chore: bump the npm-patch-minor group with 4 updates

[dependabot]

Bumps the npm-patch-minor group with 4 updates: roku-deploy, @types/node, vite-plus and vitest.

Updates roku-deploy from 3.17.6 to 3.17.7

Release notes

Sourced from roku-deploy's releases.

3.17.7

Added

• normalizeDeviceInfo function (#300)

Changed

• Reduced dependency count (#299) (#298) (#297)

Fixed

• potential crash in when normalizing DeviceInfo fields when supplied non-string values (#301)

Changelog

Sourced from roku-deploy's changelog.

3.17.7 - 2026-07-06

Added

• normalizeDeviceInfo function (#300)

Changed

• Reduced dependency count (#299) (#298) (#297)

Fixed

• potential crash in when normalizing DeviceInfo fields when supplied non-string values (#301)

Commits

• 529a2fd 3.17.7 (#306)
• 63ee5cb Update CHANGELOG.md
• 37f00d6 Increment version to 3.17.7
• 5ae71f6 chore: Update create-vsix to support multi-vsix and shared bot logic (#305)
• 97ccafc Extract normalizeDeviceInfo helper from getDeviceInfo (#300)
• 41b61f3 Merge branch 'master' into feature/skip-device-info-fetch
• a9bea0f Fix: potential crash in normalizeDeviceInfoFieldValue when supplied non-strin...
• 4888a9e Rename normalizeDeviceInfo to enhanceDeviceInfo
• 60d2757 Extract normalizeDeviceInfo helper from getDeviceInfo
• ad7806f Declare picomatch as a direct dependency (#299)
• Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates vite-plus from 0.2.2 to 0.2.4

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.4: Vitest security hotfix

This hotfix updates the bundled Vitest Browser Mode packages to 4.1.10, which includes the fix for GHSA-p63j-vcc4-9vmv. The advisory is critical and affects @vitest/browser <=4.1.9.

Highlights

• Critical Vitest Browser Mode advisory fixed: bundled vitest and @vitest/browser* move from 4.1.9 to 4.1.10, addressing GHSA-p63j-vcc4-9vmv, where provider commands could bypass the file access permission gate (#2089), by @​voidzero-guard[bot]

Chore

• Add the standard release-manager skill for vite-plus release operations (#2019), by @​fengmk2

Bundled Versions

Tool	Version	Source
vite	8.1.3	578ffb8
rolldown	1.1.4	6cbd233
tsdown	0.22.3	npm
vitest	4.1.10	npm
oxlint	1.72.0	npm
oxlint-tsgolint	0.24.0	npm
oxfmt	0.57.0	npm

Upgrade

vp upgrade

New Contributors

No new contributors in this release.

Full Changelog: voidzero-dev/vite-plus@v0.2.3...v0.2.4

Published Packages

• @voidzero-dev/vite-plus-core@0.2.4
• vite-plus@0.2.4

Installation

macOS/Linux:

curl -fsSL https://vite.plus | bash

Windows:

irm https://vite.plus/ps1 | iex
</tr></table> 

... (truncated)

Commits

• 1ca9f0f release: v0.2.4: Vitest security hotfix
• 747f0e5 fix(deps): upgrade vitest to 4.1.10
• 7f70680 release: v0.2.3: config extraction, create, and vp run reliability fixes (#2081)
• 4a5d742 fix(static_config): trust defineConfig from vite (#2075)
• 603140d feat(test): PTY-based interactive CLI snapshot tests (#2052)
• dcae79f fix(create): read org manifest from the tarball when the registry strips crea...
• b9b15c4 fix(static_config): only trust defineConfig fromvite-plus (#2060)
• 98cc0db ci: pack local dirs for the registry bridge instead of pkg.pr.new (#2038)
• 638c447 fix(global): respect custom VP_HOME (#2029)
• b99c778 refactor(cli): remove unused exported helpers (#2046)
• Additional commits viewable in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.