chore(deps): update vite+ to v0.2.8 (#36)

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [vite](https://viteplus.dev/guide)
([source](https://redirect.github.com/voidzero-dev/vite-plus/tree/HEAD/packages/core))
| [`0.2.1` →
`0.2.8`](https://renovatebot.com/diffs/npm/vite/0.2.1/0.2.8) |
![age](https://developer.mend.io/api/mc/badges/age/npm/@voidzero-dev%2fvite-plus-core/0.2.8?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@voidzero-dev%2fvite-plus-core/0.2.8?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@voidzero-dev%2fvite-plus-core/0.2.1/0.2.8?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@voidzero-dev%2fvite-plus-core/0.2.1/0.2.8?slim=true)
|
| [vite-plus](https://viteplus.dev/guide)
([source](https://redirect.github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli))
| [`0.2.1` →
`0.2.8`](https://renovatebot.com/diffs/npm/vite-plus/0.2.1/0.2.8) |
![age](https://developer.mend.io/api/mc/badges/age/npm/vite-plus/0.2.8?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/vite-plus/0.2.8?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vite-plus/0.2.1/0.2.8?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite-plus/0.2.1/0.2.8?slim=true)
|

---

### Release Notes

<details>
<summary>voidzero-dev/vite-plus (vite)</summary>

###
[`v0.2.8`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.8):
vite-plus v0.2.8: monorepo target resolution, breaking VP_* environment
variable renames, and install fixes

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.7...v0.2.8)

Bare `vp dev`/`build`/`preview`/`pack` at a monorepo root now resolve a
target package instead of silently running against the root, and three
Vite+-specific environment variables move to the `VP_*` prefix without
compatibility aliases. Two failures that broke Vite+ before it could run
are also fixed: the crash on container images that ship no CA
certificates, and the missing Rolldown binding under pnpm's global
virtual store.

##### Breaking Changes

- Rename three Vite+-specific environment variables to the `VP_*`
prefix, with no compatibility aliases, so the old names stop working
([#&#8203;2312](https://redirect.github.com/voidzero-dev/vite-plus/pull/2312)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung):

  | Old                              | New                            |
  | -------------------------------- | ------------------------------ |
  | `VITE_LOG`                       | `VP_LOG`                       |
  | `VITE_GLOBAL_CLI_JS_SCRIPTS_DIR` | `VP_GLOBAL_CLI_JS_SCRIPTS_DIR` |
  | `VITE_UPDATE_TASK_TYPES`         | `VP_UPDATE_TASK_TYPES`         |

Update any shell profile, CI job, or Dockerfile that sets the old names.

##### Highlights

- Resolve a target package for `vp dev`, `build`, `preview`, and `pack`
at a monorepo root: interactive shells get a fuzzy package picker,
non-interactive runs list the candidates and exit 1 instead of building
the root, and a new global `-C <dir>` flag or a `defaultPackage` setting
(a single directory, or an object mapping each of the four commands to
its own directory) skips the prompt
([#&#8203;2031](https://redirect.github.com/voidzero-dev/vite-plus/pull/2031),
[#&#8203;2305](https://redirect.github.com/voidzero-dev/vite-plus/pull/2305)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Stop aborting with exit 134 on container images that ship no CA
certificates (Debian slim, distroless): the shared HTTP client now
retries once with the bundled Mozilla root list, like Node's own bundled
roots, and reports a real error instead of panicking when it still
cannot be built
([#&#8203;2273](https://redirect.github.com/voidzero-dev/vite-plus/pull/2273),
[#&#8203;2295](https://redirect.github.com/voidzero-dev/vite-plus/pull/2295)),
by [@&#8203;jbmusso](https://redirect.github.com/jbmusso) and
[@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Resolve the bundled Rolldown binding through platform packages instead
of an undeclared require back into `vite-plus`, fixing `Cannot find
module 'vite-plus/binding'` under pnpm `enable-global-virtual-store` and
in standalone `@voidzero-dev/vite-plus-core` installs
([#&#8203;2313](https://redirect.github.com/voidzero-dev/vite-plus/pull/2313)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Add `vp pm ci` for reproducible frozen-lockfile installs, and `vp pm
patch` / `vp pm patch-commit` for editing dependencies in place on pnpm,
bun, and Yarn Berry (npm and Yarn Classic warn and exit successfully)
([#&#8203;2082](https://redirect.github.com/voidzero-dev/vite-plus/pull/2082),
[#&#8203;2308](https://redirect.github.com/voidzero-dev/vite-plus/pull/2308)),
by [@&#8203;forehalo](https://redirect.github.com/forehalo) and
[@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Features

- Upgrade the bundled toolchain: vite `8.1.5` -> `8.2.0`, rolldown
`1.2.0` -> `1.2.2`, oxlint `1.75.0` -> `1.76.0`, oxfmt `0.60.0` ->
`0.61.0`, and Vite DevTools `0.4.5` -> `0.4.10`
([#&#8203;2302](https://redirect.github.com/voidzero-dev/vite-plus/pull/2302),
[#&#8203;2311](https://redirect.github.com/voidzero-dev/vite-plus/pull/2311)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot].
The new oxfmt and oxlint can flag code that passed before, so run `vp
fmt` after upgrading if your CI runs `vp check`.
- Read the Node.js version from `.nvmrc` when no other version source is
present
([#&#8203;2244](https://redirect.github.com/voidzero-dev/vite-plus/pull/2244)),
by [@&#8203;BlankParticle](https://redirect.github.com/BlankParticle)
- Support pnpm v12, which ships as a native binary: Vite+ now downloads
the platform-specific `@pnpm/exe.*` package and generates native shims,
so `pnpm` and `pnpx` work instead of failing to exec
([#&#8203;2289](https://redirect.github.com/voidzero-dev/vite-plus/pull/2289)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Verify the downloaded bun platform tarball against the registry
`dist.integrity` hash
([#&#8203;2310](https://redirect.github.com/voidzero-dev/vite-plus/pull/2310)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Fixes & Enhancements

- Let `vp config` install the Git hook dispatcher without creating or
modifying project hook scripts or staged-file configuration, so a custom
`.vite-hooks/pre-commit` survives
([#&#8203;2280](https://redirect.github.com/voidzero-dev/vite-plus/pull/2280)),
by [@&#8203;TheAlexLichter](https://redirect.github.com/TheAlexLichter)
- Nest immutable global package installs under
`packages/<package>/<uuid>` instead of using `#` in the path, which Node
treated as a URL fragment and which broke dynamic imports inside
installed packages
([#&#8203;2222](https://redirect.github.com/voidzero-dev/vite-plus/pull/2222)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Keep the recorded version spec on global installs, so `vp update -g`
follows a dist tag or range instead of silently resolving back to
`latest`, `vp outdated -g` reports Wanted versus Latest, and `vp update
-g --latest` explicitly moves packages back to `latest`
([#&#8203;2249](https://redirect.github.com/voidzero-dev/vite-plus/pull/2249)),
by [@&#8203;TheAlexLichter](https://redirect.github.com/TheAlexLichter)
- Stop deleting a managed Node.js runtime that another process is
concurrently installing
([#&#8203;2248](https://redirect.github.com/voidzero-dev/vite-plus/pull/2248)),
by [@&#8203;shulaoda](https://redirect.github.com/shulaoda)
- Preserve the real exit code when a spawned process is terminated by a
signal on Unix
([#&#8203;2154](https://redirect.github.com/voidzero-dev/vite-plus/pull/2154)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Honor an explicit `vp create --package-manager` outside monorepos
instead of inheriting the manager from a non-monorepo ancestor directory
([#&#8203;2226](https://redirect.github.com/voidzero-dev/vite-plus/pull/2226)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Scaffold the `vite:library` template into a directory that contains
only `.git`, while still refusing to overwrite existing user files
([#&#8203;2287](https://redirect.github.com/voidzero-dev/vite-plus/pull/2287)),
by [@&#8203;RSS1102](https://redirect.github.com/RSS1102)
- Render help for delegated commands from the local CLI, so `vp
<command> --help` matches the installed toolchain instead of drifting
([#&#8203;2184](https://redirect.github.com/voidzero-dev/vite-plus/pull/2184)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Resolve `typeAware` and `typeCheck` options inherited through Oxlint
`extends`, so `vp check --no-lint` runs and classifies type checking
correctly
([#&#8203;2228](https://redirect.github.com/voidzero-dev/vite-plus/pull/2228)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Report `(no version)` instead of `unknown` when globally installing a
local package that has no `version` field
([#&#8203;2232](https://redirect.github.com/voidzero-dev/vite-plus/pull/2232)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)

##### Refactor

- Rename the Git hooks environment variable to `VP_GIT_HOOKS`, keeping
`VITE_GIT_HOOKS` working as a deprecated alias
([#&#8203;2195](https://redirect.github.com/voidzero-dev/vite-plus/pull/2195)),
by [@&#8203;dennybiasiolli](https://redirect.github.com/dennybiasiolli)
- Consolidate the package manager infrastructure so typed command
arguments are the source of truth for per-manager compatibility
([#&#8203;2140](https://redirect.github.com/voidzero-dev/vite-plus/pull/2140)),
by [@&#8203;forehalo](https://redirect.github.com/forehalo)
- Generate the Zed language settings from a language list instead of 17
near-identical blocks
([#&#8203;2294](https://redirect.github.com/voidzero-dev/vite-plus/pull/2294)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Share the agent-file detect and write traversal helpers so both passes
apply identical rules
([#&#8203;2296](https://redirect.github.com/voidzero-dev/vite-plus/pull/2296)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Drop redundant clippy allow attributes in the global CLI
([#&#8203;2235](https://redirect.github.com/voidzero-dev/vite-plus/pull/2235)),
by [@&#8203;shulaoda](https://redirect.github.com/shulaoda)

##### Docs

- Avoid a duplicate `vp` installation step in the onboarding prompt
([#&#8203;2291](https://redirect.github.com/voidzero-dev/vite-plus/pull/2291)),
by [@&#8203;Arcadi4](https://redirect.github.com/Arcadi4)
- Recommend stacked pull requests for submitting changes
([#&#8203;2281](https://redirect.github.com/voidzero-dev/vite-plus/pull/2281)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Correct stale delegation comments in the global CLI
([#&#8203;2236](https://redirect.github.com/voidzero-dev/vite-plus/pull/2236)),
by [@&#8203;shulaoda](https://redirect.github.com/shulaoda)
- Improve the release draft review guidance in the release-manager skill
([#&#8203;2285](https://redirect.github.com/voidzero-dev/vite-plus/pull/2285)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)

##### Chore

- Stop emitting unmet peer warnings for the `vite-plus` peer of oxfmt
and oxlint on every install
([#&#8203;2321](https://redirect.github.com/voidzero-dev/vite-plus/pull/2321)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Remove duplicate direct dependency declarations so each build
dependency is owned by one workspace
([#&#8203;2318](https://redirect.github.com/voidzero-dev/vite-plus/pull/2318)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Declare `@emnapi` peers where `@napi-rs/cli` is used
([#&#8203;2319](https://redirect.github.com/voidzero-dev/vite-plus/pull/2319)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Exclude `rollup-tests` from the workspace and update `basic-ftp`
([#&#8203;2322](https://redirect.github.com/voidzero-dev/vite-plus/pull/2322)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Remove unused `EnvConfig` fields
([#&#8203;2320](https://redirect.github.com/voidzero-dev/vite-plus/pull/2320)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Remove the obsolete peer dependency merger tool
([#&#8203;2303](https://redirect.github.com/voidzero-dev/vite-plus/pull/2303)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Stop the staging deploy from triggering on external pull requests
([#&#8203;2293](https://redirect.github.com/voidzero-dev/vite-plus/pull/2293)),
by [@&#8203;BlankParticle](https://redirect.github.com/BlankParticle)
- Kill the real `vp` process, and kill it before its children, in the
`env_install_interrupt` snapshot test
([#&#8203;2299](https://redirect.github.com/voidzero-dev/vite-plus/pull/2299),
[#&#8203;2316](https://redirect.github.com/voidzero-dev/vite-plus/pull/2316)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Suppress racy optimizer logs in the `vitest_browser_mode` snapshot
test
([#&#8203;2297](https://redirect.github.com/voidzero-dev/vite-plus/pull/2297)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Remove the obsolete auto-install environment from the snapshot tests
([#&#8203;2163](https://redirect.github.com/voidzero-dev/vite-plus/pull/2163)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)

##### Bundled Versions

| Tool | Version | Source |
| --------------- | ---------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.2.0` |
[`fa79f9a`](https://redirect.github.com/vitejs/vite/commit/fa79f9ab699f9a22a6f9b50f3d247be6b51f684d)
|
| rolldown | `1.2.2` |
[`872b98a`](https://redirect.github.com/rolldown/rolldown/commit/872b98ac7476eb7d5892a2913e4ba010d124c6ac)
|
| tsdown | `0.22.14` | [npm](https://npmx.dev/package/tsdown/v/0.22.14)
|
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.76.0` | [npm](https://npmx.dev/package/oxlint/v/1.76.0) |
| oxlint-tsgolint | `7.0.2001` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) |
| oxfmt | `0.61.0` | [npm](https://npmx.dev/package/oxfmt/v/0.61.0) |

##### Upgrade

```bash
vp upgrade
```

##### New Contributors

[@&#8203;jbmusso](https://redirect.github.com/jbmusso),
[@&#8203;Arcadi4](https://redirect.github.com/Arcadi4),
[@&#8203;dennybiasiolli](https://redirect.github.com/dennybiasiolli),
[@&#8203;RSS1102](https://redirect.github.com/RSS1102)

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.7...v0.2.8>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.8`
- `vite-plus@0.2.8`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.8 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.7`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.7):
vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.6...v0.2.7)

This release points users to `vpr <name>` when a Vite+ built-in command
and package script share a name, adds concurrency control to `vp pack`,
and smooths migrations and package-manager setup.

##### Highlights

- Point users to `vpr <name>` when a Vite+ built-in command and
`package.json` script share a name
([#&#8203;2259](https://redirect.github.com/voidzero-dev/vite-plus/pull/2259),
[#&#8203;2262](https://redirect.github.com/voidzero-dev/vite-plus/pull/2262),
[#&#8203;2265](https://redirect.github.com/voidzero-dev/vite-plus/pull/2265),
[vite-task#570](https://redirect.github.com/voidzero-dev/vite-task/pull/570)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Add `--concurrency` to `vp pack` to limit parallel Rolldown builds,
and update tsdown `0.22.13` -> `0.22.14` and Vite DevTools `0.4.2` ->
`0.4.5`
([#&#8203;2233](https://redirect.github.com/voidzero-dev/vite-plus/pull/2233)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]
- Add read-only Svelte rune globals to migrated Oxlint overrides,
preventing false `no-undef` errors
([#&#8203;2192](https://redirect.github.com/voidzero-dev/vite-plus/pull/2192)),
by [@&#8203;naokihaba](https://redirect.github.com/naokihaba)
- Install package managers from npm tarballs with nonstandard top-level
directories, fixing Yarn 1.22.19 installation
([#&#8203;2264](https://redirect.github.com/voidzero-dev/vite-plus/pull/2264)),
by [@&#8203;TheAlexLichter](https://redirect.github.com/TheAlexLichter)

##### Fixes & Enhancements

- Prevent the Oxc language server from crashing when contributors open
the Vite+ workspace in VS Code
([#&#8203;2245](https://redirect.github.com/voidzero-dev/vite-plus/pull/2245)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Docs

- Document the full procedure for removing Vite+ commit hooks
([#&#8203;2218](https://redirect.github.com/voidzero-dev/vite-plus/pull/2218)),
by [@&#8203;TheAlexLichter](https://redirect.github.com/TheAlexLichter)
- Document per-process and per-machine ways to disable Vite+ commit
hooks without uninstalling them
([#&#8203;2230](https://redirect.github.com/voidzero-dev/vite-plus/pull/2230)),
by [@&#8203;TheAlexLichter](https://redirect.github.com/TheAlexLichter)
- Clarify when to use built-in `vp` commands versus package scripts
through `vp run` or `vpr`, including migration and agent guidance
([#&#8203;2255](https://redirect.github.com/voidzero-dev/vite-plus/pull/2255)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Document GitLab CI/CD setup with the reusable `setup-vp` template
([#&#8203;2258](https://redirect.github.com/voidzero-dev/vite-plus/pull/2258)),
by [@&#8203;naokihaba](https://redirect.github.com/naokihaba)

##### Chore

- Run Semgrep security scans on pull requests and pushes to `main`
([#&#8203;2223](https://redirect.github.com/voidzero-dev/vite-plus/pull/2223)),
by [@&#8203;Boshen](https://redirect.github.com/Boshen)
- Re-enable Vitest browser-mode CLI snapshot coverage on every supported
platform
([#&#8203;2275](https://redirect.github.com/voidzero-dev/vite-plus/pull/2275)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Stabilize Windows CLI snapshot tests for interrupted installs and
browser port fallback
([#&#8203;2282](https://redirect.github.com/voidzero-dev/vite-plus/pull/2282)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Replace deprecated shared JavaScript and TypeScript VS Code settings
with their current `js/ts.*` names
([#&#8203;2246](https://redirect.github.com/voidzero-dev/vite-plus/pull/2246)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Bundled Versions

| Tool | Version | Source |
| --------------- | ---------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.1.5` |
[`5e7fe12`](https://redirect.github.com/vitejs/vite/commit/5e7fe129a4dde4f41934083b25e490059985f4e6)
|
| rolldown | `1.2.0` |
[`03e1e34`](https://redirect.github.com/rolldown/rolldown/commit/03e1e3422cd85495c9863ff3bc3b24212d9f4be2)
|
| tsdown | `0.22.14` | [npm](https://npmx.dev/package/tsdown/v/0.22.14)
|
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.75.0` | [npm](https://npmx.dev/package/oxlint/v/1.75.0) |
| oxlint-tsgolint | `7.0.2001` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) |
| oxfmt | `0.60.0` | [npm](https://npmx.dev/package/oxfmt/v/0.60.0) |

##### Upgrade

```bash
vp upgrade
```

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.6...v0.2.7>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.7`
- `vite-plus@0.2.7`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

View the full commit:
[`c17e1c3`](https://redirect.github.com/voidzero-dev/vite-plus/commit/c17e1c3c7cf859a29dd32eb60e82dc8157449ac2)

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.7 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.6`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.6):
vite-plus v0.2.6: Stable type-aware linting and more reliable task
caching

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.5...v0.2.6)

This release moves Vite+'s type-aware linting to the [stable tsgolint 7
engine](https://oxc.rs/blog/2026-07-22-type-aware-linting-stable),
updates the bundled build and formatting tools, strengthens `vp run`
caching and workspace discovery, and removes the redundant `vp build`
startup banner.

