feat(deps): upgrade upstream dependencies by voidzero-guard[bot] · Pull Request #1693 · voidzero-dev/vite-plus

voidzero-guard · 2026-05-27T02:37:39Z

Summary

Automated daily upgrade of upstream dependencies.
Bumps the oxc toolchain group: oxlint 1.66.0 -> 1.67.0, oxfmt 0.51.0 -> 0.52.0, and @oxc-project/* / oxc-* packages 0.132.0 -> 0.133.0.
Refreshes CLI snapshots affected by the new oxlint --debug=files option and updated vp run cache-status messages.

Dependency updates

Package	From	To
`oxfmt`	`0.51.0`	`0.52.0`
`oxlint`	`1.66.0`	`1.67.0`
`@oxc-project/runtime`	`0.132.0`	`0.133.0`
`@oxc-project/types`	`0.132.0`	`0.133.0`
`oxc-minify`	`0.132.0`	`0.133.0`
`oxc-parser`	`0.132.0`	`0.133.0`
`oxc-transform`	`0.132.0`	`0.133.0`

Unchanged dependencies

rolldown: v1.0.2 (f2757ed)
vite: v8.0.14 (c917f1e)
vitest: 4.1.7
tsdown: 0.22.0
@oxc-node/cli: 0.1.0
@oxc-node/core: 0.1.0
oxlint-tsgolint: 0.23.0
@vitejs/devtools: 0.2.0

Code changes

Refresh oxlint help-output snapshots for the new --debug=files option in packages/cli/snap-tests/bin-oxlint-wrapper/snap.txt and packages/cli/snap-tests/command-helper/snap.txt.
Refresh vp run cache-status output snapshots in packages/cli/snap-tests/cache-clean/snap.txt, packages/cli/snap-tests/ignore_dist/snap.txt, and packages/cli/snap-tests/plain-terminal-ui-nested/snap.txt.

Build status

sync-remote-and-build: success
build-upstream: success

- oxfmt: 0.51.0 -> 0.52.0 - oxlint: 1.66.0 -> 1.67.0 - @oxc-project/runtime: 0.132.0 -> 0.133.0 - @oxc-project/types: 0.132.0 -> 0.133.0 - oxc-minify: 0.132.0 -> 0.133.0 - oxc-parser: 0.132.0 -> 0.133.0 - oxc-transform: 0.132.0 -> 0.133.0 Code changes: - Refresh oxlint help output snapshots for new `--debug=files` option in packages/cli/snap-tests/bin-oxlint-wrapper/snap.txt and packages/cli/snap-tests/command-helper/snap.txt - Refresh vp run cache-status output snapshots in packages/cli/snap-tests/cache-clean/snap.txt, packages/cli/snap-tests/ignore_dist/snap.txt, and packages/cli/snap-tests/plain-terminal-ui-nested/snap.txt

netlify · 2026-05-27T02:37:44Z

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	`76d1912`
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a16b4527940eb00082b85a5

socket-security · 2026-05-27T02:38:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@oxc-project/types@0.133.0
	npm/@oxc-project/runtime@0.133.0
	npm/oxfmt@0.52.0
	npm/oxc-transform@0.133.0
	npm/oxc-parser@0.133.0

View full report

fengmk2 · 2026-05-27T06:08:19Z

Investigation result for the packages/cli/snap-tests/oxlint-typeaware failure:

The snap itself is not failing because of the type-aware cache/input logic. It fails earlier because vp lint --type-aware ./src exits while oxlint is loading the Vite+ config.

oxlint@1.67.0 now declares an optional vite-plus peer and loads Vite+ config via import("vite-plus").resolveConfig. In CI, that path imports vite-plus -> @voidzero-dev/vite-plus-core, then reaches:

@voidzero-dev/vite-plus-core/dist/rolldown/shared/resolve-tsconfig-DCdBlPeK.mjs:103
var TsconfigCache = class extends import_binding.TsconfigCache
TypeError: Class extends value undefined is not a constructor or null

The underlying issue appears to be the published @voidzero-dev/vite-plus-core@0.1.22 Rolldown binding loader falling back to vite-plus/binding. That vite-plus/binding is the Vite+ CLI NAPI binding, not the Rolldown binding, so it does not export Rolldown symbols such as TsconfigCache; import_binding.TsconfigCache is therefore undefined.

This is why oxlint-typeaware shows the failure: the fixture runs vp lint --type-aware ./src, and oxlint 1.67.0 now tries to parse vite.config.ts through Vite+ before linting or cache behavior is exercised.

I could not reproduce with the existing local install because this workspace still had oxlint@1.66.0; CI installs the PR lockfile dependency graph, where oxlint@1.67.0 takes the new Vite+ config loading path.

pkg-pr-new · 2026-05-27T06:54:21Z

Open in StackBlitz

vite-plus

npm i https://pkg.pr.new/voidzero-dev/vite-plus@1693

@voidzero-dev/vite-plus-core

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-core@1693

@voidzero-dev/vite-plus-prompts

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-prompts@1693

@voidzero-dev/vite-plus-test

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-test@1693

@voidzero-dev/vite-plus-cli-darwin-arm64

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-darwin-arm64@1693

@voidzero-dev/vite-plus-cli-darwin-x64

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-darwin-x64@1693

@voidzero-dev/vite-plus-cli-linux-arm64-gnu

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-linux-arm64-gnu@1693

@voidzero-dev/vite-plus-cli-linux-arm64-musl

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-linux-arm64-musl@1693

@voidzero-dev/vite-plus-cli-linux-x64-gnu

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-linux-x64-gnu@1693

@voidzero-dev/vite-plus-cli-linux-x64-musl

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-linux-x64-musl@1693

@voidzero-dev/vite-plus-cli-win32-arm64-msvc

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-win32-arm64-msvc@1693

@voidzero-dev/vite-plus-cli-win32-x64-msvc

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-cli-win32-x64-msvc@1693

@voidzero-dev/vite-plus-darwin-arm64

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-darwin-arm64@1693

@voidzero-dev/vite-plus-darwin-x64

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-darwin-x64@1693

@voidzero-dev/vite-plus-linux-arm64-gnu

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-linux-arm64-gnu@1693

@voidzero-dev/vite-plus-linux-arm64-musl

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-linux-arm64-musl@1693

@voidzero-dev/vite-plus-linux-x64-gnu

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-linux-x64-gnu@1693

@voidzero-dev/vite-plus-linux-x64-musl

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-linux-x64-musl@1693

@voidzero-dev/vite-plus-win32-arm64-msvc

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-win32-arm64-msvc@1693

@voidzero-dev/vite-plus-win32-x64-msvc

npm i https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-win32-x64-msvc@1693

commit: 87ac05b

fengmk2 · 2026-05-27T08:07:11Z

+  );
+  writeFileSync(inputPath, 'export const value = 1;\n');
+
+  execFileSync(process.execPath, [oxlintBin, '-c', configPath, inputPath], {


There is no need to run the oxlint command for verification here.

fengmk2 · 2026-05-27T09:07:35Z

Fixed in 76d19125 (fix(cli): build local binding with rolldown).

Root cause was that local/dev vite-plus native binding was built without the rolldown feature, so when oxlint's type-aware config loading imported local vite-plus, Rolldown's TsconfigCache / resolveTsconfig exports were missing. The PR now builds the local binding with rolldown enabled and updates the generated binding stubs. I also adjusted the oxlint-typeaware fixture so it remains lint-clean once config loading succeeds.

Local verification:

pnpm -F vite-plus build-native
pnpm -F vite-plus snap-test-local oxlint-typeaware
snapshot diff for packages/cli/snap-tests/oxlint-typeaware/snap.txt stayed clean

Merge branch 'main' into deps/upstream-update

87ac05b

fengmk2 added the pkg.pr.new label May 27, 2026

fengmk2 self-assigned this May 27, 2026

fengmk2 mentioned this pull request May 27, 2026

chore(deps): update vite-plus to pkg.pr.new PR #1693 node-modules/urllib#789

Draft

4 tasks

test(e2e): verify local vite-plus install

68e1d8b

fengmk2 reviewed May 27, 2026

View reviewed changes

fix(cli): build local binding with rolldown

76d1912

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(deps): upgrade upstream dependencies#1693

feat(deps): upgrade upstream dependencies#1693
voidzero-guard[bot] wants to merge 4 commits into
mainfrom
deps/upstream-update

voidzero-guard Bot commented May 27, 2026

Uh oh!

netlify Bot commented May 27, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 27, 2026 •

edited

Loading

Uh oh!

fengmk2 commented May 27, 2026

Uh oh!

pkg-pr-new Bot commented May 27, 2026

Uh oh!

fengmk2 May 27, 2026

Uh oh!

fengmk2 commented May 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

voidzero-guard Bot commented May 27, 2026

Summary

Dependency updates

Code changes

Build status

Uh oh!

netlify Bot commented May 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for viteplus-preview canceled.

Uh oh!

socket-security Bot commented May 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fengmk2 commented May 27, 2026

Uh oh!

pkg-pr-new Bot commented May 27, 2026

Uh oh!

fengmk2 May 27, 2026

Choose a reason for hiding this comment

Uh oh!

fengmk2 commented May 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify Bot commented May 27, 2026 •

edited

Loading

socket-security Bot commented May 27, 2026 •

edited

Loading