The Wire · Showcase
CREATE-VUE TIGHTENS TOOLCHAIN AS OXLINT AND VITE SHIP UPDATES
By RepoJournal · Filed · About Vue.js
The Vue scaffolding tool is marching through dependency updates across linting, formatting, and build infrastructure in a single coordinated push.
Create-vue is absorbing a wave of tooling upgrades that tighten the developer experience across the stack [1] [2] [3]. The oxlint ecosystem shipped two updates—eslint-plugin-oxlint to 1.63.0 [2] and oxfmt to 0.48.0 [3]—that sharpen code quality enforcement, while Vite itself bumped to 8.0.12 [4] with bug fixes for the build layer. All three hit high confidence thresholds and are safe to absorb immediately. Separately, create-vue is also evaluating pnpm v11 [5], a major version jump that carries more surface area for compatibility friction—worth testing in a staging environment before shipping to users. On the core side, vue/core hardened its CI pipeline by pinning GitHub Actions to specific commit SHAs and enforcing frozen lockfiles during release builds [6], reducing the attack surface and ensuring reproducible builds. This is hygiene work that pays dividends across the ecosystem.
Action items
- → Merge oxlint and oxfmt updates to create-vue immediately — both are low-risk, high-confidence patches vuejs/create-vue [plan]
- → Test pnpm v11 in create-vue against your local workflows before merging — major version jumps need validation vuejs/create-vue [plan]
- → Monitor vue/core's CI hardening rollout — this pattern is worth adopting in your own release workflows vuejs/core [monitor]
References
- [1] chore(deps): update all non-major dependencies ↗ vuejs/create-vue
- [2] chore(deps): update oxlint to ~1.63.0 ↗ vuejs/create-vue
- [3] chore(deps): update dependency oxfmt to ^0.48.0 ↗ vuejs/create-vue
- [4] chore(deps): update vite packages ↗ vuejs/create-vue
- [5] chore(deps): update pnpm to v11 ↗ vuejs/create-vue
- [6] ci: avoid dependency cache and pin actions in release workflow ↗ vuejs/core
FAQ
- What changed in Vue.js on May 12, 2026?
- The Vue scaffolding tool is marching through dependency updates across linting, formatting, and build infrastructure in a single coordinated push.
- What should Vue.js teams do about it?
- Merge oxlint and oxfmt updates to create-vue immediately — both are low-risk, high-confidence patches • Test pnpm v11 in create-vue against your local workflows before merging — major version jumps need validation • Monitor vue/core's CI hardening rollout — this pattern is worth adopting in your own release workflows
- Which Vue.js repositories shipped on May 12, 2026?
- vuejs/create-vue, vuejs/core