Skip to content

feat(cache): let input negatives keep entries out of directory listings - #941

Merged
wan9chi merged 2 commits into
feat/cache-created-symlinksfrom
feat/cache-input-negatives-in-listings
Nov 5, 2026
Merged

wan9chi merged 2 commits into
feat/cache-created-symlinksfrom
feat/cache-input-negatives-in-listings

Conversation

@wan9chi

@wan9chi wan9chi commented Nov 5, 2026 •

Copy link
Copy Markdown
Member

Motivation

An exclusion in a task's input, like "!build/**", leaves out only the paths the task reads. When the task lists a folder, every entry still counts, so an excluded folder appearing there is a cache miss: a lint task listing the package root misses once another task's build output appears in it. That is the case the hard-coded dist skip was added for (#181). #919 removes the skip, so users need a setting to get it back, and today "!dist/**", which docs/inputs.md recommends, doesn't help.

Changes

Listings leave out what the input config excludes, after the entries the task can rebuild (#915):

  • An entry whose path the input negative globs match. A folder entry is matched by its own path; wax's ** matches zero or more components, so build/** leaves out build, while build/* keeps it. The globs are part of the cache key, so validation applies the same ones to the current listing, and an entry that appears after the run is left out too.
  • An entry that a tool-reported ignoreInput path names. Those paths are known only after the run, so the names are recorded in the listing's ignored_entries, including entries that aren't there yet.

The cache schema version is bumped. docs/inputs.md now says negatives also keep entries out of listings.

E2E cases: negative_glob_hides_listing_entry (synthetic, vtt list-dir with "!out/**"; an unrelated new file still misses) and oxlint_negative_build (oxlint -D no-debugger with a gitignored build/ and "!build/**"). Both miss today and hit after. A unit test covers ignoreInput.

Part of a stack that lets automatic tracking cache tasks which read their own outputs and list the folders holding them, so they also hit on a clean checkout.

🤖 Generated with Claude Code


Note

Medium Risk
Changes post-run fingerprint semantics and cache validation for any task that lists directories with input negatives or ignoreInput; incorrect glob matching could cause stale cache hits, mitigated by schema bump and targeted tests.

Overview
Input exclusions now apply to directory listings, not only to paths the task reads. Tasks that list a folder (e.g. a linter scanning the package root) no longer miss the cache when an excluded entry appears—such as another task’s build/ folder after "!build/**"—as long as nothing else in the listing changed.

Post-run fingerprints omit listing entries matched by the task’s input negative globs (same rules as reads: build/** drops the build folder entry; build/* does not) and by tool ignoreInput paths (names recorded in ignored_entries for validation). Cache hits recompile those globs from the entry key and apply the same filters when comparing listings.

Cache schema version is bumped to v22 (fresh cache). Docs and changelog describe the behavior; e2e covers !out/** with list-dir and an oxlint + !build/** scenario, plus a unit test for globs and ignoreInput.

Reviewed by Cursor Bugbot for commit 0655edb. Bugbot is set up for automated code reviews on this repo. Configure here.

@wan9chi wan9chi added the read-write overlap Caching tasks that read and write the same paths label Nov 5, 2026
@wan9chi
wan9chi force-pushed the feat/cache-input-negatives-in-listings branch from c84f0b3 to 157bf82 Compare November 5, 2026 08:54
@wan9chi
wan9chi added this pull request to stack #942 November 5, 2026 08:55
@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

fspy benchmark

linux

dynamic/launch             change  +0.41%  [ -2.58% ..  +4.68%]  overhead   +58.06%
dynamic/access             change  +0.43%  [ -4.43% ..  +5.45%]  overhead   +20.68%
dynamic/access-relative    change  -0.31%  [ -3.56% ..  +2.17%]  overhead   +70.01%
dynamic/access-contended   change  +0.53%  [-11.21% ..  +7.48%]  overhead   +34.68%
static/launch              change  -0.05%  [ -5.31% ..  +6.59%]  overhead  +199.04%
static/access              change  -0.55%  [ -2.12% ..  +2.37%]  overhead +1460.03%
static/access-relative     change  -0.58%  [ -2.63% ..  +1.27%]  overhead +1972.82%
static/access-contended    change  -0.33%  [ -2.26% ..  +0.73%]  overhead +1771.40%

macos

dynamic/launch             change  +0.26%  [ -5.11% ..  +5.70%]  overhead  +253.12%
dynamic/access             change  -2.08%  [-60.11% .. +41.18%]  overhead    +1.97%
dynamic/access-relative    change  +1.77%  [ -8.14% .. +75.98%]  overhead  +243.83%
dynamic/access-contended   change  -0.58%  [ -6.93% ..  +9.95%]  overhead    +3.85%

windows

dynamic/launch             change  -0.18%  [ -1.82% ..  +1.45%]  overhead   +26.17%
dynamic/access             change  +0.19%  [ -0.74% ..  +0.74%]  overhead    +0.94%
dynamic/access-relative    change  +0.00%  [ -0.72% ..  +0.55%]  overhead    +1.11%
dynamic/access-contended   change  +0.00%  [ -0.52% ..  +0.70%]  overhead    +1.25%

@wan9chi
wan9chi force-pushed the feat/cache-input-negatives-in-listings branch from 157bf82 to 5bcf4de Compare November 5, 2026 09:02
…ory listings

Two cases for a task that lists a folder in which an entry its input
negatives exclude appears later. In `negative_glob_hides_listing_entry`,
the task lists the package root with `vtt list-dir .` and has `"!out/**"`
in its `input`; an `out` folder appears, then a `notes.txt` file. In
`oxlint_negative_build`, `oxlint -D no-debugger` lints a package whose
`.gitignore` lists `build/`, another task's output, so oxlint skips it; it
lists the package root, and the lint task has `"!build/**"` in its
`input`. Another task's `build` folder appears, holding a file oxlint would
reject if it didn't skip `build/`.

Today an input negative only drops the paths the task read, not entries
inside a folder it listed, so the new folder is a cache miss in both
cases, although `!out/**` and `!build/**` exclude it and everything in it.
The new `notes.txt` is a miss too, as it should be.

The oxlint steps redact oxlint's rule count, which changes between oxlint
releases.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
An exclusion in a task's `input`, like `"!build/**"`, and a path a tool
reports with `ignoreInput` left out only the paths the task read. A
folder the task listed still recorded every entry, so an excluded folder
appearing in it was a cache miss. That is what happens to a lint task
listing the package root when another task's build output appears there,
the case the hard-coded `dist` skip in every listing was added for (#181),
and `"!dist/**"`, which `docs/inputs.md` recommends, didn't help.

Listings now leave out what the input config excludes, after the entries
the task can rebuild are left out:

- An entry whose path the input negative globs match. A folder entry is
  matched by its own path, and wax's `**` matches zero or more
  components, so `build/**` leaves out a `build` folder, while `build/*`
  or `build/**/*.js` exclude only what is in it and keep the entry. The
  globs are part of the cache key, so validation compiles the same ones
  from the entry's key and applies them to the current listing; the names
  aren't recorded, and an entry that appears after the run is left out
  too.
- An entry an `ignoreInput` path names. Those paths are known only after
  a run, so the names they give a listed folder's entries, whether or not
  the entries are there, are recorded in its `ignored_entries`, which
  validation already leaves out of the current listing. A path covers
  itself and everything under it, but a listed folder is never under one,
  since reads under it are left out, so only a path naming an entry of the
  folder matters.

Rebuildable entries and `.DS_Store` work as before. The serialized format
doesn't change, but validation does, so the cache schema version is
bumped. `PathGlobSet` gets `Default`, an empty set for tasks without
fspy, and `is_empty`, so listings skip glob matching when there are no
negatives.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@wan9chi
wan9chi force-pushed the feat/cache-input-negatives-in-listings branch from 5bcf4de to 0655edb Compare November 5, 2026 09:17
@wan9chi
wan9chi merged commit d6754e8 into main Nov 5, 2026
22 checks passed
@wan9chi
wan9chi deleted the feat/cache-input-negatives-in-listings branch November 5, 2026 10:44
wan9chi added a commit that referenced this pull request Nov 5, 2026
## Motivation

Every directory listing skips an entry named `dist`. #181 added the skip
so that a lint task listing the package root stays a cache hit when
another task's build creates `dist` there. It helps no other folder name
and hides a `dist` that does matter. A `dist` folder appearing in a
folder the task listed goes unseen, and the next run replays stale
output: `oxlint`, for example, passes from the cache after a `dist`
folder with lint errors appears.

## Changes

Listings skip only `.`, `..` and `.DS_Store`. A task that should ignore
another task's `dist` gets that back with `"!dist/**"` in its `input`,
which keeps the entry out of its listings since #941. A task's own
`dist` doesn't need the skip, since #915 makes a rebuildable folder an
ignored entry. The cache schema version is bumped, so entries recorded
with the skip aren't reused. No other snapshot changes.

E2E cases: `dist_appears_in_listed_folder` (synthetic, `vtt list-dir`)
and `oxlint_dist` (`oxlint -D no-debugger`, with oxlint's rule count
redacted). Both are false hits today and correct misses after.

Part of a stack that lets automatic tracking cache tasks which read
their own outputs and list the folders holding them, so they also hit on
a clean checkout.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Changes cache fingerprint semantics for any task that lists
directories, which can increase cache misses but fixes incorrect hits;
schema bump invalidates existing local cache entries for the new version
directory.
> 
> **Overview**
> Directory listings for cache fingerprints **no longer always omit a
`dist` entry**. Only `.`, `..`, and `.DS_Store` are skipped when
fingerprinting folder contents, so a **`dist` folder appearing or
disappearing** in a listed directory now triggers a **cache miss**
instead of replaying stale results (e.g. **oxlint** passing after bad
code lands in a committed `dist/`).
> 
> To keep ignoring another task’s **`dist`**, tasks can use
**`"!dist/**"`** in **`input`** (listing exclusions from #941). A task’s
**own** output **`dist`** still doesn’t affect listings when it only
holds rebuildable outputs (#915). **`CACHE_SCHEMA_VERSION`** is bumped
**22 → 23** so old fingerprints aren’t reused.
> 
> E2E coverage adds **`dist_appears_in_listed_folder`** and
**`oxlint_dist`** snapshots for the new miss behavior.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
625af30. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
wan9chi added a commit that referenced this pull request Nov 5, 2026
The entries of #913-#919 and #941 describe one feature, rebuildable
inputs for tasks whose reads overlap their writes, so they are one
entry now, with every PR linked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
wan9chi added a commit that referenced this pull request Nov 5, 2026
The `dist` listing change (#919) and input exclusions applying to
listings (#941) are their own items; the rebuildable inputs item covers
#913-#918 without mentioning listings.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
wan9chi added a commit that referenced this pull request Nov 5, 2026
## Motivation

Follow-ups to the rebuildable-inputs stack (#913–#919, #940, #941), now
merged:

- The real-world case for files renamed into place (#916) used Vitest's
`fsModuleCache`, which renames cache entries rather than outputs.
- #919's e2e cases test a listing entry like any other, so they add no
coverage of their own.
- The stack added eight changelog entries, most of them for what users
see as one feature.
- Socket flagged Astro 6.4.8, which #917 added for its real-world case:
critical advisory GHSA-26w7-cxv4-gfx2 (remote code execution through
AVIF image optimization), fixed in Astro 7.2.8.

## Changes

- New case `next_build_moved_pages`: Next.js 15's `next build` renders
each static page (`index.html`, `404.html`, `500.html`) into
`.next/export` and renames it into `.next/server/pages`. After `.next`
is removed, the next run is a cache hit that restores the pages. The
build log is redacted, since its progress lines, sizes and chunk hashes
vary. It replaces `vitest_fs_module_cache`, along with the SHA-1
redaction only that case used. `next`, `react` and `react-dom` join
`packages/tools`.
- `dist_appears_in_listed_folder` and `oxlint_dist` are removed.
- The changelog entries of #913–#918 are combined into one **Added**
item for rebuildable inputs; #919 (`dist` in listings) and #941 (input
exclusions apply to listings) stay their own short items, and so does
#940's fix.
- On Windows CI, the e2e harness stages fixtures in `RUNNER_TEMP`, on
the checkout's drive: the staged workspaces resolve `node_modules` into
the checkout, and Next.js builds its client entry from a path relative
to the project, which can't cross drives.
- Astro 6.4.8 → 7.3.8, the newest release that still supports the repo's
Node 22.19. Astro 7 needs upstream Vite 8, so its scoped override now
points at Vite 8.3.2. `astro_empty_collections` passes unchanged; its
comment now says Astro 7 stats the project root rather than listing it.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Test harness, changelog, and dependency catalog changes only; no
changes to task caching or file-tracking behavior in this diff.
> 
> **Overview**
> Follow-up after the rebuildable-inputs stack lands: **no runtime cache
logic changes**—mostly release notes, snapshot tests, and toolchain
bumps.
> 
> The **changelog** folds the former #913–#918 narrative into one
**Added** “rebuildable inputs” entry and shortens the #919 / #941
**Changed** bullets; #940 stays separate.
> 
> **E2E snapshots** swap coverage: **`next_build_moved_pages`** (Next.js
15 renaming `.next/export` → `.next/server/pages`, cache hit after
deleting `.next`) replaces **`vitest_fs_module_cache`**;
**`dist_appears_in_listed_folder`** and **`oxlint_dist`** are dropped as
redundant with listing behavior elsewhere. Snapshot **redaction** drops
SHA-1 normalization (Vitest-only). On **Windows CI**, fixtures stage
under **`RUNNER_TEMP`** so Next’s client entry paths stay on the
checkout drive.
> 
> **Deps**: catalog adds **Next 15**, **React 19**, bumps **Astro 6 →
7.3.8** (security advisory), and scopes **`astro>vite`** to upstream
**Vite 8.3.2**. The Astro empty-collections fixture comment reflects
Astro 7 **stat**-ing the project root instead of listing it.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
4c8f40c. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
fengmk2 added a commit to voidzero-dev/vite-plus that referenced this pull request Nov 11, 2026
Vite+ 1.6.0 caches `vp run` tasks that rewrite files they read, previews
runs with `vp run --dry-run` and JSON output, lets `vp check
--continue-on-error` report every failed check, and sets `VP_USER_AGENT`
for the tools that `vp` starts.

### Features

- `vp run` caches tasks that read files they also write, such as `tsdown
--exports` rewriting `package.json` or `tsc --incremental` reading and
writing `tsconfig.tsbuildinfo`. The files a task writes, and folders
that hold only those files, may be missing on the next run, as on a
fresh clone, and a cache hit restores them with the task's outputs,
including the symbolic links the task created
([docs](https://viteplus.dev/guide/automatic-data-tracking#rebuildable-inputs))
([vite-task#913](voidzero-dev/vite-task#913),
[vite-task#914](voidzero-dev/vite-task#914),
[vite-task#915](voidzero-dev/vite-task#915),
[vite-task#916](voidzero-dev/vite-task#916),
[vite-task#917](voidzero-dev/vite-task#917),
[vite-task#918](voidzero-dev/vite-task#918)), by
@wan9chi.
- `vp run --dry-run` shows each command that a run would start and
whether it would hit the cache, without running anything or writing to
the cache. `vp run --json` prints every package and task in the
workspace, and `vp run --dry-run --json` prints the run plan with each
step's cache status, as one JSON document for scripts, CI, and coding
agents. `vp run -v` lists every change behind a cache miss, including
each changed input file, and `-vv` also lists the unchanged inputs and
the outputs that a hit restores
([docs](https://viteplus.dev/guide/run#dry-runs-and-json-output))
([vite-task#948](voidzero-dev/vite-task#948),
[vite-task#960](voidzero-dev/vite-task#960),
[vite-task#961](voidzero-dev/vite-task#961),
[vite-task#963](voidzero-dev/vite-task#963),
[vite-task#966](voidzero-dev/vite-task#966),
[vite-task#967](voidzero-dev/vite-task#967),
[vite-task#968](voidzero-dev/vite-task#968),
[vite-task#969](voidzero-dev/vite-task#969)), by
@wan9chi.
- `vp check --continue-on-error` runs the remaining enabled checks after
a failure, so one run reports formatting, lint, and type errors
together, and exits with the status of the first failed check. Without
the flag, `vp check` still stops at the first failed check
([#3367](#3367)), by
@chbaefront.
- `vp`, `vpr`, and `vpx` set `VP_USER_AGENT=vp/<version>` for their
child processes, so tools can detect that Vite+ started them. When the
global CLI delegates to a project's local CLI, the local version is
reported ([docs](https://viteplus.dev/guide/global-cli#vp-user-agent))
([#1958](#1958)), by
@fengmk2.
- First part of `VP_ENV_FORBIDDEN=1`, for systems such as NixOS that
provide Node.js and package managers themselves: with it set, Vite+
never downloads a Node.js or package-manager version, shims and `vpx`
use only the system tools on `PATH`, and installers and `vp upgrade` use
the system `node` and `pnpm` for Vite+'s own dependencies. In this
release, commands that delegate to a package manager, such as `vp
install` and `vp run`, fail with `DisabledByEnvForbidden` while it is
set. A follow-up change is planned to cover them and document the
variable ([#3233](#3233)),
by @myuron.
- Upgrade the bundled Oxfmt and Oxlint
([#3416](#3416)), by
@voidzero-guard[bot]:
- `oxfmt@0.76.0` to `oxfmt@0.78.0`. Oxfmt formats Vue files with its own
formatter instead of Prettier, so the output for Vue templates can
change. It also fixes Tailwind class sorting in several layouts, Less
escapes and `%` selectors, and TypeScript in Astro files.
- `oxlint@1.91.0` to `oxlint@1.93.0` and `oxlint-tsgolint@7.0.2005` to
`oxlint-tsgolint@7.0.2006`. `no-redeclare` gets an
`ignoreDeclarationMerge` option, and `promise/prefer-catch` offers a
suggestion.
- Oxlint and Oxfmt resolve an unset or relative `root` in
`vite.config.ts` from the directory of the config file instead of the
current directory, so editor integrations in multi-root workspaces load
the correct project.
- Vite+ installs its own dependencies during setup and `vp upgrade` with
`pnpm@10.34.9` (was `pnpm@10.34.7`).
- The new Oxfmt and Oxlint can flag code that passed before. If your CI
runs `vp check`, run `vp check --fix --continue-on-error` after you
upgrade: it formats files, applies the available lint fixes, formats
again, and reports every error that remains. For example,
`unicorn/prefer-type-error` now also reports a `throw` in an `if` branch
without braces, and this command rewrites it.

### Fixes & Enhancements

- While a Vite+ spinner is visible, such as `Installing global packages`
in `vp install -g`, Vite+ hides the cursor and discards typed keys.
Pressing Enter no longer leaves copies of the spinner row, and typed
text no longer runs in the shell after the command ends. Ctrl+C during a
spinner now ends the command with the usual signal status instead of
exit code 0, and the global package spinners show the elapsed time
([#3373](#3373),
[#3417](#3417)), by
@jong-kyung and @fengmk2.
- `vp run` loads a package's `vite.config.*` only when the run reaches
one of that package's tasks. A run in one package no longer waits for
the configs of other packages, a broken config in another package no
longer fails it, and `vp run <task>` in a package that does not define
the task reports `Task "<task>" not found` instead of another package's
config error
([vite-task#944](voidzero-dev/vite-task#944),
[vite-task#988](voidzero-dev/vite-task#988)), by
@wan9chi.
- `vp run nope#build`, where no workspace package has the name `nope`,
fails with `Package 'nope' not found in the workspace` and exits with
code 1, instead of running nothing and exiting with code 0. A short name
that matches several scoped packages fails as ambiguous
([vite-task#984](voidzero-dev/vite-task#984)),
by @wan9chi.
- Folder listings no longer skip entries named `dist`, so a `dist`
folder that appears or disappears in a folder a task lists makes the
next run a cache miss. Exclusions in a task's `input`, such as
`"!dist/**"`, now also apply to the folders that the task lists. In a
new monorepo from `vp create`, every task hits the cache from the third
`vp run ready`, because the first build creates the `dist` folders
([vite-task#919](voidzero-dev/vite-task#919),
[vite-task#941](voidzero-dev/vite-task#941)), by
@wan9chi.
- Fewer unnecessary cache misses and cache failures in `vp run`: on
Windows, files that a task deletes or moves are no longer among its
inputs. Tasks that read `node_modules/.vite/task-cache`, as Parcel and
Gatsby do, hit the cache. A task that writes outside the workspace
through `..`, like `cp -r dist ../site`, no longer fails with `Cache
update failed`
([vite-task#937](voidzero-dev/vite-task#937),
[vite-task#940](voidzero-dev/vite-task#940),
[vite-task#980](voidzero-dev/vite-task#980)), by
@wan9chi.
- A cache hit restores the symbolic links that a task's `output` globs
match as links, instead of dropping them
([vite-task#885](voidzero-dev/vite-task#885)),
by @jasonkuhrt.
- When several tasks become ready at the same time, `vp run` checks
their cache entries in parallel, so cache hits start sooner
([vite-task#982](voidzero-dev/vite-task#982)),
by @wan9chi.
- On macOS, task commands that use `sh` or `bash` behave as on Linux: a
`while read` loop with a redirect under `set -e` no longer exits the
script, an `EXIT` trap sees the exit status, so a failed task is no
longer reported as successful, and `$BASH` is set
([vite-task#939](voidzero-dev/vite-task#939)),
by @lifeiscontent.
- The helper files that `vp run` writes to the system temp directory go
in one folder that only the current user can write to, such as
`/tmp/vp_run-1000` on Linux. On Linux, a different Vite+ version run by
another user no longer fails
([vite-task#947](voidzero-dev/vite-task#947),
[vite-task#974](voidzero-dev/vite-task#974)), by
@wan9chi.
- A `getEnvs` query from `@voidzero-dev/vite-task-client` that matches
every name (`{ prefix: '' }` or `*`) returns nothing and no longer adds
every environment variable to the cache key
([vite-task#976](voidzero-dev/vite-task#976)),
by @wan9chi.
- `vp migrate` no longer writes package specs that the package manager
cannot resolve, such as a `@vitest/*` `catalog:` reference without a
catalog entry or a top-level catalog on Bun before 1.2.21. Bun projects
with an empty `workspaces` field get catalog references, and child
packages with a plain `vite-plus` range get the same concrete version as
the root when the project cannot use catalogs
([#3397](#3397)), by
@jong-kyung.
- `vp create` uses the package manager version that `VP_PACKAGE_MANAGER`
selects for the generated settings, the installation, and its summary.
Standalone pnpm projects get `packages: ['.']` in an existing
`pnpm-workspace.yaml` only for pnpm before 10.5.0
([#3197](#3197)), by
@evan-lc and @fengmk2.
- `vp` sends a `User-Agent` header on all HTTP requests, so Node.js
mirrors that reject requests without one, such as `mirrors.aliyun.com`,
work ([#3425](#3425)), by
@naokihaba.
- `vp env pin` prints `Updated` when it overwrites an existing
`.node-version` or `.nvmrc` file and `Created` when it writes a new one
([#3377](#3377)), by
@CheHyeonYeong.

### Docs

- Describe rebuildable inputs in the Automatic Data Tracking guide, and
dry runs, JSON output, and `-vv` in the `vp run` guide
([#3419](#3419),
[#3421](#3421)), by
@wan9chi.

### Chore

- Bump vite-task to `cb1ea8d`, with its user-facing changes listed
above, and list `--dry-run`, `--json`, and `-vv` in `vp run --help`
([#3418](#3418)), by
@wan9chi.
- The daily dependency upgrade also updates the pnpm version that the
installers pin, after it checks the release integrity
([#3407](#3407)), by
@fengmk2.
- Warm up the monorepo cache check in the `vp create` CI job under pnpm
and Bun ([#3423](#3423)),
by @wan9chi.
- Remove an unused CI job that the required `done` check did not cover
([#3403](#3403)), by
@jong-kyung.
- Remove an incorrect comment about export pattern order in the CLI
build script
([#3405](#3405)), by
@alexicum.

### Bundled Versions

| Tool | Version | Source | Changelog |
| --------------- | ---------- |
----------------------------------------------------------------------------------------------------
|
-----------------------------------------------------------------------------------------------------------------------------------------------
|
| vite | `8.3.7` |
[`5def936`](vitejs/vite@5def936)
| unchanged |
| rolldown | `1.2.18` |
[`f9a49d6`](rolldown/rolldown@f9a49d6)
| unchanged |
| oxc-node | `1.0.1` |
[`7ff14c3`](oxc-project/oxc-node@7ff14c3)
| unchanged |
| tsdown | `0.23.4` | [npm](https://npmx.dev/package/tsdown/v/0.23.4) |
unchanged |
| vitest | `5.1.0` | [npm](https://npmx.dev/package/vitest/v/5.1.0) |
unchanged |
| oxlint | `1.93.0` | [npm](https://npmx.dev/package/oxlint/v/1.93.0) |
[1.92.0](https://github.com/oxc-project/oxc/releases/tag/oxlint_v1.92.0),
[1.93.0](https://github.com/oxc-project/oxc/releases/tag/oxlint_v1.93.0)
|
| oxlint-tsgolint | `7.0.2006` |
[npm](https://npmx.dev/package/oxlint-tsgolint/v/7.0.2006) |
[7.0.2006](https://github.com/oxc-project/tsgolint/releases/tag/v7.0.2006)
|
| oxfmt | `0.78.0` | [npm](https://npmx.dev/package/oxfmt/v/0.78.0) |
[0.77.0](https://github.com/oxc-project/oxc/releases/tag/oxfmt_v0.77.0),
[0.78.0](https://github.com/oxc-project/oxc/releases/tag/oxfmt_v0.78.0)
|

### Upgrade

```bash
vp upgrade
```

If `vp upgrade` must download Node.js and `VP_NODE_DIST_MIRROR` points
to a mirror that rejects requests without a `User-Agent` header, such as
`mirrors.aliyun.com`, unset it or point it to another mirror for this
upgrade. The installed `vp` downloads Node.js and does not send the
header yet.

### New Contributors

@alexicum, @evan-lc, @CheHyeonYeong

**Full Changelog**:
v1.5.1...v1.6.0

---

For a stable release, complete the `HomebrewFormula/vp.rb` update after
publication by merging the generated `release/homebrew-v1.6.0` PR.

Merging this PR will trigger the release workflow.

---------

Co-authored-by: voidzero-guard[bot] <278573678+voidzero-guard[bot]@users.noreply.github.com>
Co-authored-by: MK (fengmk2) <fengmk2@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

read-write overlap Caching tasks that read and write the same paths

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant