Skip to content

feat(deps): upgrade upstream dependencies#2129

Open
voidzero-guard[bot] wants to merge 5 commits into
mainfrom
deps/upstream-update
Open

feat(deps): upgrade upstream dependencies#2129
voidzero-guard[bot] wants to merge 5 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor

Summary

  • Automated upgrade of upstream dependencies.
  • Bumps vite to v8.1.4 (a477454), including the bundled vite version in packages/core/package.json.
  • Registers a new postcss-modules@9.0.0 patched-dependency entry pulled in by the vite bump.
  • No other tool versions changed; remaining diff is lockfile regeneration.

Dependency updates

Package From To
vite 578ffb8 v8.1.4 (a477454)
Unchanged dependencies
  • rolldown: v1.1.5 (f09947a)
  • vitest: 4.1.10
  • @vitest/browser: 4.1.10
  • @vitest/browser-playwright: 4.1.10
  • @vitest/browser-preview: 4.1.10
  • @vitest/browser-webdriverio: 4.1.10
  • @vitest/expect: 4.1.10
  • @vitest/mocker: 4.1.10
  • @vitest/pretty-format: 4.1.10
  • @vitest/runner: 4.1.10
  • @vitest/snapshot: 4.1.10
  • @vitest/spy: 4.1.10
  • @vitest/utils: 4.1.10
  • tsdown: 0.22.4
  • @tsdown/css: 0.22.4
  • @tsdown/exe: 0.22.4
  • lightningcss: ^1.32.0
  • @oxc-node/cli: 0.1.0
  • @oxc-node/core: 0.1.0
  • oxfmt: 0.58.0
  • oxlint: 1.73.0
  • oxlint-tsgolint: 0.24.0
  • @oxc-project/runtime: 0.139.0
  • @oxc-project/types: 0.139.0
  • oxc-minify: 0.139.0
  • oxc-parser: 0.139.0
  • oxc-transform: 0.139.0
  • VITEST_VERSION constant: 4.1.10
  • README vitest pins: 4.1.10
  • @vitejs/devtools: 0.3.4

Code changes

  • Bumped bundled vite 8.1.3 -> 8.1.4 in packages/core/package.json.
  • Added postcss-modules@9.0.0 patched-dependency entry in pnpm-workspace.yaml (transitive dependency pulled in by the vite bump; also reflected in pnpm-lock.yaml).

Build status

  • sync-remote-and-build: success
  • build-upstream: success

- vite: 578ffb8 -> v8.1.4 (a477454)

Code changes:
- Bump bundled vite 8.1.3 -> 8.1.4 (packages/core/package.json)
- Register postcss-modules@9.0.0 patch pulled in by vite bump (pnpm-workspace.yaml)
@netlify

netlify Bot commented Jul 10, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit f2863d8
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a50c6e61cf0d900082380a9

@socket-security

socket-security Bot commented Jul 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​tsx@​4.23.01001008294100
Addednpm/​postcss-modules@​9.0.09910010092100

View full report

@github-actions

github-actions Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Native binary sizes (f2863d8)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.29 MiB 10.29 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.41 MiB 4.41 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.42 MiB 33.42 MiB 0 B (0.00%)
NAPI (Linux x64) gzip -9 12.78 MiB 12.78 MiB 0 B (0.00%)
vp (macOS ARM64) Binary 7.64 MiB 7.64 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.83 MiB 3.83 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.78 MiB 40.78 MiB 0 B (0.00%)
NAPI (macOS ARM64) gzip -9 17.05 MiB 17.05 MiB -2 B (-0.00%)
vp (Windows x64) Binary 8.34 MiB 8.34 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.63 MiB 3.63 MiB -2 B (-0.00%)
NAPI (Windows x64) Binary 27.88 MiB 27.88 MiB 0 B (0.00%)
NAPI (Windows x64) gzip -9 10.78 MiB 10.78 MiB +6 B (+0.00%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB 0 B (0.00%)
Installer (Windows x64) Binary 4.46 MiB 4.46 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.08 MiB 2.08 MiB 0 B (0.00%)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant