Skip to content

feat(deps): upgrade upstream dependencies#2162

Closed
voidzero-guard[bot] wants to merge 8 commits into
mainfrom
deps/upstream-update
Closed

feat(deps): upgrade upstream dependencies#2162
voidzero-guard[bot] wants to merge 8 commits into
mainfrom
deps/upstream-update

Conversation

@voidzero-guard

Copy link
Copy Markdown
Contributor

Summary

  • Automated daily upgrade of upstream dependencies.
  • Bumps bundled vite to v8.1.4 (a477454) and tsdown (plus @tsdown/css/@tsdown/exe) from 0.22.4 to 0.22.5; rolldown and vitest are unchanged.
  • Required manual fixes: widen the typescript peer range to include ^7.0.0, and pin postcss-modules to 9.0.0 with its vite patch so install succeeds.

Dependency updates

Package From To
vite 578ffb8 v8.1.4 (a477454)
tsdown 0.22.4 0.22.5
@tsdown/css 0.22.4 0.22.5
@tsdown/exe 0.22.4 0.22.5

Code changes

  • packages/core/package.json: widen the typescript peer range to ^5.0.0 || ^6.0.0 || ^7.0.0; bump bundled vite 8.1.3 -> 8.1.4 and tsdown 0.22.4 -> 0.22.5.
  • pnpm-workspace.yaml: pin postcss-modules to 9.0.0 and register vite/patches/postcss-modules@9.0.0.patch under patchedDependencies^9.0.0 otherwise re-resolves to 9.0.1, leaving the still-shipped vite patch unused and failing install.
  • pnpm-workspace.yaml: add yuku-*, @yuku-parser/*, and @yuku-codegen/* to minimumReleaseAgeExclude.
  • crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/new_vite_monorepo{,_bun}/snapshots: refresh generated typescript/@types/node devDependency versions.
  • crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_env_which/snapshots: refresh install date.

Build status

  • sync-remote-and-build: failure
  • build-upstream: success

- vite: 578ffb8 -> v8.1.4 (a477454)
- tsdown: 0.22.4 -> 0.22.5
- @tsdown/css: 0.22.4 -> 0.22.5
- @tsdown/exe: 0.22.4 -> 0.22.5

Code changes:
- packages/core/package.json: widen `typescript` peer range to `^5.0.0 || ^6.0.0 || ^7.0.0`; bump bundled `vite` 8.1.3 -> 8.1.4 and `tsdown` 0.22.4 -> 0.22.5
- pnpm-workspace.yaml: pin `postcss-modules` to 9.0.0 and register `vite/patches/postcss-modules@9.0.0.patch` so the still-shipped vite patch applies (^9.0.0 otherwise re-resolves to 9.0.1 and fails install)
- pnpm-workspace.yaml: add `yuku-*`, `@yuku-parser/*`, `@yuku-codegen/*` to `minimumReleaseAgeExclude`
- crates/vite_cli_snapshots/.../new_vite_monorepo{,_bun}/snapshots: refresh generated `typescript`/`@types/node` devDependency versions
- crates/vite_cli_snapshots/.../command_env_which/snapshots: refresh install date
@netlify

netlify Bot commented Jul 13, 2026

Copy link
Copy Markdown

Deploy Preview for viteplus-preview canceled.

Name Link
🔨 Latest commit 66aa2fb
🔍 Latest deploy log https://app.netlify.com/projects/viteplus-preview/deploys/6a5583105e40b10008eb1877

@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Native binary sizes (66aa2fb)

Final release artifacts built by the canonical build-upstream and build-windows-cli actions.

Artifact Format Base PR Change
vp (Linux x64) Binary 10.32 MiB 10.32 MiB 0 B (0.00%)
vp (Linux x64) gzip -9 4.42 MiB 4.42 MiB 0 B (0.00%)
NAPI (Linux x64) Binary 33.42 MiB 33.42 MiB 0 B (0.00%)
NAPI (Linux x64) gzip -9 12.78 MiB 12.78 MiB 0 B (0.00%)
vp (macOS ARM64) Binary 7.64 MiB 7.64 MiB 0 B (0.00%)
vp (macOS ARM64) gzip -9 3.83 MiB 3.83 MiB 0 B (0.00%)
NAPI (macOS ARM64) Binary 40.78 MiB 40.78 MiB 0 B (0.00%)
NAPI (macOS ARM64) gzip -9 17.05 MiB 17.05 MiB +77 B (+0.00%)
vp (Windows x64) Binary 8.37 MiB 8.37 MiB 0 B (0.00%)
vp (Windows x64) gzip -9 3.64 MiB 3.64 MiB +1 B (+0.00%)
NAPI (Windows x64) Binary 27.88 MiB 27.88 MiB 0 B (0.00%)
NAPI (Windows x64) gzip -9 10.78 MiB 10.78 MiB -11 B (-0.00%)
Trampoline (Windows x64) Binary 203.00 KiB 203.00 KiB 0 B (0.00%)
Trampoline (Windows x64) gzip -9 97.91 KiB 97.91 KiB -2 B (-0.00%)
Installer (Windows x64) Binary 4.46 MiB 4.46 MiB 0 B (0.00%)
Installer (Windows x64) gzip -9 2.08 MiB 2.08 MiB -1 B (-0.00%)

@wan9chi wan9chi requested a review from Brooooooklyn July 13, 2026 06:15
@wan9chi wan9chi added the test: e2e Auto run e2e tests label Jul 13, 2026
@wan9chi wan9chi requested a review from Copilot July 13, 2026 23:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates bundled upstream toolchain dependencies (notably Vite and tsdown) and adjusts the repository/tooling to keep installs and generated templates working with the new ecosystem state (including TypeScript 7 support and pnpm patching).

Changes:

  • Bump bundled upstream versions (Vite → 8.1.4, tsdown → 0.22.5) and widen the TypeScript peer range to include ^7.0.0.
  • Pin postcss-modules to 9.0.0 and register a pnpm patch entry to keep installs compatible with the shipped Vite patch.
  • Add TS7-specific DTS configuration for vp pack, align monorepo template TypeScript versions, and refresh/redact snapshot fixtures accordingly.

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
pnpm-workspace.yaml Updates catalog versions, adds minimumReleaseAge exclusions, and pins/patches postcss-modules.
pnpm-lock.yaml Locks updated dependency graph reflecting the upstream/version changes and the new patch entry.
packages/tools/.upstream-versions.json Updates tracked upstream Vite commit hash.
packages/core/package.json Bumps bundled Vite/tsdown versions and widens TypeScript peer range.
packages/cli/src/utils/typescript-dts.ts Adds TS7-aware DTS configuration to route declaration generation through the native compiler.
packages/cli/src/pack-bin.ts Hooks TS7 DTS configuration into vp pack resolved configs.
packages/cli/src/create/templates/monorepo.ts Ensures app and library template TypeScript versions stay aligned.
packages/cli/src/create/tests/monorepo.spec.ts Adds coverage for monorepo TypeScript alignment behavior and refactors helpers.
packages/cli/src/tests/typescript-dts.spec.ts Adds unit tests for the TS7 DTS configuration behavior.
crates/vite_cli_snapshots/tests/redact_unit.rs Adds a unit test ensuring install dates are redacted in outputs.
crates/vite_cli_snapshots/tests/cli_snapshots/redact.rs Adds redaction logic for managed runtime install dates in vp env which snapshots.
crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/new_vite_monorepo/snapshots/new_vite_monorepo.md Refreshes template snapshot deps (TypeScript/@types/node).
crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/new_vite_monorepo_bun/snapshots/new_vite_monorepo_bun.md Refreshes template snapshot deps (TypeScript/@types/node).
crates/vite_cli_snapshots/tests/cli_snapshots/fixtures/command_env_which/snapshots/command_env_which.md Updates snapshot to use <date> placeholder for install date.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread pnpm-workspace.yaml
@socket-security

socket-security Bot commented Jul 14, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​tsdown/​exe@​0.22.5711007297100
Addednpm/​@​tsdown/​css@​0.22.5751008097100
Addednpm/​tsx@​4.23.01001008292100
Addednpm/​tsdown@​0.22.5981008897100
Updatednpm/​postcss-modules@​6.0.1 ⏵ 9.0.099 +1100100 +192 +12100

View full report

@voidzero-guard voidzero-guard Bot closed this Jul 14, 2026
@voidzero-guard voidzero-guard Bot deleted the deps/upstream-update branch July 14, 2026 01:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test: e2e Auto run e2e tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants