Skip to content

chore(deps): update dependency vite-plus to v0.1.22#174

Merged
kodiakhq[bot] merged 2 commits into
mainfrom
renovate/vite
Jun 26, 2026
Merged

chore(deps): update dependency vite-plus to v0.1.22#174
kodiakhq[bot] merged 2 commits into
mainfrom
renovate/vite

Conversation

@renovate

@renovate renovate Bot commented May 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
vite-plus (source) 0.1.190.1.22 age confidence

Release Notes

voidzero-dev/vite-plus (vite-plus)

v0.1.22: vite-plus v0.1.22

Compare Source

A critical Vitest browser-mode security fix, parallel vp add -g installs, a built-in oxlint rule to prefer vite-plus imports, and a new --git switch for vp create.

Highlights
  • Security: bundled vitest bumped to 4.1.6 to address GHSA-2h32-95rg-cppp (Critical, CVSS 9.6), an XSS to RCE chain via the otelCarrier query parameter in Vitest browser mode (#​1633)
  • Parallel global install: vp add/install/update -g now installs packages concurrently with a progress bar and a --concurrency flag (default 5) (#​1597)
  • Prefer vite-plus imports: new bundled oxlint rule rewrites vite/vitest imports to vite-plus, enabled by default in generated and migrated lint configs (#​1408)
  • Git init on scaffold: vp create learns --git/--no-git (interactive prompt; auto-commits "Initial commit from Vite+") (#​1484)
Features
  • Spawn npm for global installation in parallel with a progress bar and a --concurrency option (#​1597), by @​liangmiQwQ
  • Add bundled oxlint rule to prefer vite-plus imports over vite/vitest (#​1408), by @​Han5991
  • vp create: initialize a git repository and create an initial commit on scaffold (#​1484), by @​ryohidaka
  • vp create: rename underscore-prefixed files (_gitignore, _npmrc, _yarnrc.yml) to dotfiles for @org/create bundled templates (#​1574), by @​jong-kyung
  • Add VP_PR_VERSION env var to install unreleased PR builds via pkg.pr.new (#​1578), by @​fengmk2
Fixes & Enhancements
  • Skip merging standalone .oxfmtrc/.oxlintrc config when the fmt:/lint: key is already declared in vite.config.ts (fixes duplicate-block regression in vp create fate) (#​1601), by @​fengmk2
  • Suppress the VITE+ - The Unified Toolchain for the Web banner for vp lint --lsp, vp fmt --lsp, and vp fmt --stdin-filepath so stdout stays a pure LSP / formatter stream (#​1619), by @​fengmk2
  • vp create: detect output directory when running in the current directory (#​1606), by @​jong-kyung
  • vp update -g: skip installs when the recorded global package version already matches the npm-resolved version, and tolerate string/array outputs from npm view ... version --json (#​1596), by @​leno23
  • vp create: preserve single-segment project path in updateWorkspaceConfig (#​1582), by @​jong-kyung
  • vp env use: keep the change session-scoped on Windows (#​1577), by @​fengmk2
  • vp rebuild: accept positional package names (#​1564), by @​fengmk2
  • Adopt the new vite-task error formatter; errors now print as error: <top-level> plus * <source> chain lines, with bold-red highlight on a TTY (vite-task#390), by @​branchseer
  • vite-task: forward LOCALAPPDATA so Node's compile cache stays outside the workspace on Windows (vite-task#389), by @​branchseer
  • Bump vite-task to c945cc0 (#​1628), by @​branchseer
Refactor
Docs
Chore
Bundled Versions
Tool Version Source
vite 8.0.11 66f3194
rolldown 1.0.0 ac5c710
tsdown 0.22.0 npm
vitest 4.1.6 npm
oxlint 1.63.0 npm
oxlint-tsgolint 0.22.1 npm
oxfmt 0.48.0 npm
New Contributors

Welcome to all new contributors! 🎉

@​nozomee, @​ryohidaka, @​leno23

Full Changelog: voidzero-dev/vite-plus@v0.1.21...v0.1.22

Published Packages
  • @voidzero-dev/vite-plus-core@0.1.22
  • @voidzero-dev/vite-plus-test@0.1.22
  • vite-plus@0.1.22
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

v0.1.21: vite-plus v0.1.21 — Create, Migrate & Local CLI Power-Up

Compare Source

vp create learns @org templates, vp migrate rewrites more of your codebase, and the local CLI gains full vp pm parity.

Highlights
  • Package-manager parity — every vp pm command now works from the local CLI (#​1495)
  • More Nushell support — broader shell coverage for vp env and related commands (#​1305)
  • Smarter vp migrate — rewrites named catalogs (#​1493), tsdown/client imports & declare module statements (#​1541), and tsdown/client / vite/client in tsconfig compilerOptions.types (#​1542)
  • vp create @org templates — scoped default templates are now supported (#​1398)
Features
Fixes & Enhancements
Refactor
Docs
Chore
Bundled Versions
Tool Version Source
vite 8.0.11 66f3194
rolldown 1.0.0 ac5c710
tsdown 0.22.0 npm
vitest 4.1.5 npm
oxlint 1.63.0 npm
oxlint-tsgolint 0.22.1 npm
oxfmt 0.48.0 npm
Published Packages
  • @voidzero-dev/vite-plus-core@0.1.21
  • @voidzero-dev/vite-plus-test@0.1.21
  • vite-plus@0.1.21
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Upgrade:

vp upgrade
New Contributors

Welcome to all new contributors! 🎉

@​nurazon59, @​mikkurogue, @​Mister-Hope, @​salmanmkc, @​XiNiHa

Full Changelog: voidzero-dev/vite-plus@v0.1.20...v0.1.21

v0.1.20: vite-plus v0.1.20

Compare Source

This release focuses on experience improvements, bug fixes, and dependency updates.

Features
  • Auto-migrate ESLint/Prettier to oxlint/oxfmt in vp create (#​1434) — @​fengmk2
  • Multi-editor selection in vp create (#​1438) — @​lyzno1
  • Ship docs directly at vite-plus/docs (#​1440) — @​cpojer
  • Redefine vp check --no-lint for type-check-only workflow (#​1444) — @​jong-kyung
  • Error on vp install -g without package names (#​1472) — @​liangmiQwQ
  • Add language-specific formatter overrides to .vscode/settings.json (#​1491) — @​oilater
  • Platform support for targets without input auto-inference (e.g. Android) — tasks still run, but those relying on auto-inference run uncached with a summary noting that input must be configured manually to enable caching (vite-task#352) — @​branchseer
  • Upgrade upstream dependencies: vite v8.0.10, vitest 4.1.5, rolldown v1.0.0-rc.17, tsdown 0.21.10, oxfmt 0.46.0, oxlint 1.61.0, oxlint-tsgolint 0.22.0, oxc toolchain 0.127.0, @vitejs/devtools 0.1.15, @napi-rs/wasm-runtime ^1.1.4, diff ^9.0.0 (#​1435, #​1460, #​1469, #​1479) — @​Brooooooklyn
Fixes & Enhancements
  • Condense Vite+ AGENTS.md content (#​1430) — @​cpojer
  • Suppress Vite+ header in non-TTY and git hook contexts (#​1439) — @​fengmk2
  • Avoid truncating lock file to prevent sharing violation on Windows (#​1467) — @​rorychatt
  • Support PowerShell on non-Windows platforms (#​1481) — @​nekomoyi
  • vp run no longer aborts with failed to prepare the command for injection: Invalid argument when the user environment already has LD_PRELOAD (Linux) or DYLD_INSERT_LIBRARIES (macOS) set; the tracer shim is now appended to any existing value and placed last, preserving user preloads' symbol-interposition precedence (vite-task#349) — @​branchseer
Docs
Chore
Published Packages
  • @voidzero-dev/vite-plus-core@0.1.20
  • @voidzero-dev/vite-plus-test@0.1.20
  • vite-plus@0.1.20
Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Upgrade:

vp upgrade
New Contributors

Welcome to all new contributors! 🎉

@​branchv, @​lyzno1, @​yuyinws, @​rorychatt, @​oilater

Full Changelog: voidzero-dev/vite-plus@v0.1.19...v0.1.20


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added chore dependencies Pull requests that update a dependency file labels May 4, 2026
@sentry

sentry Bot commented May 4, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.06%. Comparing base (182f3de) to head (5332cfd).
✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #174   +/-   ##
=======================================
  Coverage   68.06%   68.06%           
=======================================
  Files         121      121           
  Lines        2655     2655           
  Branches      573      573           
=======================================
  Hits         1807     1807           
  Misses        444      444           
  Partials      404      404           
Flag Coverage Δ
component 57.10% <0.00%> (ø)
unit 68.63% <0.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot force-pushed the renovate/vite branch 7 times, most recently from 1011d99 to 568ea12 Compare May 9, 2026 12:08
@renovate renovate Bot force-pushed the renovate/vite branch 2 times, most recently from c37c008 to 19cb43b Compare May 12, 2026 16:52
@RedStar071

Copy link
Copy Markdown
Member

@copilot resolve the merge conflicts in this pull request

Copilot AI commented May 19, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Resolved and pushed in commit 805aee12. I merged origin/main into this branch and resolved the pnpm-lock.yaml conflict while keeping vite-plus at 0.1.20.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • api.fontshare.com
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build git desc�� --tags --abbrev=0 k/v1/pnpm/11.1.0/dist/node-gyp-bin/git v* origin/release (dns block)
  • api.fontsource.org
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.pnpm/@voidzero-dev&#43;vite-plus-test@0.1.20_@opentelemetry&#43;api@1.9.1_@types&#43;node@24.12.2_@vites_8e661dedb0212f2aa52b41932171855c/node_modules/@voidzero-dev/vite-plus-test/dist/cli.js run (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build git desc�� --tags --abbrev=0 k/v1/pnpm/11.1.0/dist/node-gyp-bin/git v* origin/release (dns block)
  • cdn.skyra.pw
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.pnpm/@voidzero-dev&#43;vite-plus-test@0.1.20_@opentelemetry&#43;api@1.9.1_@types&#43;node@24.12.2_@vites_8e661dedb0212f2aa52b41932171855c/node_modules/@voidzero-dev/vite-plus-test/dist/cli.js run (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build git desc�� --tags --abbrev=0 k/v1/pnpm/11.1.0/dist/node-gyp-bin/git v* origin/release (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.pnpm/@voidzero-dev&#43;vite-plus-test@0.1.20_@opentelemetry&#43;api@1.9.1_@types&#43;node@24.12.2_@vites_210e85f8639c15bd9aaf3935c873a77f/node_modules/@voidzero-dev/vite-plus-test/dist/cli.js run git /cli-entry.mjs --tags --abbrev=0 bin/git v* (dns block)
  • codspeed.io
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (dns block)
  • fonts.bunny.net
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.pnpm/@voidzero-dev&#43;vite-plus-test@0.1.20_@opentelemetry&#43;api@1.9.1_@types&#43;node@24.12.2_@vites_8e661dedb0212f2aa52b41932171855c/node_modules/@voidzero-dev/vite-plus-test/dist/cli.js run (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build git desc�� --tags --abbrev=0 k/v1/pnpm/11.1.0/dist/node-gyp-bin/git v* origin/release (dns block)
  • fonts.google.com
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.pnpm/@voidzero-dev&#43;vite-plus-test@0.1.20_@opentelemetry&#43;api@1.9.1_@types&#43;node@24.12.2_@vites_8e661dedb0212f2aa52b41932171855c/node_modules/@voidzero-dev/vite-plus-test/dist/cli.js run (dns block)
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build git desc�� --tags --abbrev=0 k/v1/pnpm/11.1.0/dist/node-gyp-bin/git v* origin/release (dns block)
  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh gh auth status (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/git/trees/5.4.0
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/git/trees/@codspeed/vitest-plugin@5.4.0
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/git/trees/main
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/git/trees/master
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/git/trees/v5.4.0
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (http block)
  • https://api.github.com/repos/CodSpeedHQ/codspeed-node/releases
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/open-circle/valibot/git/trees/1.4.0
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/open-circle/valibot/git/trees/main
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/open-circle/valibot/git/trees/master
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/open-circle/valibot/git/trees/v1.4.0
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (http block)
  • https://api.github.com/repos/open-circle/valibot/git/trees/valibot@1.4.0
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/open-circle/valibot/releases
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/vitest-dev/vitest/git/trees/4.1.6
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/vitest-dev/vitest/git/trees/@vitest/browser-playwright@4.1.6
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/vitest-dev/vitest/git/trees/main
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/vitest-dev/vitest/git/trees/master
    • Triggering command: REDACTED, pid is -1 (http block)
  • https://api.github.com/repos/vitest-dev/vitest/git/trees/v4.1.6
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (http block)
  • https://api.github.com/repos/vitest-dev/vitest/releases
    • Triggering command: REDACTED, pid is -1 (http block)
  • ungh.cc
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (dns block)
  • unpkg.com
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (dns block)
  • valibot.dev
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (dns block)
  • vitest.dev
    • Triggering command: /home/REDACTED/.n/bin/node /home/REDACTED/.n/bin/node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/skilld/dist/cli-entry.mjs update (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI requested a review from RedStar071 May 19, 2026 10:38
@RedStar071

Copy link
Copy Markdown
Member

@copilot Fix the ci workflows

Copilot AI commented May 24, 2026

Copy link
Copy Markdown
Contributor

@copilot Fix the ci workflows

Merged latest origin/main (commit 31783cd9) to bring in all CI workflow fixes, and suppressed 4 new oxlint vitest rules (no-conditional-expect, no-disabled-tests, require-to-throw-message, valid-title) introduced by the vite-plus v0.1.22/oxlint v1.63.0 update in commit bfc3e367. Lint now passes with 0 errors.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • api.fontshare.com
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
  • api.fontsource.org
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
  • cdn.skyra.pw
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
  • fonts.bunny.net
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)
  • fonts.google.com
    • Triggering command: /home/REDACTED/.n/bin/node node /home/REDACTED/work/wolfstar.rocks/wolfstar.rocks/node_modules/.bin/../nuxt/bin/nuxt.mjs build (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

RedStar071
RedStar071 previously approved these changes May 25, 2026
@renovate renovate Bot force-pushed the renovate/vite branch from bfc3e36 to 6a62e3b Compare May 27, 2026 12:19
@renovate renovate Bot changed the title chore(deps): update dependency vite-plus to v0.1.20 chore(deps): update dependency vite-plus to v0.1.22 May 27, 2026
@codspeed-hq

codspeed-hq Bot commented Jun 26, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 44 untouched benchmarks


Comparing renovate/vite (5332cfd) with main (182f3de)

Open in CodSpeed

@kodiakhq kodiakhq Bot merged commit 2662f24 into main Jun 26, 2026
19 checks passed
@kodiakhq kodiakhq Bot deleted the renovate/vite branch June 26, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants