chore: merge main

Author: sapphi-red

.eslintignore

@@ -1,6 +1,7 @@
 name: "\U0001F41E Bug report"
 description: Report an issue
 labels: [pending triage]
+type: Bug
 body:
   - type: markdown
     attributes:

.eslintrc.cjs

@@ -1,6 +1,7 @@
 name: "\U0001F680 New feature proposal"
 description: Propose a new feature
-labels: ["enhancement: pending triage"]
+labels: ["pending triage"]
+type: Feature
 body:
   - type: markdown
     attributes:

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -9,12 +9,24 @@
       "depTypeList": ["peerDependencies"],
       "enabled": false,
     },
+    {
+      groupName: "upstream",
+      matchPackageNames: ["vite"],
+      matchPackagePrefixes: ["rollup", "@rollup", "@vitejs"],
+    },
+    {
+      groupName: "prettier",
+      matchPackageNames: ["prettier"],
+    },
+    {
+      "matchDepTypes": ["action"],
+      "excludePackagePrefixes": ["actions/", "github/"],
+      "pinDigests": true,
+    },
   ],
   "ignoreDeps": [
     // manually bumping
-    "rollup",
     "node",
-    "typescript",
 
     // breaking changes
     "kill-port", // `kill-port:^2.0.0 has perf issues (#8392)

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -9,6 +9,8 @@ env:
   # Vitest auto retry on flaky segfault
   VITEST_SEGFAULT_RETRY: 3
 
+permissions: {}
+
 on:
   push:
     branches:
@@ -35,13 +37,13 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node_version: [14, 16, 18, 20]
+        node_version: [18, 20]
         include:
           # Active LTS + other OS
           - os: macos-latest
-            node_version: 18
+            node_version: 20
           - os: windows-latest
-            node_version: 18
+            node_version: 20
       fail-fast: false
 
     name: "Build&Test: node-${{ matrix.node_version }}, ${{ matrix.os }}"
@@ -50,15 +52,10 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install pnpm
-        if: ${{ matrix.node_version != 14 }}
-        uses: pnpm/action-setup@v2
-
-      - name: Install pnpm 8 (node 14)
-        if: ${{ matrix.node_version == 14 }}
-        run: npm install -g @pnpm/exe@next-8
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to ${{ matrix.node_version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node_version }}
           cache: "pnpm"
@@ -75,7 +72,7 @@ jobs:
         run: echo "PLAYWRIGHT_BROWSERS_PATH=$HOME\.cache\playwright-bin" >> $env:GITHUB_ENV
 
       - name: Cache Playwright's binary
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           # Playwright removes unused browsers automatically
           # So does not need to add playwright version to key
@@ -106,10 +103,10 @@ jobs:
           fetch-depth: 0
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v2
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to LTS
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: lts/*
           cache: "pnpm"

.github/renovate.json5

@@ -8,9 +8,12 @@ jobs:
   close-issues:
     if: github.repository == 'vitejs/vite-plugin-vue'
     runs-on: ubuntu-latest
+    permissions:
+      issues: write # for actions-cool/issues-helper to update issues
+      pull-requests: write # for actions-cool/issues-helper to update PRs
     steps:
       - name: need reproduction
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3
         with:
           actions: "close-issues"
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/ci.yml

@@ -8,10 +8,13 @@ jobs:
   reply-labeled:
     if: github.repository == 'vitejs/vite-plugin-vue'
     runs-on: ubuntu-latest
+    permissions:
+      issues: write # for actions-cool/issues-helper to update issues
+      pull-requests: write # for actions-cool/issues-helper to update PRs
     steps:
       - name: contribution welcome
         if: github.event.label.name == 'contribution welcome' || github.event.label.name == 'help wanted'
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3
         with:
           actions: "create-comment, remove-labels"
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -21,26 +24,17 @@ jobs:
           labels: "pending triage, need reproduction"
 
       - name: remove pending
-        if: contains(github.event.label.description, '(priority)') && contains(github.event.issue.labels.*.name, 'pending triage')
-        uses: actions-cool/issues-helper@v3
+        if: (github.event.label.name == 'enhancement' || contains(github.event.label.description, '(priority)')) && contains(github.event.issue.labels.*.name, 'pending triage')
+        uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3
         with:
           actions: "remove-labels"
           token: ${{ secrets.GITHUB_TOKEN }}
           issue-number: ${{ github.event.issue.number }}
           labels: "pending triage"
 
-      - name: remove enhancement pending
-        if: "(github.event.label.name == 'enhancement' || contains(github.event.label.description, '(priority)')) && contains(github.event.issue.labels.*.name, 'enhancement: pending triage')"
-        uses: actions-cool/issues-helper@v3
-        with:
-          actions: "remove-labels"
-          token: ${{ secrets.GITHUB_TOKEN }}
-          issue-number: ${{ github.event.issue.number }}
-          labels: "enhancement: pending triage"
-
       - name: need reproduction
         if: github.event.label.name == 'need reproduction'
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3
         with:
           actions: "create-comment, remove-labels"
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/issue-close-require.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'vitejs/vite-plugin-vue'
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v4
+      - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           issue-inactive-days: "14"

.github/workflows/issue-labeled.yml

@@ -21,10 +21,10 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v2
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to LTS
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: lts/*
           registry-url: https://registry.npmjs.org/
@@ -35,6 +35,10 @@ jobs:
         env:
           PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: "1"
 
+        # https://github.com/npm/cli/pull/6978
+      - name: Pin npm
+        run: npm i -g [email protected]
+
       - name: Publish package
         run: pnpm run ci-publish ${{ github.ref_name }}
         env: