feat(deps): upgrade upstream dependencies (#810)

Automated daily upgrade of upstream dependencies:
- rolldown (latest tag)
- rolldown-vite (latest tag)
- vitest (latest npm version)
- tsdown (latest npm version)

Build status: success

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Mostly dependency bumps, but it changes published `exports` surface and build-time patching around Vitest internals, which could break consumers or test behavior if upstream structure shifts again.
> 
> **Overview**
> Upgrades upstream dependencies, notably moving Vitest from `4.0.18` to `4.1.0` (including `vitest-dev` overrides) and updating the pinned `rolldown-vite` commit; `@voidzero-dev/vite-plus-core` now bundles Vite `8.0.0` (from `8.0.0-beta.18`).
> 
> Updates the test/CLI packaging to match new Vitest module layout: removes `module-runner`/`mocker` exports, adds `runtime` and new plugin/module exports (e.g. `utils-source-map-node`, `mocker-transforms`), and extends the build-time Vitest patching to search multiple candidate files for the hoistMocks check.
> 
> Refreshes `pnpm-lock.yaml` and CLI snapshot outputs to reflect new dependency versions and updated CLI/build output lines.
> 
> <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit c3a38fc. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: Brooooooklyn

.github/scripts/upgrade-deps.mjs

@@ -61,8 +61,9 @@ async function updatePnpmWorkspace(versions) {
   let content = fs.readFileSync(filePath, 'utf8');
 
   // Update vitest-dev override (handle pre-release versions like -beta.1, -rc.0)
+  // Handle both quoted ('npm:vitest@^...') and unquoted (npm:vitest@^...) forms
   content = content.replace(
-    /vitest-dev: 'npm:vitest@\^[\d.]+(-[\w.]+)?'/,
+    /vitest-dev: '?npm:vitest@\^[\d.]+(-[\w.]+)?'?/,
     `vitest-dev: 'npm:vitest@^${versions.vitest}'`,
   );
 

packages/cli/package.json

@@ -102,10 +102,6 @@
       "types": "./dist/test/internal/browser.d.ts",
       "default": "./dist/test/internal/browser.js"
     },
-    "./test/internal/module-runner": {
-      "types": "./dist/test/internal/module-runner.d.ts",
-      "default": "./dist/test/internal/module-runner.js"
-    },
     "./test/runners": {
       "types": "./dist/test/runners.d.ts",
       "default": "./dist/test/runners.js"
@@ -135,9 +131,9 @@
       "types": "./dist/test/snapshot.d.ts",
       "default": "./dist/test/snapshot.js"
     },
-    "./test/mocker": {
-      "types": "./dist/test/mocker.d.ts",
-      "default": "./dist/test/mocker.js"
+    "./test/runtime": {
+      "types": "./dist/test/runtime.d.ts",
+      "default": "./dist/test/runtime.js"
     },
     "./test/worker": {
       "types": "./dist/test/worker.d.ts",
@@ -205,6 +201,9 @@
     "./test/plugins/utils-source-map": {
       "default": "./dist/test/plugins/utils-source-map.js"
     },
+    "./test/plugins/utils-source-map-node": {
+      "default": "./dist/test/plugins/utils-source-map-node.js"
+    },
     "./test/plugins/utils-error": {
       "default": "./dist/test/plugins/utils-error.js"
     },
@@ -262,6 +261,9 @@
     "./test/plugins/mocker-redirect": {
       "default": "./dist/test/plugins/mocker-redirect.js"
     },
+    "./test/plugins/mocker-transforms": {
+      "default": "./dist/test/plugins/mocker-transforms.js"
+    },
     "./test/plugins/mocker-automock": {
       "default": "./dist/test/plugins/mocker-automock.js"
     },

packages/cli/snap-tests/build-vite-env/snap.txt

@@ -1,5 +1,6 @@
 > VITE_MY_VAR=1 vp run build
 $ vp build
+vite v<semver> building client environment for production...
 transforming...✓ <variable> modules transformed.
 rendering chunks...
 computing gzip size...
@@ -11,6 +12,7 @@ dist/assets/index-BnIqjoTZ.js  <variable> kB │ gzip: <variable> kB
 
 > VITE_MY_VAR=1 vp run build # should hit cache
 $ vp build ✓ cache hit, replaying
+vite v<semver> building client environment for production...
 transforming...✓ <variable> modules transformed.
 rendering chunks...
 computing gzip size...
@@ -24,6 +26,7 @@ vp run: cache hit, <variable>ms saved.
 
 > VITE_MY_VAR=2 vp run build # env changed, should miss cache
 $ vp build ✗ cache miss: envs changed, executing
+vite v<semver> building client environment for production...
 transforming...✓ <variable> modules transformed.
 rendering chunks...
 computing gzip size...

packages/cli/snap-tests/command-helper/snap.txt

@@ -1,5 +1,6 @@
 > vp run build # synthetic build (vp build) should have cache disabled without cacheScripts
 $ vp build ⊘ cache disabled
+vite v<semver> building client environment for production...
 transforming...✓ <variable> modules transformed.
 rendering chunks...
 computing gzip size...

packages/cli/snap-tests/synthetic-build-cache-disabled/snap.txt

@@ -206,7 +206,7 @@
     "node": "^20.19.0 || >=22.12.0"
   },
   "bundledVersions": {
-    "vite": "8.0.0-beta.18",
+    "vite": "8.0.0",
     "rolldown": "1.0.0-rc.9",
     "tsdown": "0.21.2"
   }

packages/core/package.json

@@ -93,6 +93,7 @@ const VITEST_PACKAGE_TO_PATH: Record<string, string> = {
   // @vitest/utils
   '@vitest/utils': '@vitest/utils/index.js',
   '@vitest/utils/source-map': '@vitest/utils/source-map.js',
+  '@vitest/utils/source-map/node': '@vitest/utils/source-map/node.js',
   '@vitest/utils/error': '@vitest/utils/error.js',
   '@vitest/utils/helpers': '@vitest/utils/helpers.js',
   '@vitest/utils/display': '@vitest/utils/display.js',
@@ -116,6 +117,7 @@ const VITEST_PACKAGE_TO_PATH: Record<string, string> = {
   '@vitest/mocker/node': '@vitest/mocker/node.js',
   '@vitest/mocker/browser': '@vitest/mocker/browser.js',
   '@vitest/mocker/redirect': '@vitest/mocker/redirect.js',
+  '@vitest/mocker/transforms': '@vitest/mocker/transforms.js',
   '@vitest/mocker/automock': '@vitest/mocker/automock.js',
   '@vitest/mocker/register': '@vitest/mocker/register.js',
   // @vitest/pretty-format
@@ -2171,8 +2173,11 @@ async function patchChaiTypeReference() {
 async function patchMockerHoistedModule() {
   console.log('\nPatching vitest mocker to recognize @voidzero-dev packages...');
 
-  const mockerPath = join(distDir, '@vitest/mocker/node.js');
-  let content = await readFile(mockerPath, 'utf-8');
+  // The hoistedModule check may be in node.js or chunk-hoistMocks.js depending on the vitest version
+  const candidateFiles = [
+    join(distDir, '@vitest/mocker/node.js'),
+    join(distDir, '@vitest/mocker/chunk-hoistMocks.js'),
+  ];
 
   // Find and replace the hoistedModule check
   // Original: if (hoistedModule === source) {
@@ -2181,17 +2186,29 @@ async function patchMockerHoistedModule() {
   const newCheck =
     'if (hoistedModule === source || source === "vite-plus/test" || source === "@voidzero-dev/vite-plus-test") {';
 
-  if (!content.includes(originalCheck)) {
+  let patched = false;
+  for (const candidatePath of candidateFiles) {
+    let content: string;
+    try {
+      content = await readFile(candidatePath, 'utf-8');
+    } catch {
+      continue;
+    }
+    if (content.includes(originalCheck)) {
+      content = content.replace(originalCheck, newCheck);
+      await writeFile(candidatePath, content, 'utf-8');
+      console.log(`  Patched hoistMocks to recognize @voidzero-dev packages in ${candidatePath}`);
+      patched = true;
+      break;
+    }
+  }
+
+  if (!patched) {
     throw new Error(
       'Could not find hoistedModule check to patch in @vitest/mocker. ' +
         'This likely means vitest code has changed and the patch needs to be updated.',
     );
   }
-
-  content = content.replace(originalCheck, newCheck);
-
-  await writeFile(mockerPath, content, 'utf-8');
-  console.log('  Patched hoistMocks to recognize @voidzero-dev packages');
 }
 
 /**
@@ -2216,7 +2233,8 @@ async function createPluginExports() {
       continue;
     }
     // Convert @vitest/runner -> runner, @vitest/utils/error -> utils-error
-    const exportName = pkg.replace('@vitest/', '').replace('/', '-');
+    // @vitest/utils/source-map/node -> utils-source-map-node
+    const exportName = pkg.replace('@vitest/', '').replaceAll('/', '-');
     const shimFileName = `${exportName}.mjs`;
     const shimPath = join(pluginsDir, shimFileName);
 

