Skip to content

feat(deps): upgrade upstream dependencies - #2580

Merged
fengmk2 merged 2 commits into
mainfrom
deps/upstream-update
Aug 30, 2026
Merged

feat(deps): upgrade upstream dependencies#2580
fengmk2 merged 2 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor
  • Automated daily upgrade of upstream dependencies.
  • Bumps rolldown to v1.2.6 (84c904b -> 5375362), which also pulls the oxc Rust crates to 0.147.0 and oxc_resolver / oxc_resolver_napi to 11.24.3 in Cargo.toml.
  • Bumps the oxc JS toolchain: oxlint 1.79.0 -> 1.80.0, oxfmt 0.64.0 -> 0.65.0, and the oxc-* / @oxc-project/* packages 0.146.0 -> 0.147.0.
  • Only non-version edits are the regenerated NAPI type declarations in packages/cli/binding/index.d.cts and the remeda catalog bump in pnpm-workspace.yaml.

Dependency updates

Package From To
rolldown v1.2.5 (84c904b) v1.2.6 (5375362)
oxfmt 0.64.0 0.65.0
oxlint 1.79.0 1.80.0
@oxc-project/runtime 0.146.0 0.147.0
@oxc-project/types 0.146.0 0.147.0
oxc-minify 0.146.0 0.147.0
oxc-parser 0.146.0 0.147.0
oxc-transform 0.146.0 0.147.0
oxc Rust crates (oxc, oxc_allocator, oxc_ast, …) 0.146.0 0.147.0
oxc_resolver / oxc_resolver_napi 11.24.2 11.24.3
remeda (catalog) ^2.34.1 ^2.42.0
Unchanged dependencies
  • vite: v8.2.2 (de1111a)
  • vitest: 4.1.11
  • @vitest/browser: 4.1.11
  • @vitest/browser-playwright: 4.1.11
  • @vitest/browser-preview: 4.1.11
  • @vitest/browser-webdriverio: 4.1.11
  • @vitest/expect: 4.1.11
  • @vitest/mocker: 4.1.11
  • @vitest/pretty-format: 4.1.11
  • @vitest/runner: 4.1.11
  • @vitest/snapshot: 4.1.11
  • @vitest/spy: 4.1.11
  • @vitest/utils: 4.1.11
  • tsdown: 0.22.14
  • @tsdown/css: 0.22.14
  • @tsdown/exe: 0.22.14
  • lightningcss: ^1.33.0
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0
  • oxlint-tsgolint: 7.0.2001
  • tsdown-migrate: 0.23.0-rc.0
  • VITEST_VERSION constant: 4.1.11
  • README vitest pins: 4.1.11

Code changes

  • packages/cli/binding/index.d.cts: regenerated NAPI type declarations for rolldown v1.2.6:
    • BindingDevEngine gains getModuleInfo(moduleId) and getModuleIds().
    • TsconfigCache constructor takes an optional pathToTsconfig argument.
    • BindingEnhancedTransformOptions.tsconfig accepts a string path.
    • BindingMatchGroup.name / .test switch to batched signatures (Array<string> in, Array<VoidNullable<string>> / Uint8Array out).
    • BindingOutputs gains an optional mangleCache.
    • generateBundle / writeBundle bundle parameter changes from BindingErrorsOr<BindingOutputs> to BindingResult<BindingOutputs>.
    • BindingViteResolvePluginConfig and BindingViteTransformPluginConfig gain an optional tsconfig field.
  • packages/core/package.json: bundledVersions.rolldown 1.2.5 -> 1.2.6.
  • Cargo.toml: oxc crate pins 0.146.0 -> 0.147.0; oxc_resolver / oxc_resolver_napi 11.24.2 -> 11.24.3.
  • pnpm-workspace.yaml: remeda catalog entry ^2.34.1 -> ^2.42.0.
  • packages/tools/.upstream-versions.json: rolldown hash 84c904b -> 5375362.
  • Lockfile churn only elsewhere: Cargo.lock (including transitive pnp 0.12.10 -> 0.12.12, simd-json 0.17.3 -> 0.18.1, new regress 0.12.0) and pnpm-lock.yaml.

Build status

  • sync-remote-and-build: success
  • build-upstream: failure

- rolldown: 84c904b -> v1.2.6 (5375362)
- oxfmt: 0.64.0 -> 0.65.0
- oxlint: 1.79.0 -> 1.80.0
- @oxc-project/runtime: 0.146.0 -> 0.147.0
- @oxc-project/types: 0.146.0 -> 0.147.0
- oxc-minify: 0.146.0 -> 0.147.0
- oxc-parser: 0.146.0 -> 0.147.0
- oxc-transform: 0.146.0 -> 0.147.0
- oxc Rust crates: 0.146.0 -> 0.147.0
- oxc_resolver / oxc_resolver_napi: 11.24.2 -> 11.24.3
- remeda (catalog): ^2.34.1 -> ^2.42.0

Code changes:
- packages/cli/binding/index.d.cts: regenerated NAPI type
  declarations for rolldown v1.2.6 (BindingDevEngine.getModuleInfo /
  getModuleIds, TsconfigCache pathToTsconfig argument, string tsconfig
  option, batched BindingMatchGroup name/test signatures,
  BindingOutputs.mangleCache, BindingErrorsOr -> BindingResult in
  generateBundle/writeBundle, tsconfig fields on Vite resolve/transform
  plugin configs)
- packages/core/package.json: bundledVersions.rolldown 1.2.5 -> 1.2.6
- Cargo.toml: oxc crate pins 0.146.0 -> 0.147.0 and oxc_resolver pins
  11.24.2 -> 11.24.3
- pnpm-workspace.yaml: remeda catalog entry ^2.34.1 -> ^2.42.0
- packages/tools/.upstream-versions.json: rolldown hash 84c904b ->
  5375362
@voidzero-guard

Copy link
Copy Markdown
Contributor Author

✅ No upstream CLI help changes detected

Compared normalized --help output for the upstream CLIs mirrored by Vite+.

➖ Vite: no version update (8.2.2)

No version update was detected, so there is no CLI help diff.

➖ Vitest: no version update (4.1.11)

No version update was detected, so there is no CLI help diff.

✅ Oxlint: no CLI help changes (1.79.0 → 1.80.0)

The version was updated, but the normalized CLI help output has no differences.

✅ Oxfmt: no CLI help changes (0.64.0 → 0.65.0)

The version was updated, but the normalized CLI help output has no differences.

➖ tsdown: no version update (0.22.14)

No version update was detected, so there is no CLI help diff.

@netlify

netlify Bot commented Aug 30, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview ready!

Name Link
🔨 Latest commit e1ae3e9
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a93a1be8bf4c30008989885
😎 Deploy Preview https://deploy-preview-2580--viteplus-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@socket-security

socket-security Bot commented Aug 30, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

CLI artifact sizes (e1ae3e9)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact Format Base PR Change
packages/cli/dist Directory total 1.59 MiB 1.59 MiB -15 B (-0.00%)
packages/core/dist Directory total 3.91 MiB 3.92 MiB +6.69 KiB (+0.17%)
Combined package dist Directory total 5.50 MiB 5.50 MiB +6.68 KiB (+0.12%)
vp (Linux x64) Binary 10.71 MiB 10.72 MiB +16.00 KiB (+0.15%)
vp (Linux x64) gzip -9 4.63 MiB 4.65 MiB +13.03 KiB (+0.27%)
NAPI (Linux x64) Binary 32.39 MiB 31.89 MiB -516.00 KiB (-1.56%)
NAPI (Linux x64) gzip -9 12.76 MiB 12.59 MiB -170.09 KiB (-1.30%)
vp (macOS ARM64) Binary 8.00 MiB 8.02 MiB +16.13 KiB (+0.20%)
vp (macOS ARM64) gzip -9 4.04 MiB 4.05 MiB +6.52 KiB (+0.16%)
NAPI (macOS ARM64) Binary 39.93 MiB 39.52 MiB -420.25 KiB (-1.03%)
NAPI (macOS ARM64) gzip -9 17.05 MiB 16.92 MiB -136.35 KiB (-0.78%)
vp (Windows x64) Binary 8.59 MiB 8.61 MiB +13.50 KiB (+0.15%)
vp (Windows x64) gzip -9 3.75 MiB 3.76 MiB +13.53 KiB (+0.35%)
NAPI (Windows x64) Binary 27.20 MiB 26.76 MiB -458.50 KiB (-1.65%)
NAPI (Windows x64) gzip -9 10.82 MiB 10.67 MiB -148.78 KiB (-1.34%)
Trampoline (Windows x64) Binary 14.00 KiB 14.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 7.09 KiB 7.09 KiB -1 B (-0.01%)
Installer (Windows x64) Binary 4.50 MiB 4.50 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.11 MiB 2.11 MiB 0 B (0.00%)

@fengmk2 fengmk2 self-assigned this Aug 30, 2026
@fengmk2
fengmk2 merged commit d65b09a into main Aug 30, 2026
108 checks passed
@fengmk2
fengmk2 deleted the deps/upstream-update branch August 30, 2026 06:32
fengmk2 added a commit that referenced this pull request Sep 8, 2026
`vp env` now manages Node.js and package-manager versions together. This
release also fixes TanStack Start routing and stale Vitest aliases.

### Breaking Changes

#### Package-manager setup

Vite+ replaces Corepack with managed `npm`, `pnpm`, `yarn`, and `bun`
commands. It removes the `corepack` shim and legacy global
package-manager installations
([#2391](#2391)), by
@liangmiQwQ.

Replace Corepack setup commands in shell profiles, CI jobs, and
Dockerfiles:

| Previous setup | Replacement |
| --- | --- |
| `corepack enable` | `vp env setup` |
| `vp install -g pnpm@<version>` | `vp env default pnpm@<version>` |
| `vp install -g yarn@<version>` | `vp env default yarn@<version>` |
| `vp install -g bun@<version>` | `vp env default bun@<version>` |
| `vp install -g corepack` | Use the managed package-manager commands
directly |

Use `vp env pin <manager>@<version>` to set a project version.

#### `vp env` command scope and JSON output

Unscoped `vp env` commands now operate on Node.js and package managers.
Package managers support independent defaults, project pins, session
overrides, and installation commands
([#2398](#2398)), by
@liangmiQwQ.

Add `node` to limit an operation to Node.js, for example, `vp env off
node` or `vp env unpin node`. Bare versions, such as `vp env default
22.19.0`, still select Node.js.

Update scripts that read JSON output:

| Command | New output structure |
| --- | --- |
| `vp env current --json` | `node` and `package_manager` objects |
| `vp env list --json`, `vp env list-remote --json` | `node` and
`package_managers` groups |

See the [environment guide](https://viteplus.dev/guide/env).

#### `vp pack` migration to `tsdown` `0.23`

`vp pack` now uses `tsdown` `0.23`, which removes deprecated options and
changes defaults
([#2614](#2614)), by
@fengmk2.

1. Run `vp migrate` to update supported static configurations and
package scripts, including projects that already use Vite+.
2. Check migration warnings in `vite.config.*`, `tsdown.config.*`, and
`package.json`.
3. Update dynamic configurations manually. Arrays built with `.map()`
require manual changes, even when migration reports no warning.
4. Run `vp pack` to check the result.

| Previous option | Replacement |
| --- | --- |
| `bundle: false` | `unbundle: true` |
| `outExtension` | `outExtensions` |
| `publicDir` / `--public-dir` | `copy` / `--copy` |
| `removeNodeProtocol: true` | `nodeProtocol: 'strip'` |
| `injectStyle` | `css.inject` |
| `inlineOnly` / `deps.onlyAllowBundle` | `deps.onlyBundle` |
| `noExternal` | `deps.alwaysBundle` |
| `skipNodeModulesBundle: true` / `deps.skipNodeModulesBundle: true` |
`deps.neverBundle: true` |
| `dts.tsgo: true` / `dts.oxc: true` | `dts.generator: 'tsgo'` /
`dts.generator: 'oxc'` |

Migration preserves the previous defaults for dependency resolution and
ATTW.

`tsdown` no longer supports Node.js `25`. Use Node.js `^22.18.0`,
`^24.11.0`, or `>=26.0.0`. The programmatic `build()` API now returns `{
bundles, watch }`.

See the [complete migration
guide](https://github.com/rolldown/tsdown/releases/tag/v0.23.0) for
declaration and TypeScript module-resolution changes.

#### CLI argument validation

`vp staged`, `vp config`, `vp hooks`, `vp migrate`, and `vp create` now
reject unsupported options and extra positional arguments
([#2523](#2523)), by
@fengmk2.

Remove unsupported arguments from scripts. For example, replace `vp
config --hooks-only` with `vp config --no-agent`.

### Highlights

- Fix TanStack Start HTTP `404` responses caused by separate Vite
runtime copies
([#2617](#2617)), by
@fengmk2.
- Reduce the Windows `vp-shim.exe` size from `214 KiB` to `14 KiB`
([#2466](#2466)), by
@fengmk2.
- Add `vp check --quiet` to hide lint warning diagnostics while
retaining errors and summary counts
([#2593](#2593)), by
@RSS1102.

### Features

- Add `vp sync-versions --json` so automation can request dependency
alignment plans from manifest snapshots without changing project files
([#2600](#2600)), by
@afonsojramos.
- Make `vp create --git` suggest an initial commit command after Git
initialization
([#2581](#2581)), by
@fengmk2.
- Make `vp migrate` replace frozen `voidzero-dev/setup-vp@v1` workflow
references with the supported version pin
([#2540](#2540)), by
@fengmk2.
- Upgrade `rolldown` from `1.2.5` to `1.2.7`, `tsdown` from `0.22.14` to
`0.23.0`, and Oxc from `0.146.0` to `0.148.0`. Upgrade `oxlint` from
`1.79.0` to `1.81.0` and `oxfmt` from `0.64.0` to `0.66.0`. These
versions can flag code that passed before. Run `vp fmt` after upgrading
if CI runs `vp check`
([#2580](#2580),
[#2613](#2613)), by
@voidzero-guard[bot].

### Fixes & Enhancements

- Resolve package-manager versions without rewriting `package.json`. Use
`vp env pin` or `vp env unpin` to change project declarations explicitly
([#2399](#2399)), by
@liangmiQwQ.
- Let `vp migrate` repair stale `vitest` aliases that previously
prevented the CLI from starting
([#2605](#2605)), by
@fengmk2.
- Keep Vite DevTools within the version ranges supported by the bundled
Vite ([#2559](#2559)), by
@fengmk2.
- Keep automatic Vitest upgrades on the supported `4.x` major
([#2612](#2612)), by
@fengmk2.
- Remove a deprecated `tsdown` option from the prompts package build
([#2597](#2597)), by
@jong-kyung.

### Refactor

- Use the updated `which` dependency to resolve relative `PATH` entries
([#2583](#2583)), by
@RSS1102.
- Remove the unused `async-trait` annotation from `JsRuntimeProvider`
([#2538](#2538)), by
@jong-kyung.

### Docs

- Add Azure Pipelines setup instructions
([#2553](#2553)), by
@naokihaba.
- Correct Zed Oxc formatter settings and include JSX and TSX
([#2592](#2592)), by
@joschuba.
- Add Wrangler deployment configuration for the documentation site
([#2596](#2596)), by
@mdong1909.
- Explain conflicts between pnpm and Vite+ runtime management, including
the `runtimeOnFail` setting
([#2620](#2620)), by
@liangmiQwQ.

### Chore

- Run CLI snapshots without published release packages
([#2625](#2625)), by
@fengmk2.
- Update the release-manager skill with package-install checks,
changelog guidance, and announcement handling
([#2548](#2548)), by
@fengmk2.
- Wait for npm dependencies to become available before publishing
dependent release packages
([#2601](#2601)), by
@fengmk2.
- Remove old Docker preview images
([#2539](#2539)), by
@fengmk2.
- Stabilize external-tool snapshots and isolate npm network cases
([#2577](#2577),
[#2604](#2604)), by
@fengmk2.
- Avoid unreliable Fish PPA setup in CI
([#2560](#2560)), by
@fengmk2.
- Update the `vinext` fixture to an upstream fix
([#2571](#2571)), by
@jong-kyung.
- Stabilize the pnpm snapshot and Nuxt build in CI
([#2591](#2591)), by
@voidzero-guard[bot].
- Pin pnpm in project-creation build-approval fixtures
([#2616](#2616)), by
@liangmiQwQ.
- Remove unused documentation components, assets, and the typewriter
dependency
([#2550](#2550),
[#2562](#2562)), by
@jong-kyung.
- Remove duplicate `tempfile` dependencies, an unused runtime helper,
and unused error variants. Update the `unit_bindings` lint name
([#2555](#2555),
[#2558](#2558),
[#2566](#2566),
[#2567](#2567)), by
@jong-kyung.
- Update GitHub Actions dependencies, including `actions/setup-node`
`v7` ([#2544](#2544),
[#2545](#2545),
[#2582](#2582),
[#2618](#2618)), by
@renovate[bot].
- Update `crate-ci/typos` through `v1.50.1`
([#2584](#2584),
[#2589](#2589),
[#2609](#2609)), by
@renovate[bot].
- Update repository pnpm to `11.24.0`
([#2590](#2590)), by
@renovate[bot].
- Update `voidzero-dev/setup-vp` to `v1.19.0`
([#2619](#2619)), by
@renovate[bot].

### Bundled Versions

| Tool | Version | Source |
| --- | --- | --- |
| `vite` | `8.2.2` |
[`de1111a`](vitejs/vite@de1111a)
|
| `rolldown` | `1.2.7` |
[`26b4c6e`](rolldown/rolldown@26b4c6e)
|
| `tsdown` | `0.23.0` | [npm](https://npmx.dev/package/tsdown/v/0.23.0)
|
| `vitest` | `4.1.11` | [npm](https://npmx.dev/package/vitest/v/4.1.11)
|
| `oxlint` | `1.81.0` | [npm](https://npmx.dev/package/oxlint/v/1.81.0)
|
| `oxlint-tsgolint` | `7.0.2001` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) |
| `oxfmt` | `0.66.0` | [npm](https://npmx.dev/package/oxfmt/v/0.66.0) |

### Upgrade

```bash
vp upgrade
```

### New Contributors

@afonsojramos, @joschuba

**Full Changelog**:
v0.3.0...v0.3.1

---

Merging this PR will trigger the release workflow.

---------

Co-authored-by: voidzero-guard[bot] <278573678+voidzero-guard[bot]@users.noreply.github.com>
Co-authored-by: MK (fengmk2) <fengmk2@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant