chore(deps): update github actions by renovate[bot] · Pull Request #2582 · voidzero-dev/vite-plus

renovate · 2026-08-30T16:58:48Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	`v1.0.198` → `v1.0.210`	`v1.0.211`
semgrep/semgrep	container	minor	`1.174.0` → `1.175.0`
taiki-e/install-action	action	minor	`v2.86.4` → `v2.87.1`	`v2.87.2`

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

taiki-e/install-action (taiki-e/install-action)

`v2.87.1`: 2.87.1

Compare Source

Update uv@latest to 0.12.7.
Update typos@latest to 1.49.1.
Update syft@latest to 1.51.1.
Update prek@latest to 0.5.0.
Update d2@latest to 0.8.2.
Update cargo-zigbuild@latest to 0.23.3.
Update cargo-rdme@latest to 2.2.2.
Update biome@latest to 2.5.11.

`v2.87.0`: 2.87.0

Compare Source

Support kache. (#1980, thanks @ChrisJr404)
Update vacuum@latest to 0.30.1.
Update uv@latest to 0.12.6.
Update mise@latest to 2026.8.14.
Update editorconfig-checker@latest to 3.11.2.

`v2.86.8`: 2.86.8

Compare Source

Update wasmtime@latest to 48.0.1.
Update wasm-tools@latest to 1.258.0.
Update oxfmt@latest to 1.80.0.
Update mise@latest to 2026.8.12.
Update kingfisher@latest to 2.0.0.
Update cargo-zigbuild@latest to 0.23.2.

`v2.86.7`: 2.86.7

Compare Source

Update tombi@latest to 1.4.1.
Update rafn@latest to 0.1.5.
Update cargo-binstall@latest to 1.22.0.

`v2.86.6`: 2.86.6

Compare Source

Update dprint@latest to 0.56.1.
Update cargo-lambda@latest to 1.9.2.
Update biome@latest to 2.5.10.

`v2.86.5`: 2.86.5

Compare Source

Update zola@latest to 0.23.4.
Update wasm-tools@latest to 1.257.1.
Update protoc@latest to 3.36.0.
Update mise@latest to 2026.8.10.
Update cargo-dinghy@latest to 0.8.6.
Update wasmtime@latest to 48.0.0.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-08-30T16:58:54Z

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	`a73155a`
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a96ef8fc2fda50008f1f041

github-actions · 2026-08-30T17:08:40Z

CLI artifact sizes (`a73155a`)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.
The dist rows use the Linux build. The core total excludes .node files to match the release artifact.

Artifact	Format	Base	PR	Change
`packages/cli/dist`	Directory total	1.59 MiB	1.59 MiB	0 B (0.00%)
`packages/core/dist`	Directory total	3.92 MiB	3.92 MiB	0 B (0.00%)
Combined package dist	Directory total	5.51 MiB	5.51 MiB	0 B (0.00%)
`vp` (Linux x64)	Binary	11.00 MiB	11.00 MiB	0 B (0.00%)
`vp` (Linux x64)	gzip -9	4.76 MiB	4.76 MiB	0 B (0.00%)
NAPI (Linux x64)	Binary	31.86 MiB	31.86 MiB	0 B (0.00%)
NAPI (Linux x64)	gzip -9	12.59 MiB	12.59 MiB	0 B (0.00%)
`vp` (macOS ARM64)	Binary	8.20 MiB	8.20 MiB	0 B (0.00%)
`vp` (macOS ARM64)	gzip -9	4.15 MiB	4.15 MiB	0 B (0.00%)
NAPI (macOS ARM64)	Binary	39.49 MiB	39.49 MiB	0 B (0.00%)
NAPI (macOS ARM64)	gzip -9	16.90 MiB	16.90 MiB	-1 B (-0.00%)
`vp` (Windows x64)	Binary	8.86 MiB	8.86 MiB	0 B (0.00%)
`vp` (Windows x64)	gzip -9	3.88 MiB	3.88 MiB	+2 B (+0.00%)
NAPI (Windows x64)	Binary	26.74 MiB	26.74 MiB	0 B (0.00%)
NAPI (Windows x64)	gzip -9	10.67 MiB	10.67 MiB	+8 B (+0.00%)
Trampoline (Windows x64)	Binary	14.00 KiB	14.00 KiB	0 B (0.00%)
Trampoline (Windows x64)	gzip -9	7.09 KiB	7.09 KiB	0 B (0.00%)
Installer (Windows x64)	Binary	4.50 MiB	4.50 MiB	0 B (0.00%)
Installer (Windows x64)	gzip -9	2.11 MiB	2.11 MiB	+1 B (+0.00%)

@liangmiQwQ

`vp env` now manages Node.js and package-manager versions together. This release also fixes TanStack Start routing and stale Vitest aliases. ### Breaking Changes #### Package-manager setup Vite+ replaces Corepack with managed `npm`, `pnpm`, `yarn`, and `bun` commands. It removes the `corepack` shim and legacy global package-manager installations ([#2391](#2391)), by @liangmiQwQ. Replace Corepack setup commands in shell profiles, CI jobs, and Dockerfiles: | Previous setup | Replacement | | --- | --- | | `corepack enable` | `vp env setup` | | `vp install -g pnpm@<version>` | `vp env default pnpm@<version>` | | `vp install -g yarn@<version>` | `vp env default yarn@<version>` | | `vp install -g bun@<version>` | `vp env default bun@<version>` | | `vp install -g corepack` | Use the managed package-manager commands directly | Use `vp env pin <manager>@<version>` to set a project version. #### `vp env` command scope and JSON output Unscoped `vp env` commands now operate on Node.js and package managers. Package managers support independent defaults, project pins, session overrides, and installation commands ([#2398](#2398)), by @liangmiQwQ. Add `node` to limit an operation to Node.js, for example, `vp env off node` or `vp env unpin node`. Bare versions, such as `vp env default 22.19.0`, still select Node.js. Update scripts that read JSON output: | Command | New output structure | | --- | --- | | `vp env current --json` | `node` and `package_manager` objects | | `vp env list --json`, `vp env list-remote --json` | `node` and `package_managers` groups | See the [environment guide](https://viteplus.dev/guide/env). #### `vp pack` migration to `tsdown` `0.23` `vp pack` now uses `tsdown` `0.23`, which removes deprecated options and changes defaults ([#2614](#2614)), by @fengmk2. 1. Run `vp migrate` to update supported static configurations and package scripts, including projects that already use Vite+. 2. Check migration warnings in `vite.config.*`, `tsdown.config.*`, and `package.json`. 3. Update dynamic configurations manually. Arrays built with `.map()` require manual changes, even when migration reports no warning. 4. Run `vp pack` to check the result. | Previous option | Replacement | | --- | --- | | `bundle: false` | `unbundle: true` | | `outExtension` | `outExtensions` | | `publicDir` / `--public-dir` | `copy` / `--copy` | | `removeNodeProtocol: true` | `nodeProtocol: 'strip'` | | `injectStyle` | `css.inject` | | `inlineOnly` / `deps.onlyAllowBundle` | `deps.onlyBundle` | | `noExternal` | `deps.alwaysBundle` | | `skipNodeModulesBundle: true` / `deps.skipNodeModulesBundle: true` | `deps.neverBundle: true` | | `dts.tsgo: true` / `dts.oxc: true` | `dts.generator: 'tsgo'` / `dts.generator: 'oxc'` | Migration preserves the previous defaults for dependency resolution and ATTW. `tsdown` no longer supports Node.js `25`. Use Node.js `^22.18.0`, `^24.11.0`, or `>=26.0.0`. The programmatic `build()` API now returns `{ bundles, watch }`. See the [complete migration guide](https://github.com/rolldown/tsdown/releases/tag/v0.23.0) for declaration and TypeScript module-resolution changes. #### CLI argument validation `vp staged`, `vp config`, `vp hooks`, `vp migrate`, and `vp create` now reject unsupported options and extra positional arguments ([#2523](#2523)), by @fengmk2. Remove unsupported arguments from scripts. For example, replace `vp config --hooks-only` with `vp config --no-agent`. ### Highlights - Fix TanStack Start HTTP `404` responses caused by separate Vite runtime copies ([#2617](#2617)), by @fengmk2. - Reduce the Windows `vp-shim.exe` size from `214 KiB` to `14 KiB` ([#2466](#2466)), by @fengmk2. - Add `vp check --quiet` to hide lint warning diagnostics while retaining errors and summary counts ([#2593](#2593)), by @RSS1102. ### Features - Add `vp sync-versions --json` so automation can request dependency alignment plans from manifest snapshots without changing project files ([#2600](#2600)), by @afonsojramos. - Make `vp create --git` suggest an initial commit command after Git initialization ([#2581](#2581)), by @fengmk2. - Make `vp migrate` replace frozen `voidzero-dev/setup-vp@v1` workflow references with the supported version pin ([#2540](#2540)), by @fengmk2. - Upgrade `rolldown` from `1.2.5` to `1.2.7`, `tsdown` from `0.22.14` to `0.23.0`, and Oxc from `0.146.0` to `0.148.0`. Upgrade `oxlint` from `1.79.0` to `1.81.0` and `oxfmt` from `0.64.0` to `0.66.0`. These versions can flag code that passed before. Run `vp fmt` after upgrading if CI runs `vp check` ([#2580](#2580), [#2613](#2613)), by @voidzero-guard[bot]. ### Fixes & Enhancements - Resolve package-manager versions without rewriting `package.json`. Use `vp env pin` or `vp env unpin` to change project declarations explicitly ([#2399](#2399)), by @liangmiQwQ. - Let `vp migrate` repair stale `vitest` aliases that previously prevented the CLI from starting ([#2605](#2605)), by @fengmk2. - Keep Vite DevTools within the version ranges supported by the bundled Vite ([#2559](#2559)), by @fengmk2. - Keep automatic Vitest upgrades on the supported `4.x` major ([#2612](#2612)), by @fengmk2. - Remove a deprecated `tsdown` option from the prompts package build ([#2597](#2597)), by @jong-kyung. ### Refactor - Use the updated `which` dependency to resolve relative `PATH` entries ([#2583](#2583)), by @RSS1102. - Remove the unused `async-trait` annotation from `JsRuntimeProvider` ([#2538](#2538)), by @jong-kyung. ### Docs - Add Azure Pipelines setup instructions ([#2553](#2553)), by @naokihaba. - Correct Zed Oxc formatter settings and include JSX and TSX ([#2592](#2592)), by @joschuba. - Add Wrangler deployment configuration for the documentation site ([#2596](#2596)), by @mdong1909. - Explain conflicts between pnpm and Vite+ runtime management, including the `runtimeOnFail` setting ([#2620](#2620)), by @liangmiQwQ. ### Chore - Run CLI snapshots without published release packages ([#2625](#2625)), by @fengmk2. - Update the release-manager skill with package-install checks, changelog guidance, and announcement handling ([#2548](#2548)), by @fengmk2. - Wait for npm dependencies to become available before publishing dependent release packages ([#2601](#2601)), by @fengmk2. - Remove old Docker preview images ([#2539](#2539)), by @fengmk2. - Stabilize external-tool snapshots and isolate npm network cases ([#2577](#2577), [#2604](#2604)), by @fengmk2. - Avoid unreliable Fish PPA setup in CI ([#2560](#2560)), by @fengmk2. - Update the `vinext` fixture to an upstream fix ([#2571](#2571)), by @jong-kyung. - Stabilize the pnpm snapshot and Nuxt build in CI ([#2591](#2591)), by @voidzero-guard[bot]. - Pin pnpm in project-creation build-approval fixtures ([#2616](#2616)), by @liangmiQwQ. - Remove unused documentation components, assets, and the typewriter dependency ([#2550](#2550), [#2562](#2562)), by @jong-kyung. - Remove duplicate `tempfile` dependencies, an unused runtime helper, and unused error variants. Update the `unit_bindings` lint name ([#2555](#2555), [#2558](#2558), [#2566](#2566), [#2567](#2567)), by @jong-kyung. - Update GitHub Actions dependencies, including `actions/setup-node` `v7` ([#2544](#2544), [#2545](#2545), [#2582](#2582), [#2618](#2618)), by @renovate[bot]. - Update `crate-ci/typos` through `v1.50.1` ([#2584](#2584), [#2589](#2589), [#2609](#2609)), by @renovate[bot]. - Update repository pnpm to `11.24.0` ([#2590](#2590)), by @renovate[bot]. - Update `voidzero-dev/setup-vp` to `v1.19.0` ([#2619](#2619)), by @renovate[bot]. ### Bundled Versions | Tool | Version | Source | | --- | --- | --- | | `vite` | `8.2.2` | [`de1111a`](vitejs/vite@de1111a) | | `rolldown` | `1.2.7` | [`26b4c6e`](rolldown/rolldown@26b4c6e) | | `tsdown` | `0.23.0` | [npm](https://npmx.dev/package/tsdown/v/0.23.0) | | `vitest` | `4.1.11` | [npm](https://npmx.dev/package/vitest/v/4.1.11) | | `oxlint` | `1.81.0` | [npm](https://npmx.dev/package/oxlint/v/1.81.0) | | `oxlint-tsgolint` | `7.0.2001` | [npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) | | `oxfmt` | `0.66.0` | [npm](https://npmx.dev/package/oxfmt/v/0.66.0) | ### Upgrade ```bash vp upgrade ``` ### New Contributors @afonsojramos, @joschuba **Full Changelog**: v0.3.0...v0.3.1 --- Merging this PR will trigger the release workflow. --------- Co-authored-by: voidzero-guard[bot] <278573678+voidzero-guard[bot]@users.noreply.github.com> Co-authored-by: MK (fengmk2) <fengmk2@gmail.com>

renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from ac8f02b to 564d949 Compare August 31, 2026 00:59

fengmk2 approved these changes Aug 31, 2026

View reviewed changes

fengmk2 self-assigned this Aug 31, 2026

renovate Bot force-pushed the renovate/github-actions branch from 564d949 to 98df77d Compare August 31, 2026 15:18

fengmk2 approved these changes Sep 1, 2026

View reviewed changes

renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from 752e5e3 to 769c7c8 Compare September 1, 2026 14:31

chore(deps): update github actions

a73155a

renovate Bot force-pushed the renovate/github-actions branch from 769c7c8 to a73155a Compare September 1, 2026 15:30

fengmk2 merged commit 2077909 into main Sep 1, 2026
110 checks passed

fengmk2 deleted the renovate/github-actions branch September 1, 2026 16:50

fengmk2 mentioned this pull request Sep 7, 2026

release: v0.3.1: manage package-manager versions with vp env #2623

Merged

Navigation Menu

Uh oh!

chore(deps): update github actions - #2582

chore(deps): update github actions#2582
fengmk2 merged 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Aug 30, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Aug 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.87.1: 2.87.1

v2.87.0: 2.87.0

v2.86.8: 2.86.8

v2.86.7: 2.86.7

v2.86.6: 2.86.6

v2.86.5: 2.86.5

Configuration

Uh oh!

netlify Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for viteplus-preview canceled.

Uh oh!

github-actions Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CLI artifact sizes (a73155a)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 30, 2026 •

edited

Loading

`v2.87.1`: 2.87.1

`v2.87.0`: 2.87.0

`v2.86.8`: 2.86.8

`v2.86.7`: 2.86.7

`v2.86.6`: 2.86.6

`v2.86.5`: 2.86.5

netlify Bot commented Aug 30, 2026 •

edited

Loading

github-actions Bot commented Aug 30, 2026 •

edited

Loading

CLI artifact sizes (`a73155a`)