chore: bump the npm-patch-minor group with 2 updates

[dependabot]

Bumps the npm-patch-minor group with 2 updates: @types/node and vite-plus.

Updates @types/node from 26.1.1 to 26.1.2

Commits

• See full diff in compare view

Updates vite-plus from 0.2.6 to 0.2.7

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

This release points users to vpr <name> when a Vite+ built-in command and package script share a name, adds concurrency control to vp pack, and smooths migrations and package-manager setup.

Highlights

• Point users to vpr <name> when a Vite+ built-in command and package.json script share a name (#2259, #2262, #2265, vite-task#570), by @​wan9chi
• Add --concurrency to vp pack to limit parallel Rolldown builds, and update tsdown 0.22.13 -> 0.22.14 and Vite DevTools 0.4.2 -> 0.4.5 (#2233), by @​voidzero-guard[bot]
• Add read-only Svelte rune globals to migrated Oxlint overrides, preventing false no-undef errors (#2192), by @​naokihaba
• Install package managers from npm tarballs with nonstandard top-level directories, fixing Yarn 1.22.19 installation (#2264), by @​TheAlexLichter

Fixes & Enhancements

• Prevent the Oxc language server from crashing when contributors open the Vite+ workspace in VS Code (#2245), by @​jong-kyung

Docs

• Document the full procedure for removing Vite+ commit hooks (#2218), by @​TheAlexLichter
• Document per-process and per-machine ways to disable Vite+ commit hooks without uninstalling them (#2230), by @​TheAlexLichter
• Clarify when to use built-in vp commands versus package scripts through vp run or vpr, including migration and agent guidance (#2255), by @​wan9chi
• Document GitLab CI/CD setup with the reusable setup-vp template (#2258), by @​naokihaba

Chore

• Run Semgrep security scans on pull requests and pushes to main (#2223), by @​Boshen
• Re-enable Vitest browser-mode CLI snapshot coverage on every supported platform (#2275), by @​wan9chi
• Stabilize Windows CLI snapshot tests for interrupted installs and browser port fallback (#2282), by @​wan9chi
• Replace deprecated shared JavaScript and TypeScript VS Code settings with their current js/ts.* names (#2246), by @​jong-kyung

Bundled Versions

Tool	Version	Source
vite	8.1.5	5e7fe12
rolldown	1.2.0	03e1e34
tsdown	0.22.14	npm
vitest	4.1.10	npm
oxlint	1.75.0	npm
oxlint-tsgolint	7.0.2001	npm
oxfmt	0.60.0	npm

Upgrade

vp upgrade

Full Changelog: voidzero-dev/vite-plus@v0.2.6...v0.2.7

Published Packages

... (truncated)

Commits

• c17e1c3 release: v0.2.7: Clearer commands and smoother setup (#2279)
• fb1c82b feat(cli): note when a built-in shares a name with a package.json script (#2259)
• ce88216 fix(migration): add Svelte rune globals to Oxlint config (#2192)
• 95f1401 docs: clarify vp dev vs vp run dev / vpr dev (#2255)
• a24eede feat(deps): upgrade upstream dependencies (#2233)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions