Skip to content

chore: upgrade vp#683

Merged
fengmk2 merged 2 commits intomasterfrom
update-vite-plus
Mar 11, 2026
Merged

chore: upgrade vp#683
fengmk2 merged 2 commits intomasterfrom
update-vite-plus

Conversation

@fengmk2
Copy link
Member

@fengmk2 fengmk2 commented Mar 11, 2026

Summary by CodeRabbit

  • Chores
    • Updated dependency versions for build and testing tools.

Copilot AI review requested due to automatic review settings March 11, 2026 05:57
@coderabbitai
Copy link

coderabbitai bot commented Mar 11, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 73e6bc29-6074-404c-bbcd-02c6e662169d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

This pull request updates dependencies in package.json, bumping vite-plus and vitest from version 0.1.4 to 0.1.6 across the dependencies, overrides, and pnpm overrides sections. No functional or control-flow changes are introduced.

Changes

Cohort / File(s) Summary
Dependency Version Bumps
package.json
Upgrades vite-plus and vitest from 0.1.4 to 0.1.6 in dependencies, overrides, and pnpm overrides sections.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

Poem

🐰 Hops of joy, I say hooray!
Versions bumped, old code away,
Vite-plus dancing, vitest too,
0.1.6 brings something new! 🌟

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Title check ❓ Inconclusive The title 'chore: upgrade vp' is vague and uses an abbreviation ('vp') that lacks clarity about what is being upgraded. Clarify the title to 'chore: upgrade vite-plus' or similar to make it immediately clear which dependency is being upgraded.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch update-vite-plus

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@gemini-code-assist
Copy link

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a routine dependency upgrade, specifically targeting the vite-plus ecosystem. It updates vite-plus and its related vitest integration to their latest 0.1.6 versions, ensuring the project benefits from the newest features, bug fixes, and performance improvements. The pnpm-lock.yaml file has been regenerated to accurately reflect these new dependency resolutions and also includes an update for oxlint.

Highlights

  • Dependency Upgrades: Upgraded vite-plus and its associated vitest test runner to version 0.1.6 across direct dependencies and overrides.
  • Lockfile Synchronization: Synchronized pnpm-lock.yaml to reflect all updated dependency versions, including a minor version bump for oxlint to 1.53.0.
  • Oxlint Bindings Refinement: Consolidated oxlint platform-specific bindings in the lockfile, removing several older 1.52.0 entries and retaining the updated darwin-arm64 binding at 1.53.0.
Changelog
  • package.json
    • Updated vite-plus dependency to ^0.1.6.
    • Updated vitest dependency (aliased to @voidzero-dev/vite-plus-test) to ^0.1.6.
    • Updated vite and vitest overrides to ^0.1.6.
    • Updated pnpm.overrides for vite and vitest to ^0.1.6.
  • pnpm-lock.yaml
    • Updated vite and vitest overrides to ^0.1.6.
    • Updated various @voidzero-dev/vite-plus-* packages to version 0.1.6.
    • Upgraded oxlint to 1.53.0.
    • Removed multiple platform-specific @oxlint/binding-* entries for version 1.52.0, retaining only the darwin-arm64 binding at 1.53.0.
Activity
  • No specific activity (comments, reviews, etc.) has been recorded for this pull request yet.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@pkg-pr-new
Copy link

pkg-pr-new bot commented Mar 11, 2026

Open in StackBlitz

npm i https://pkg.pr.new/node-modules/urllib@683

commit: a22d6ff

@codecov
Copy link

codecov bot commented Mar 11, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.77%. Comparing base (14efc7f) to head (9b632f0).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #683   +/-   ##
=======================================
  Coverage   92.77%   92.77%           
=======================================
  Files          10       10           
  Lines         747      747           
  Branches      233      233           
=======================================
  Hits          693      693           
  Misses         51       51           
  Partials        3        3           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@socket-security
Copy link

socket-security bot commented Mar 11, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​voidzero-dev/​vite-plus-test@​0.1.4 ⏵ 0.1.6771007699 +1100
Updatedvite-plus@​0.1.4 ⏵ 0.1.681 +110099100 +1100

View full report

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request upgrades vite-plus and its related dependencies from ^0.1.4 to ^0.1.6. The version bumps are applied consistently across devDependencies and overrides in package.json, and the pnpm-lock.yaml file is updated accordingly. My main feedback is to suggest pinning the versions for these pre-1.0.0 dependencies to avoid potential breaking changes in the future, which would improve build stability.

Comment on lines +105 to +110
"vite-plus": "^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"
},
"overrides": {
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.4",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.4"
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

For dependencies with a major version of 0 (e.g., 0.x.y), it's a good practice to pin the version instead of using a caret (^). According to semantic versioning, versions below 1.0.0 can introduce breaking changes even in minor or patch releases. Pinning the versions (e.g., using "0.1.6" instead of "^0.1.6") will prevent unexpected breaking changes from being pulled in on subsequent installs, improving the stability and predictability of the build. This applies to both devDependencies and overrides.

Suggested change
"vite-plus": "^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"
},
"overrides": {
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.4",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.4"
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"
"vite-plus": "0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@0.1.6"
},
"overrides": {
"vite": "npm:@voidzero-dev/vite-plus-core@0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@0.1.6"

Comment on lines +124 to +125
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

For consistency and to prevent potential breaking changes, it's best to pin the versions in pnpm.overrides as well for these pre-1.0.0 packages.

Suggested change
"vite": "npm:@voidzero-dev/vite-plus-core@^0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.6"
"vite": "npm:@voidzero-dev/vite-plus-core@0.1.6",
"vitest": "npm:@voidzero-dev/vite-plus-test@0.1.6"

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades the project’s Vite+ toolchain by bumping vite-plus and the vite/vitest overrides to newer @voidzero-dev/vite-plus-* versions.

Changes:

  • Bump vite-plus from ^0.1.4 to ^0.1.6.
  • Update vite and vitest overrides (and associated lockfile resolutions) to @voidzero-dev/vite-plus-*@^0.1.6.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Updates vite-plus/vitest versions and corresponding overrides to ^0.1.6.
pnpm-lock.yaml Updates resolved dependency graph for the new Vite+ versions (including transitive updates like oxlint).
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

'@oxlint/binding-win32-arm64-msvc': 1.52.0
'@oxlint/binding-win32-ia32-msvc': 1.52.0
'@oxlint/binding-win32-x64-msvc': 1.52.0
'@oxlint/binding-darwin-arm64': 1.53.0
Copy link

Copilot AI Mar 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The lockfile now pins oxlint@1.53.0 to only the macOS arm64 binding (@oxlint/binding-darwin-arm64) in optionalDependencies. This makes the lockfile platform-specific and will likely break pnpm install --frozen-lockfile on Linux/Windows runners (CI tests run on all three OSes). Regenerate pnpm-lock.yaml so oxlint includes the full set of platform bindings again (similar to how oxfmt and oxlint-tsgolint keep all their bindings).

Suggested change
'@oxlint/binding-darwin-arm64': 1.53.0
'@oxlint/binding-darwin-arm64': 1.53.0
'@oxlint/binding-darwin-x64': 1.53.0
'@oxlint/binding-linux-arm64': 1.53.0
'@oxlint/binding-linux-x64': 1.53.0
'@oxlint/binding-win32-arm64': 1.53.0
'@oxlint/binding-win32-x64': 1.53.0

Copilot uses AI. Check for mistakes.
@fengmk2 fengmk2 merged commit 0513934 into master Mar 11, 2026
24 checks passed
@fengmk2 fengmk2 deleted the update-vite-plus branch March 11, 2026 11:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants