Skip to content

feat(deps): upgrade upstream dependencies - #3058

Merged
fengmk2 merged 3 commits into
mainfrom
deps/upstream-update
Oct 15, 2026
Merged

fengmk2 merged 3 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor

Automated daily upgrade of upstream dependencies.

  • Upgrade rolldown from v1.2.13 (f7de35f) to v1.2.14 (c9a8cda) and re-merge its Cargo workspace: oxc* crates 0.153.0 -> 0.154.0, infer 0.19.0 -> 0.22.0, jsonschema 0.55.0 -> 0.58.0, regress 0.11.0 -> 0.12.0, and serde_yaml replaced by saphyr 0.2.1.
  • Upgrade @oxc-node/cli and @oxc-node/core 0.1.6 -> 0.1.7.
  • Regenerate the NAPI binding types and bump the yaml catalog to ^2.9.1 for rolldown's packages/vite-tests.

Dependency updates

Package From To
rolldown 1.2.13 (f7de35f) v1.2.14 (c9a8cda)
@oxc-node/cli 0.1.6 0.1.7
@oxc-node/core 0.1.6 0.1.7
Unchanged dependencies
  • vite: v8.3.4 (b6c20f6)
  • vitest: 5.0.4
  • @vitest/browser: 5.0.4
  • @vitest/browser-playwright: 5.0.4
  • @vitest/browser-preview: 5.0.4
  • @vitest/mocker: 5.0.4
  • @vitest/pretty-format: 5.0.4
  • @vitest/snapshot: 5.0.4
  • @vitest/spy: 5.0.4
  • @vitest/utils: 5.0.4
  • tsdown: 0.23.1
  • @tsdown/css: 0.23.1
  • @tsdown/exe: 0.23.1
  • lightningcss: ^1.33.0
  • lint-staged: 17.6.0
  • oxfmt: 0.73.0
  • oxlint: 1.88.0
  • @oxlint/plugins: 1.88.0
  • oxlint-tsgolint: 7.0.2004
  • @oxc-project/runtime: 0.154.0
  • @oxc-project/types: 0.154.0
  • oxc-minify: 0.154.0
  • oxc-parser: 0.154.0
  • oxc-transform: 0.154.0
  • VITEST_VERSION constant: 5.0.4
  • yuku-parser: 0.19.0
  • postcss: ^8.5.29
  • fsevents: ~2.3.3

Code changes

  • Cargo.toml — rolldown workspace re-merge: infer 0.19.0 -> 0.22.0 (now with default-features = false), jsonschema 0.55.0 -> 0.58.0, regress 0.11.0 -> 0.12.0, serde_yaml removed in favor of saphyr 0.2.1, oxc* crates 0.153.0 -> 0.154.0.
  • pnpm-workspace.yaml — yaml catalog ^2.8.1 -> ^2.9.1 (new devDependency of rolldown's packages/vite-tests).
  • packages/cli/binding/index.d.cts — regenerated binding types: new charset option on BindingNormalizedOptions/BindingOutputOptions, shimmedExport on BindingChecksOptions, binding on BindingLog.
  • Cargo.lock / pnpm-lock.yaml — lockfile regeneration.

Build status

  • upgrade-and-sync: success
  • build-upstream: failure

- rolldown: f7de35f -> v1.2.14 (c9a8cda)
- @oxc-node/cli: 0.1.6 -> 0.1.7
- @oxc-node/core: 0.1.6 -> 0.1.7

Code changes:
- Cargo.toml: re-merge rolldown workspace deps (infer 0.19.0 -> 0.22.0
  with default-features = false, jsonschema 0.55.0 -> 0.58.0,
  regress 0.11.0 -> 0.12.0, saphyr 0.2.1 replaces serde_yaml,
  oxc crates 0.153.0 -> 0.154.0)
- pnpm-workspace.yaml: yaml catalog ^2.8.1 -> ^2.9.1 (new dependency of
  rolldown's packages/vite-tests)
- packages/cli/binding/index.d.cts: regenerate binding types (new
  charset, shimmedExport, and binding fields)

Co-Authored-By: Claude Code <noreply@anthropic.com>
@voidzero-guard

Copy link
Copy Markdown
Contributor Author

✅ No upstream CLI help changes detected

Compared normalized --help output for the upstream CLIs mirrored by Vite+.

➖ Vite: no version update (8.3.4)

No version update was detected, so there is no CLI help diff.

➖ Vitest: no version update (5.0.4)

No version update was detected, so there is no CLI help diff.

➖ Oxlint: no version update (1.88.0)

No version update was detected, so there is no CLI help diff.

➖ Oxfmt: no version update (0.73.0)

No version update was detected, so there is no CLI help diff.

➖ tsdown: no version update (0.23.1)

No version update was detected, so there is no CLI help diff.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://deps-upstream-update-viteplus-dev.voidzero-docs.workers.dev (commit d69d4fd)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://b130f4e3-viteplus-dev.voidzero-docs.workers.dev d69d4fd 2026-10-15T07:16:18.883Z Visit the dashboard ↗
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://596ab102-viteplus-dev.voidzero-docs.workers.dev 795da05 2026-10-15T06:22:26.659Z Visit the dashboard ↗
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://ddfcd53e-viteplus-dev.voidzero-docs.workers.dev f18f255 2026-10-15T01:39:57.429Z Visit the dashboard ↗

@socket-security

socket-security Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

CLI artifact sizes (d69d4fd)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact Format Base PR Change
packages/cli/dist Directory total 2.21 MiB 2.21 MiB -16 B (-0.00%)
packages/core/dist Directory total 4.08 MiB 4.08 MiB +652 B (+0.02%)
Combined package dist Directory total 6.29 MiB 6.29 MiB +636 B (+0.01%)
vp (Linux x64) Binary 10.18 MiB 10.18 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.49 MiB 4.49 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.61 MiB 33.64 MiB +24.00 KiB (+0.07%)
NAPI (Linux x64) gzip -9 13.38 MiB 13.42 MiB +36.51 KiB (+0.27%)
vp (macOS ARM64) Binary 7.61 MiB 7.61 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.93 MiB 3.93 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.88 MiB 40.89 MiB +16.38 KiB (+0.04%)
NAPI (macOS ARM64) gzip -9 17.60 MiB 17.62 MiB +20.70 KiB (+0.11%)
vp (Windows x64) Binary 8.24 MiB 8.24 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.64 MiB 3.64 MiB 0 B (0.00%)
NAPI (Windows x64) Binary 29.68 MiB 29.75 MiB +74.00 KiB (+0.24%)
NAPI (Windows x64) gzip -9 12.09 MiB 12.14 MiB +45.34 KiB (+0.37%)
Trampoline (Windows x64) Binary 13.50 KiB 13.50 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 7.09 KiB 7.09 KiB 0 B (0.00%)
Installer (Windows x64) Binary 3.60 MiB 3.60 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 1.77 MiB 1.77 MiB -1 B (-0.00%)

@fengmk2 fengmk2 self-assigned this Oct 15, 2026
@fengmk2
fengmk2 merged commit a590ae0 into main Oct 15, 2026
118 of 119 checks passed
@fengmk2
fengmk2 deleted the deps/upstream-update branch October 15, 2026 07:39
@fengmk2 fengmk2 mentioned this pull request Oct 16, 2026
fengmk2 added a commit that referenced this pull request Oct 16, 2026
Vite+ 1.3 adds `create-vite-plus`, so `npm create vite-plus@latest`
starts a project without the global `vp`. It adds `vp pm pkg` for
editing `package.json` and `vp pm licenses list` for dependency
licenses, and lets `vp env` take package-manager dist-tags such as
`pnpm@latest-10`. It also makes `vp migrate` import rewriting much
faster on large projects and makes `vp dev` print Vite's `ready in` line
and honor `--debug`, `--filter`, and `--profile`.

### Features

- Create a Vite+ project without installing the global `vp` through
`pnpm create vite-plus`, `npm create vite-plus@latest`, `yarn create
vite-plus`, or `bun create vite-plus`, which run `vp create` with the
same arguments
([docs](https://viteplus.dev/guide/create#without-the-global-cli))
([#3028](#3028),
[#3048](#3048)), by
@liangmiQwQ.
- `vp pm pkg get`, `set`, `delete`, and `fix` read and update
`package.json` through the detected package manager: npm 7.20.0 and
later (`fix` from 9.8.0), pnpm 11.3.0 and later, and Bun 1.2.19 and
later
([docs](https://viteplus.dev/guide/package-management#package-manifest))
([#3020](#3020)), by
@jong-kyung.
- `vp pm licenses list` (or `ls`) lists dependency licenses through pnpm
7.17.0 and later, Yarn Classic, or Bun 1.4.0 and later, with `--json`
for machine-readable output
([#3037](#3037)), by
@jong-kyung.
- `vp env` accepts npm dist-tags in package-manager specs: `vp env pin
pnpm@latest-10` pins the exact version the tag points to, and `vp env
default pnpm@latest-10` follows the tag on each use
([#3047](#3047)), by
@liangmiQwQ.
- Upgrade the bundled tools
([#3058](#3058),
[#3078](#3078)), by
@voidzero-guard[bot] and @fengmk2:
- `rolldown@1.2.13` to `rolldown@1.2.14`. Rolldown adds the
`output.charset` option and fixes several tree-shaking, code-splitting,
and renaming bugs.
- `vitest@5.0.4` to `vitest@5.0.5`, with fixes for browser mode, hook
cleanup after a failing hook, and `--changed` with quoted file names.

### Fixes & Enhancements

- Import rewriting in `vp migrate` is up to 14 times faster on large
projects, for example 78 s to 5.6 s on Dify
([#2987](#2987)), by
@fengmk2.
- `vp dev` prints Vite's `ready in N ms` line, so scripts that wait for
it no longer time out after `vp migrate`. `--debug`, `--filter`, and
`--profile` now take effect in `vp dev`, `vp build`, and `vp preview`,
and `vp preview` stops when the build output is missing, as `vite
preview` does
([#3056](#3056)), by
@fengmk2.
- `vp staged` prints one result line per task, such as `✔ vp check
--fix`, instead of the task list and Git progress. Warnings, errors, and
rollback results stay visible, `--verbose` shows task output, and
`--debug` keeps the full log
([#3060](#3060)), by
@fengmk2.
- After a successful upgrade, `vp upgrade` reminds you to run `vp
migrate` in projects that use an older Vite+ version
([#3063](#3063)), by
@KTrain5169.
- The coding agent picker in `vp create` and `vp migrate` lists Claude
Code under `AGENTS.md` and no longer offers a separate `CLAUDE.md`
option. `--agent claude` and existing `CLAUDE.md` files still work
([#3055](#3055)), by
@fengmk2.

### Docs

- Recommend setting `runtimeOnFail: ignore` and `pmOnFail: ignore` in
the project's `pnpm-workspace.yaml` for pnpm 11 and later, since pnpm
does not read `runtimeOnFail` from its global config
([#3077](#3077)), by
@liangmiQwQ.

### Chore

- Speed up CI with ThinLTO native test builds, a pinned prepacked
Windows SDK, and a precompiled std for trampoline tests, keep
dependencies in Cargo caches, switch Linux runners, and update Windows
build pins with Renovate
([#3026](#3026),
[#2995](#2995),
[#3009](#3009),
[#3000](#3000),
[#3073](#3073),
[#3049](#3049)), by
@fengmk2.
- Stabilize CLI snapshots during slow package-manager downloads, isolate
Vitest browser and UI server ports, skip slow snapshot cases on Linux
and Windows, and remove duplicate Rust unit tests
([#3043](#3043),
[#3061](#3061),
[#3059](#3059),
[#3057](#3057)), by
@fengmk2 and @Brooooooklyn.
- Upgrade Rust crates and JavaScript dependencies, including
`rustls@0.23.46` and `ast-grep@0.51.0`, and remove unused catalog
entries ([#1780](#1780),
[#1782](#1782),
[#1783](#1783)), by
@renovate[bot] and @fengmk2.
- Refine the release-manager guidance
([#3052](#3052)), by
@fengmk2.

### Bundled Versions

| Tool | Version | Source | Changelog |
| --------------- | ---------- |
-------------------------------------------------------------------------------------------------
| ------------------------------------------------------------------- |
| vite | `8.3.4` |
[`b6c20f6`](vitejs/vite@b6c20f6)
| unchanged |
| rolldown | `1.2.14` |
[`c9a8cda`](rolldown/rolldown@c9a8cda)
| [1.2.14](https://github.com/rolldown/rolldown/releases/tag/v1.2.14) |
| tsdown | `0.23.1` | [npm](https://npmx.dev/package/tsdown/v/0.23.1) |
unchanged |
| vitest | `5.0.5` | [npm](https://npmx.dev/package/vitest/v/5.0.5) |
[5.0.5](https://github.com/vitest-dev/vitest/releases/tag/v5.0.5) |
| oxlint | `1.88.0` | [npm](https://npmx.dev/package/oxlint/v/1.88.0) |
unchanged |
| oxlint-tsgolint | `7.0.2004` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2004) | unchanged |
| oxfmt | `0.73.0` | [npm](https://npmx.dev/package/oxfmt/v/0.73.0) |
unchanged |

### Upgrade

```bash
vp upgrade
```

**Full Changelog**:
v1.2.0...v1.3.0

---

Merging this PR will trigger the release workflow.

---------

Co-authored-by: voidzero-guard[bot] <278573678+voidzero-guard[bot]@users.noreply.github.com>
Co-authored-by: MK (fengmk2) <fengmk2@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant