Skip to content

feat(deps): upgrade upstream dependencies#2168

Merged
wan9chi merged 2 commits into
mainfrom
deps/upstream-update
Jul 14, 2026
Merged

feat(deps): upgrade upstream dependencies#2168
wan9chi merged 2 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

@voidzero-guard voidzero-guard Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Automated upgrade of upstream dependencies, most notably vite to v8.1.4 and tsdown (@tsdown/css, @tsdown/exe) to 0.22.7.
  • Bumps @vitejs/devtools to 0.4.0; rolldown and the vitest stack are unchanged.
  • Pins postcss-modules@9.0.0 so vite's bundled patch keeps applying after its ^9.0.0 range began resolving to 9.0.1.
  • Widens the typescript peer range to allow ^7.0.0 and adds a PTY snapshot redaction for the calendar-dependent vp env which install date.

Dependency updates

Package From To
vite 578ffb8 v8.1.4 (a477454)
tsdown 0.22.4 0.22.7
@tsdown/css 0.22.4 0.22.7
@tsdown/exe 0.22.4 0.22.7
@vitejs/devtools 0.3.4 0.4.0

Code changes

  • pnpm-workspace.yaml: bump tsdown / @tsdown/css / @tsdown/exe catalog entries to ^0.22.7, and pin postcss-modules@9.0.0 via overrides + patchedDependencies so vite's postcss-modules@9.0.0.patch stays applied.
  • packages/core/package.json: bump @vitejs/devtools to ^0.4.0, widen the typescript peer range to ^5.0.0 || ^6.0.0 || ^7.0.0, and update bundledVersions (vite 8.1.3 -> 8.1.4, tsdown 0.22.4 -> 0.22.7).
  • crates/vite_cli_snapshots/tests/cli_snapshots/redact.rs: add INSTALLED_DATE_RE to mask the wall-clock Installed: date in vp env which output.
  • PTY snapshots: command_env_which.md (install date now redacted to <date>), plus new_vite_monorepo.md and new_vite_monorepo_bun.md reflecting create-template devDependency bumps (typescript ^6 -> ^7, @types/node ^25 -> ^26, dropped @typescript/native-preview).

Build status

  • sync-remote-and-build: failure
  • build-upstream: failure

@voidzero-guard
feat(deps): upgrade upstream dependencies
28a7fcf 
- vite: 578ffb8 -> v8.1.4 (a477454)
- tsdown: 0.22.4 -> 0.22.7
- @tsdown/css: 0.22.4 -> 0.22.7
- @tsdown/exe: 0.22.4 -> 0.22.7
- @vitejs/devtools: 0.3.4 -> 0.4.0

Code changes:
- Pin postcss-modules@9.0.0 via overrides + patchedDependencies so vite's
  postcss-modules@9.0.0.patch stays applied (pnpm-workspace.yaml).
- Widen typescript peer range to include ^7.0.0 and bump bundledVersions
  (vite 8.1.3 -> 8.1.4, tsdown 0.22.4 -> 0.22.7) (packages/core/package.json).
- Mask the calendar-dependent `Installed:` date in `vp env which` output
  (crates/vite_cli_snapshots/tests/cli_snapshots/redact.rs).
- Update PTY snapshots for the new date redaction and create-template
  devDependency bumps (command_env_which.md, new_vite_monorepo.md,
  new_vite_monorepo_bun.md).
@netlify

netlify Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit 30b4224
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a55fac938fa6100083a5210

@socket-security

socket-security Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​tsdown/​exe@​0.22.7701007297100
Addednpm/​@​vitejs/​devtools@​0.4.0781007495100
Addednpm/​@​tsdown/​css@​0.22.7751008097100
Addednpm/​tsx@​4.23.11001008292100
Addednpm/​tsdown@​0.22.7981008897100
Updatednpm/​postcss-modules@​6.0.1 ⏵ 9.0.099 +1100100 +192 +12100

View full report

@github-actions

github-actions Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Native binary sizes (30b4224)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.32 MiB 10.32 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.42 MiB 4.42 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.42 MiB 33.42 MiB 0 B (0.00%)
NAPI (Linux x64) gzip -9 12.78 MiB 12.78 MiB 0 B (0.00%)
vp (macOS ARM64) Binary 7.64 MiB 7.64 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.83 MiB 3.83 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.78 MiB 40.78 MiB 0 B (0.00%)
NAPI (macOS ARM64) gzip -9 17.05 MiB 17.05 MiB +8 B (+0.00%)
vp (Windows x64) Binary 8.37 MiB 8.37 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.64 MiB 3.64 MiB +2 B (+0.00%)
NAPI (Windows x64) Binary 27.88 MiB 27.88 MiB 0 B (0.00%)
NAPI (Windows x64) gzip -9 10.78 MiB 10.78 MiB +1 B (+0.00%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB -2 B (-0.00%)
Installer (Windows x64) Binary 4.46 MiB 4.46 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.08 MiB 2.08 MiB 0 B (0.00%)

@wan9chi @claude
fix(create): align monorepo TypeScript versions
30b4224 
The app and library monorepo sub-templates are updated independently
upstream, and this sync moved the library template to typescript ^7.0.2
while the app template still pins ~6.0.2. Since typescript is an
optional peer of vite-plus, the mismatch makes pnpm materialize two
vite-plus/vitest peer instances in a freshly created monorepo, breaking
the single-instance invariant checked by test-vp-create (npm and yarn
hit the equivalent hoist conflict).

Align the app package and the generated workspace catalog entry to the
library's TypeScript range at create time, so future upstream bumps of
either sub-template cannot re-split the workspace. Also refresh the
stale `typescript: ^5` catalog fallback in the static template files.

Verified with a local-registry vp create + install: vite-plus, vitest,
and @voidzero-dev/vite-plus-core each resolve to a single instance with
typescript@7.0.2.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@wan9chi

wan9chi commented Jul 14, 2026

Copy link
Copy Markdown
Member

Pushed 30b4224 to fix the three vp create monorepo failures.

Root cause: this sync moves the bundled library template to typescript: ^7.0.2 while the app (website) template still pins ~6.0.2. typescript is an optional peer of vite-plus, so the mismatch makes pnpm materialize two vite-plus/vitest peer instances in a freshly created monorepo, tripping the single-instance check (npm/yarn hit the equivalent hoist conflict). The generated workspace catalog also still carried a stale typescript: ^5 from the static template.

Fix: at create time, the app package and the workspace catalog entry now adopt the library template's TypeScript range (alignMonorepoTypeScriptVersion in packages/cli/src/create/templates/monorepo.ts). Deriving from the library template means future upstream bumps of either sub-template can't re-split the workspace. The static template catalogs' ^5 fallback is refreshed to ^7.0.0.

Validation:

  • unit tests: 5 new cases, create suite 179/179 green; tsgo type-check and lint clean
  • PTY snapshots regenerated (new_vite_monorepo, new_vite_monorepo_bun) — website aligns to ^7.0.2, generated catalog derives ^7.0.2; create_missing_typecheck still passes
  • e2e via the local npm registry: vp create vite:monorepo + install (pnpm 11.13) → vite-plus, vitest, and @voidzero-dev/vite-plus-core each resolve to exactly one instance in node_modules/.pnpm, with a single typescript@7.0.2

With the library on TS7, vp run ready now exercises declaration generation through tsdown 0.22.7's native-compiler (tsgo) path — the same path that fixes #2160 — so the create jobs double as a TS7 dts regression gate.

@wan9chi wan9chi merged commit 19efdd0 into main Jul 14, 2026
100 checks passed
@wan9chi wan9chi deleted the deps/upstream-update branch July 14, 2026 09:17
This was referenced Jul 14, 2026
Closed
Closed
Open
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wan9chi wan9chi wan9chi approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@wan9chi