Skip to content

chore(deps-dev): bump the npm-development group with 2 updates - #648

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-f075a40617
Closed

chore(deps-dev): bump the npm-development group with 2 updates#648
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-f075a40617

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-development group with 2 updates: vite-plus and cpx2.

Updates vite-plus from 0.3.0 to 0.3.1

Release notes

Sourced from vite-plus's releases.

vite-plus v0.3.1: manage package-manager versions with vp env

vp env now manages Node.js and package-manager versions together. This release also fixes TanStack Start routing and stale Vitest aliases.

Breaking Changes

Package-manager setup

Vite+ replaces Corepack with managed npm, pnpm, yarn, and bun commands. It removes the corepack shim and legacy global package-manager installations (#2391), by @鈥媗iangmiQwQ.

Replace Corepack setup commands in shell profiles, CI jobs, and Dockerfiles:

Previous setup Replacement
corepack enable vp env setup
vp install -g pnpm@<version> vp env default pnpm@<version>
vp install -g yarn@<version> vp env default yarn@<version>
vp install -g bun@<version> vp env default bun@<version>
vp install -g corepack Use the managed package-manager commands directly

Use vp env pin <manager>@<version> to set a project version.

vp env command scope and JSON output

Unscoped vp env commands now operate on Node.js and package managers. Package managers support independent defaults, project pins, session overrides, and installation commands (#2398), by @鈥媗iangmiQwQ.

Add node to limit an operation to Node.js, for example, vp env off node or vp env unpin node. Bare versions, such as vp env default 22.19.0, still select Node.js.

Update scripts that read JSON output:

Command New output structure
vp env current --json node and package_manager objects
vp env list --json, vp env list-remote --json node and package_managers groups

See the environment guide.

vp pack migration to tsdown@0.23

vp pack now uses tsdown@0.23, which removes deprecated options and changes defaults (#2614), by @鈥媐engmk2.

  1. Run vp migrate to update supported static configurations and package scripts, including projects that already use Vite+.
  2. Check migration warnings in vite.config.*, tsdown.config.*, and package.json.
  3. Update dynamic configurations manually. Arrays built with .map() require manual changes, even when migration reports no warning.
  4. Run vp pack to check the result.
Previous option Replacement
bundle: false unbundle: true
outExtension outExtensions
publicDir / --public-dir copy / --copy

... (truncated)

Commits
  • 13e1e5a release: v0.3.1: manage package-manager versions with vp env (#2623)
  • 0931d9b fix(cli): share Vite runtime through the core alias (#2617)
  • 3bbae42 feat(migrate): upgrade pack config for tsdown 0.23 (#2614)
  • 7123545 chore(deps): update dependency voidzero-dev/setup-vp to v1.19.0 (#2619)
  • b87593c fix(cli): recover from stale Vitest aliases (#2605)
  • 21f6c42 ci: gate npm publishes on dependency propagation (#2601)
  • 809d8b8 feat(deps): upgrade upstream dependencies (#2613)
  • 585353f docs: fix Zed Oxc configuration (#2592)
  • 4f97f30 feat(cli): expose dependency alignment plans (#2600)
  • 03b659c feat(cli): add --quiet to vp check (#2593)
  • Additional commits viewable in compare view

Updates cpx2 from 9.0.0 to 9.0.3

Release notes

Sourced from cpx2's releases.

v9.0.3

Commits

  • Honor includeEmptyDirs consistently in watch mode abd204b

v9.0.2

Merged

Commits

  • Fix watch session invalidation during asynchronous traversal 70ae648

v9.0.1

Merged

Commits

  • Harden GitHub Actions workflows 280659c
Changelog

Sourced from cpx2's changelog.

v9.0.3

Commits

  • Honor includeEmptyDirs consistently in watch mode abd204b

v9.0.2 - 2026-09-08

Merged

Commits

  • Fix watch session invalidation during asynchronous traversal 70ae648

v9.0.1 - 2026-09-07

Merged

Commits

  • Harden GitHub Actions workflows 280659c
Commits
  • 7e7947b 9.0.3
  • abd204b Honor includeEmptyDirs consistently in watch mode
  • 5712b1a 9.0.2
  • f4bee17 Merge pull request #187 from bcomnes/fix/186-watch-session-lifecycle
  • 70ae648 Fix watch session invalidation during asynchronous traversal
  • 5ec2e16 9.0.1
  • 93d6706 Merge pull request #184 from bcomnes/fix/183-declaration-type-exports
  • 90602f8 Fix public declaration type export collisions
  • e4f084b Merge pull request #182 from bcomnes/dependabot/github_actions/zizmorcore/ziz...
  • e3e121b Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3
  • Additional commits viewable in compare view
Attestation changes

This version has no provenance attestation, while the previous version (9.0.0) was attested. Review the package versions before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the npm-development group with 2 updates
bb04e7c 
Bumps the npm-development group with 2 updates: [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) and [cpx2](https://github.com/bcomnes/cpx2).


Updates `vite-plus` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.1/packages/cli)

Updates `cpx2` from 9.0.0 to 9.0.3
- [Release notes](https://github.com/bcomnes/cpx2/releases)
- [Changelog](https://github.com/bcomnes/cpx2/blob/master/CHANGELOG.md)
- [Commits](bcomnes/cpx2@v9.0.0...v9.0.3)

---
updated-dependencies:
- dependency-name: vite-plus
  dependency-version: 0.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: cpx2
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 14, 2026
@gschier gschier mentioned this pull request Sep 15, 2026
Merged
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-development-f075a40617 branch September 15, 2026 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants