Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: voidzero-dev/setup-vp
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 56918a6
Choose a base ref
...
head repository: voidzero-dev/setup-vp
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: ca1c466
Choose a head ref
  • 3 commits
  • 5 files changed
  • 4 contributors

Commits on May 7, 2026

  1. chore(deps): update pnpm to v10.33.2 (#64) 

    This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [pnpm](https://pnpm.io)
([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) |
[`10.33.1` →
`10.33.2`](https://renovatebot.com/diffs/npm/pnpm/10.33.1/10.33.2) |
![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.33.2?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/pnpm/10.33.2?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/pnpm/10.33.1/10.33.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/10.33.1/10.33.2?slim=true)
|

---

### Release Notes

<details>
<summary>pnpm/pnpm (pnpm)</summary>

###
[`v10.33.2`](https://redirect.github.com/pnpm/pnpm/compare/v10.33.1...v10.33.2)

[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v10.33.1...v10.33.2)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/voidzero-dev/setup-vp).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored May 7, 2026
    Configuration menu
    Copy the full SHA
    b4d143e View commit details
    Browse the repository at this point in the history

Commits on May 8, 2026

  1. chore(deps): update npm packages (#62) 

    This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
|
[@actions/core](https://redirect.github.com/actions/toolkit/tree/main/packages/core)
([source](https://redirect.github.com/actions/toolkit/tree/HEAD/packages/core))
| [`3.0.0` →
`3.0.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/3.0.0/3.0.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcore/3.0.1?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fcore/3.0.1?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fcore/3.0.0/3.0.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcore/3.0.0/3.0.1?slim=true)
|
|
[@actions/glob](https://redirect.github.com/actions/toolkit/tree/main/packages/glob)
([source](https://redirect.github.com/actions/toolkit/tree/HEAD/packages/glob))
| [`^0.6.0` →
`^0.7.0`](https://renovatebot.com/diffs/npm/@actions%2fglob/0.6.1/0.7.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fglob/0.7.0?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fglob/0.7.0?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fglob/0.6.1/0.7.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fglob/0.6.1/0.7.0?slim=true)
|
| [yaml](https://eemeli.org/yaml/)
([source](https://redirect.github.com/eemeli/yaml)) | [`2.8.3` →
`2.8.4`](https://renovatebot.com/diffs/npm/yaml/2.8.3/2.8.4) |
![age](https://developer.mend.io/api/mc/badges/age/npm/yaml/2.8.4?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/yaml/2.8.4?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/yaml/2.8.3/2.8.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/yaml/2.8.3/2.8.4?slim=true)
|
| [zod](https://zod.dev)
([source](https://redirect.github.com/colinhacks/zod)) | [`4.3.6` →
`4.4.3`](https://renovatebot.com/diffs/npm/zod/4.3.6/4.4.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/zod/4.4.3?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/zod/4.4.3?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/zod/4.3.6/4.4.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/zod/4.3.6/4.4.3?slim=true)
|

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/core)</summary>

###
[`v3.0.1`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#301)

- Bump `undici` from `6.23.0` to `6.24.1`
[#&#8203;2348](https://redirect.github.com/actions/toolkit/pull/2348)

</details>

<details>
<summary>actions/toolkit (@&#8203;actions/glob)</summary>

###
[`v0.7.0`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/glob/RELEASES.md#070)

- Bump `minimatch` from `^3.0.4` to `^10.2.5`
[#&#8203;2355](https://redirect.github.com/actions/toolkit/pull/2355)
- Bump `undici` from `6.23.0` to `6.24.0`
[#&#8203;2345](https://redirect.github.com/actions/toolkit/pull/2345)
- Bump `brace-expansion` in `/packages/glob`
[#&#8203;2369](https://redirect.github.com/actions/toolkit/pull/2369)

</details>

<details>
<summary>eemeli/yaml (yaml)</summary>

###
[`v2.8.4`](https://redirect.github.com/eemeli/yaml/releases/tag/v2.8.4)

[Compare
Source](https://redirect.github.com/eemeli/yaml/compare/v2.8.3...v2.8.4)

- Disable alias resolution with `maxAliasCount:0`
([#&#8203;677](https://redirect.github.com/eemeli/yaml/issues/677))
- Handle invalid unicode escapes
([`e1a1a77`](https://redirect.github.com/eemeli/yaml/commit/e1a1a77))
- Apply `minFractionDigits` only to decimal strings
([#&#8203;676](https://redirect.github.com/eemeli/yaml/issues/676))

</details>

<details>
<summary>colinhacks/zod (zod)</summary>

###
[`v4.4.3`](https://redirect.github.com/colinhacks/zod/compare/v4.4.2...f3c9ec03ba7a28ae72d25cc295f38674bee0f559)

[Compare
Source](https://redirect.github.com/colinhacks/zod/compare/v4.4.2...v4.4.3)

###
[`v4.4.2`](https://redirect.github.com/colinhacks/zod/compare/v4.4.1...c59d4474e3b4cad1b323462186cf607178ce8267)

[Compare
Source](https://redirect.github.com/colinhacks/zod/compare/v4.4.1...v4.4.2)

###
[`v4.4.1`](https://redirect.github.com/colinhacks/zod/compare/v4.4.0...edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7)

[Compare
Source](https://redirect.github.com/colinhacks/zod/compare/v4.4.0...v4.4.1)

###
[`v4.4.0`](https://redirect.github.com/colinhacks/zod/compare/v4.3.6...d05f026e9e6eae0e1e6c2efbf11c89007ca40494)

[Compare
Source](https://redirect.github.com/colinhacks/zod/compare/v4.3.6...v4.4.0)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/voidzero-dev/setup-vp).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: fengmk2 <156269+fengmk2@users.noreply.github.com>
    @renovate @fengmk2
    3 people authored May 8, 2026
    Configuration menu
    Copy the full SHA
    2daf550 View commit details
    Browse the repository at this point in the history

Commits on May 10, 2026

  1. fix: harden install retry with curl pipefail, fast timeouts, and GitH… 

    …ub fallback (#67)

## Summary

The install step (`curl -fsSL https://viteplus.dev/install.sh | bash`)
was failing on transient network errors with no recovery — even though
there was a retry loop in code, it never fired. Two CI runs hit it in
the same window:

-
https://github.com/fengmk2/vinext/actions/runs/25629511023/job/75230564527
-
https://github.com/npmx-dev/npmx.dev/actions/runs/25630533420/job/75233291549

Both showed `curl: (35) Recv failure: Connection reset by peer` followed
immediately by `vp` not being on PATH — no retry attempted.

## Root cause

A shell pipeline returns the exit code of the **last** command. When
curl failed, it produced no output, the trailing `bash` ran an empty
script and exited 0, so the install was reported as successful and the
JS retry loop never engaged.

## Fix

1. **Pipefail.** Prepend `set -o pipefail;` so curl's failure propagates
as the pipeline's exit code.
2. **Fast per-call timeouts.** Cap each network call at 15s so hung
connections fail fast instead of stalling ~30s on `Connection reset by
peer`:
   - bash: `--connect-timeout 5 --max-time 15`
   - pwsh: `irm -TimeoutSec 15`
3. **GitHub fallback URL.** When the CDN is unhealthy, fall back to the
install scripts in the vite-plus repo:
-
`https://raw.githubusercontent.com/voidzero-dev/vite-plus/main/packages/cli/install.sh`
-
`https://raw.githubusercontent.com/voidzero-dev/vite-plus/main/packages/cli/install.ps1`
4. **Alternate URLs each attempt.** Order is `primary → fallback →
primary → fallback` (2 rounds × 2 URLs = 4 attempts max). A single
primary failure flips to the mirror immediately instead of burning more
retries on the same broken URL.

Worst-case budget: ~66s (4 × 15s + 3 × 2s back-off), vs the original
~96s budget that gave up before the upstream blip cleared.

## Test plan

- [x] `vp run test` — install-viteplus tests pass, including new
fallback / alternation / pipefail assertions
- [x] `vp run check:fix` clean
- [x] `vp run build` regenerates `dist/index.mjs`
    @fengmk2
    fengmk2 authored May 10, 2026
    Configuration menu
    Copy the full SHA
    ca1c466 View commit details
    Browse the repository at this point in the history
Loading