[dependabot]

Bumps the web-dependencies group in /web with 2 updates: bits-ui and vite-plus.

Updates bits-ui from 2.19.3 to 2.19.4

Release notes

Sourced from bits-ui's releases.

bits-ui@2.19.4

Patch Changes

• fix(PopperLayer): destructure the internal forceMount prop out of restProps so it stops leaking onto the rendered content element as an invalid forcemount attribute (Popover, Select, Combobox, DropdownMenu, ContextMenu, Menubar, Tooltip, LinkPreview) (#2176)

• fix(DismissibleLayer): dismiss on a touch tap even when the tapped element stops click propagation. Touch outside-dismissal waits for the tap's click on the document, and a bubbling listener never hears a click whose target handler calls stopPropagation(), so the layer stayed open behind elements that own their clicks. (#2155)

Commits

• cdf337d Version Packages (#2177)
• 9576fb2 fix(DismissibleLayer): dismiss on a touch tap whose target stops click propag...
• c9201cf fix(PopperLayer): don't render the internal forceMount prop as a DOM attrib...
• See full diff in compare view

Updates vite-plus from 0.3.3 to 1.0.0

Release notes

Sourced from vite-plus's releases.

vite-plus v1.0.0: Vite+ 1.0 is stable

Vite+ 1.0 is stable (announcement). This release promotes v1.0.0-rc.1 to stable with no code changes.

Notable changes since v0.3.3

v1.0.0 includes everything from the two release candidates below. See each release's notes for the full list of changes.

• v1.0.0-rc.0: vp test moves to vitest@5.0.1, and the CLI now requires Node.js ^22.18.0 || ^24.11.0 || >=26.0.0. vp staged has new Node.js and Git minimums. Standalone installs and vp upgrade verify release provenance.
• v1.0.0-rc.1: task cache settings in run.tasks move under cache. vp lint and vp fmt run from a package directory now use the same config as your editor.

Projects on v1.0.0-rc.1 need no changes. Projects on v1.0.0-rc.0 whose tasks set env, untrackedEnv, input, or output should run vp migrate to move those settings under cache. For a Vite+ 0.3 project, follow Upgrade from Vite+ 0.3 to 1.0 and run vp migrate before you update the project's dependencies.

Bundled Versions

Tool	Version	Source
vite	8.3.1	39ddf7c
rolldown	1.2.11	8df4219
tsdown	0.23.0	npm
vitest	5.0.1	npm
oxlint	1.85.0	npm
oxlint-tsgolint	7.0.2003	npm
oxfmt	0.70.0	npm

Upgrade

vp upgrade

Full Changelog: voidzero-dev/vite-plus@v1.0.0-rc.1...v1.0.0

Published Packages

• @voidzero-dev/vite-plus-core@1.0.0
• vite-plus@1.0.0

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex

... (truncated)

Commits

• fc287d7 release: v1.0.0: Vite+ 1.0 is stable (#2839)
• a9d81a4 release: v1.0.0-rc.1: task cache settings move under cache (#2818)
• 9f6e158 fix(cli): use native config discovery for lint and fmt (#2807)
• 4897b10 fix(cli): expose Vitest 5 options in test help (#2809)
• 688fe4a feat(migrate): move task cache settings under cache (#2814)
• 70185af chore: bump vite-task to 7d69d65 (#2813)
• d29792f feat(deps): upgrade upstream dependencies (#2805)
• 6abe93a fix(config): type async tool options contextually (#2803)
• 173e734 release: v1.0.0-rc.0: Vitest 5 migration and npm provenance checks (#2780)
• 1e16526 fix(create): inline generator dependencies without catalog support (#2720)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, web. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.