[dependabot]

Bumps vite-plus from 0.2.8 to 1.2.0.

Release notes

Sourced from vite-plus's releases.

vite-plus v1.2.0

Vite+ 1.2 supports authenticated private npm registries and shows a new vp run summary that counts cache hits among cache-enabled tasks and reports successful tasks. It also verifies installer downloads, shows download progress in vp upgrade, and fixes task cache misses in pnpm projects and PowerShell exit status.

Highlights

• Support authenticated private npm registries (#2624), by @​RSS1102.
• The vp run summary now reads like 3/4 cache hit (75%), 9/10 successful, 2s saved.: the cache hit rate leaves out tasks with caching disabled, and the count of successful tasks replaces the count of failed tasks (vite-task#821), by @​wan9chi.

Features

• The install.sh and install.ps1 installers check each downloaded platform archive against the registry's SHA-512 dist.integrity before extracting it, and stop when the digest is missing or does not match (#2949), by @​fengmk2.
• vp upgrade shows a progress bar while it downloads the new platform package, instead of looking frozen on slow connections (#2968), by @​kshanxs.
• When a task is not cached because it wrote a file it also read, the summary says it modified its inputs, and vp run --last-details shows the cache: { input, output } exclusions that let it be cached. Detailed summaries show each cause of an error on its own line, and an invalid --filter glob reports its error once (vite-task#783, vite-task#784, vite-task#761, vite-task#763), by @​wan9chi.
• The task runner can be built without file-access tracking on additional platforms. Tasks on those platforms must configure both input and output explicitly to be cached (vite-task#829), by @​mfechner.
• Upgrade the bundled tools (#2935, #2977, #2998, #3021, #3039), by @​voidzero-guard[bot] and @​fengmk2:
  • vite@8.3.3 to vite@8.3.4.
  • rolldown@1.2.12 to rolldown@1.2.13.
  • tsdown@0.23.0 to tsdown@0.23.1.
  • vitest@5.0.3 to vitest@5.0.4. Vitest now turns on its on-disk caches by default, and vp test tasks run through vp run stay cacheable with them.
  • oxlint@1.87.0 to oxlint@1.88.0 and oxfmt@0.72.0 to oxfmt@0.73.0. Oxfmt now also formats TOML in Markdown code blocks and frontmatter. The new lint and format versions can flag code that passed before, so run vp fmt after upgrading if CI runs vp check.
  • vp migrate keeps Prettier and continues the rest of the migration when the Prettier config uses a format the bundled Oxfmt cannot read, such as .prettierrc.yml.
  • oxlint-tsgolint@7.0.2003 to oxlint-tsgolint@7.0.2004. Line disable comments apply to type-aware diagnostics again (tsgolint#1271), so disable comments moved to the } as T line for v1.1.0 need to move back above the statement.
  • Projects that use @effect/tsgo should stay on v1.1.0 for now. The latest @effect/tsgo@0.52.0 supports oxlint-tsgolint@7.0.2004 but not oxlint@1.88.0, so its install-time patch step fails until @effect/tsgo adds support.

Fixes & Enhancements

• Reinstalling dependencies with pnpm, or installing them at another path, no longer causes task cache misses, and tasks that run pnpm run or pnpm exec no longer miss the cache after pnpm rechecks dependencies (vite-task#823, vite-task#824, vite-task#825), by @​wan9chi.
• On macOS, tasks with automatic file-access tracking can run Node.js single executable applications, such as pnpm 11's standalone binary, and deno compile outputs (vite-task#840), by @​wan9chi.
• Cached tasks can run scripts whose shebang names an interpreter path longer than 126 bytes (vite-task#788), by @​lifeiscontent.
• When a cache hit's outputs cannot be restored, vp run fails with an error suggesting vp cache clean instead of reporting a successful cache hit (vite-task#770), by @​wan9chi.
• vp run no longer stops every task when concurrent tasks write to a full output pipe, such as a CI log collector (vite-task#801), by @​naokihaba.
• On Linux, tasks with automatic file-access tracking start faster (vite-task#817), by @​wan9chi.
• In PowerShell, a failing vp command sets $? to False and stops && chains, as calling vp.exe directly does (#2947), by @​fengmk2.
• The Windows installer works when the PowerShell profile enables Set-StrictMode, and leaves the caller's strict mode unchanged (#3005), by @​fengmk2.
• Sourcing the Vite+ env script in POSIX shells is much faster with a long PATH, for example from 1.5 s to 6 ms in dash with 147 entries (#2905), by @​jonykru.
• Node.js version ranges from .node-version, engines.node, and devEngines.runtime, and package-manager version ranges, follow npm's semver rules (#2835), by @​ryuapp.
• vp migrate adds the tsdown <0.23 compatibility settings (deps.resolveDepSubpath and attw.profile) only for projects on an older tsdown, so upgrades from Vite+ 1.x or tsdown@0.23.0 and later keep the modern defaults (#2910), by @​fengmk2.
• vp create vite:generator keeps the description prompt visible instead of drawing the spinner over it, uses concrete version ranges for dependencies missing from the workspace catalog, adds rootDir: "src" to the generated tsconfig.json, and scaffolds generators on bingo@0.13.2 with Zod 4 option schemas (#2940, #2996, #1831), by @​jong-kyung, @​fengmk2, and @​renovate[bot].
• vp create stops processing an organization template archive that expands past fixed size, compression ratio, or entry count limits (#2950), by @​fengmk2.
• vp config skips Git config writes that change nothing, so concurrent runs across linked worktrees no longer fail with could not lock config file after the first setup (#2958), by @​naokihaba.
• Git hooks no longer append the legacy $VP_HOME/bin or ~/.vite-plus/bin directory to PATH. They use the inherited environment with the project's node_modules/.bin first, so projects without a local vite-plus dependency need the Vite+ bin directory on the Git client's PATH (#2930), by @​liangmiQwQ.
• Concurrent commands that need the same uninstalled Node.js version download it once; the others wait and reuse the installation (#3024), by @​fengmk2.
• @voidzero-dev/vite-plus-core declares the same postcss, optional fsevents, and Yuku parser ranges as the bundled Vite and tsdown, and @oxlint/plugins matches the bundled oxlint (#2921), by @​fengmk2.
• vp pack --help lists both default env prefixes, VITE_PACK_ and TSDOWN_ (#3002), by @​jong-kyung.
• Prompts and status lines use one space after status symbols (#2928), by @​cpojer.

Docs

• Document shell completion, the global -C flag, the split directory layout, automatic update checks and how to opt out, package manager subcommands, and vp env doctor diagnostic scopes (#2972, #2956, #2973, #2960, #2975, #2982), by @​jong-kyung.
• Clarify how vp exec and vpx resolve commands, how vp test selects its runner, how vp config treats existing Git hooks, what vp check needs for type checking, and how global CLI environment variables behave (#2957, #2979, #2962, #2978, #2916, #2919), by @​jong-kyung.

... (truncated)

Commits

• 8828720 release: v1.2.0 (#3029)
• 2e9d7cb feat(deps): upgrade upstream dependencies (#3039)
• e443877 chore(deps): update dependency voidzero-dev/setup-vp to v1.21.2 (#2991)
• 4af97b2 fix(pack): show both default env prefixes in help (#3002)
• ae0ec12 fix(install): support PowerShell strict mode (#3005)
• 256959e feat(deps): upgrade upstream dependencies (#3021)
• 7a6b723 fix(create): resolve missing generator catalogs and set rootDir (#2996)
• d499389 chore: bump vite-task to 9ba4cc9 (#3019)
• 7d21aa1 chore(deps): upgrade Bingo and VitePress (#1831)
• 47c7805 fix(pm): support authenticated private registries (#2624)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[netlify]

❌ Deploy Preview for typedcss-validator failed. Why did it fail? →

Name	Link
🔨 Latest commit	d6ccfa6
🔍 Latest deploy log	https://app.netlify.com/projects/typedcss-validator/deploys/6ad91ad74a35ac0a7fe30574

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: a3805662-4327-4bc9-bb57-2df67cdb6990

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}