chore(deps): upgrade vite-plus to 0.2.1

v0.2.1 consumes upstream Vitest directly; the @voidzero-dev/vite-plus-test
wrapper is removed and vitest (4.1.9) now arrives transitively through
vite-plus. No source changes needed since all tests already import from the
stable vite-plus/test API. Reinstall drops the wrapper from the lockfile and
resolves to a single vitest version.

CI: handle vp 0.2.x's default minimumReleaseAge supply-chain gate, which
rejects the freshly published 0.2.1 packages in the build job's repo-root
`vp install`. vp's lockfile verifier reads the exclude list only from
pnpm-workspace.yaml, but a pnpm-workspace.yaml at the repo root makes vp treat
the root as a workspace root and breaks the in-repo test-project fixtures the
other jobs create. So the build job generates a gitignored pnpm-workspace.yaml
with the exclude just-in-time (it is the only job that installs at the repo
root and it creates no test-project); the file is gitignored so the prepare
hook can regenerate it locally without it being committed.

Author: fengmk2

.github/workflows/test.yml

@@ -548,6 +548,19 @@ jobs:
     steps:
       - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
 
+      # vp's default minimumReleaseAge supply-chain policy rejects packages
+      # published within the last 24h. When this repo's own vite-plus dependency
+      # is bumped to a brand-new release, the `vp install` below fails the
+      # lockfile verification (ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION). Exempt
+      # the Vite+ toolchain via the exclude list vp's verifier reads from
+      # pnpm-workspace.yaml. This file is generated here (and gitignored) rather
+      # than committed: a pnpm-workspace.yaml at the repo root makes vp treat the
+      # root as a workspace root, which breaks the in-repo test-project fixtures
+      # the other jobs create (vp run/install resolve to the root). Only this
+      # job runs `vp install` at the repo root, and it creates no test-project.
+      - name: Exempt the Vite+ toolchain from the release-age gate
+        run: printf 'minimumReleaseAgeExclude:\n  - vite-plus\n  - "@voidzero-dev/vite-plus-*"\n' > pnpm-workspace.yaml
+
       - name: Setup Vite+ with cache
         uses: ./
         id: setup

.gitignore

@@ -1 +1,8 @@
 node_modules/
+
+# Auto-generated by `vp config` (prepare hook) to hold transient
+# minimumReleaseAgeExclude entries for freshly published packages. Must not be
+# committed: a pnpm-workspace.yaml at the repo root makes vp treat the root as a
+# workspace root, which breaks the in-repo `test-project/` fixtures the CI
+# workflow creates (e.g. `vp run` resolves to the root and can't find the task).
+pnpm-workspace.yaml

dist/index.mjs

@@ -23,7 +23,7 @@
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^6.0.0",
-    "vite-plus": "^0.1.23"
+    "vite-plus": "0.2.1"
   },
   "packageManager": "pnpm@11.4.0"
 }