##### Highlights

- Move bundled type-aware linting to stable tsgolint 7, and update Vite
`8.1.4` -> `8.1.5`, Rolldown `1.1.5` -> `1.2.0`, tsdown `0.22.7` ->
`0.22.13`, Oxlint `1.73.0` -> `1.75.0`, oxlint-tsgolint `0.24.0` ->
`7.0.2001`, and Oxfmt `0.58.0` -> `0.60.0`
([#&#8203;2214](https://redirect.github.com/voidzero-dev/vite-plus/pull/2214)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]
- Improve `vp run` reliability by caching much larger automatically
tracked input sets, discovering npm workspaces whose patterns start with
`./`, and providing more accurate error messages
([vite-task#554](https://redirect.github.com/voidzero-dev/vite-task/pull/554),
[vite-task#547](https://redirect.github.com/voidzero-dev/vite-task/pull/547),
[vite-task#552](https://redirect.github.com/voidzero-dev/vite-task/pull/552),
[#&#8203;2215](https://redirect.github.com/voidzero-dev/vite-plus/pull/2215)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi) and
[@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Remove the redundant Vite startup banner from `vp build` output and
fail fast when upstream Vite changes invalidate Vite+ branding patches
([#&#8203;2200](https://redirect.github.com/voidzero-dev/vite-plus/pull/2200),
[#&#8203;2205](https://redirect.github.com/voidzero-dev/vite-plus/pull/2205)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)

##### Refactor

- Deduplicate package-manager version gates in migration catalog
handling
([#&#8203;2216](https://redirect.github.com/voidzero-dev/vite-plus/pull/2216)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Unify static and generated CLI help under one document model and
renderer
([#&#8203;2211](https://redirect.github.com/voidzero-dev/vite-plus/pull/2211)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Reuse shared subprocess exit-status handling across global CLI command
paths
([#&#8203;2196](https://redirect.github.com/voidzero-dev/vite-plus/pull/2196)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Docs

- Fix broken documentation anchors and add Migration Rules to the
Migrate sidebar
([#&#8203;2203](https://redirect.github.com/voidzero-dev/vite-plus/pull/2203)),
by [@&#8203;charpeni](https://redirect.github.com/charpeni)

##### Chore

- Stabilize `vp create` build-approval snapshots by removing package-age
timing from those fixtures
([#&#8203;2224](https://redirect.github.com/voidzero-dev/vite-plus/pull/2224)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Remove the temporary release workflow dispatch used for the previous
release
([#&#8203;2193](https://redirect.github.com/voidzero-dev/vite-plus/pull/2193)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Share package-manager fixtures across CLI tests
([#&#8203;2197](https://redirect.github.com/voidzero-dev/vite-plus/pull/2197)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Remove stale raw Oxlint and Oxfmt development dependencies that
bypassed repository editor configuration
([#&#8203;2187](https://redirect.github.com/voidzero-dev/vite-plus/pull/2187)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)

##### Bundled Versions

| Tool | Version | Source |
| --------------- | ---------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.1.5` |
[`5e7fe12`](https://redirect.github.com/vitejs/vite/commit/5e7fe129a4dde4f41934083b25e490059985f4e6)
|
| rolldown | `1.2.0` |
[`03e1e34`](https://redirect.github.com/rolldown/rolldown/commit/03e1e3422cd85495c9863ff3bc3b24212d9f4be2)
|
| tsdown | `0.22.13` | [npm](https://npmx.dev/package/tsdown/v/0.22.13)
|
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.75.0` | [npm](https://npmx.dev/package/oxlint/v/1.75.0) |
| oxlint-tsgolint | `7.0.2001` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2001) |
| oxfmt | `0.60.0` | [npm](https://npmx.dev/package/oxfmt/v/0.60.0) |

##### Upgrade

```bash
vp upgrade
```

##### New Contributors

Welcome [@&#8203;charpeni](https://redirect.github.com/charpeni).

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.5...v0.2.6>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.6`
- `vite-plus@0.2.6`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

View the full commit:
[`cd064c6`](https://redirect.github.com/voidzero-dev/vite-plus/commit/cd064c68a45fb82badfc1853ff690b1b70511165)

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.6 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.5`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.5):
vite-plus v0.2.5: Cleaner environments and more reliable workflows

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.4...v0.2.5)

This release adds cleanup and package version commands, supports
TypeScript 7 declaration generation, reduces the standalone binary size,
and hardens task tracking, CLI output, package-manager routing, Docker
workflows, and project scaffolding.

##### Highlights

- Add `vp env clean` to remove unused managed Node.js runtimes and
package-manager caches
([#&#8203;2003](https://redirect.github.com/voidzero-dev/vite-plus/pull/2003)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Add `vp pm version`, forwarding native version commands to npm, pnpm,
Yarn, and Bun
([#&#8203;2127](https://redirect.github.com/voidzero-dev/vite-plus/pull/2127)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Add TypeScript 7 support to declaration generation and generated
library projects with tsdown `0.22.7`
([#&#8203;2104](https://redirect.github.com/voidzero-dev/vite-plus/pull/2104),
[#&#8203;2168](https://redirect.github.com/voidzero-dev/vite-plus/pull/2168)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Improve automatic task input tracking for Bun on macOS, Linux
containers with constrained `/dev/shm`, and Windows process images,
reduce Windows backing-file allocation, and clarify task wait failures
([vite-task#515](https://redirect.github.com/voidzero-dev/vite-task/pull/515),
[vite-task#518](https://redirect.github.com/voidzero-dev/vite-task/pull/518),
[vite-task#523](https://redirect.github.com/voidzero-dev/vite-task/pull/523),
[vite-task#524](https://redirect.github.com/voidzero-dev/vite-task/pull/524),
[vite-task#542](https://redirect.github.com/voidzero-dev/vite-task/pull/542),
[#&#8203;2126](https://redirect.github.com/voidzero-dev/vite-plus/pull/2126),
[#&#8203;2167](https://redirect.github.com/voidzero-dev/vite-plus/pull/2167)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Prevent CLI diagnostics from truncating or panicking when inherited
standard output or error is nonblocking
([#&#8203;2172](https://redirect.github.com/voidzero-dev/vite-plus/pull/2172),
[#&#8203;2173](https://redirect.github.com/voidzero-dev/vite-plus/pull/2173)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)

##### Fixes & Enhancements

- Reduce standalone `vp` binary sizes by about 5% on Linux and macOS and
19% on Windows
([#&#8203;2043](https://redirect.github.com/voidzero-dev/vite-plus/pull/2043)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Keep the Docker image non-root by default while allowing passwordless
`sudo` for Playwright browser dependencies and system packages
([#&#8203;2088](https://redirect.github.com/voidzero-dev/vite-plus/pull/2088)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Ignore `.env` and `.env.*` in generated projects while keeping
`.env.example` trackable
([#&#8203;2095](https://redirect.github.com/voidzero-dev/vite-plus/pull/2095)),
by [@&#8203;forehalo](https://redirect.github.com/forehalo)
- Create `vp-use.cmd` after the Windows environment bin directory is
ready and document its Command Prompt-only usage
([#&#8203;2128](https://redirect.github.com/voidzero-dev/vite-plus/pull/2128)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Render user-facing process statuses and paths without Rust debug
wrappers
([#&#8203;2130](https://redirect.github.com/voidzero-dev/vite-plus/pull/2130)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Make `vp dedupe` fall back to `yarn install` with a warning on Yarn
Classic
([#&#8203;2139](https://redirect.github.com/voidzero-dev/vite-plus/pull/2139)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Ensure package-manager child processes, including Bun, can always find
the managed Node.js runtime
([#&#8203;2158](https://redirect.github.com/voidzero-dev/vite-plus/pull/2158)),
by [@&#8203;BlankParticle](https://redirect.github.com/BlankParticle)

##### Docs

- Update the release-manager post-release guidance
([#&#8203;2096](https://redirect.github.com/voidzero-dev/vite-plus/pull/2096)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Add Windows to the Namespace sponsor credit
([#&#8203;2108](https://redirect.github.com/voidzero-dev/vite-plus/pull/2108)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Document installer and runtime environment variables, registry
settings, TLS options, and precedence rules
([#&#8203;2114](https://redirect.github.com/voidzero-dev/vite-plus/pull/2114)),
by [@&#8203;yukinoshi](https://redirect.github.com/yukinoshi)
- Mark shell examples in `CONTRIBUTING.md` as Bash code blocks
([#&#8203;2159](https://redirect.github.com/voidzero-dev/vite-plus/pull/2159)),
by [@&#8203;BlankParticle](https://redirect.github.com/BlankParticle)

##### Chore

- Assign prepared release PRs to the workflow actor
([#&#8203;2094](https://redirect.github.com/voidzero-dev/vite-plus/pull/2094)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Complete the PTY snapshot migration and harden the runner, fixtures,
release-version redaction, registry teardown, timeouts, and Linux
parallelism
([#&#8203;2071](https://redirect.github.com/voidzero-dev/vite-plus/pull/2071),
[#&#8203;2080](https://redirect.github.com/voidzero-dev/vite-plus/pull/2080),
[#&#8203;2084](https://redirect.github.com/voidzero-dev/vite-plus/pull/2084),
[#&#8203;2099](https://redirect.github.com/voidzero-dev/vite-plus/pull/2099),
[#&#8203;2102](https://redirect.github.com/voidzero-dev/vite-plus/pull/2102),
[#&#8203;2103](https://redirect.github.com/voidzero-dev/vite-plus/pull/2103),
[#&#8203;2107](https://redirect.github.com/voidzero-dev/vite-plus/pull/2107),
[#&#8203;2109](https://redirect.github.com/voidzero-dev/vite-plus/pull/2109),
[#&#8203;2115](https://redirect.github.com/voidzero-dev/vite-plus/pull/2115),
[#&#8203;2117](https://redirect.github.com/voidzero-dev/vite-plus/pull/2117),
[#&#8203;2118](https://redirect.github.com/voidzero-dev/vite-plus/pull/2118),
[#&#8203;2119](https://redirect.github.com/voidzero-dev/vite-plus/pull/2119),
[#&#8203;2120](https://redirect.github.com/voidzero-dev/vite-plus/pull/2120),
[#&#8203;2121](https://redirect.github.com/voidzero-dev/vite-plus/pull/2121),
[#&#8203;2131](https://redirect.github.com/voidzero-dev/vite-plus/pull/2131),
[#&#8203;2132](https://redirect.github.com/voidzero-dev/vite-plus/pull/2132),
[#&#8203;2134](https://redirect.github.com/voidzero-dev/vite-plus/pull/2134),
[#&#8203;2137](https://redirect.github.com/voidzero-dev/vite-plus/pull/2137),
[#&#8203;2138](https://redirect.github.com/voidzero-dev/vite-plus/pull/2138),
[#&#8203;2141](https://redirect.github.com/voidzero-dev/vite-plus/pull/2141),
[#&#8203;2143](https://redirect.github.com/voidzero-dev/vite-plus/pull/2143),
[#&#8203;2145](https://redirect.github.com/voidzero-dev/vite-plus/pull/2145),
[#&#8203;2182](https://redirect.github.com/voidzero-dev/vite-plus/pull/2182)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2) and
[@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Expose Vite+ managed binaries consistently inside snapshot fixtures
([#&#8203;2110](https://redirect.github.com/voidzero-dev/vite-plus/pull/2110)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)
- Exclude PTY snapshot configuration from Vitest discovery and remove
the legacy snapshot infrastructure
([#&#8203;2135](https://redirect.github.com/voidzero-dev/vite-plus/pull/2135),
[#&#8203;2146](https://redirect.github.com/voidzero-dev/vite-plus/pull/2146)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)
- Modernize Windows runners, registry bridge publishing, native size
reporting, merge-base comparisons, and package-manager installation CI
([#&#8203;2083](https://redirect.github.com/voidzero-dev/vite-plus/pull/2083),
[#&#8203;2100](https://redirect.github.com/voidzero-dev/vite-plus/pull/2100),
[#&#8203;2105](https://redirect.github.com/voidzero-dev/vite-plus/pull/2105),
[#&#8203;2106](https://redirect.github.com/voidzero-dev/vite-plus/pull/2106),
[#&#8203;2112](https://redirect.github.com/voidzero-dev/vite-plus/pull/2112),
[#&#8203;2133](https://redirect.github.com/voidzero-dev/vite-plus/pull/2133)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Verify that created monorepo libraries emit declarations in CI
([#&#8203;2171](https://redirect.github.com/voidzero-dev/vite-plus/pull/2171)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)

##### Bundled Versions

| Tool | Version | Source |
| --------------- | -------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.1.4` |
[`a477454`](https://redirect.github.com/vitejs/vite/commit/a477454442eff649b430f9e3c6caf2500fcb7183)
|
| rolldown | `1.1.5` |
[`f09947a`](https://redirect.github.com/rolldown/rolldown/commit/f09947ab017d6df74299f691853dcfc4f4f0f86e)
|
| tsdown | `0.22.7` | [npm](https://npmx.dev/package/tsdown/v/0.22.7) |
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.73.0` | [npm](https://npmx.dev/package/oxlint/v/1.73.0) |
| oxlint-tsgolint | `0.24.0` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/0.24.0) |
| oxfmt | `0.58.0` | [npm](https://npmx.dev/package/oxfmt/v/0.58.0) |

##### Upgrade

```bash
vp upgrade
```

##### New Contributors

Welcome [@&#8203;yukinoshi](https://redirect.github.com/yukinoshi) and
[@&#8203;BlankParticle](https://redirect.github.com/BlankParticle).

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.4...v0.2.5>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.5`
- `vite-plus@0.2.5`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

View the full commit:
[`93dc59a`](https://redirect.github.com/voidzero-dev/vite-plus/commit/93dc59a324f790603ce65e629c13617468d1027d)

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.5 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.4`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.4):
vite-plus v0.2.4: Vitest security hotfix

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.3...v0.2.4)

This hotfix updates the bundled Vitest Browser Mode packages to
`4.1.10`, which includes the fix for
[GHSA-p63j-vcc4-9vmv](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv).
The advisory is critical and affects `@vitest/browser <=4.1.9`.

##### Highlights

- **Critical Vitest Browser Mode advisory fixed**: bundled `vitest` and
`@vitest/browser*` move from `4.1.9` to `4.1.10`, addressing
[GHSA-p63j-vcc4-9vmv](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv),
where provider commands could bypass the file access permission gate
([#&#8203;2089](https://redirect.github.com/voidzero-dev/vite-plus/pull/2089)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]

##### Chore

- Add the standard release-manager skill for vite-plus release
operations
([#&#8203;2019](https://redirect.github.com/voidzero-dev/vite-plus/pull/2019)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)

##### Bundled Versions

| Tool | Version | Source |
| --------------- | -------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.1.3` |
[`578ffb8`](https://redirect.github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede)
|
| rolldown | `1.1.4` |
[`6cbd233`](https://redirect.github.com/rolldown/rolldown/commit/6cbd2330dc5ca973b90444973ee04c2dc7ee2f2d)
|
| tsdown | `0.22.3` | [npm](https://npmx.dev/package/tsdown/v/0.22.3) |
| vitest | `4.1.10` | [npm](https://npmx.dev/package/vitest/v/4.1.10) |
| oxlint | `1.72.0` | [npm](https://npmx.dev/package/oxlint/v/1.72.0) |
| oxlint-tsgolint | `0.24.0` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/0.24.0) |
| oxfmt | `0.57.0` | [npm](https://npmx.dev/package/oxfmt/v/0.57.0) |

##### Upgrade

```bash
vp upgrade
```

##### New Contributors

No new contributors in this release.

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.3...v0.2.4>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.4`
- `vite-plus@0.2.4`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.3`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.3):
vite-plus v0.2.3: config extraction, create, and vp run reliability
fixes

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.2...v0.2.3)

A patch release that fixes static config extraction for `vite.config.ts`
files whose `defineConfig` comes from a preset or custom wrapper (no
longer misread as Vite+'s own), fixes `vp create` for org templates on
registries that strip custom package fields, cleans up terminal output
after Ctrl-C during `vp run`, and updates bundled Vite to 8.1.3.

##### Highlights

- **Custom `VP_HOME` is honored on every run**: the global `vp` now
respects a user-set `VP_HOME` for its home directory instead of falling
back to `~/.vite-plus`, and persists it in the generated env files, so a
custom install location no longer produces multiple instances or
unusable packages
([#&#8203;2029](https://redirect.github.com/voidzero-dev/vite-plus/pull/2029)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ)

##### Features

- Upgrade bundled Vite from `8.1.2` to `8.1.3` (inlined CSS after the
shebang line, CSS preload for nested dynamic imports, SSR stacktrace
column fix)
([#&#8203;2042](https://redirect.github.com/voidzero-dev/vite-plus/pull/2042)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]

##### Fixes & Enhancements

- `vp run` no longer misreads a `vite.config.ts` when its `defineConfig`
comes from a preset or a custom wrapper instead of `vite-plus` or
`vite`. Such configs are now evaluated at runtime rather than assumed to
be Vite+'s own, so projects that use them no longer wrongly report `Task
"build" not found`
([#&#8203;2060](https://redirect.github.com/voidzero-dev/vite-plus/pull/2060),
[#&#8203;2075](https://redirect.github.com/voidzero-dev/vite-plus/pull/2075)),
by [@&#8203;liangmiQwQ](https://redirect.github.com/liangmiQwQ) and
[@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Killing a `vp run` task with Ctrl-C no longer leaves odd OSC escape
sequences in the terminal; `vp` defers its own Ctrl-C handling until the
child process exits
([#&#8203;2079](https://redirect.github.com/voidzero-dev/vite-plus/pull/2079)),
by [@&#8203;forehalo](https://redirect.github.com/forehalo)
- `vp migrate`: rewriting a `package.json` prettier script now emits a
single `--check`, so scripts that combined `--check` with
`--list-different` / `-l` / `-c` no longer produce a duplicated `vp fmt
--check --check`
([#&#8203;2044](https://redirect.github.com/voidzero-dev/vite-plus/pull/2044)),
by [@&#8203;shulaoda](https://redirect.github.com/shulaoda)
- `vp create @org:name`: read the org template catalog (`createConfig`)
from the published tarball when the registry (e.g. GitHub Packages)
strips custom fields from packument metadata
([#&#8203;2063](https://redirect.github.com/voidzero-dev/vite-plus/pull/2063)),
by [@&#8203;hiro-daikin](https://redirect.github.com/hiro-daikin)
- `vp run`: missing env vars requested through
`@voidzero-dev/vite-task-client` now return `undefined` instead of
`null`, preserving Vite production `NODE_ENV` semantics when builds run
through `vp run`
([vite-task#508](https://redirect.github.com/voidzero-dev/vite-task/pull/508),
via
[#&#8203;2076](https://redirect.github.com/voidzero-dev/vite-plus/pull/2076)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)

##### Refactor

- `static_config`: drop the unreachable `vite.config.json` branch
([#&#8203;2045](https://redirect.github.com/voidzero-dev/vite-plus/pull/2045)),
and remove unused exported CLI helpers
([#&#8203;2046](https://redirect.github.com/voidzero-dev/vite-plus/pull/2046)),
by [@&#8203;shulaoda](https://redirect.github.com/shulaoda)

##### Docs

- Update the announcement links and callout for the beta release
([#&#8203;2027](https://redirect.github.com/voidzero-dev/vite-plus/pull/2027)),
remove the stale `Dockerfile.alpine` comment
([#&#8203;2068](https://redirect.github.com/voidzero-dev/vite-plus/pull/2068)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Add the missing `pnpm-workspace.yaml` to the docs Dockerfile
([#&#8203;2059](https://redirect.github.com/voidzero-dev/vite-plus/pull/2059)),
by [@&#8203;wan-kong](https://redirect.github.com/wan-kong)
- Refresh the root agent guide
([#&#8203;2072](https://redirect.github.com/voidzero-dev/vite-plus/pull/2072)),
by [@&#8203;jong-kyung](https://redirect.github.com/jong-kyung)

##### Chore

- Cross-compile Windows tests and CLI binaries on Linux with cargo-xwin
([#&#8203;1824](https://redirect.github.com/voidzero-dev/vite-plus/pull/1824)),
install local vite-plus builds through a local npm registry
([#&#8203;2021](https://redirect.github.com/voidzero-dev/vite-plus/pull/2021)),
fast docs format check for docs-only PRs
([#&#8203;2028](https://redirect.github.com/voidzero-dev/vite-plus/pull/2028)),
pack local dirs for the registry bridge instead of pkg.pr.new
([#&#8203;2038](https://redirect.github.com/voidzero-dev/vite-plus/pull/2038)),
remove the stale create workflow updater
([#&#8203;2061](https://redirect.github.com/voidzero-dev/vite-plus/pull/2061)),
and add PTY-based interactive CLI snapshot tests
([#&#8203;2052](https://redirect.github.com/voidzero-dev/vite-plus/pull/2052)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Cache `vp run` output for docs builds
([#&#8203;2006](https://redirect.github.com/voidzero-dev/vite-plus/pull/2006)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Remove legacy completion cleanup
([#&#8203;2050](https://redirect.github.com/voidzero-dev/vite-plus/pull/2050)),
by [@&#8203;nekomoyi](https://redirect.github.com/nekomoyi)
- Update the crate-ci/typos action
([#&#8203;2039](https://redirect.github.com/voidzero-dev/vite-plus/pull/2039))
and GitHub Actions
([#&#8203;2055](https://redirect.github.com/voidzero-dev/vite-plus/pull/2055),
[#&#8203;1905](https://redirect.github.com/voidzero-dev/vite-plus/pull/1905)),
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
- Refresh the Node.js release keyring
([#&#8203;2058](https://redirect.github.com/voidzero-dev/vite-plus/pull/2058))
and the docs trusted-stack stats
([#&#8203;2064](https://redirect.github.com/voidzero-dev/vite-plus/pull/2064)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]

##### Bundled Versions

| Tool | Version | Source |
| --------------- | -------- |
-------------------------------------------------------------------------------------------------
|
| vite | `8.1.3` |
[`578ffb8`](https://redirect.github.com/vitejs/vite/commit/578ffb80d46940f3b99cd96ed609f8b3a0ac5ede)
|
| rolldown | `1.1.4` |
[`6cbd233`](https://redirect.github.com/rolldown/rolldown/commit/6cbd2330dc5ca973b90444973ee04c2dc7ee2f2d)
|
| tsdown | `0.22.3` | [npm](https://npmx.dev/package/tsdown/v/0.22.3) |
| vitest | `4.1.9` | [npm](https://npmx.dev/package/vitest/v/4.1.9) |
| oxlint | `1.72.0` | [npm](https://npmx.dev/package/oxlint/v/1.72.0) |
| oxlint-tsgolint | `0.24.0` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/0.24.0) |
| oxfmt | `0.57.0` | [npm](https://npmx.dev/package/oxfmt/v/0.57.0) |

##### Upgrade

```bash
vp upgrade
```

##### New Contributors

[@&#8203;wan-kong](https://redirect.github.com/wan-kong) and
[@&#8203;hiro-daikin](https://redirect.github.com/hiro-daikin) made
their first contributions.

**Full Changelog**:
<https://github.com/voidzero-dev/vite-plus/compare/v0.2.2...v0.2.3>

##### Published Packages

- `@voidzero-dev/vite-plus-core@0.2.3`
- `vite-plus@0.2.3`

##### Installation

**macOS/Linux:**

```bash
curl -fsSL https://vite.plus | bash
```

**Windows:**

```powershell
irm https://vite.plus/ps1 | iex
```

Or download and run `vp-setup.exe` from the assets below.

**Docker:**

```bash
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.3 vp build
```

Run any `vp` command without installing it; see the [Docker
guide](https://viteplus.dev/guide/docker) for more.

###
[`v0.2.2`](https://redirect.github.com/voidzero-dev/vite-plus/releases/tag/v0.2.2):
vite-plus v0.2.2: Vite+ Beta

[Compare
Source](https://redirect.github.com/voidzero-dev/vite-plus/compare/v0.2.1...v0.2.2)

**Vite+ is now in Beta**: stable and ready for production adoption,
fully open source under MIT. Read the announcement to see what Vite+ is
about and where it is headed: [Announcing Vite+
Beta](https://voidzero.dev/posts/announcing-vite-plus-beta).

On top of the Beta milestone, this release brings cross-version upgrades
via `vp migrate`, an official Docker toolchain image on GHCR,
zero-config runner-aware `vp build` caching, and PGP-verified managed
Node.js downloads.

##### Highlights

- **`vp migrate` upgrades existing Vite+ projects across versions**:
previous release notes told users not to run `vp migrate` for upgrades.
It now runs from the global CLI when the local one is older, re-pins
`vite-plus` and the `vite` -> `@voidzero-dev/vite-plus-core` alias
across dependencies, overrides/resolutions, and catalogs in every
workspace package, aligns `vitest` / `@vitest/*` by actual usage, and
defaults to a version-only upgrade (pass `--full` to also run the
first-time setup bucket: hooks, editor, agent files, lint migration)
([#&#8203;1891](https://redirect.github.com/voidzero-dev/vite-plus/pull/1891)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- **Official Vite+ Docker toolchain image**:
`ghcr.io/voidzero-dev/vite-plus` bundles `vp` plus a native build
toolchain on `debian:bookworm-slim` (amd64/arm64, non-root). Since `vp`
provisions the exact Node.js from `.node-version`, one image builds any
project, and a documented multi-stage build copies the resolved Node.js
into a small vp-free runtime stage
([#&#8203;1944](https://redirect.github.com/voidzero-dev/vite-plus/pull/1944)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- **Zero-config `vp build` caching via runner-aware Vite**: Vite reports
its inputs, outputs, and tracked env reads to the `vp` runner over the
new `@voidzero-dev/vite-task-client` IPC
([vite#22453](https://redirect.github.com/vitejs/vite/pull/22453)), so
`vp build` caches correctly with no hand-written cache config: outputs
are tracked and restored automatically, and a changed `VITE_*` env var
invalidates the cache and is named in the cache-miss message
([#&#8203;1774](https://redirect.github.com/voidzero-dev/vite-plus/pull/1774)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- **PGP-verified Node.js downloads**: installing a managed Node.js now
verifies the release's clearsigned `SHASUMS256.txt.asc` against the
vendored Node.js release keyring (pure Rust, no `gpg` required) before
trusting any checksum, so a tampered archive is rejected before install;
unsigned sources (musl builds, custom mirrors) fall back to
checksum-only verification
([#&#8203;1848](https://redirect.github.com/voidzero-dev/vite-plus/pull/1848)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)

##### Features

- `vp check`: a `check` block in `vite.config.ts` (`check.fmt` /
`check.lint`) can make plain `vp check` skip formatting or linting by
default, mirroring `--no-fmt` / `--no-lint`; standalone `vp fmt` / `vp
lint` and git hooks are unaffected, and a `note:` line keeps the
config-based skip discoverable
([#&#8203;1981](https://redirect.github.com/voidzero-dev/vite-plus/pull/1981)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- `vp env list-remote`: highlight installed versions (color, or a `*`
prefix when piped) and label the project-resolved `current` and global
`default` versions; `--json` gains `installed` / `current` / `default`
fields
([#&#8203;1907](https://redirect.github.com/voidzero-dev/vite-plus/pull/1907)),
by [@&#8203;semimikoh](https://redirect.github.com/semimikoh)
- `vpr` ships as a `vite-plus` package bin, so the `vp run` shorthand
works on clean installs without global PATH shims (Vercel build image,
generic CI runners)
([#&#8203;1988](https://redirect.github.com/voidzero-dev/vite-plus/pull/1988)),
by [@&#8203;kvnwolf](https://redirect.github.com/kvnwolf)
- Vite Task: `dependsOn` can select tasks from dependency packages, e.g.
`dependsOn: [{ "task": "build", "from": "dependencies" }]`
([vite-task#479](https://redirect.github.com/voidzero-dev/vite-task/pull/479)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Vite Task: a task's `env` / `untrackedEnv` glob patterns support `!`
negation (e.g. `["VITE_*", "!VITE_SECRET"]`)
([vite-task#425](https://redirect.github.com/voidzero-dev/vite-task/pull/425)),
and an env-caused cache miss now names the variable inline, e.g. `cache
miss: env 'NODE_ENV' changed`
([vite-task#438](https://redirect.github.com/voidzero-dev/vite-task/pull/438)),
by [@&#8203;wan9chi](https://redirect.github.com/wan9chi)
- Upgrade upstream dependencies: vite `8.0.16 -> 8.1.2`, rolldown `1.1.1
-> 1.1.4`, oxlint `1.70.0 -> 1.72.0`, oxfmt `0.55.0 -> 0.57.0`,
oxlint-tsgolint `0.23.0 -> 0.24.0`, and the oxc toolchain `0.136.0 ->
0.138.0`
([#&#8203;1924](https://redirect.github.com/voidzero-dev/vite-plus/pull/1924),
[#&#8203;1989](https://redirect.github.com/voidzero-dev/vite-plus/pull/1989),
[#&#8203;2000](https://redirect.github.com/voidzero-dev/vite-plus/pull/2000),
[#&#8203;2009](https://redirect.github.com/voidzero-dev/vite-plus/pull/2009)),
by
[@&#8203;voidzero-guard](https://redirect.github.com/voidzero-guard)\[bot]

##### Fixes & Enhancements

- Windows: `vp run` no longer hangs CI when a `node_modules/.bin` `.cmd`
shim is routed through PowerShell; the npm/pnpm/yarn `.ps1` wrappers
read stdin and block forever on a non-TTY pipe, so the PowerShell
rewrite is now skipped when stdin is not an interactive terminal
([vite-task#491](https://redirect.github.com/voidzero-dev/vite-task/pull/491),
via
[#&#8203;1973](https://redirect.github.com/voidzero-dev/vite-plus/pull/1973)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Vite Task: the task cache is stored in a per-schema-version directory
(e.g. `node_modules/.vite/task-cache/v13/`), so switching between
branches that pin different Vite+ versions no longer fails with
`Unrecognized database version`
([vite-task#433](https://redirect.github.com/voidzero-dev/vite-task/pull/433)),
by [@&#8203;fengmk2](https://redirect.github.com/fengmk2)
- Vite Task: env values in cache fingerprints are stored only as SHA-256
digests and env cache-miss details report names without values
([vite-task#455](https://redirect.github.com/voidzero-dev/vite-task/pull/455));
prefix env assignments like `PATH=... command` now affect executable
lookup during planning
([vite-task#440](https://redirect.github.com/voidzero-dev/vite-task/pull/440));
`package.json` / `pnpm-workspace.yaml` files with a UTF-8 BOM parse
correctl

> ✂ **Note**
> 
> PR body was truncated to here.


</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/voidzero-dev/setup.viteplus.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjEyLjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: MK <fengmk2@gmail.com>

Author: renovate[bot]

CLAUDE.md

@@ -6,6 +6,10 @@ This project is using Vite+, a unified toolchain built on top of Vite, Rolldown,
 
 Docs are local at `node_modules/vite-plus/docs` or online at https://viteplus.dev/guide/.
 
+## Built-in Commands vs Scripts
+
+`vp <name>` runs a built-in command. `vp run <name>` runs a `package.json` script or a `vite.config.ts` task. Scripts cannot overwrite built-ins, so `vp dev` and `vp run dev` may do different things. Check `package.json` and `vite.config.ts` first, and run `vp run <name>` when the project defines a script or task with that name.
+
 ## Review Checklist
 
 - [ ] Run `vp install` after pulling remote changes and before getting started.

package.json

@@ -4,7 +4,7 @@
   "scripts": {
     "dev": "vp dev",
     "build": "vp build",
-    "prepare": "vp config"
+    "prepare": "vp config && void prepare"
   },
   "devDependencies": {
     "@types/node": "catalog:",