chore(deps-dev): bump vite-plus from 0.1.18 to 0.1.23

[dependabot]

Bumps vite-plus from 0.1.18 to 0.1.23.

Release notes

Sourced from vite-plus's releases.

vite-plus v0.1.23

Enterprise-ready HTTP (proxy + custom CA), task command shorthands in vite.config.ts, a smoother vp create/vp migrate, and the oxc/vite/rolldown bundled stack moves forward.

Highlights

• Proxy and custom-CA aware HTTP: a new process-wide vite_shared::shared_http_client() honors HTTPS_PROXY / HTTP_PROXY / NO_PROXY, picks up macOS System Settings / Windows registry proxies, loads custom CAs from SSL_CERT_FILE and NODE_EXTRA_CA_CERTS, and exposes a VP_INSECURE_TLS diagnostic switch; makes vp work through Socket Firewall Free and other TLS-intercepting proxies (#1686), by @​fengmk2
• Task command shorthands: run.tasks entries in vite.config.ts now accept a bare string ("build": "cmd") or array ("build": ["cmd1", "cmd2"]) instead of always requiring { command: ... }; arrays reuse the existing && planning path so cache, dependsOn, and task options stay consistent (vite-task#391), by @​jong-kyung
• Managed vp outdated -g: routes through Vite+'s managed global package metadata instead of delegating to the underlying npm outdated -g store, so all installed global packages are reported consistently (#1659), by @​liangmiQwQ

Features

• vp pm approve-builds: new unified subcommand that mirrors pnpm approve-builds one-to-one, adapts to bun pm trust, and warns-and-noops on npm/yarn (#1662), by @​fengmk2
• vp create: opt-in GitHub Copilot setup; selecting --agent copilot now generates a .github/workflows/copilot-setup-steps.yml so the Copilot Coding Agent can set up Vite+ and run vp in the new project out of the box (#1683), by @​jong-kyung
• vp migrate: prompt to remove baseUrl from tsconfig.json before applying type-aware lint defaults (runs @andrewbranch/ts5to6 --fixBaseUrl . under the hood; auto-applied in non-interactive mode) (#1692), by @​TheAlexLichter
• Respect packageManager in package-manager shims (npm/npx, pnpm/pnpx, yarn/yarnpkg, bun/bunx); add non-mutating packageManager resolution metadata for vp env current and vp env which (#1654), by @​fengmk2
• vite-task: --filter no-match now exits 0 by default; add --fail-if-no-match to opt back in (vite-task#393), by @​kazupon

Fixes & Enhancements

• vp create: keep generated .vscode/settings.json trackable when the VS Code editor option is selected (avoid templates' .vscode/* .gitignore masking it) (#1700), by @​jong-kyung
• vp create vite:monorepo: normalize sub-package vite-plus to catalog: even when only vite-plus (not vite/vitest/...) is present, and drop the vite/vitest aliases generated by the upstream library template (#1697), by @​fengmk2
• vp add/install -g <path>: resolve the real package name from package.json instead of using the path string, so local-path installs don't create broken directories (#1685), by @​liangmiQwQ
• vp test --coverage and other direct built-in commands now expose the workspace's package.json#packageManager to child processes so tools like Vitest coverage can spawn the configured PM (#1696), by @​jong-kyung
• vp migrate: clean up the whole ESLint ecosystem (plugins, configs, parser/resolver, type-utils) rather than just eslint; skip the migration entirely when @nuxt/eslint is detected (#1682), by @​fengmk2
• vp create: write fmt.configPath (not configPath) for Zed oxfmt settings to match the official Zed OXC extension layout (#1687), by @​chungweileong94
• vp migrate: parse tsconfig.json as JSONC so files with comments don't break baseUrl detection/removal (#1688), by @​TheAlexLichter
• vp env setup: Unix env shims now point at the active vp executable instead of always assuming VP_HOME/current/bin/vp, so Homebrew-style installs work (#1631), by @​leohara
• vp outdated -g / vp why -g: don't require a local package.json; global commands run regardless of cwd (#1622), by @​liangmiQwQ
• vp create: default the "Initialize a git repository?" prompt to yes (#1650), by @​fengmk2
• vp hooks: include the managed Node bin in PATH so ./node_modules/.bin/vp can find node from a VS Code commit on macOS (#1647), by @​TheAlexLichter
• vpx on Windows now invokes the package's .cmd shim instead of the Unix binary (#1652), by @​tobynguyen27
• vite-task: bump cache database schema to version 13 (forces a one-time rebuild of the local task cache) (vite-task#402), by @​branchseer
• Bump vite-task to d02b257 and 5833b374; also bumps the repo's Rust nightly toolchain to nightly-2026-05-24 and ships the regenerated run config types and docs for the new task command shorthand (#1689, #1695), by @​branchseer

Refactor

• Replace VP_SHELL_NU/VP_SHELL_PWSH with a single VP_SHELL override; add explicit shell parsing for bash, zsh, fish, nu, pwsh, and cmd, and harden auto-detection against nested shells (#1658), by @​nekomoyi
• vite-task: replace allocator-api2 with bumpalo collections (vite-task#400), by @​branchseer
• vite-task: drop the unused and_item_index field from ExecutionItemDisplay (vite-task#394), by @​branchseer

Docs

• Add the root AGENTS.md as the primary AI-agent guide for the vite-plus repository; convert CLAUDE.md into a compatibility pointer (#1670), by @​jong-kyung
• Align the agent validation table to match AGENTS.md (#1673), by @​jong-kyung
• Update the task output caching guide so the documented behavior matches what vite-task actually does (#1639), by @​ericclemmons
• Correct the bundled-source location in packages/core/BUNDLING.md (#1660), by @​shulaoda

Chore

... (truncated)

Commits

• 2b33837 release: v0.1.23 (#1703)
• 0bfac6c fix(cli): vp create tracking for generated VS Code settings (#1700)
• bf6708d feat(deps): upgrade upstream dependencies (#1699)
• 30a27a7 fix(create): normalize sub-package vite-plus and drop aliased vite/vitest (#1...
• bd8cc52 fix: use real package name for global local packages installation (#1685)
• de79b17 fix(cli): expose configured package manager to direct commands (#1696)
• f0f63e3 feat(deps): upgrade upstream dependencies (#1693)
• 917281c fix(migrate): clean up the full ESLint ecosystem, not just eslint (#1682)
• 4ce9465 chore: bump vite-task to d02b257 (#1689)
• 4cb342c fix: use fmt.configPath for Zed oxfmt settings (#1687)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)