0.2.2` → `0.2.7`

Release Notes

voidzero-dev/vite-plus (vite)

`v0.2.7`: vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

Compare Source

This release points users to vpr <name> when a Vite+ built-in command and package script share a name, adds concurrency control to vp pack, and smooths migrations and package-manager setup.

Highlights

Point users to vpr <name> when a Vite+ built-in command and package.json script share a name (#2259, #2262, #2265, vite-task#570), by @wan9chi
Add --concurrency to vp pack to limit parallel Rolldown builds, and update tsdown 0.22.13 -> 0.22.14 and Vite DevTools 0.4.2 -> 0.4.5 (#2233), by @voidzero-guard[bot]
Add read-only Svelte rune globals to migrated Oxlint overrides, preventing false no-undef errors (#2192), by @naokihaba
Install package managers from npm tarballs with nonstandard top-level directories, fixing Yarn 1.22.19 installation (#2264), by @TheAlexLichter

Fixes & Enhancements

Prevent the Oxc language server from crashing when contributors open the Vite+ workspace in VS Code (#2245), by @jong-kyung

Docs

Document the full procedure for removing Vite+ commit hooks (#2218), by @TheAlexLichter
Document per-process and per-machine ways to disable Vite+ commit hooks without uninstalling them (#2230), by @TheAlexLichter
Clarify when to use built-in vp commands versus package scripts through vp run or vpr, including migration and agent guidance (#2255), by @wan9chi
Document GitLab CI/CD setup with the reusable setup-vp template (#2258), by @naokihaba

Chore

Run Semgrep security scans on pull requests and pushes to main (#2223), by @Boshen
Re-enable Vitest browser-mode CLI snapshot coverage on every supported platform (#2275), by @wan9chi
Stabilize Windows CLI snapshot tests for interrupted installs and browser port fallback (#2282), by @wan9chi
Replace deprecated shared JavaScript and TypeScript VS Code settings with their current js/ts.* names (#2246), by @jong-kyung

Bundled Versions

Tool	Version	Source
vite	`8.1.5`	`5e7fe12`
rolldown	`1.2.0`	`03e1e34`
tsdown	`0.22.14`	npm
vitest	`4.1.10`	npm
oxlint	`1.75.0`	npm
oxlint-tsgolint	`7.0.2001`	npm
oxfmt	`0.60.0`	npm

Upgrade

vp upgrade

Full Changelog: voidzero-dev/vite-plus@v0.2.6...v0.2.7

Published Packages

@voidzero-dev/vite-plus-core@0.2.7
vite-plus@0.2.7

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: c17e1c3

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.7 vp build

Run any vp command without installing it; see the Docker guide for more.

`v0.2.6`: vite-plus v0.2.6: Stable type-aware linting and more reliable task caching

Compare Source

This release moves Vite+'s type-aware linting to the stable tsgolint 7 engine, updates the bundled build and formatting tools, strengthens vp run caching and workspace discovery, and removes the redundant vp build startup banner.

Highlights

Move bundled type-aware linting to stable tsgolint 7, and update Vite 8.1.4 -> 8.1.5, Rolldown 1.1.5 -> 1.2.0, tsdown 0.22.7 -> 0.22.13, Oxlint 1.73.0 -> 1.75.0, oxlint-tsgolint 0.24.0 -> 7.0.2001, and Oxfmt 0.58.0 -> 0.60.0 (#2214), by @voidzero-guard[bot]
Improve vp run reliability by caching much larger automatically tracked input sets, discovering npm workspaces whose patterns start with ./, and providing more accurate error messages (vite-task#554, vite-task#547, vite-task#552, #2215), by @wan9chi and @liangmiQwQ
Remove the redundant Vite startup banner from vp build output and fail fast when upstream Vite changes invalidate Vite+ branding patches (#2200, #2205), by @liangmiQwQ

Refactor

Deduplicate package-manager version gates in migration catalog handling (#2216), by @jong-kyung
Unify static and generated CLI help under one document model and renderer (#2211), by @jong-kyung
Reuse shared subprocess exit-status handling across global CLI command paths (#2196), by @jong-kyung

Docs

Fix broken documentation anchors and add Migration Rules to the Migrate sidebar (#2203), by @charpeni

Chore

Stabilize vp create build-approval snapshots by removing package-age timing from those fixtures (#2224), by @wan9chi
Remove the temporary release workflow dispatch used for the previous release (#2193), by @wan9chi
Share package-manager fixtures across CLI tests (#2197), by @jong-kyung
Remove stale raw Oxlint and Oxfmt development dependencies that bypassed repository editor configuration (#2187), by @liangmiQwQ

Bundled Versions

Tool	Version	Source
vite	`8.1.5`	`5e7fe12`
rolldown	`1.2.0`	`03e1e34`
tsdown	`0.22.13`	npm
vitest	`4.1.10`	npm
oxlint	`1.75.0`	npm
oxlint-tsgolint	`7.0.2001`	npm
oxfmt	`0.60.0`	npm

Upgrade

vp upgrade

New Contributors

Welcome @charpeni.

Full Changelog: voidzero-dev/vite-plus@v0.2.5...v0.2.6

Published Packages

@voidzero-dev/vite-plus-core@0.2.6
vite-plus@0.2.6

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: cd064c6

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.6 vp build

Run any vp command without installing it; see the Docker guide for more.

`v0.2.5`: vite-plus v0.2.5: Cleaner environments and more reliable workflows

Compare Source

This release adds cleanup and package version commands, supports TypeScript 7 declaration generation, reduces the standalone binary size, and hardens task tracking, CLI output, package-manager routing, Docker workflows, and project scaffolding.

Highlights

Add vp env clean to remove unused managed Node.js runtimes and package-manager caches (#2003), by @liangmiQwQ
Add vp pm version, forwarding native version commands to npm, pnpm, Yarn, and Bun (#2127), by @jong-kyung
Add TypeScript 7 support to declaration generation and generated library projects with tsdown 0.22.7 (#2104, #2168), by @wan9chi
Improve automatic task input tracking for Bun on macOS, Linux containers with constrained /dev/shm, and Windows process images, reduce Windows backing-file allocation, and clarify task wait failures (vite-task#515, vite-task#518, vite-task#523, vite-task#524, vite-task#542, #2126, #2167), by @wan9chi
Prevent CLI diagnostics from truncating or panicking when inherited standard output or error is nonblocking (#2172, #2173), by @wan9chi

Fixes & Enhancements

Reduce standalone vp binary sizes by about 5% on Linux and macOS and 19% on Windows (#2043), by @fengmk2
Keep the Docker image non-root by default while allowing passwordless sudo for Playwright browser dependencies and system packages (#2088), by @fengmk2
Ignore .env and .env.* in generated projects while keeping .env.example trackable (#2095), by @forehalo
Create vp-use.cmd after the Windows environment bin directory is ready and document its Command Prompt-only usage (#2128), by @liangmiQwQ
Render user-facing process statuses and paths without Rust debug wrappers (#2130), by @liangmiQwQ
Make vp dedupe fall back to yarn install with a warning on Yarn Classic (#2139), by @jong-kyung
Ensure package-manager child processes, including Bun, can always find the managed Node.js runtime (#2158), by @BlankParticle

Docs

Update the release-manager post-release guidance (#2096), by @wan9chi
Add Windows to the Namespace sponsor credit (#2108), by @fengmk2
Document installer and runtime environment variables, registry settings, TLS options, and precedence rules (#2114), by @yukinoshi
Mark shell examples in CONTRIBUTING.md as Bash code blocks (#2159), by @BlankParticle

Chore

Assign prepared release PRs to the workflow actor (#2094), by @wan9chi
Complete the PTY snapshot migration and harden the runner, fixtures, release-version redaction, registry teardown, timeouts, and Linux parallelism (#2071, #2080, #2084, #2099, #2102, #2103, #2107, #2109, #2115, #2117, #2118, #2119, #2120, #2121, #2131, #2132, #2134, #2137, #2138, #2141, #2143, #2145, #2182), by @fengmk2 and @wan9chi
Expose Vite+ managed binaries consistently inside snapshot fixtures (#2110), by @liangmiQwQ
Exclude PTY snapshot configuration from Vitest discovery and remove the legacy snapshot infrastructure (#2135, #2146), by @jong-kyung
Modernize Windows runners, registry bridge publishing, native size reporting, merge-base comparisons, and package-manager installation CI (#2083, #2100, #2105, #2106, #2112, #2133), by @fengmk2
Verify that created monorepo libraries emit declarations in CI (#2171), by @wan9chi

Bundled Versions

Tool	Version	Source
vite	`8.1.4`	`a477454`
rolldown	`1.1.5`	`f09947a`
tsdown	`0.22.7`	npm
vitest	`4.1.10`	npm
oxlint	`1.73.0`	npm
oxlint-tsgolint	`0.24.0`	npm
oxfmt	`0.58.0`	npm

Upgrade

vp upgrade

New Contributors

Welcome @yukinoshi and @BlankParticle.

Full Changelog: voidzero-dev/vite-plus@v0.2.4...v0.2.5

Published Packages

@voidzero-dev/vite-plus-core@0.2.5
vite-plus@0.2.5

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: 93dc59a

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.5 vp build

Run any vp command without installing it; see the Docker guide for more.

`v0.2.4`: vite-plus v0.2.4: Vitest security hotfix

Compare Source

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights

Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#2089), by @voidzero-guard[bot]

Chore

Add the standard release-manager skill for vite-plus release operations (#2019), by @fengmk2

Bundled Versions

Tool	Version	Source
vite	`8.1.3`	`578ffb8`
rolldown	`1.1.4`	`6cbd233`
tsdown	`0.22.3`	npm
vitest	`4.1.10`	npm
oxlint	`1.72.0`	npm
oxlint-tsgolint	`0.24.0`	npm
oxfmt	`0.57.0`	npm

Upgrade

vp upgrade

New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages

@voidzero-dev/vite-plus-core@0.2.4
vite-plus@0.2.4

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build

Run any vp command without installing it; see the Docker guide for more.

`v0.2.3`: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

Compare Source

A patch release that fixes static config extraction for vite.config.ts files whose defineConfig comes from a preset or custom wrapper (no longer misread as Vite+'s own), fixes vp create for org templates on registries that strip custom package fields, cleans up terminal output after Ctrl-C during vp run, and updates bundled Vite to 8.1.3.

Highlights

Custom VP_HOME is honored on every run: the global vp now respects a user-set VP_HOME for its home directory instead of falling back to ~/.vite-plus, and persists it in the generated env files, so a custom install location no longer produces multiple instances or unusable packages (#2029), by @liangmiQwQ

Features

Upgrade bundled Vite from 8.1.2 to 8.1.3 (inlined CSS after the shebang line, CSS preload for nested dynamic imports, SSR stacktrace column fix) (#2042), by @voidzero-guard[bot]

Fixes & Enhancements

vp run no longer misreads a vite.config.ts when its defineConfig comes from a preset or a custom wrapper instead of vite-plus or vite. Such configs are now evaluated at runtime rather than assumed to be Vite+'s own, so projects that use them no longer wrongly report Task "build" not found (#2060, #2075), by @liangmiQwQ and @fengmk2
Killing a vp run task with Ctrl-C no longer leaves odd OSC escape sequences in the terminal; vp defers its own Ctrl-C handling until the child process exits (#2079), by @forehalo
vp migrate: rewriting a package.json prettier script now emits a single --check, so scripts that combined --check with --list-different / -l / -c no longer produce a duplicated vp fmt --check --check (#2044), by @shulaoda
vp create @org:name: read the org template catalog (createConfig) from the published tarball when the registry (e.g. GitHub Packages) strips custom fields from packument metadata (#2063), by @hiro-daikin
vp run: missing env vars requested through @voidzero-dev/vite-task-client now return undefined instead of null, preserving Vite production NODE_ENV semantics when builds run through vp run (vite-task#508, via #2076), by @wan9chi

Refactor

static_config: drop the unreachable vite.config.json branch (#2045), and remove unused exported CLI helpers (#2046), by @shulaoda

Docs

Update the announcement links and callout for the beta release (#2027), remove the stale Dockerfile.alpine comment (#2068), by @fengmk2
Add the missing pnpm-workspace.yaml to the docs Dockerfile (#2059), by @wan-kong
Refresh the root agent guide (#2072), by @jong-kyung

Chore

Cross-compile Windows tests and CLI binaries on Linux with cargo-xwin (#1824), install local vite-plus builds through a local npm registry (#2021), fast docs format check for docs-only PRs (#2028), pack local dirs for the registry bridge instead of pkg.pr.new (#2038), remove the stale create workflow updater (#2061), and add PTY-based interactive CLI snapshot tests (#2052), by @fengmk2
Cache vp run output for docs builds (#2006), by @wan9chi
Remove legacy completion cleanup (#2050), by @nekomoyi
Update the crate-ci/typos action (#2039) and GitHub Actions (#2055, #1905), by @renovate[bot]
Refresh the Node.js release keyring (#2058) and the docs trusted-stack stats (#2064), by @voidzero-guard[bot]

Bundled Versions

Tool	Version	Source
vite	`8.1.3`	`578ffb8`
rolldown	`1.1.4`	`6cbd233`
tsdown	`0.22.3`	npm
vitest	`4.1.9`	npm
oxlint	`1.72.0`	npm
oxlint-tsgolint	`0.24.0`	npm
oxfmt	`0.57.0`	npm

Upgrade

vp upgrade

New Contributors

@wan-kong and @hiro-daikin made their first contributions.

Full Changelog: voidzero-dev/vite-plus@v0.2.2...v0.2.3

Published Packages

@voidzero-dev/vite-plus-core@0.2.3
vite-plus@0.2.3

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.3 vp build

Run any vp command without installing it; see the Docker guide for more.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-07-10T08:51:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@voidzero-dev/vite-plus-core@0.2.7
	vite-plus@0.2.7

View full report

renovate · 2026-08-03T19:15:53Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot added the needs-bundle-rebuild Rebuild dist/ bundle and push to the PR (Renovate bumps to bundled deps) label Jul 10, 2026

renovate Bot force-pushed the renovate/vite-plus branch from e3ed639 to aadf97f Compare July 12, 2026 20:41

renovate Bot changed the title ~~chore(deps): update dependency vite-plus to v0.2.4~~ chore(deps): update vite-plus to v0.2.4 Jul 12, 2026

renovate Bot changed the title ~~chore(deps): update vite-plus to v0.2.4~~ chore(deps): update vite-plus Jul 19, 2026

renovate Bot force-pushed the renovate/vite-plus branch 2 times, most recently from 8f518a6 to 245b998 Compare July 26, 2026 16:23

renovate Bot changed the title ~~chore(deps): update vite-plus~~ chore(deps): update vite-plus to v0.2.6 Jul 26, 2026

renovate Bot force-pushed the renovate/vite-plus branch from 245b998 to 46dae18 Compare August 2, 2026 17:48

renovate Bot changed the title ~~chore(deps): update vite-plus to v0.2.6~~ chore(deps): update vite-plus Aug 2, 2026

renovate Bot force-pushed the renovate/vite-plus branch from 46dae18 to 4bc5460 Compare August 3, 2026 16:15

renovate Bot changed the title ~~chore(deps): update vite-plus~~ chore(deps): update vite-plus to v0.2.7 Aug 3, 2026

renovate Bot and others added 2 commits August 4, 2026 00:20

chore(deps): update vite-plus to v0.2.7

3702f11

chore: rebuild dist and restore pnpm-workspace.yaml comment

1734087

fengmk2 force-pushed the renovate/vite-plus branch from 4bc5460 to 1734087 Compare August 3, 2026 16:21

fengmk2 merged commit c9c4510 into main Aug 4, 2026
81 of 82 checks passed

fengmk2 deleted the renovate/vite-plus branch August 4, 2026 02:28

Navigation Menu

Uh oh!

chore(deps): update vite-plus to v0.2.7 - #107

chore(deps): update vite-plus to v0.2.7#107
fengmk2 merged 2 commits into
mainfrom
renovate/vite-plus

renovate Bot commented Jul 10, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 10, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.2.7: vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

Highlights

Fixes & Enhancements

Docs

Chore

Bundled Versions

Upgrade

Published Packages

Installation

v0.2.6: vite-plus v0.2.6: Stable type-aware linting and more reliable task caching

Highlights

Refactor

Docs

Chore

Bundled Versions

Upgrade

New Contributors

Published Packages

Installation

v0.2.5: vite-plus v0.2.5: Cleaner environments and more reliable workflows

Highlights

Fixes & Enhancements

Docs

Chore

Bundled Versions

Upgrade

New Contributors

Published Packages

Installation

v0.2.4: vite-plus v0.2.4: Vitest security hotfix

Highlights

Chore

Bundled Versions

Upgrade

New Contributors

Published Packages

Installation

v0.2.3: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

Highlights

Features

Fixes & Enhancements

Refactor

Docs

Chore

Bundled Versions

Upgrade

New Contributors

Published Packages

Installation

Configuration

Uh oh!

socket-security Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Aug 3, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jul 10, 2026 •

edited

Loading

`v0.2.7`: vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

`v0.2.6`: vite-plus v0.2.6: Stable type-aware linting and more reliable task caching

`v0.2.5`: vite-plus v0.2.5: Cleaner environments and more reliable workflows

`v0.2.4`: vite-plus v0.2.4: Vitest security hotfix

`v0.2.3`: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

socket-security Bot commented Jul 10, 2026 •

edited

Loading