Skip to content

chore(deps): bump vite-plus to pkg-pr-new PR #1703#7

Draft
fengmk2 wants to merge 3 commits into
mainfrom
update-vite-plus-prerelease-test-pr-1703
Draft

chore(deps): bump vite-plus to pkg-pr-new PR #1703#7
fengmk2 wants to merge 3 commits into
mainfrom
update-vite-plus-prerelease-test-pr-1703

Conversation

@fengmk2

@fengmk2 fengmk2 commented May 28, 2026

Copy link
Copy Markdown
Owner

Summary

Bump vite-plus and related packages to the pkg-pr-new prerelease build for upstream PR voidzero-dev/vite-plus#1703 (commit d0b407c).

Test plan

  • CI passes

@fengmk2 fengmk2 self-assigned this May 28, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the vite-plus dependency in package.json to a specific pre-release package URL and attempts to configure security and dependency overrides in pnpm-workspace.yaml. However, the configurations added to pnpm-workspace.yaml (such as overrides, blockExoticSubdeps, and minimumReleaseAge) are not supported in that file and will be ignored by pnpm. These settings must be relocated to the root package.json and .npmrc respectively.

Comment thread pnpm-workspace.yaml Outdated
Comment on lines +3 to +18
blockExoticSubdeps: false
minimumReleaseAge: 60
minimumReleaseAgeExclude:
- vite-plus
- "@voidzero-dev/vite-plus-core"
- "@voidzero-dev/vite-plus-test"
- "@voidzero-dev/vite-plus-prompts"
- "@oxc-project/*"
- "@oxlint/*"
- oxlint
- oxfmt
- oxlint-tsgolint
overrides:
"@voidzero-dev/vite-plus-core": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-core@d0b407c85b560c2470395176c9f1c838b5ca8af8"
"@voidzero-dev/vite-plus-test": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-test@d0b407c85b560c2470395176c9f1c838b5ca8af8"
"@voidzero-dev/vite-plus-prompts": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-prompts@d0b407c85b560c2470395176c9f1c838b5ca8af8"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

These configuration options and overrides are not supported in pnpm-workspace.yaml and will be ignored by pnpm.

1. Overrides

In pnpm, dependency overrides must be defined in the root package.json under the "pnpm.overrides" field:

"pnpm": {
  "overrides": {
    "@voidzero-dev/vite-plus-core": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-core@d0b407c85b560c2470395176c9f1c838b5ca8af8",
    "@voidzero-dev/vite-plus-test": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-test@d0b407c85b560c2470395176c9f1c838b5ca8af8",
    "@voidzero-dev/vite-plus-prompts": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-prompts@d0b407c85b560c2470395176c9f1c838b5ca8af8"
  }
}

2. Security Settings

blockExoticSubdeps, minimumReleaseAge, and minimumReleaseAgeExclude are pnpm configuration settings and must be defined in .npmrc using kebab-case:

block-exotic-subdeps=false
minimum-release-age=60
minimum-release-age-exclude[]=vite-plus
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-core
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-test
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-prompts
minimum-release-age-exclude[]=@oxc-project/*
minimum-release-age-exclude[]=@oxlint/*
minimum-release-age-exclude[]=oxlint
minimum-release-age-exclude[]=oxfmt
minimum-release-age-exclude[]=oxlint-tsgolint

@fengmk2 fengmk2 changed the title chore(deps): bump vite-plus to pkg-pr-new PR #1703 (d0b407c) chore(deps): bump vite-plus to pkg-pr-new PR #1703 May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant