feat(deps): upgrade upstream dependencies by fengmk2 · Pull Request #2670 · voidzero-dev/vite-plus

fengmk2 · 2026-09-11T13:39:36Z

Upgrade Rolldown to 1.2.8, Vite to 8.3.0, Oxlint to 1.82.0, and Oxfmt to 0.67.0.

Update the Rust parser for the Oxc fatal_error field. Add a test for invalid configuration files and keep the generated NAPI updates. Isolate the missing-dependency test from pnpm’s NODE_PATH and the Bun fixture from old bun x caches.

Dependency updates

Package	From	To
`rolldown`	`1.2.7` (`26b4c6e`)	`1.2.8` (`9704b56`)
`vite`	`8.2.2` (`de1111a`)	`8.3.0` (`434e8e9`)
`oxfmt`	`0.66.0`	`0.67.0`
`oxlint`	`1.81.0`	`1.82.0`
`@oxc-project/runtime`	`0.148.0`	`0.149.0`
`@oxc-project/types`	`0.148.0`	`0.149.0`
`oxc-minify`	`0.148.0`	`0.149.0`
`oxc-parser`	`0.148.0`	`0.149.0`
`oxc-transform`	`0.148.0`	`0.149.0`
`@vitejs/devtools` development range	`^0.4.12`	`^0.7.1`
`@vitejs/devtools` peer range	`^0.4.0 \|\| ^0.5.0`	`^0.7.1`
`@napi-rs/cli` catalog	`^3.8.2`	`^3.9.0`
`web-tree-sitter` catalog	`^0.26.0`	`^0.27.0`
Rust Oxc crates	`0.148.0`	`0.149.0`
`jsonschema` workspace range	`0.46.5`	`0.55.0`
`smallvec` workspace range	`1.15.1`	`1.16.0`

Unchanged dependencies

vitest: 4.1.11
@vitest/browser: 4.1.11
@vitest/browser-playwright: 4.1.11
@vitest/browser-preview: 4.1.11
@vitest/browser-webdriverio: 4.1.11
@vitest/expect: 4.1.11
@vitest/mocker: 4.1.11
@vitest/pretty-format: 4.1.11
@vitest/runner: 4.1.11
@vitest/snapshot: 4.1.11
@vitest/spy: 4.1.11
@vitest/utils: 4.1.11
tsdown: 0.23.0
@tsdown/css: 0.23.0
@tsdown/exe: 0.23.0
lightningcss: ^1.33.0
@oxc-node/cli: 0.1.0
@oxc-node/core: 0.1.0
oxlint-tsgolint: 7.0.2001
VITEST_VERSION constant: 4.1.11
README vitest pins: 4.1.11

Code changes

crates/vp_static_config/src/lib.rs: use ParserReturn.fatal_error and test runtime fallback for invalid syntax.
packages/cli/src/__tests__/resolve-core.spec.ts: run the missing-dependency test without global Node search paths.
crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_dlx_bun/: isolate TMPDIR and update the recorded command headings.
Cargo.toml: match the changed Rolldown workspace dependencies.
packages/core/package.json: sync the Vite DevTools ranges and bundled versions.
pnpm-workspace.yaml: exempt Vite DevTools packages from the minimum release age, as with other bundled upstream packages.
packages/cli/binding/index.cjs and packages/cli/binding/index.d.cts: keep the regenerated loader and declarations.

Build status

sync-remote-and-build: passed.
build-upstream: passed on aarch64-apple-darwin.
just build, Rust checks, lint, and unit tests: passed.
Full CLI snapshots: passed, with 819 cases and one ignored case.

cloudflare-workers-and-pages · 2026-09-11T13:41:23Z

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://chore-upgrade-upstream-deps-2026-09-11-viteplus-dev.voidzero-docs.workers.dev (commit `351e4b2`)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://51fdd31f-viteplus-dev.voidzero-docs.workers.dev	`351e4b2`	2026-09-12T03:18:58.209Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://467435b4-viteplus-dev.voidzero-docs.workers.dev	`e73038a`	2026-09-11T14:46:06.759Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://0ed37c3b-viteplus-dev.voidzero-docs.workers.dev	`10d15cd`	2026-09-11T13:41:14.450Z	Visit the dashboard ↗

socket-security · 2026-09-11T13:41:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance
	npm/playwright-chromium@1.62.1 ⏵ 1.63.0
	npm/@vitejs/devtools@0.5.2 ⏵ 0.7.3	⁺¹	⁺¹	⁺¹
	npm/@oxc-project/runtime@0.149.0
	npm/@e18e/eslint-plugin@0.8.0
	cargo/thiserror@2.0.19 ⏵ 2.0.20
	cargo/reqwest@0.13.4 ⏵ 0.13.5
	cargo/napi@3.12.2 ⏵ 3.12.3
	cargo/rustls@0.23.42 ⏵ 0.23.44
	npm/tsx@4.23.12 ⏵ 4.23.13
	npm/oxfmt@0.63.0 ⏵ 0.67.0	⁺¹	⁺¹
	npm/@vitejs/release-scripts@1.9.2 ⏵ 1.10.0	⁺³		⁺¹
	npm/oxc-parser@0.143.0 ⏵ 0.149.0		⁺¹	⁺¹
	npm/remove-unused-vars@0.0.14 ⏵ 0.0.15	⁺⁸	⁺¹	^-1
	cargo/async-trait@0.1.91 ⏵ 0.1.92
	cargo/bstr@1.13.0 ⏵ 1.13.1
	cargo/clap@4.6.4 ⏵ 4.6.6
	cargo/clap_complete@4.6.7 ⏵ 4.6.9
	cargo/console@0.16.4 ⏵ 0.16.6
	cargo/futures@0.3.33 ⏵ 0.3.34
	cargo/futures-util@0.3.33 ⏵ 0.3.34
	cargo/ignore@0.4.31 ⏵ 0.4.33
	cargo/indexmap@2.14.0 ⏵ 2.14.2
	cargo/napi-build@2.4.1 ⏵ 2.4.2
	cargo/napi-derive@3.6.0 ⏵ 3.6.4
	cargo/owo-colors@4.3.0 ⏵ 4.4.0	⁺¹⁹
	cargo/oxc_allocator@0.148.0 ⏵ 0.149.0
	cargo/oxc_ast@0.148.0 ⏵ 0.149.0
	cargo/oxc_parser@0.148.0 ⏵ 0.149.0
	cargo/oxc_span@0.148.0 ⏵ 0.149.0
	cargo/toml@1.1.3%2Bspec-1.1.0 ⏵ 1.1.6+spec-1.1.0
	cargo/uuid@1.24.0 ⏵ 1.26.1	⁺¹
	npm/sass-embedded@1.102.0 ⏵ 1.104.0			⁺³
See 5 more rows in the dashboard

View full report

github-actions · 2026-09-11T13:50:03Z

CLI artifact sizes (`351e4b2`)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact	Format	Base	PR	Change
`packages/cli/dist`	Directory total	2.14 MiB	2.14 MiB	-3 B (-0.00%)
`packages/core/dist`	Directory total	3.92 MiB	3.94 MiB	+21.64 KiB (+0.54%)
Combined package dist	Directory total	6.07 MiB	6.09 MiB	+21.64 KiB (+0.35%)
`vp` (Linux x64)	Binary	11.14 MiB	11.16 MiB	+20.02 KiB (+0.18%)
`vp` (Linux x64)	gzip -9	4.82 MiB	4.83 MiB	+8.91 KiB (+0.18%)
NAPI (Linux x64)	Binary	32.03 MiB	32.12 MiB	+88.20 KiB (+0.27%)
NAPI (Linux x64)	gzip -9	12.64 MiB	12.71 MiB	+65.70 KiB (+0.51%)
`vp` (macOS ARM64)	Binary	8.30 MiB	8.32 MiB	+16.16 KiB (+0.19%)
`vp` (macOS ARM64)	gzip -9	4.20 MiB	4.21 MiB	+10.52 KiB (+0.24%)
NAPI (macOS ARM64)	Binary	39.61 MiB	39.68 MiB	+64.80 KiB (+0.16%)
NAPI (macOS ARM64)	gzip -9	16.96 MiB	17.00 MiB	+45.66 KiB (+0.26%)
`vp` (Windows x64)	Binary	9.02 MiB	9.04 MiB	+20.00 KiB (+0.22%)
`vp` (Windows x64)	gzip -9	3.94 MiB	3.95 MiB	+6.51 KiB (+0.16%)
NAPI (Windows x64)	Binary	26.92 MiB	27.03 MiB	+109.00 KiB (+0.40%)
NAPI (Windows x64)	gzip -9	10.74 MiB	10.80 MiB	+62.45 KiB (+0.57%)
Trampoline (Windows x64)	Binary	13.50 KiB	13.50 KiB	0 B (0.00%)
Trampoline (Windows x64)	gzip -9	7.03 KiB	7.03 KiB	0 B (0.00%)
Installer (Windows x64)	Binary	4.52 MiB	4.53 MiB	+11.50 KiB (+0.25%)
Installer (Windows x64)	gzip -9	2.11 MiB	2.12 MiB	+3.76 KiB (+0.17%)

github-actions · 2026-09-11T14:43:27Z

Registry bridge build (`10d15cd`)

This commit build is published to the registry bridge, which serves these as ordinary npm versions (every other package proxies to npmjs):

Package	Version
`vite-plus`	`0.0.0-commit.10d15cd3414184a156c9763663aa41b9dbc20d91`
`@voidzero-dev/vite-plus-core`	`0.0.0-commit.10d15cd3414184a156c9763663aa41b9dbc20d91`

Install the Vite+ CLI built from this commit, then migrate a project:

# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/voidzero-dev/vite-plus/10d15cd3414184a156c9763663aa41b9dbc20d91/packages/cli/install.sh | VP_PR_VERSION=2670 VP_LEGACY_INSTALLER_URL=https://raw.githubusercontent.com/voidzero-dev/vite-plus/10d15cd3414184a156c9763663aa41b9dbc20d91/packages/cli/install-legacy.sh bash

# Windows (PowerShell)
$env:VP_PR_VERSION="2670"; $env:VP_LEGACY_INSTALLER_URL="https://raw.githubusercontent.com/voidzero-dev/vite-plus/10d15cd3414184a156c9763663aa41b9dbc20d91/packages/cli/install-legacy.ps1"; irm https://raw.githubusercontent.com/voidzero-dev/vite-plus/10d15cd3414184a156c9763663aa41b9dbc20d91/packages/cli/install.ps1 | iex

Or download the standalone Windows installer built from this commit:

Architecture	Installer
x64	`vp-setup-x86_64-pc-windows-msvc.exe`
Arm64	`vp-setup-aarch64-pc-windows-msvc.exe`

GitHub requires you to sign in and downloads each installer as a ZIP artifact. Extract vp-setup.exe, then run it against this preview build:

.\vp-setup.exe --version "0.0.0-commit.10d15cd3414184a156c9763663aa41b9dbc20d91" --registry "https://registry-bridge.viteplus.dev/"

After installing, upgrade the current project's vite-plus to this test build with:

vp migrate

Or point your package manager at the bridge registry https://registry-bridge.viteplus.dev/:

Package manager	Registry config
npm / pnpm / Bun	`.npmrc`: `registry=https://registry-bridge.viteplus.dev/`
Yarn (v2+)	`.yarnrc.yml`: `npmRegistryServer: "https://registry-bridge.viteplus.dev/"`

Then pin the build (vite aliases to vite-plus-core; pnpm can use a catalog, npm an overrides entry):

{
  "devDependencies": {
    "vite-plus": "0.0.0-commit.10d15cd3414184a156c9763663aa41b9dbc20d91",
    "vite": "npm:@voidzero-dev/vite-plus-core@0.0.0-commit.10d15cd3414184a156c9763663aa41b9dbc20d91"
  }
}

github-actions · 2026-09-11T14:45:02Z

🐳 Docker preview image

Built from this PR's registry bridge build:

Image	Compressed size
`ghcr.io/voidzero-dev/vite-plus:pr-2670`	228MB

# remove any stale local copy from a previous run, then pull fresh
docker rmi ghcr.io/voidzero-dev/vite-plus:pr-2670 2>/dev/null; docker pull ghcr.io/voidzero-dev/vite-plus:pr-2670

Quick check:

docker run --rm ghcr.io/voidzero-dev/vite-plus:pr-2670 vp --version

See docs/guide/docker.md for usage.

- rolldown: 26b4c6e -> v1.2.8 (9704b56) - vite: de1111a -> v8.3.0 (434e8e9) - oxfmt: 0.66.0 -> 0.67.0 - oxlint: 1.81.0 -> 1.82.0 - @oxc-project/runtime: 0.148.0 -> 0.149.0 - @oxc-project/types: 0.148.0 -> 0.149.0 - oxc-minify: 0.148.0 -> 0.149.0 - oxc-parser: 0.148.0 -> 0.149.0 - oxc-transform: 0.148.0 -> 0.149.0 Code changes: - crates/vp_static_config/src/lib.rs: adapt to fatal_error and test syntax-error fallback - Cargo.toml: sync jsonschema and smallvec with Rolldown - packages/core/package.json: sync Vite DevTools ranges and bundled versions - packages/cli/binding/index.cjs and index.d.cts: regenerate NAPI artifacts - packages/cli/src/__tests__/resolve-core.spec.ts: isolate missing dependency from NODE_PATH - crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_dlx_bun/: isolate bun x cache and update command headings

fengmk2 added test: e2e Auto run e2e tests test: install-e2e run vite install e2e test test: create-e2e Run `vp create` e2e tests test: sfw labels Sep 11, 2026

fengmk2 self-assigned this Sep 11, 2026

fengmk2 requested a review from Brooooooklyn September 11, 2026 14:16

fengmk2 marked this pull request as ready for review September 11, 2026 14:16

fengmk2 added the preview-build Publish this PR's commits to the registry bridge as preview builds label Sep 11, 2026

Brooooooklyn approved these changes Sep 11, 2026

View reviewed changes

fengmk2 force-pushed the chore/upgrade-upstream-deps-2026-09-11 branch from 10d15cd to e73038a Compare September 11, 2026 14:44

fengmk2 force-pushed the chore/upgrade-upstream-deps-2026-09-11 branch from e73038a to 351e4b2 Compare September 12, 2026 03:16

fengmk2 merged commit 342bebf into main Sep 12, 2026
115 checks passed

fengmk2 deleted the chore/upgrade-upstream-deps-2026-09-11 branch September 12, 2026 08:08

Navigation Menu

Uh oh!

feat(deps): upgrade upstream dependencies - #2670

feat(deps): upgrade upstream dependencies#2670
fengmk2 merged 1 commit into
mainfrom
chore/upgrade-upstream-deps-2026-09-11

fengmk2 commented Sep 11, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 11, 2026

Uh oh!

github-actions Bot commented Sep 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

fengmk2 commented Sep 11, 2026

Dependency updates

Code changes

Build status

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://chore-upgrade-upstream-deps-2026-09-11-viteplus-dev.voidzero-docs.workers.dev (commit 351e4b2)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Uh oh!

socket-security Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CLI artifact sizes (351e4b2)

Uh oh!

github-actions Bot commented Sep 11, 2026

Registry bridge build (10d15cd)

Uh oh!

github-actions Bot commented Sep 11, 2026

🐳 Docker preview image

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

cloudflare-workers-and-pages Bot commented Sep 11, 2026 •

edited

Loading

Preview URL: https://chore-upgrade-upstream-deps-2026-09-11-viteplus-dev.voidzero-docs.workers.dev (commit `351e4b2`)

socket-security Bot commented Sep 11, 2026 •

edited

Loading

github-actions Bot commented Sep 11, 2026 •

edited

Loading

CLI artifact sizes (`351e4b2`)

Registry bridge build (`10d15cd`)