chore(deps): update dependency vp to v0.2.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vp (source)	0.2.2 → 0.2.5

---

Release Notes

voidzero-dev/vite-plus (vp)

v0.2.5: vite-plus v0.2.5: Cleaner environments and more reliable workflows

Compare Source

This release adds cleanup and package version commands, supports TypeScript 7 declaration generation, reduces the standalone binary size, and hardens task tracking, CLI output, package-manager routing, Docker workflows, and project scaffolding.

Highlights

• Add vp env clean to remove unused managed Node.js runtimes and package-manager caches (#​2003), by @​liangmiQwQ
• Add vp pm version, forwarding native version commands to npm, pnpm, Yarn, and Bun (#​2127), by @​jong-kyung
• Add TypeScript 7 support to declaration generation and generated library projects with tsdown 0.22.7 (#​2104, #​2168), by @​wan9chi
• Improve automatic task input tracking for Bun on macOS, Linux containers with constrained /dev/shm, and Windows process images, reduce Windows backing-file allocation, and clarify task wait failures (vite-task#515, vite-task#518, vite-task#523, vite-task#524, vite-task#542, #​2126, #​2167), by @​wan9chi
• Prevent CLI diagnostics from truncating or panicking when inherited standard output or error is nonblocking (#​2172, #​2173), by @​wan9chi

Fixes & Enhancements

• Reduce standalone vp binary sizes by about 5% on Linux and macOS and 19% on Windows (#​2043), by @​fengmk2
• Keep the Docker image non-root by default while allowing passwordless sudo for Playwright browser dependencies and system packages (#​2088), by @​fengmk2
• Ignore .env and .env.* in generated projects while keeping .env.example trackable (#​2095), by @​forehalo
• Create vp-use.cmd after the Windows environment bin directory is ready and document its Command Prompt-only usage (#​2128), by @​liangmiQwQ
• Render user-facing process statuses and paths without Rust debug wrappers (#​2130), by @​liangmiQwQ
• Make vp dedupe fall back to yarn install with a warning on Yarn Classic (#​2139), by @​jong-kyung
• Ensure package-manager child processes, including Bun, can always find the managed Node.js runtime (#​2158), by @​BlankParticle

Docs

• Update the release-manager post-release guidance (#​2096), by @​wan9chi
• Add Windows to the Namespace sponsor credit (#​2108), by @​fengmk2
• Document installer and runtime environment variables, registry settings, TLS options, and precedence rules (#​2114), by @​yukinoshi
• Mark shell examples in CONTRIBUTING.md as Bash code blocks (#​2159), by @​BlankParticle

Chore

• Assign prepared release PRs to the workflow actor (#​2094), by @​wan9chi
• Complete the PTY snapshot migration and harden the runner, fixtures, release-version redaction, registry teardown, timeouts, and Linux parallelism (#​2071, #​2080, #​2084, #​2099, #​2102, #​2103, #​2107, #​2109, #​2115, #​2117, #​2118, #​2119, #​2120, #​2121, #​2131, #​2132, #​2134, #​2137, #​2138, #​2141, #​2143, #​2145, #​2182), by @​fengmk2 and @​wan9chi
• Expose Vite+ managed binaries consistently inside snapshot fixtures (#​2110), by @​liangmiQwQ
• Exclude PTY snapshot configuration from Vitest discovery and remove the legacy snapshot infrastructure (#​2135, #​2146), by @​jong-kyung
• Modernize Windows runners, registry bridge publishing, native size reporting, merge-base comparisons, and package-manager installation CI (#​2083, #​2100, #​2105, #​2106, #​2112, #​2133), by @​fengmk2
• Verify that created monorepo libraries emit declarations in CI (#​2171), by @​wan9chi

Bundled Versions

Tool	Version	Source
vite	8.1.4	a477454
rolldown	1.1.5	f09947a
tsdown	0.22.7	npm
vitest	4.1.10	npm
oxlint	1.73.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.58.0	npm

Upgrade

vp upgrade

New Contributors

Welcome @​yukinoshi and @​BlankParticle.

Full Changelog: voidzero-dev/vite-plus@v0.2.4...v0.2.5

Published Packages

• @voidzero-dev/vite-plus-core@0.2.5
• vite-plus@0.2.5

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

View the full commit: 93dc59a

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.5 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.4: vite-plus v0.2.4: Vitest security hotfix

Compare Source

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights

• Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#​2089), by @​voidzero-guard[bot]

Chore

• Add the standard release-manager skill for vite-plus release operations (#​2019), by @​fengmk2

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.10	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages

• @voidzero-dev/vite-plus-core@0.2.4
• vite-plus@0.2.4

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build

Run any vp command without installing it; see the Docker guide for more.

v0.2.3: vite-plus v0.2.3: config extraction, create, and vp run reliability fixes

Compare Source

A patch release that fixes static config extraction for vite.config.ts files whose defineConfig comes from a preset or custom wrapper (no longer misread as Vite+'s own), fixes vp create for org templates on registries that strip custom package fields, cleans up terminal output after Ctrl-C during vp run, and updates bundled Vite to 8.1.3.

Highlights

• Custom VP_HOME is honored on every run: the global vp now respects a user-set VP_HOME for its home directory instead of falling back to ~/.vite-plus, and persists it in the generated env files, so a custom install location no longer produces multiple instances or unusable packages (#​2029), by @​liangmiQwQ

Features

• Upgrade bundled Vite from 8.1.2 to 8.1.3 (inlined CSS after the shebang line, CSS preload for nested dynamic imports, SSR stacktrace column fix) (#​2042), by @​voidzero-guard[bot]

Fixes & Enhancements

• vp run no longer misreads a vite.config.ts when its defineConfig comes from a preset or a custom wrapper instead of vite-plus or vite. Such configs are now evaluated at runtime rather than assumed to be Vite+'s own, so projects that use them no longer wrongly report Task "build" not found (#​2060, #​2075), by @​liangmiQwQ and @​fengmk2
• Killing a vp run task with Ctrl-C no longer leaves odd OSC escape sequences in the terminal; vp defers its own Ctrl-C handling until the child process exits (#​2079), by @​forehalo
• vp migrate: rewriting a package.json prettier script now emits a single --check, so scripts that combined --check with --list-different / -l / -c no longer produce a duplicated vp fmt --check --check (#​2044), by @​shulaoda
• vp create @​org:name: read the org template catalog (createConfig) from the published tarball when the registry (e.g. GitHub Packages) strips custom fields from packument metadata (#​2063), by @​hiro-daikin
• vp run: missing env vars requested through @voidzero-dev/vite-task-client now return undefined instead of null, preserving Vite production NODE_ENV semantics when builds run through vp run (vite-task#508, via #​2076), by @​wan9chi

Refactor

• static_config: drop the unreachable vite.config.json branch (#​2045), and remove unused exported CLI helpers (#​2046), by @​shulaoda

Docs

• Update the announcement links and callout for the beta release (#​2027), remove the stale Dockerfile.alpine comment (#​2068), by @​fengmk2
• Add the missing pnpm-workspace.yaml to the docs Dockerfile (#​2059), by @​wan-kong
• Refresh the root agent guide (#​2072), by @​jong-kyung

Chore

• Cross-compile Windows tests and CLI binaries on Linux with cargo-xwin (#​1824), install local vite-plus builds through a local npm registry (#​2021), fast docs format check for docs-only PRs (#​2028), pack local dirs for the registry bridge instead of pkg.pr.new (#​2038), remove the stale create workflow updater (#​2061), and add PTY-based interactive CLI snapshot tests (#​2052), by @​fengmk2
• Cache vp run output for docs builds (#​2006), by @​wan9chi
• Remove legacy completion cleanup (#​2050), by @​nekomoyi
• Update the crate-ci/typos action (#​2039) and GitHub Actions (#​2055, #​1905), by @​renovate[bot]
• Refresh the Node.js release keyring (#​2058) and the docs trusted-stack stats (#​2064), by @​voidzero-guard[bot]

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.9	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

@​wan-kong and @​hiro-daikin made their first contributions.

Full Changelog: voidzero-dev/vite-plus@v0.2.2...v0.2.3

Published Packages

• @voidzero-dev/vite-plus-core@0.2.3
• vite-plus@0.2.3

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

Or download and run vp-setup.exe from the assets below.

Docker:

docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.3 vp build

Run any vp command without installing it; see the Docker guide for more.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.