chore: bump the npm-patch-minor group across 1 directory with 3 updates

[dependabot]

Bumps the npm-patch-minor group with 3 updates in the / directory: @types/node, vite-plus and vitest.

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates vite-plus from 0.2.2 to 0.2.4

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.4: Vitest security hotfix

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights

• Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#2089), by @​voidzero-guard[bot]

Chore

• Add the standard release-manager skill for vite-plus release operations (#2019), by @​fengmk2

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.10	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages

• @voidzero-dev/vite-plus-core@0.2.4
• vite-plus@0.2.4

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex
</tr></table> 

... (truncated)

Commits

• 1ca9f0f release: v0.2.4: Vitest security hotfix
• 747f0e5 fix(deps): upgrade vitest to 4.1.10
• 7f70680 release: v0.2.3: config extraction, create, and vp run reliability fixes (#2081)
• 4a5d742 fix(static_config): trust defineConfig from vite (#2075)
• 603140d feat(test): PTY-based interactive CLI snapshot tests (#2052)
• dcae79f fix(create): read org manifest from the tarball when the registry strips crea...
• b9b15c4 fix(static_config): only trust defineConfig fromvite-plus (#2060)
• 98cc0db ci: pack local dirs for the registry bridge instead of pkg.pr.new (#2038)
• 638c447 fix(global): respect custom VP_HOME (#2029)
• b99c778 refactor(cli): remove unused exported helpers (#2046)
• Additional commits viewable in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view