Skip to content

Bump the npm group across 1 directory with 8 updates - #81

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-865a725990
Open

Bump the npm group across 1 directory with 8 updates#81
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-865a725990

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 7 updates in the / directory:

Package From To
vite-plus 0.2.9 0.3.0
@versatiles/style 5.13.0 5.13.1
@iconify-json/pinhead 1.2.18 1.2.23
vitest 4.1.10 4.1.11
@maplibre/maplibre-gl-inspect 1.8.2 1.9.0
@cloudflare/vite-plugin 1.52.1 1.54.1
vite 8.2.1 8.2.2

Updates vite-plus from 0.2.9 to 0.3.0

Release notes

Sourced from vite-plus's releases.

vite-plus v0.3.0: XDG install layout, tsup project migration, and Bun 1.4 support

Fresh installs now use a split directory layout instead of a single ~/.vite-plus root. Unix follows the XDG base directory specification, and Windows uses the standard %LOCALAPPDATA% and %APPDATA% folders. Existing ~/.vite-plus installs keep their current directory layout. vp migrate also converts tsup projects, and vp now sends Bun 1.4 package-manager commands to bun directly. The published npm package shrank by about half, and the upgrade check no longer delays each command.

Breaking Changes

  • Fresh installs now use a split directory layout instead of a single root: XDG base directories on Unix, and the standard known folders on Windows. Existing ~/.vite-plus installs keep their current layout, and the installer does not move their files. VP_HOME still selects the single-root layout (#2346), by @​forehalo

    Category Unix default Windows default Single-root (VP_HOME)
    bin ~/.local/share/vite-plus/bin %LOCALAPPDATA%\vite-plus\bin <root>/bin
    data ~/.local/share/vite-plus %LOCALAPPDATA%\vite-plus\data <root>
    cache ~/.cache/vite-plus %LOCALAPPDATA%\vite-plus\cache <root>/cache
    config ~/.config/vite-plus %APPDATA%\vite-plus <root>
    state ~/.local/state/vite-plus %LOCALAPPDATA%\vite-plus\state <root>

    The installer configures your shell for the new location, and CI that installs through setup-vp keeps the single-root layout automatically. Update each hard-coded ~/.vite-plus/bin path, such as a path in a Dockerfile.

    vp upgrade leaves an existing install where it is. To move one to the split layout, remove it and install again:

    vp implode
unset VP_HOME VP_DATA_DIR VP_BIN_DIR VP_CACHE_DIR
curl -fsSL https://vite.plus | bash

    On Windows, run vp implode, then Remove-Item Env:\VP_HOME, Env:\VP_DATA_DIR, Env:\VP_BIN_DIR, Env:\VP_CACHE_DIR -ErrorAction SilentlyContinue, then irm https://vite.plus/ps1 | iex. Also delete any persistent VP_HOME or VP_*_DIR definition from your shell profile or system environment, because a fresh install still honors them and VP_HOME selects the single-root layout.

    vp implode removes every Vite+ managed Node.js runtime, global package, configuration file, and cache. Stay on your current layout if you would rather not rebuild that state. See Move an existing install to the split directory layout.

Highlights

  • vp migrate now converts tsup projects. It replaces the tsup dependency and script with vp pack. It also changes tsup.config.ts to a tsdown.config.ts that imports from vite-plus/pack (#2434), by @​KTrain5169
  • Shell integrations now accept the global -C flag. vp -C <dir> env use changes the environment of your current shell. The -C<dir> and -C=<dir> forms also work. In zsh, Fish, Nushell, and PowerShell, vpr completion keeps the working directory when it changes the command to vp run (#2508), by @​simulacre7
  • The published vite-plus npm package shrank from 1.05 MB to 516 kB, a 51% reduction. It now includes only Markdown files from the documentation workspace. It no longer includes VitePress tooling, images, or deployment files (#2480), by @​liangmiQwQ

Features

  • With Bun 1.4 or later, Vite+ forwards these commands and flags to bun. Earlier Bun versions keep their fallback or unsupported behavior and report the required Bun version (#2513), by @​jong-kyung
    • vp dedupe runs bun dedupe, including --check
    • vp pm prune runs bun prune
    • vp pm audit --fix runs bun audit fix
    • vp add, vp remove, and vp update send --filter to bun
    • vp add --save-catalog sends --catalog to bun
  • The upgrade check no longer delays fast commands. It runs in a separate process. It reports an available update during a later command, and commands no longer wait for the registry (#2380), by @​liangmiQwQ
  • Upgrade the bundled toolchain (#2443, #2500, #2504, #2519, #2532), by @​voidzero-guard[bot]:
    • vite: 8.2.1 to 8.2.2
    • rolldown: 1.2.3 to 1.2.5
    • vitest: 4.1.10 to 4.1.11
    • oxlint: 1.77.0 to 1.79.0
    • oxfmt: 0.62.0 to 0.64.0

... (truncated)

Commits
  • b2d15e3 release: v0.3.0: XDG install layout, tsup project migration, and Bun 1.4 supp...
  • ce131be fix(cli): run root-only workspaces in place (#2533)
  • 634bd07 fix(cli): improve workspace app target classification (#2530)
  • 501cc3a feat(cli): tsup -> tsdown -> Vite+ migration (#2434)
  • 916fae1 fix(cli): guide local users to global-only commands (#2522)
  • 45acff9 fix(trampoline): reject unversioned shim pointers (#2526)
  • f0bebb0 fix(installer): hide shell config warnings in CI (#2511)
  • c25b6b2 fix(installer): enforce Windows setup requirements (#2505)
  • 349a72b fix(cli): support GitLab setup-vp legacy layout (#2520)
  • 2b16995 fix(cli): normalize staged concurrency options (#2501)
  • Additional commits viewable in compare view

Updates @versatiles/style from 5.13.0 to 5.13.1

Release notes

Sourced from @​versatiles/style's releases.

v5.13.1

Release v5.13.1

Features

  • implement fade-in functionality for land and water layers with associated tests (4889e4a)

Bug Fixes

  • update funding information to reflect new organization details (1c04b12)

Build System

  • deps: bump the npm group with 11 updates (2a02579)
  • deps: bump the action group with 2 updates (4d6c888)
  • deps: bump actions/setup-node from 6 to 7 in the action group (4343ea5)

Chores

  • update dependencies and devDependencies in package.json (4c031db)

Styles

  • format map function syntax in getShortbreadLayers (61364c6)
Changelog

Sourced from @​versatiles/style's changelog.

[5.13.1] - 2026-08-15

Features

  • implement fade-in functionality for land and water layers with associated tests (4889e4a)

Bug Fixes

  • update funding information to reflect new organization details (1c04b12)

Build System

  • deps: bump the npm group with 11 updates (2a02579)
  • deps: bump the action group with 2 updates (4d6c888)
  • deps: bump actions/setup-node from 6 to 7 in the action group (4343ea5)

Chores

  • update dependencies and devDependencies in package.json (4c031db)

Styles

  • format map function syntax in getShortbreadLayers (61364c6)
Commits
  • c817dc4 v5.13.1
  • 1c04b12 fix: update funding information to reflect new organization details
  • 4889e4a feat: implement fade-in functionality for land and water layers with associat...
  • 61364c6 style: format map function syntax in getShortbreadLayers
  • 4343ea5 build(deps): bump actions/setup-node from 6 to 7 in the action group
  • 4c031db chore: update dependencies and devDependencies in package.json
  • 4d6c888 build(deps): bump the action group with 2 updates
  • 2a02579 build(deps): bump the npm group with 11 updates
  • See full diff in compare view

Updates @iconify-json/pinhead from 1.2.18 to 1.2.23

Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates @maplibre/maplibre-gl-inspect from 1.8.2 to 1.9.0

Release notes

Sourced from @​maplibre/maplibre-gl-inspect's releases.

v1.9.0

✨ Features and improvements

  • Add backwards-compatible support for MapLibre GL JS v6 and its ESM distribution (#441) (by @​birkskyum)
  • Use maplibre's Popup class and avoid using window.maplibergl (#441) (by @​birkskyum)

🐞 Bug fixes

  • Render nested GeoJSON feature properties as JSON in inspection popups.
Changelog

Sourced from @​maplibre/maplibre-gl-inspect's changelog.

1.9.0

✨ Features and improvements

  • Add backwards-compatible support for MapLibre GL JS v6 and its ESM distribution (#441) (by @​birkskyum)
  • Use maplibre's Popup class and avoid using window.maplibergl (#441) (by @​birkskyum)

🐞 Bug fixes

  • Render nested GeoJSON feature properties as JSON in inspection popups.
Commits

Updates @cloudflare/vite-plugin from 1.52.1 to 1.54.1

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.54.1

Patch Changes

@​cloudflare/vite-plugin@​1.54.0

Minor Changes

  • #15134 c66d2d5 Thanks @​gpanders! - Enable FUSE-capable local container development

    Miniflare now automatically passes the Docker privileges needed for FUSE to local Durable Object containers when using local rootless Docker on Linux with /dev/fuse available, or a local Docker engine on macOS or through WSL where Linux containers run in a VM. This applies to Wrangler, the Cloudflare Vite plugin, and direct Miniflare use.

  • #15326 9fcb1c9 Thanks @​jamesopstad! - Record the selected mode in the Build Output Specification top-level config.json

    The mode a build was produced in is now written to .cloudflare/output/v0/config.json as a mode field, alongside the account and compliance settings.

Patch Changes

@​cloudflare/vite-plugin@​1.53.1

Patch Changes

@​cloudflare/vite-plugin@​1.53.0

Minor Changes

  • #15026 6529f0c Thanks @​petebacondarwin! - Allow containers to be attached to a Durable Object from its exports entry

    A container can now be linked to its Durable Object from the export side, using a new container field that names an entry in the containers array. As a result containers[].class_name is now optional — a container that is referenced this way only needs a name:

    {
  "name": "my-worker",
  "main": "worker.js",
  "compatibility_date": "2026-07-01",
  "containers": [
    { "name": "my-container", "image": "./Dockerfile", "max_instances": 1 }
  ],
  "exports": {
    "MyContainerDO": {
      "type": "durable-object",
      "storage": "sqlite",

... (truncated)

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.54.1

Patch Changes

1.54.0

Minor Changes

  • #15134 c66d2d5 Thanks @​gpanders! - Enable FUSE-capable local container development

    Miniflare now automatically passes the Docker privileges needed for FUSE to local Durable Object containers when using local rootless Docker on Linux with /dev/fuse available, or a local Docker engine on macOS or through WSL where Linux containers run in a VM. This applies to Wrangler, the Cloudflare Vite plugin, and direct Miniflare use.

  • #15326 9fcb1c9 Thanks @​jamesopstad! - Record the selected mode in the Build Output Specification top-level config.json

    The mode a build was produced in is now written to .cloudflare/output/v0/config.json as a mode field, alongside the account and compliance settings.

Patch Changes

1.53.1

Patch Changes

1.53.0

Minor Changes

  • #15026 6529f0c Thanks @​petebacondarwin! - Allow containers to be attached to a Durable Object from its exports entry

    A container can now be linked to its Durable Object from the export side, using a new container field that names an entry in the containers array. As a result containers[].class_name is now optional — a container that is referenced this way only needs a name:

    {
  "name": "my-worker",
  "main": "worker.js",
  "compatibility_date": "2026-07-01",
  "containers": [
    { "name": "my-container", "image": "./Dockerfile", "max_instances": 1 }
  ],

... (truncated)

Commits

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

  • deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

  • bundled-dev: handle lazy request error (#23291) (3ba026d)
  • bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
  • config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
  • css: don't pass empty targets to lightningcss (#23295) (2804636)
  • define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
  • deps: update all non-major dependencies (#23217) (ba958bd)
  • deps: update rolldown-related dependencies (#23218) (83ecb2c)
  • module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
  • optimizer: close custom extension analysis bundles (#23207) (8fb7675)
  • reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
  • respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
  • ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
  • vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

Miscellaneous Chores

Code Refactoring

  • use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
  • use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

  • define: close rolldown bundler after generate (#23231) (b4d66fe)
  • module-runner: add TLA circular import case (#23299) (4a261f2)
  • module-runner: simplify server-hmr tests (#23300) (599b44b)
  • ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

  • use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)
Commits
  • de1111a release: v8.2.2
  • cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
  • 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
  • 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
  • 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
  • 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
  • 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
  • 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
  • 599b44b test(module-runner): simplify server-hmr tests (#23300)
  • 4a261f2 test(module-runner): add TLA circular import case (#23299)
  • Additional commits viewable in compare view

Updates wrangler from 4.123.0 to 4.127.0

Release notes

Sourced from wrangler's releases.

wrangler@4.127.0

Minor Changes

  • #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

    The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

    {
  "workflows": [
    {
      "binding": "MY_WORKFLOW",
      "name": "my-workflow",
      "class_name": "MyWorkflow",
      "concurrency": { "limit": 10 }
    }
  ]
}

Patch Changes

  • #15367 412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260825.1 ^5.20260826.1
    workerd 1.20260825.1 1.20260826.1

  • #15375 92874f6 Thanks @​WillTaylorDev! - Upload wrangler preview modules as multipart form data

    wrangler preview used to base64 the bundle, its modules, and any sourcemaps into a single JSON request body. Base64 inflates content by a third, so a Worker with a large sourcemap could exceed the API request size limit and fail to deploy.

    The preview deployment request is now multipart/form-data. The deployment settings travel in a metadata part and each module follows as its own part carrying raw bytes, matching how wrangler deploy already uploads a Worker.

  • Updated dependencies [412c79e]:

wrangler@4.126.0

Minor Changes

  • #15332 d1cc3af Thanks @​pombosilva! - Add default_retention to Workflow bindings for configuring how long instances are retained

    Workflow instances are retained for an account-wide default period after they finish. You can now set a per-Workflow default in your Wrangler configuration, applied to instances that do not specify their own retention:

    {
  "workflows": [

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm group across 1 directory with 8 updates
aa2d20f 
Bumps the npm group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.9` | `0.3.0` |
| [@versatiles/style](https://github.com/versatiles-org/versatiles-style) | `5.13.0` | `5.13.1` |
| [@iconify-json/pinhead](https://github.com/iconify/icon-sets) | `1.2.18` | `1.2.23` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [@maplibre/maplibre-gl-inspect](https://github.com/maplibre/maplibre-gl-inspect) | `1.8.2` | `1.9.0` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.52.1` | `1.54.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` |



Updates `vite-plus` from 0.2.9 to 0.3.0
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.0/packages/cli)

Updates `@versatiles/style` from 5.13.0 to 5.13.1
- [Release notes](https://github.com/versatiles-org/versatiles-style/releases)
- [Changelog](https://github.com/versatiles-org/versatiles-style/blob/main/CHANGELOG.md)
- [Commits](versatiles-org/versatiles-style@v5.13.0...v5.13.1)

Updates `@iconify-json/pinhead` from 1.2.18 to 1.2.23
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `@maplibre/maplibre-gl-inspect` from 1.8.2 to 1.9.0
- [Release notes](https://github.com/maplibre/maplibre-gl-inspect/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-inspect/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-inspect@v1.8.2...v1.9.0)

Updates `@cloudflare/vite-plugin` from 1.52.1 to 1.54.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.54.1/packages/vite-plugin-cloudflare)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `wrangler` from 4.123.0 to 4.127.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.127.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: vite-plus
  dependency-version: 0.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@versatiles/style"
  dependency-version: 5.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@iconify-json/pinhead"
  dependency-version: 1.2.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@maplibre/maplibre-gl-inspect"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.54.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: wrangler
  dependency-version: 4.127.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants