chore(deps-dev): bump vite-plus from 0.2.1 to 0.2.5

[dependabot]

Bumps vite-plus from 0.2.1 to 0.2.5.

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.5: Cleaner environments and more reliable workflows

This release adds cleanup and package version commands, supports TypeScript 7 declaration generation, reduces the standalone binary size, and hardens task tracking, CLI output, package-manager routing, Docker workflows, and project scaffolding.

Highlights

• Add vp env clean to remove unused managed Node.js runtimes and package-manager caches (#2003), by @​liangmiQwQ
• Add vp pm version, forwarding native version commands to npm, pnpm, Yarn, and Bun (#2127), by @​jong-kyung
• Add TypeScript 7 support to declaration generation and generated library projects with tsdown 0.22.7 (#2104, #2168), by @​wan9chi
• Improve automatic task input tracking for Bun on macOS, Linux containers with constrained /dev/shm, and Windows process images, reduce Windows backing-file allocation, and clarify task wait failures (vite-task#515, vite-task#518, vite-task#523, vite-task#524, vite-task#542, #2126, #2167), by @​wan9chi
• Prevent CLI diagnostics from truncating or panicking when inherited standard output or error is nonblocking (#2172, #2173), by @​wan9chi

Fixes & Enhancements

• Reduce standalone vp binary sizes by about 5% on Linux and macOS and 19% on Windows (#2043), by @​fengmk2
• Keep the Docker image non-root by default while allowing passwordless sudo for Playwright browser dependencies and system packages (#2088), by @​fengmk2
• Ignore .env and .env.* in generated projects while keeping .env.example trackable (#2095), by @​forehalo
• Create vp-use.cmd after the Windows environment bin directory is ready and document its Command Prompt-only usage (#2128), by @​liangmiQwQ
• Render user-facing process statuses and paths without Rust debug wrappers (#2130), by @​liangmiQwQ
• Make vp dedupe fall back to yarn install with a warning on Yarn Classic (#2139), by @​jong-kyung
• Ensure package-manager child processes, including Bun, can always find the managed Node.js runtime (#2158), by @​BlankParticle

Docs

• Update the release-manager post-release guidance (#2096), by @​wan9chi
• Add Windows to the Namespace sponsor credit (#2108), by @​fengmk2
• Document installer and runtime environment variables, registry settings, TLS options, and precedence rules (#2114), by @​yukinoshi
• Mark shell examples in CONTRIBUTING.md as Bash code blocks (#2159), by @​BlankParticle

Chore

• Assign prepared release PRs to the workflow actor (#2094), by @​wan9chi
• Complete the PTY snapshot migration and harden the runner, fixtures, release-version redaction, registry teardown, timeouts, and Linux parallelism (#2071, #2080, #2084, #2099, #2102, #2103, #2107, #2109, #2115, #2117, #2118, #2119, #2120, #2121, #2131, #2132, #2134, #2137, #2138, #2141, #2143, #2145, #2182), by @​fengmk2 and @​wan9chi
• Expose Vite+ managed binaries consistently inside snapshot fixtures (#2110), by @​liangmiQwQ
• Exclude PTY snapshot configuration from Vitest discovery and remove the legacy snapshot infrastructure (#2135, #2146), by @​jong-kyung
• Modernize Windows runners, registry bridge publishing, native size reporting, merge-base comparisons, and package-manager installation CI (#2083, #2100, #2105, #2106, #2112, #2133), by @​fengmk2
• Verify that created monorepo libraries emit declarations in CI (#2171), by @​wan9chi

Bundled Versions

Tool	Version	Source
vite	8.1.4	a477454
rolldown	1.1.5	f09947a
tsdown	0.22.7	npm
vitest	4.1.10	npm
oxlint	1.73.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.58.0	npm

Upgrade

... (truncated)

Commits

• b9acb2f release: v0.2.5: Cleaner environments and more reliable workflows (#2180)
• 103b30f fix(cli): ensure blocking stdio (#2173)
• 19efdd0 feat(deps): upgrade upstream dependencies (#2168)
• 5d61de0 test(snapshots): remove legacy snapshot infrastructure (#2146)
• 0e5a8a4 test(snapshots): remove the parked snap-tests-todo tree (#2145)
• e208eef test(snapshots): migrate the last blocked snap tests to the PTY suite (#2143)
• 98cca64 test(snapshots): migrate the command-* package-manager passthrough cases (#...
• c20b931 test(snapshots): migrate the command-* toolchain cases to the PTY snapshot ...
• e13e029 test(snapshots): migrate env-* cases to the PTY snapshot suite (#2137)
• dfba9ba test(snapshots): migrate npm-global-* cases to the PTY snapshot suite (#2134)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite-plus@​0.2.1 ⏵ 0.2.5			+1	+2

View full report