chore(deps): bump vite-plus to v0.1.24#7
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates workspace dependencies and the lockfile to use specific preview package builds from pkg.pr.new for vite-plus, vite, vitest, and related tooling. It also introduces release age and exotic subdependency configurations. However, as noted in the review, these configurations (minimumReleaseAge, minimumReleaseAgeExclude, and blockExoticSubdeps) are .npmrc options and are not supported in pnpm-workspace.yaml. They should be moved to the .npmrc file to ensure they are properly enforced.
| minimumReleaseAge: 60 | ||
| minimumReleaseAgeExclude: | ||
| - vite-plus | ||
| - vite | ||
| - vitest | ||
| - "@voidzero-dev/*" | ||
| - "@oxc-project/*" | ||
| - "@oxlint/*" | ||
| - oxlint | ||
| - oxfmt | ||
| - oxlint-tsgolint | ||
| blockExoticSubdeps: false |
There was a problem hiding this comment.
The settings minimumReleaseAge, minimumReleaseAgeExclude, and blockExoticSubdeps are .npmrc configuration options and are not supported in pnpm-workspace.yaml. Placing them here will cause them to be silently ignored by pnpm, meaning your intended security policies will not be enforced.
Please move these configurations to your .npmrc file using kebab-case:
minimum-release-age=60
minimum-release-age-exclude=vite-plus,vite,vitest,@voidzero-dev/*,@oxc-project/*,@oxlint/*,oxlint,oxfmt,oxlint-tsgolint
block-exotic-subdeps=false
Summary
Bump
vite-plusand related packages to the pkg.pr.new prerelease build for v0.1.24.Updated where applicable:
vite-plus-> pkg.pr.newvite/vitestaliases and overrides ->@voidzero-dev/vite-plus-core/@voidzero-dev/vite-plus-test@voidzero-dev/vite-plus-*direct deps,overrides/resolutions/pnpm.overrides/ catalogsminimum-release-agewith vite-plus stack excluded (pnpm / npm / bun / yarn as applicable)pnpm.*package.json fields intopnpm-workspace.yamlwhere presentTest plan