chore(deps): bump vite-plus to pkg-pr-new PR #1703#7
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the vite-plus dependency in package.json to a specific pre-release package URL and attempts to configure security and dependency overrides in pnpm-workspace.yaml. However, the configurations added to pnpm-workspace.yaml (such as overrides, blockExoticSubdeps, and minimumReleaseAge) are not supported in that file and will be ignored by pnpm. These settings must be relocated to the root package.json and .npmrc respectively.
| blockExoticSubdeps: false | ||
| minimumReleaseAge: 60 | ||
| minimumReleaseAgeExclude: | ||
| - vite-plus | ||
| - "@voidzero-dev/vite-plus-core" | ||
| - "@voidzero-dev/vite-plus-test" | ||
| - "@voidzero-dev/vite-plus-prompts" | ||
| - "@oxc-project/*" | ||
| - "@oxlint/*" | ||
| - oxlint | ||
| - oxfmt | ||
| - oxlint-tsgolint | ||
| overrides: | ||
| "@voidzero-dev/vite-plus-core": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-core@d0b407c85b560c2470395176c9f1c838b5ca8af8" | ||
| "@voidzero-dev/vite-plus-test": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-test@d0b407c85b560c2470395176c9f1c838b5ca8af8" | ||
| "@voidzero-dev/vite-plus-prompts": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-prompts@d0b407c85b560c2470395176c9f1c838b5ca8af8" |
There was a problem hiding this comment.
These configuration options and overrides are not supported in pnpm-workspace.yaml and will be ignored by pnpm.
1. Overrides
In pnpm, dependency overrides must be defined in the root package.json under the "pnpm.overrides" field:
"pnpm": {
"overrides": {
"@voidzero-dev/vite-plus-core": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-core@d0b407c85b560c2470395176c9f1c838b5ca8af8",
"@voidzero-dev/vite-plus-test": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-test@d0b407c85b560c2470395176c9f1c838b5ca8af8",
"@voidzero-dev/vite-plus-prompts": "https://pkg.pr.new/voidzero-dev/vite-plus/@voidzero-dev/vite-plus-prompts@d0b407c85b560c2470395176c9f1c838b5ca8af8"
}
}2. Security Settings
blockExoticSubdeps, minimumReleaseAge, and minimumReleaseAgeExclude are pnpm configuration settings and must be defined in .npmrc using kebab-case:
block-exotic-subdeps=false
minimum-release-age=60
minimum-release-age-exclude[]=vite-plus
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-core
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-test
minimum-release-age-exclude[]=@voidzero-dev/vite-plus-prompts
minimum-release-age-exclude[]=@oxc-project/*
minimum-release-age-exclude[]=@oxlint/*
minimum-release-age-exclude[]=oxlint
minimum-release-age-exclude[]=oxfmt
minimum-release-age-exclude[]=oxlint-tsgolint
Summary
Bump
vite-plusand related packages to the pkg-pr-new prerelease build for upstream PR voidzero-dev/vite-plus#1703 (commit d0b407c).Test plan