packages/test/build.ts

@@ -19,7 +19,8 @@
     "#module-evaluator": {
       "types": "./dist/module-evaluator.d.ts",
       "default": "./dist/module-evaluator.js"
-    }
+    },
+    "#nodejs-worker-loader": "./dist/nodejs-worker-loader.js"
   },
   "exports": {
     ".": {
@@ -62,10 +63,6 @@
       "types": "./dist/browser.d.ts",
       "default": "./dist/browser.js"
     },
-    "./internal/module-runner": {
-      "types": "./dist/module-runner.d.ts",
-      "default": "./dist/module-runner.js"
-    },
     "./runners": {
       "types": "./dist/runners.d.ts",
       "default": "./dist/runners.js"
@@ -95,9 +92,9 @@
       "types": "./dist/snapshot.d.ts",
       "default": "./dist/snapshot.js"
     },
-    "./mocker": {
-      "types": "./dist/mocker.d.ts",
-      "default": "./dist/mocker.js"
+    "./runtime": {
+      "types": "./dist/runtime.d.ts",
+      "default": "./dist/runtime.js"
     },
     "./worker": {
       "types": "./worker.d.ts",
@@ -165,6 +162,9 @@
     "./plugins/utils-source-map": {
       "default": "./dist/plugins/utils-source-map.mjs"
     },
+    "./plugins/utils-source-map-node": {
+      "default": "./dist/plugins/utils-source-map-node.mjs"
+    },
     "./plugins/utils-error": {
       "default": "./dist/plugins/utils-error.mjs"
     },
@@ -222,6 +222,9 @@
     "./plugins/mocker-redirect": {
       "default": "./dist/plugins/mocker-redirect.mjs"
     },
+    "./plugins/mocker-transforms": {
+      "default": "./dist/plugins/mocker-transforms.mjs"
+    },
     "./plugins/mocker-automock": {
       "default": "./dist/plugins/mocker-automock.mjs"
     },
@@ -265,27 +268,29 @@
     "pixelmatch": "^7.1.0",
     "pngjs": "^7.0.0",
     "sirv": "^3.0.2",
-    "std-env": "^3.10.0",
+    "std-env": "^4.0.0",
     "tinybench": "^2.9.0",
     "tinyexec": "^1.0.2",
     "tinyglobby": "^0.2.15",
     "ws": "^8.18.3"
   },
   "devDependencies": {
+    "@blazediff/core": "1.9.1",
     "@oxc-node/cli": "catalog:",
     "@oxc-node/core": "catalog:",
-    "@vitest/browser": "4.0.18",
-    "@vitest/browser-playwright": "4.0.18",
-    "@vitest/browser-preview": "4.0.18",
-    "@vitest/browser-webdriverio": "4.0.18",
-    "@vitest/expect": "4.0.18",
-    "@vitest/mocker": "4.0.18",
-    "@vitest/pretty-format": "4.0.18",
-    "@vitest/runner": "4.0.18",
-    "@vitest/snapshot": "4.0.18",
-    "@vitest/spy": "4.0.18",
-    "@vitest/utils": "4.0.18",
+    "@vitest/browser": "4.1.0",
+    "@vitest/browser-playwright": "4.1.0",
+    "@vitest/browser-preview": "4.1.0",
+    "@vitest/browser-webdriverio": "4.1.0",
+    "@vitest/expect": "4.1.0",
+    "@vitest/mocker": "4.1.0",
+    "@vitest/pretty-format": "4.1.0",
+    "@vitest/runner": "4.1.0",
+    "@vitest/snapshot": "4.1.0",
+    "@vitest/spy": "4.1.0",
+    "@vitest/utils": "4.1.0",
     "chai": "^6.2.1",
+    "convert-source-map": "^2.0.0",
     "estree-walker": "^3.0.3",
     "expect-type": "^1.2.2",
     "magic-string": "^0.30.21",
@@ -296,16 +301,17 @@
     "rolldown": "workspace:*",
     "rolldown-plugin-dts": "catalog:",
     "tinyrainbow": "^3.0.3",
-    "vitest-dev": "^4.0.18",
+    "vitest-dev": "^4.1.0",
     "why-is-node-running": "^2.3.0"
   },
   "peerDependencies": {
     "@edge-runtime/vm": "*",
     "@opentelemetry/api": "^1.9.0",
     "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-    "@vitest/ui": "4.0.18",
+    "@vitest/ui": "4.1.0",
     "happy-dom": "*",
-    "jsdom": "*"
+    "jsdom": "*",
+    "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0"
   },
   "peerDependenciesMeta": {
     "@edge-runtime/vm": {
@@ -325,12 +331,15 @@
     },
     "jsdom": {
       "optional": true
+    },
+    "vite": {
+      "optional": false
     }
   },
   "engines": {
     "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
   },
   "bundledVersions": {
-    "vitest": "4.0.18"
+    "vitest": "4.1.0"
   }
 }

packages/test/package.json

@@ -7,6 +7,6 @@
   "rolldown-vite": {
     "repo": "https://github.com/vitejs/vite.git",
     "branch": "main",
-    "hash": "1ee5372e80c23be3c17cf6d09d58c25ccd62531f"
+    "hash": "b565af6f1123a62b3058253b2147574b8515e89f"
   }
 }