vite-plus 0.2.4

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

This hotfix updates the bundled Vitest Browser Mode packages to `4.1.10`, which includes the fix for [GHSA-p63j-vcc4-9vmv](https://github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv). The advisory is critical and affects `@vitest/browser <=4.1.9`.
Highlights

Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#2089), by @voidzero-guard[bot]

Chore

Add the standard release-manager skill for vite-plus release operations (#2019), by @fengmk2

Bundled Versions



Tool
Version
Source




vite
8.1.3
578ffb8


rolldown
1.1.4
6cbd233


tsdown
0.22.3
npm


vitest
4.1.10
npm


oxlint
1.72.0
npm


oxlint-tsgolint
0.24.0
npm


oxfmt
0.57.0
npm



Upgrade
vp upgrade
New Contributors
No new contributors in this release.
Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4
Published Packages

@voidzero-dev/vite-plus-core@0.2.4
vite-plus@0.2.4

Installation
macOS/Linux:
curl -fsSL https://vite.plus | bash
Windows:
irm https://vite.plus/ps1 | iex
Or download and run vp-setup.exe from the assets below.
Docker:
docker run --rm -it -v "$PWD:/app" -w /app ghcr.io/voidzero-dev/vite-plus:0.2.4 vp build
Run any vp command without installing it; see the Docker guide for more.

View the full release notes at https://github.com/voidzero-dev/vite-plus/releases/tag/v0.2.4.

---

[bevanjkay]

New builds are blocked until Rust 1.97

[daeho-ro]

• rust 1.97.0 #292161

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

[branchv]

Actually nightly is now needed after a breaking API change in unstable c_variadic feature: voidzero-dev/vite-task@db99ba4. So switched to rustup to use upstream's default toolchain

[bevanjkay]

Thanks @branchv TIL we can use nightly Rust builds.

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.